#insta

who can relate to this 😂?
@AfroSec

am into cats but this one...... i cant resist him 😄😊

@AfroSec

Advent of Cyber 2024Cyber is right around the corner! Have you all registered ???

@AfroSec

https://medium.com/@kumawatabhijeet2002/mastering-xss-cross-site-scripting-attacks-a-comprehensive-guide-to-become-professional-bug-6251058c576e

check out this blog it is to the point 👌
@AfroSec

hey fam
i got u something today especially If you're into blue teaming, this site is perfect for you!
It has incredible content—check it out and enjoy the journey ahead!

letsdefend.io

@AfroSec

While learning about a vuln called insecure deserialization from PwnFunction, I noticed a Base64-encoded string in the comment section and decided to decode it.

I think it might be some kind of CTF rabbit hole! 🐇🔍

mtsm 😢😂

@AfroSec

"if you are CEO of a company and you are dumb enough to leave your login info on posted note on your desk it is not a hack it is barely social-engineering" 😂 : author Gilfoyle
https://youtu.be/Qm7k1CPFkIc?si=VB6U5tx9M2tLYTCL

@AfroSec

Speaking of stealing someone's password 👨‍💻👩‍💻
Which method do you think is better: cookie hijacking, cracking, or social engineering? 🤔🧐🧐

I'll leave the question to you 😊 Have a wonderful night! Byeee 🫡💤

@AfroSec

While i have shared a lot of my bug bounty success story with you all, let me share story of my failures!

You know, When i was starting bug bounty hunting, I was unable to report a valid vulnerability for 6 month straight! Every report that i submitted got marked as informative, not applicable and duplicate! At that time, i was very demotivated, stressed and depressed. I was thinking, "Maybe bug bounty is not my thing" but suddenly, I started questioning myself:
1. Didn't i wanted to learn cyber security because it is my passion?
2. Am i only focusing on reporting vulnerabilities instead of improving my skills?

By asking these questions, I understand one thing: I need to switch my focus on learning, improving and hacking instead of getting demotivated because i was not getting any rewards! And eventually, I was able to get that first vulnerability and now i can easily say that i am the better version of myself than before!

#Day_2

Finished Day 2 of the Advent of Cyber challenge! . It was about detecting a brute-force attack and investigating compromised systems using a SIEM tool. The attacker immediately ran a PowerShell command after gaining access.

Feels good to play detective, huh? 😁
@AfroSec

Day 3 is done!
I was a bit busy, but it was easy and straight forward. The challenge was about log analysis, and the web app was vulnerable to RCE via file upload.

@AfroSec

Day 5 - Done! 😊

it was all about the XXE vulnerability in web apps. It was super fun! If you want to dive deeper into this vuln, I recommend checking out the XXE room on TryHackMe, as well as resources like PortSwigger and PwnFunction's YouTube video [vid ].

I skipped Day 4 and Day 6 because my internet was like shit, but hopefully, I’ll catch up tomorrow!

@AfroSec

You ever have one of those moments where you just stop and think, "Wow, how did I not know this?" 😂

Well, today I realized something obvious: TOR isn’t just name—it’s actually an abbreviation for "The Onion Router!" 🤯 All this time, I thought it was just a catchy title. Silly me, right?

And to make things even better,i barely remember what WiFi stands for... 🤔 Guess I need to dig into that next.

@AfroSec

Collection of resources to learn cyber-security, and pentest in general

https://github.com/Nickyie/Cybersecurity-Resources