this is actually fun ngl 👀 if you’re at AASTU, come check it out — big shoutout to kirakos for the idea👌👌

@AfroSec

monday huh ?

have a blessed day y'all
@AfroSec

made htb acc ages ago but never touched a challenge fr 😭😂 (except their university + apocalypse one)
besmeam snfna 🤦‍♂️

@AfroSec

f@k yea,everywhere 😁

@AfroSec

I built my first mcp serve. It helps you iOS device forensics using iOS's sysdiagnose file. You can ask all kinds of interesting questions like

- how many apps were installed ? Past and present
- how many times was this device rebooted?
- find me suspicious apps
- what wifi was this device connected to, etc

this is so true💯

@AfroSec

Boom, finally published! It chronicles (and highly speculative at times :)) how LLMs can help with mobile security. I have disscussed few use cases

1. For code obfuscation
2. For reverse engineering
3. For device forensics
4. For SOC automation & reporting

https://www.sandboxbrief.com/opportunites-mtd-with-ai-agents/

🚨 UK just busted two Scattered Spider hackers—19 & 18—behind the massive TfL cyberattack.

💥 One of them, Thalha Jubair, is also charged in the US for 120+ hacks & $115M in ransoms. He could face 95 years.

Full story → https://thehackernews.com/2025/09/uk-arrest-two-teen-scattered-spider.html

95 years is just wild damn 🥶

@AfroSec

whats wrong with the rain 🥶

@AfroSec

🚩 CTF Update – EthioCyberShield Showdown 🚩

Big shoutout to our team APT-04 💀🔥
We placed 6th overall on the EthioCyberShield Showdown CTF! 🏆

Proud of the grind we put in — even though I couldn’t make it for the last day’s Incident Response (IR) challenge, the squad held it down strong. 💪

This is just the start…Next time, podium finish 😤

#APT04 #CTF #CyberSecurity #EthioCyberShield #yekolotemari

@AfroSec

coffee is the only way to save the night 😄👌

@AfroSec

😍😍

lets go cook somthn 😉


@AfroSec

Domain fronting is a technique used to hide the true destination of network traffic. It exploits how some protocols, like HTTPS, handle TLS (Transport Layer Security) and HTTP headers, particularly when interacting with content delivery networks (CDNs).

Example:

SNI: cdn.cloudflare.com (allowed)
HTTP Host header: malicious.example.com (your real server)

Firewalls, network monitors, or DPI (Deep Packet Inspection) only see the 'front' domain (the allowed one), while the real destination remains hidden.

Common uses:

1. Command & Control (C2) communication
2. Data exfiltration

I just read this PPT and it offers really good insights. I haven’t finished it yet, but I’m sure it’s worth reading.

@AfroSec

https://github.com/SixGenInc/Noctilucent
this is their github acc check it out

@AfroSec