👉 New tutorial video drop check it out on YouTube

https://youtu.be/wI-c_ZXzmG8?si=fL8amNzrSqFFwcYq

🚀 Master Pen Testing: A New Way to Learn is Coming Soon!

Want to get into cyber world but feeling overwhelmed by where to start? I’m working on something special to help you build your career right here in Ethiopia. 🛡️

I’m building a Pen Testing Roadmap & Simulation designed to bridge the gap between theory and real-world application. It’s practical, structured, and aligns with the core competencies you need to succeed. Even better?
You will earn a professional-grade certificate upon completion to showcase your hard-earned skills. 🎓

What’s coming in this roadmap:

🔍 Reconnaissance & Footprinting
🛡️ Scanning & Enumeration
💻 Vulnerability Assessment
📝 Exploitation & Reporting

This is all about helping you build your skills, step by step, in a way that truly matters for your career. We are bringing high-quality cybersecurity training to our local community.

I’m putting the finishing touches on the platform, and the launch is coming very soon.

#CyberSecurity #AddisSec #PenTesting

🛡️ New CTF Challenge: Everting

📂 Category: Web Exploitation
📊 Difficulty: 🟡 Medium (250 Points)

🌐 Platform: ADDISEC CTF

📝 Challenge Description:

Deep in the digital underworld, a shadowy hacking collective known as NullByte has set its sights on Everting a cutting-edge freelance platform trusted by thousands. Their goal? Inject a backdoor into the system and sell access to the highest bidder.

Everting's CISO has caught wind of the plot but needs proof. You're called in as an elite ethical hacker to beat NullByte at their own game. Your mission: infiltrate Everting's infrastructure, uncover the critical flaws, capture the flag, and expose the vulnerability before the hackers strike

🏅 Flag Format: CTF{...}

👉 Access the challenge: https://asctf-1.onrender.com/challenge/everting

📌 What is OSINT in Cybersecurity?

OSINT (Open Source Intelligence) is the practice of collecting and analyzing publicly available information for security assessments, and penetration testing.

🔍 What OSINT Covers

Public Records – WHOIS lookups, DNS records, corporate registrations, and business filings.

Social Media – Public profiles on LinkedIn, Twitter, GitHub, and other platforms that reveal employee names, roles, and project details.

Technical Data – Subdomains, IP ranges, SSL/TLS certificates, and open ports.

Data Breaches – Leaked credentials and passwords found in breach databases like HaveIBeenPwned.

Search Engines – Advanced Google dorks, Shodan for connected devices, and Censys for certificate and network intelligence.

🛠️ Common OSINT Tools
Recon-ng
theHarvester
Shodan
Maltego

🎯 OSINT Use Cases in Cybersecurity
External Reconnaissance Threat Intelligence
Data leaks
brand impersonation
Social Engineering

© 2026 @Addis_Sec | 🌐 Your community for all things cyber and tech in Ethiopia

📌 What is SOC in Cybersecurity?
A Security Operations Center (SOC) is a team that continuously monitors, detects, investigates, and responds to cybersecurity threats to protect an organization’s systems and data.
🔍 What a SOC Does
🔎 Threat Monitoring – Monitors networks, endpoints, servers, and applications for suspicious activity.
🚨 Threat Detection – Identifies malware, unauthorized access, suspicious logins, and other security incidents.
🧪 Incident Investigation – Analyzes alerts and security events to determine what happened.
🛡️ Incident Response – Takes action to contain and mitigate security threats.
📊 Security Analysis – Uses logs, alerts, and threat intelligence to identify potential attacks.
🛠️ Common SOC Tools

SIEM
EDR
IDS/IPS
SOAR

🎯 SOC Use Cases

Threat Detection
Incident Response
Threat Hunting
Security Monitoring
Log Analysis
Threat Intelligence

© 2026 @Addis_Sec | 🌐 Your community for all things cyber and tech in Ethiopia

What is Wireshark? 🦈

Wireshark በ1998 የተጀመረ፣ ዛሬ በዓለም ዙሪያ በCybersecurity ባለሙያዎች፣ Network Engineers እና Security Analysts በስፋት የሚጠቀሙበት የNetwork Protocol Analyzer መሳሪያ ነው። ይህንን ኃይለኛ መሳሪያ በነፃ እና Open Source መልኩ ለማንም እንዲጠቀምበት ቀርቧል።

Wireshark በሁለት ዋና ጠንካራ ጎኖቹ ይታወቃል፦

1. የNetwork Traffic መተንተን፦ በNetwork ላይ የሚጓጓዙ የData Packets መረጃዎችን በመያዝ እና በመተንተን በNetwork ውስጥ ምን እየተፈጠረ እንደሆነ ለማወቅ ያግዛል።

2. Troubleshooting & Security Analysis፦ የNetwork ችግሮችን፣ የተጠረጠሩ Traffic እንቅስቃሴዎችን እና የSecurity Incidents ምልክቶችን ለመመርመር በጣም ጠቃሚ ነው።

Wireshark
አንድን Network ለመጠበቅ ወይም ለመመርመር በውስጡ የሚካሄደውን Traffic መረዳት አስፈላጊ ነው። Wireshark ይህንን የNetwork Visibility እና Traffic Analysis ስራ በብቃት ያከናውናል።

GitHub Recommendation:- የWireshark ሙሉ Source Code የGitHub ገጽ በዚህ ሊንክ ያገኙታል 👉 https://github.com/wireshark/wireshark

#CyberSecurity #Wireshark #EthicalHacking #OpenSource #NetworkSecurity #AddisSec

© 2026 @Addis_Sec | 🌐 Your community for all things cyber and tech in Ethiopia

THE BINARY ENIGMA

A secret lies within the machine's language.
Can you uncover what the computer is trying to tell you?

CATEGORY · Crypto
DIFFICULTY · Easy
POINTS · 50

Challenge: THE BINARY ENIGMA

Tool Recommendation: Metasploit 🔥
Metasploit Framework is one of the most widely used open-source platforms for penetration testing and security research. It helps security professionals identify vulnerabilities, test exploits, and evaluate the security of systems in authorized environments.
Why should beginners and cyber security professionals learn Metasploit?

🎯 Exploitation: Test known vulnerabilities in environments.
🔎 Vulnerability Testing: Understand how security weaknesses can be identified.
⚙️ Modules & Payloads: Provides a large collection of exploit, auxiliary, payload, and post-exploitation modules.
🧪 Security Labs: Excellent for practicing penetration testing through CTFs, cybersecurity labs, and authorized security assessments.

Resources:
Official Website: https://www.metasploit.com/
GitHub Repository: https://github.com/rapid7/metasploit-framework

#CyberSecurity #Metasploit #Pentesting #EthicalHacking #AddisSec

© 2026 @Addis_Sec | 🌐 Your hub for all things cyber and tech in Ethiopia