AfroSec
790 subscribers
456 photos
33 videos
7 files
239 links
hello friend
am AfroSec | AASTU dropout | cybersecurity enthusiast | CRTO | CRTOM | CRTA | passionate about Red Teaming :)

portifolio : https://afrosec.et
blog: https://blog.afrosec.et
file : @Afr0Files
Download Telegram
This media is not supported in your browser
VIEW IN TELEGRAM
sijemer eko we are ๐Ÿ˜ญ๐Ÿ˜ญ๐Ÿฅ€cooked

@AfroSec
๐Ÿคฃ7๐Ÿ˜ญ1
AfroSec
hmmm ๐Ÿ™ƒ @AfroSec
thank you guys for your birthday wishes, I really mean it
A lot of new members joined this year too , thank you all for being part of my journey.

much love and respect ๐Ÿ˜Š

@AfroSec
โคโ€๐Ÿ”ฅ8โค2
โš ๏ธ Axios โ€” the JavaScript HTTP client with 100M+ weekly downloads โ€” has been compromised with malicious versions dropping a Remote Access Trojan

๐Ÿ“Œ If you installed axios@1.14.1 or axios@0.30.4, assume your system is compromised!

๐Ÿ” Am I affected?

- MacOS
ls -la /Library/Caches/com.apple.act.mond 2>/dev/null && echo "COMPROMISED"
- Linux
ls -la /tmp/ld.py 2>/dev/null && echo "COMPROMISED"
- Windows
dir "%PROGRAMDATA%\wt.exe" 2>nul && echo COMPROMISED

Fix it:
npm install axios@1.14.0 โ† for 1.x users
npm install axios@0.30.3 โ† for 0.x users
rm -rf node_modules/plain-crypto-js
npm install --ignore-scripts

Read More [ Blog ]
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ˜‚๐Ÿ˜‚ this era

Me, Myself and I โŒ
Me, Myself and AI โœ…

even telegram cant leave as alone eko gud new ๐Ÿ˜
@AfroSec
๐Ÿ˜17
heyyy everyone
we are gonna be live on discord just kinda chill event we will solve one AD machine and learn along the way

if u r free check it out now https://discord.gg/XP948E8B :)

@AfroSec
๐Ÿ”ฅ8โšก2
did anyone see what i posted lool :)
๐Ÿคฃ6๐Ÿ‘2๐Ÿ˜2
#experience
from what I saw (experience), most Ethiopian websites are CMS-based, mainly WordPress. The funny part is that they completely trust the CMS to handle everything end-to-end, like security or other configurations. but, the fact is that the wp-json schema is enough to gather all their endpoints and do shady stuff ๐Ÿ˜‚ Sometimes they open sensitive directories like wp-includes or wp-content, then forget about their existence, which is a really bad security measure.

@AfroSec
๐Ÿ”ฅ3โšก2
jst found this on linkedin and i liked it :)

@AfroSec
โค16โคโ€๐Ÿ”ฅ4๐Ÿฅฐ2
Forwarded from The Hacker News
๐Ÿšจ WARNING - APT28 ran a global router hijack to steal credentials.

The group compromised MikroTik and TP-Link devices, rewrote DNS settings, and redirected traffic for credential theft at scale -- impacting 18,000+ IPs across 120 countries, including government and cloud targets.

๐Ÿ”— Read here โ†’ https://thehackernews.com/2026/04/russian-state-linked-apt28-exploits.html
๐Ÿคฏ2
W ๐Ÿ”ฅ attack chain fr ๐Ÿ‘Œ

@AfroSec
๐Ÿ”ฅ3๐Ÿค”1
This media is not supported in your browser
VIEW IN TELEGRAM
that one skid after gaining initial access on his own virtual box which by disabling all defender engines and interfaces ๐Ÿ˜‚๐Ÿ˜‚๐Ÿ˜‚๐Ÿ˜‚
just for fun demo endaydebrachu lol

@AfroSec
๐Ÿคฃ6๐Ÿ˜2
am always amazed after reading threat actors footprints like goddamn ๐Ÿคฏ ,really man?
its a matter of time for us too ๐Ÿ’ช๐Ÿ’ช

@AfroSec
๐Ÿ’ฏ4โค2
tackling advanced shii wont kill us chat, either we will fail or we will conquer thats it ,
in both cases we will learn something that matter in the future ๐Ÿคทโ€โ™‚๏ธ

@AfroSec
๐Ÿ”ฅ7๐Ÿ˜3๐Ÿ’ฏ2
Forwarded from Buna Byte
Something big is comingโ€ฆ ๐Ÿ‘€

AASTU is about to witness a whole different level.
This isnโ€™t a workshop.
This isnโ€™t a lecture.

This is a battlefield.

๐Ÿ’ป Real-world challenges
๐Ÿง  Skill over theory
๐Ÿšฉ Only the sharpest survive

Built in silence by Buna Byteโ€ฆ now itโ€™s almost time to go live.

๐Ÿ“… April 15
โฐ 2:00 PM

Think youโ€™re ready? Step in and prove it.
Not ready? This is where you level up.

Stay locked in. Details dropping soon.

#AASTU #CTF #CyberSecurity #BunaByte #HackTheSystem
โค5๐Ÿ‘1
Claude_Mythos_Preview.pdf
22.6 MB
Claude Mythos Preview

I didn't read it, but I will if I get time. If you want to read it, here it is

@AfroSec
๐Ÿ‘2โšก1
แŠฅแŠ•แŠณแŠ• แˆˆแ‰ฅแˆญแˆƒแА แ‰ตแŠ•แˆณแŠคแ‹ แ‰ แˆฐแˆ‹แˆ แŠ แ‹ฐแˆจแˆณแ‰ฝแˆ

@AfroSec
โค17
This media is not supported in your browser
VIEW IN TELEGRAM
me and those 2 friend of mine doing anything but finishing uni lol ๐Ÿ˜‚๐Ÿ˜‚

@AfroSec
๐Ÿ˜10๐Ÿคฃ3
๐Ÿ‘€

@AfroSec
๐Ÿ‘€7
Registration for the #University #CTF is now open! Sign up using the link below and apply the Invite code to join the event.

๐Ÿ”—https://app.ctfzone.com/events/7
Invite Code : ETHUNICTF2026@1337#!
Team : 1 - 2

#cybersecurity #hacking #ctf #unictf #yekolotemari
โค3๐Ÿ‘1