📢 CTF Platform Update
Hey CTF players! 👋

I know it's been quiet but ..

🎯 Fresh challenges are coming VERY SOON!
Get your tools ready:
🔹 New Web Exploitation rooms
🔹 Memory Forensics labs
🔹 And some surprises 👀
STAY TUNED!

The grind continues... 🔥

🤖 Join : @AddiQ_edu_bot

#CTF
#CyberSecurity
#NewChallenges

Join

@Addis_Sec
@Addis_Sec
@Addis_Sec

© 2026 @Addis_Sec | 🌐 Your hub for cyber & tech in Ethiopia

🌐 Cyber Tip of the Day — How the Web Works

Ever wonder what happens behind the scenes when you click a link? 🤔

Let's break it down in 6 simple steps 👇

Step 1 — You type youtube.com and hit Enter
Your browser wakes up and says "Let's go!"

⬇️ Step 2 — Your browser asks DNS: "Where is youtube.com?"
DNS = The internet's phonebook

⬇️ Step 3 — DNS replies with the IP address
Example: 142.250.185.46 — the server's real location

⬇️ Step 4 — Your browser sends a GET request via HTTPS
Encrypted = safe from hackers 👀

⬇️ Step 5 — The server responds with HTML + CSS + JS
These are the building blocks of every website

⬇️ Step 6 — Your browser renders the page

YouTube appears on your screen magic! ✨

💬 Drop a 🔥 if you learned something new today!

Stay curious, stay secure. 🚀

#WebBasics #HowInternetWorks #CyberTip #DNS #CyberSecurity #AddisSec

🛡️ New CTF Challenge: PixelWhisper

📂 Category: Forensics / Steganography 🖥️
📊 Difficulty: 🟡 Medium (100 Points)
🌐 Platform: ADDISEC CTF

📝 Challenge Description:

A mysterious image has been recovered from a compromised system. Rumor has it that a secret message is buried within its pixels. The image itself whispers its own secret - if you know where to look..."



💾 File Provided: cover.jpg

🔍 Hint:

Sometimes an image tells you everything you need to know about itself...

🏅 Flag Format: FLAG{...}

👉 Access the challenge on - https://asctf-1.onrender.com/challenge/pixelwhisper

👉 New tutorial video drop check it out on YouTube

https://youtu.be/wI-c_ZXzmG8?si=fL8amNzrSqFFwcYq

🚀 Master Pen Testing: A New Way to Learn is Coming Soon!

Want to get into cyber world but feeling overwhelmed by where to start? I’m working on something special to help you build your career right here in Ethiopia. 🛡️

I’m building a Pen Testing Roadmap & Simulation designed to bridge the gap between theory and real-world application. It’s practical, structured, and aligns with the core competencies you need to succeed. Even better?
You will earn a professional-grade certificate upon completion to showcase your hard-earned skills. 🎓

What’s coming in this roadmap:

🔍 Reconnaissance & Footprinting
🛡️ Scanning & Enumeration
💻 Vulnerability Assessment
📝 Exploitation & Reporting

This is all about helping you build your skills, step by step, in a way that truly matters for your career. We are bringing high-quality cybersecurity training to our local community.

I’m putting the finishing touches on the platform, and the launch is coming very soon.

#CyberSecurity #AddisSec #PenTesting

🛡️ New CTF Challenge: Everting

📂 Category: Web Exploitation
📊 Difficulty: 🟡 Medium (250 Points)

🌐 Platform: ADDISEC CTF

📝 Challenge Description:

Deep in the digital underworld, a shadowy hacking collective known as NullByte has set its sights on Everting a cutting-edge freelance platform trusted by thousands. Their goal? Inject a backdoor into the system and sell access to the highest bidder.

Everting's CISO has caught wind of the plot but needs proof. You're called in as an elite ethical hacker to beat NullByte at their own game. Your mission: infiltrate Everting's infrastructure, uncover the critical flaws, capture the flag, and expose the vulnerability before the hackers strike

🏅 Flag Format: CTF{...}

👉 Access the challenge: https://asctf-1.onrender.com/challenge/everting

📌 What is OSINT in Cybersecurity?

OSINT (Open Source Intelligence) is the practice of collecting and analyzing publicly available information for security assessments, and penetration testing.

🔍 What OSINT Covers

Public Records – WHOIS lookups, DNS records, corporate registrations, and business filings.

Social Media – Public profiles on LinkedIn, Twitter, GitHub, and other platforms that reveal employee names, roles, and project details.

Technical Data – Subdomains, IP ranges, SSL/TLS certificates, and open ports.

Data Breaches – Leaked credentials and passwords found in breach databases like HaveIBeenPwned.

Search Engines – Advanced Google dorks, Shodan for connected devices, and Censys for certificate and network intelligence.

🛠️ Common OSINT Tools
Recon-ng
theHarvester
Shodan
Maltego

🎯 OSINT Use Cases in Cybersecurity
External Reconnaissance Threat Intelligence
Data leaks
brand impersonation
Social Engineering

© 2026 @Addis_Sec | 🌐 Your community for all things cyber and tech in Ethiopia

📌 What is SOC in Cybersecurity?
A Security Operations Center (SOC) is a team that continuously monitors, detects, investigates, and responds to cybersecurity threats to protect an organization’s systems and data.
🔍 What a SOC Does
🔎 Threat Monitoring – Monitors networks, endpoints, servers, and applications for suspicious activity.
🚨 Threat Detection – Identifies malware, unauthorized access, suspicious logins, and other security incidents.
🧪 Incident Investigation – Analyzes alerts and security events to determine what happened.
🛡️ Incident Response – Takes action to contain and mitigate security threats.
📊 Security Analysis – Uses logs, alerts, and threat intelligence to identify potential attacks.
🛠️ Common SOC Tools

SIEM
EDR
IDS/IPS
SOAR

🎯 SOC Use Cases

Threat Detection
Incident Response
Threat Hunting
Security Monitoring
Log Analysis
Threat Intelligence

© 2026 @Addis_Sec | 🌐 Your community for all things cyber and tech in Ethiopia

What is Wireshark? 🦈

Wireshark በ1998 የተጀመረ፣ ዛሬ በዓለም ዙሪያ በCybersecurity ባለሙያዎች፣ Network Engineers እና Security Analysts በስፋት የሚጠቀሙበት የNetwork Protocol Analyzer መሳሪያ ነው። ይህንን ኃይለኛ መሳሪያ በነፃ እና Open Source መልኩ ለማንም እንዲጠቀምበት ቀርቧል።

Wireshark በሁለት ዋና ጠንካራ ጎኖቹ ይታወቃል፦

1. የNetwork Traffic መተንተን፦ በNetwork ላይ የሚጓጓዙ የData Packets መረጃዎችን በመያዝ እና በመተንተን በNetwork ውስጥ ምን እየተፈጠረ እንደሆነ ለማወቅ ያግዛል።

2. Troubleshooting & Security Analysis፦ የNetwork ችግሮችን፣ የተጠረጠሩ Traffic እንቅስቃሴዎችን እና የSecurity Incidents ምልክቶችን ለመመርመር በጣም ጠቃሚ ነው።

Wireshark
አንድን Network ለመጠበቅ ወይም ለመመርመር በውስጡ የሚካሄደውን Traffic መረዳት አስፈላጊ ነው። Wireshark ይህንን የNetwork Visibility እና Traffic Analysis ስራ በብቃት ያከናውናል።

GitHub Recommendation:- የWireshark ሙሉ Source Code የGitHub ገጽ በዚህ ሊንክ ያገኙታል 👉 https://github.com/wireshark/wireshark

#CyberSecurity #Wireshark #EthicalHacking #OpenSource #NetworkSecurity #AddisSec

© 2026 @Addis_Sec | 🌐 Your community for all things cyber and tech in Ethiopia