😁



@rafa_sec
@rafasec_chat -> join chat
@rafa_course -> join course channel

ነገር ግን እኛ ኀጢአተኞች ሳለን ክርስቶስ ስለ እኛ ሞተ፤ ይህም እግዚአብሔር ለእኛ ያለውን የራሱን ፍቅር ያሳያል።

ሮሜ 5:8

መልካም በአል🙏❤️

@rafa_sec

❤️

I was thinking about you 🐧

@rafa_sec
@rafasec_chat -> join chat
@rafa_course -> join course channel

Something is comming! 👀 Can you guess what we're preparing? Share your predictions in the group! @rafasec_chat 🤫


@rafa_sec
@rafasec_chat -> join chat
@rafa_course -> join course channel

😁

@rafa_sec
@rafasec_chat -> join chat
@rafa_course -> join course channel

199😳

Sudo apt install 1 member 😁

We said it before… and now it’s LIVE!
We’ve launched our own CTF website!
🧠 Solve real hacking challenges
⚔️ Sharpen your skills
🕵️‍♂️ Learn and level up your game

Try it now: http://rafasecctf.rf.gd/

Join the movement:
🔗 @rafa_sec – Main Channel
👥 @rafasec_chat – Chat Group
📚 @rafa_course – Course Channel

Let the hacking begin!


If you want to help me in ui/css contact me: @Rafa_support

RafaCTF – Web CTF Lab (Free & Online)
Hey hackers!
I’ve launched RafaCTF, a custom Capture The Flag (CTF) lab where you can practice real-world web vulnerabilities across 4 difficulty levels — from Easy to Insane!

What’s Inside?
🛡️ 7 Vulnerability Categories:

1. ⚔️ XSS (Cross-Site Scripting)


2. ⏱️ Rate Limit Bypass


3. 🔐 Brute Force


4. ✍️ Content Injection


5. 🧩 HTML Injection


6. ⚙️ JavaScript Injection


7. 🕵️ XSSI (Cross-Site Script Inclusion)



Features:
✅ 4 difficulty levels per challenge
✅ Hidden flag in each level
✅ Beginner-friendly & self-hosted
✅ Learn while hacking — hands-on!

Flag Path Format:
/flags/<vuln_name>/level1.txt (…up to level4.txt)

Try it. Hack it. Learn it.
Website: http://rafasecctf.rf.gd/

Need help or want to share your progress?

💬 Chat: @rafasec_chat
📢 Channel: @rafa_sec
📚 Course Updates: @rafa_course

Created by: Rafu | 2025

Complete 3CTF (Level 3) and get access to the

- Movement, Pivoting, and Persistence course!

Submit a proof screenshot in @Rafa_support to claim your reward!

Good luck! Stay sharp!
⚡🎯💻





💬 Chat: @rafasec_chat
📢 Channel: @rafa_sec
📚 Course Updates: @rafa_course

I identified a critical security issue 🚨 where sensitive credentials were exposed through source code 🧑‍💻🔓 — received a reward of 11,000 birr 💰


@rafa_sec

We made it again! 💥 Another 11K birr! 💸
This all happened because of 3 things:
1️⃣ God 🙏
2️⃣ My mentor Nathan 👨‍🏫 @geeztechgroup
3️⃣ My hard work 😂💻



#Blessed #GrindPays #BugBountyWin


@rafa_sec

The first time was so nice, I had to do it twice! 😁

Back at it again — taxes and tactics!
💻💸

@rafa_sec

🧭 Cybersecurity Roadmap By Rafu


🔹 1. 🔰 Fundamentals

💻 Computer Basics (learn this from YouTube)

🌐 Networking _resource -> Link

🐧 Linux basics _resource -> Link


🔹 2. 🧠 Core Cyber Skills

⚙️ Scripting: Bash, Python


🐚 Bash -> Link

🐍 Python -> Link


🔍 Networking tools: Nmap, Wireshark


- 📡 Nmap -> Link 1

Link 2


- 📊 Wireshark -> Link



- 🌐 Web technologies: HTML, JS, HTTP

Resource -> Link

- 🔐 Cryptography

resource -> Link



3. 🛡 Ethical hacking fundamentals: system hacking, website hacking...

📚 Resources:

- 🧑‍💻 Ethical hacking video -> Link
- 🌍 Web hacking -> Link
- 📖 If you want a book -> Link



🔹 4. 🎯 Specializations (Choose Your Track)

- Soon



🚀 I will share advanced courses on my course channel — join it. @rafa_course




@rafa_sec

Hey everyone 👋
When I started learning bug bounty 🐞💰, I got a cool lab 🧪 that really helped me. Now I want to share it with you ❤️ and we’ll do it together — live 🎥!

Join me every Saturday & Sunday 📅 in the Live Cyber Security Group 🛡️ or on my channel .
It’s easy, fun, and perfect for beginners 🚀.


What do you think?
Share your idea in group: @rafasec_chat

Vote 👇👇

@rafa_sec

🚀 eWPTv2 Course: Become a Web App Pentesting Pro! 🚀

Ready to launch your career in web application security? This Intermediate Level course is your fast track to mastering practical pentesting skills! 🎯

Course Highlights:

• Web App Security Fundamentals 💡
• Information Gathering 🔎
• Authentication & Authorization Testing 🔑
• Injection Attacks 💉
• File Inclusion Vulnerabilities 📄
• Server-Side Request Forgery (SSRF) 🌐
• Web Services Security ⚙️
• Practical Exploitation Techniques 🛠
• Hands-On Labs 🧪
• Report Writing 📝

Key Benefits:

• 🔥 Hands-On Learning: Real-world scenarios and practical exercises.
• ✅ Certification Prep: Ace the eWPTv2 exam with confidence.
• 📈 Career Advancement: Boost your skills and earning potential.
• 🛡 Real-World Skills: Protect web apps with cutting-edge techniques.

Join now and start your journey to becoming a Best web application penetration tester! ✨➡️ click this for course





💬 Chat: @rafasec_chat
📢 Channel: @rafa_sec
📚 Course Updates: @rafa_course

Hacking TIP Day1:

Tip1:

Start every recon🔍 by mapping the attack surface thoroughly. Use tools like subfinder, httpx, and nmap to discover subdomains, alive hosts, and open ports. A wide recon often reveals hidden or forgotten services that are goldmines for bugs.

Tip2:

Always check for parameter pollution by duplicating query or body parameters (e.g., ?user=admin&user=guest). Some backends may use the first, others the last—leading to unexpected behavior or even auth bypass.

Happy hacking and bug hunting! 🐞🔍


💬 Chat: @rafasec_chat
📢 Channel: @rafa_sec
📚 Course Updates: @rafa_course