https://medium.com/@kumawatabhijeet2002/mastering-xss-cross-site-scripting-attacks-a-comprehensive-guide-to-become-professional-bug-6251058c576e

check out this blog it is to the point 👌
@AfroSec

hey fam
i got u something today especially If you're into blue teaming, this site is perfect for you!
It has incredible content—check it out and enjoy the journey ahead!

letsdefend.io

@AfroSec

While learning about a vuln called insecure deserialization from PwnFunction, I noticed a Base64-encoded string in the comment section and decided to decode it.

I think it might be some kind of CTF rabbit hole! 🐇🔍

mtsm 😢😂

@AfroSec

"if you are CEO of a company and you are dumb enough to leave your login info on posted note on your desk it is not a hack it is barely social-engineering" 😂 : author Gilfoyle
https://youtu.be/Qm7k1CPFkIc?si=VB6U5tx9M2tLYTCL

@AfroSec

Speaking of stealing someone's password 👨‍💻👩‍💻
Which method do you think is better: cookie hijacking, cracking, or social engineering? 🤔🧐🧐

I'll leave the question to you 😊 Have a wonderful night! Byeee 🫡💤

@AfroSec

While i have shared a lot of my bug bounty success story with you all, let me share story of my failures!

You know, When i was starting bug bounty hunting, I was unable to report a valid vulnerability for 6 month straight! Every report that i submitted got marked as informative, not applicable and duplicate! At that time, i was very demotivated, stressed and depressed. I was thinking, "Maybe bug bounty is not my thing" but suddenly, I started questioning myself:
1. Didn't i wanted to learn cyber security because it is my passion?
2. Am i only focusing on reporting vulnerabilities instead of improving my skills?

By asking these questions, I understand one thing: I need to switch my focus on learning, improving and hacking instead of getting demotivated because i was not getting any rewards! And eventually, I was able to get that first vulnerability and now i can easily say that i am the better version of myself than before!

#Day_2

Finished Day 2 of the Advent of Cyber challenge! . It was about detecting a brute-force attack and investigating compromised systems using a SIEM tool. The attacker immediately ran a PowerShell command after gaining access.

Feels good to play detective, huh? 😁
@AfroSec

Day 3 is done!
I was a bit busy, but it was easy and straight forward. The challenge was about log analysis, and the web app was vulnerable to RCE via file upload.

@AfroSec

Day 5 - Done! 😊

it was all about the XXE vulnerability in web apps. It was super fun! If you want to dive deeper into this vuln, I recommend checking out the XXE room on TryHackMe, as well as resources like PortSwigger and PwnFunction's YouTube video [vid ].

I skipped Day 4 and Day 6 because my internet was like shit, but hopefully, I’ll catch up tomorrow!

@AfroSec

You ever have one of those moments where you just stop and think, "Wow, how did I not know this?" 😂

Well, today I realized something obvious: TOR isn’t just name—it’s actually an abbreviation for "The Onion Router!" 🤯 All this time, I thought it was just a catchy title. Silly me, right?

And to make things even better,i barely remember what WiFi stands for... 🤔 Guess I need to dig into that next.

@AfroSec

Collection of resources to learn cyber-security, and pentest in general

https://github.com/Nickyie/Cybersecurity-Resources

Back in high school, I was totally hooked on EDM. 🎧🔥 I couldn’t get enough of artists like Alan Walker, Martin Garrix, Marshmello, Avicii, and more.

I was that guy who spammed our Telegram group with songs from these legends. 😅 My classmates had no escape—EDM vibes were everywhere.after two years, and guess what? I just stumbled upon that same group and all the songs I shared back then

Listening to them now, it feels so fresh— It’s such a vibe to remember about the good old days before AASTU 😂. Nostalgia hits differently when it comes with beats, drops, and memories! 🕺
and this song is one of'em .

What’s your throwback from high school? wanna drop it in the comment section ?

@AfroSec

Oh, and btw, I’m still in love with EDM!😁😁

@AfroSec

goodnight Afro fam 💤💤💤💤💤

@AfroSec

logs don't lie – 😁the blue teamers' motto

@AfroSec

[ALhacking_tool]

@AfroSec

Hello,I need your attention for a second!
One of our own, Daniel Basazinew, a talented software engineer and an incredible human being, is facing a life-threatening challenge. Daniel has been diagnosed with End-Stage Renal Disease (ESRD), and both of his kidneys have failed. He urgently needs a kidney transplant, but the cost of the procedure abroad is $40,000.

Daniel has always been there for others, mentoring, helping, and inspiring those around him. Now, it's our turn to help him in his time of need.

Here's how you can support:
Donate via GoFundMe: https://www.gofundme.com/f/urgent-support-daniels-kidney-transplant


Local Donations (Ethiopia):

Commercial Bank of Ethiopia: 1000259462774 (Daniel Basazinew)

Telebirr: 0941219026 (Zinash)

Share the campaign with your networks to spread the word.
Let's rally together to save Daniel’s life. Every little bit counts—thank you for your support!

content credit : Nahom Abera