أم سديس 💍

Mainframe Security •Pentester •RE’er •OSCP/CISP. I’m not an ethical h@ck3r. I’m a free-range, grass-fed, organically grown & independent Pentester. Bug🪲hunter

[أم سديس 💍 @ArewaParrot]

Don’t celebrate what you don’t practice. Incompetent man

[Bola Ahmed Tinubu @officialABAT]

Fellow Nigerians

Today, we celebrate democracy and the enduring Nigerian spirit. For 27 unbroken years, since May 29, 1999, Nigerians have chosen their leaders through the ballot, witnessed peaceful transitions of power, and resolved disagreements in courtrooms and legislative chambers—not through violence. We have experienced the longest stretch of civilian rule in our history. Our democracy is not perfect, but it is ours, and we must continue to defend and strengthen it.

[Elorm Daniel @elormkdaniel]

IP Addressing + DHCP Made EASY!

Every Network Engineer MUST understand these basics before moving to advanced networking concepts!

🔹 In this guide you’ll learn:
✅ Class A, B & C IP Addresses
✅ Private IP Ranges (RFC1918)
✅ DHCP vs Static IP
✅ APIPA Address Explained
✅ Subnet Mask Basics
✅ Real-world device examples

🔸 Quick Reminder:
🔹 DHCP = Automatic IP Assignment
🔹 Static IP = Manual & Fixed Address
🔹 APIPA (169.254.x.x) appears when DHCP fails

👉 Interview Question:
Why are servers usually configured with Static IP addresses instead of DHCP?

📚 Perfect for CCNA, CCNP & IT Beginners
💾 Save this for interview preparation
🔁 Share with networking students

[The Holy Mosques @theholymosques]

The Prophet (ﷺ) said: Fasting on the Day of ‘Arafah, I hope from Allah, expiates for the sins of the year before and the year after.

#Hajj #Hajj1447 #Hajj2026

[obscaries ❘ AppSec @obscaries]

Gitleaks, a really solid open-source secret scanning tool for detecting accidentally exposed credentials in repositories and CI/CD workflows.

It can help identify:
• API keys
• AWS credentials
• GitHub tokens
• database passwords
• private keys
• OAuth secrets

One leaked secret can sometimes lead to full infrastructure compromise, which is why tools like this are heavily used in modern AppSec and DevSecOps pipelines.

Definitely worth checking out for source code review and security automation workflows.

Source: https://t.co/9PRoXZ0Xim

#CyberSecurity #BugBounty #AppSec #DevSecOps #InfoSec #GitHub #Recon #SecretScanning

[𝐇𝐚𝐦𝐳𝐚 | Network Engineer (Aspiring) @Hamzaonchain]

HOW LINUX WORKS

[Hacking Articles @hackinarticles]

Memory Forensics Using Volatility Framework

📲 Telegram: https://t.co/upuP8k8ckB

Discover how investigators analyze RAM memory dumps to uncover hidden processes, credentials, and malicious activity during forensic investigations. 🕵️‍♂️💻

💡 Key Takeaways:
🧠 Memory Acquisition Basics
📦 Supported Memory Dump Formats
🔍 Image Profile Identification
⚙️ Volatility Plugins & Commands
🧾 Process & Network Artifact Analysis
🔐 Credential & Registry Extraction

📖 Full Guide:
https://t.co/ashAztkEhr

#Volatility #MemoryForensics #DFIR #DigitalForensics #CyberSecurity #HackingArticles #Infosec

[Vivek | Cybersecurity @VivekIntel]

Not sure what Cyber Security includes: This one image explains all 👇

[DJ Ab @Dj_Abba]

At almost 60, people should be preparing their souls, not desperately chasing money. The system in Nigeria is so broken it forces elders into survival mode instead of reflection. We need a mindset shift. If we truly fear poverty for our children, then let’s build a better future for them now, not leave them to struggle the same way.

[Ark Aegis🛡 @Ark_Aegis]

Four SOC Labs platforms for Simulation

TryHackMe SOC Simulator
https://t.co/EWq1TATJpS

ShadowXLab CyberOPS
https://t.co/UPtxTxVLaV

LetsDefend
https://t.co/jEqtVAq3ki

Hack The Box Blue Team Labs
https://t.co/qQUd9Ky6Wr

TryHackMe SOC Level 1 Path
https://t.co/EWq1TATJpS

[Vivek | Cybersecurity @VivekIntel]

Penetration Testing Guide — Tools + Workflow in One Place 🐉📘

Complete pentesting pipeline with practical tools:

• Recon → Nmap, Netifera
• Info Gathering → theHarvester, Maltego
• CMS Detection → WhatWeb, CMS-Explorer
• WAF Detection → WafW00f
• Enumeration → DirBuster, WebShag
• Exploitation → SQLMap, Nikto, W3af, Shodan
• Post-Exploitation → Weevely, MSF Payloads

Everything structured — no random notes, just a clear workflow.

📥 Download: https://t.co/PnAea9eliE

#Pentesting #CyberSecurity #WebSecurity #Infosec #AppSec

[X @TheMsterDoctor1]

OSINT Drop: WhatsApp Intelligence (Legal & Ethical)

A single phone number can unlock more than most people realize.

→ Profile photos (even historical changes)
→ Status messages & behavioral patterns
→ Last seen / activity windows
→ Linked metadata across platforms

No exploits. No hacking. Just pure OSINT tradecraft.

The real edge isn’t the tool — it’s the methodology:
• Correlate number → identity
• Pivot into social platforms
• Track reuse patterns
• Build behavioral timelines

Most people leave a data trail without knowing it.

If you know how to follow it… you don’t need access.

Full guide 👇

https://t.co/bF7RkJmM0i

[Cyber_Racheal @CyberRacheal]

I’ll say this again.

Nmap is free.
Hydra is free.
Allison is free.
OpenVAS is free.
Kali Linux is free.
Wireshark is free.
Burp Suite is free.
Metasploit is free
Portswigger is Free.
John the Ripper is free.
OSINT Framework is free.
Shodan (basic tier) is free.
TryHackMe & Hack The Box (basic tiers) are free. A lot more free platforms around.

You claim you want to learn cybersecurity yet you give excuses about resources.

Nothing has to be perfect.

Not a fancy certification to begin.
Not a $1,000 course to practice.
Or even the “perfect” setup.

All you need is your laptop, phone, an internet connection, and the decision to start today.

Every day you delay, someone else is learning, practicing, and moving closer to the career you say you want.

Stop waiting for the “right time.”
Stop blaming the lack of resources.
Stop making excuses.

Start now. Learn now. Improve now.

You don’t need a mentor to start.

[Hackmanac @H4ckmanac]

🚨Cyber Alert ‼️

🇳🇬Nigeria - 𝗜𝗸𝗲𝗷𝗮 𝗘𝗹𝗲𝗰𝘁𝗿𝗶𝗰

ByteToBreach claims to have breached Ikeja Electric, allegedly encrypting 50+ hosts, disrupting systems, and taking multiple subdomains offline. The actor also claims to have stolen customer, employee, and business databases, source code, Active Directory data with cracked passwords, and impacted metering platforms linked to several vendors.

Threat actor: ByteToBreach
Sector: Energy / Utilities
Data exposure (claimed): Not specified
Data type: Customer records, employee data, business databases, source code, Active Directory credentials
Observed: Apr 28, 2026
Status: Pending verification
ESIX©: 6.18

Full details and impact assessment on https://t.co/eB7qgxKFAa

[𝐇𝐢𝐝𝐢𝐦𝐚, 𝐏𝐡.𝐃. @Realoilsheikh]

#FreeNasiruElrufai

[Decabyte @decabyte_info]

CEH Certified Ethical Hacker All-in-One Exam Guide 🚀

Download Link : https://t.co/mYXiE0GFR1

[TheOuts1derX @TheOuts1derX]

Cloud hacking tools for bug bounty hunters:

CloudFox
https://t.co/htfw49SLGM

Pacu
https://t.co/CXdO5YRnIG

S3Scanner
https://t.co/cIb5YdxfI8

Extra tools, not purely cloud but used a lot in this workflow:

Nuclei
https://t.co/UiXI7zZFT1

TruffleHog
https://t.co/lEqC1BzIyj

#BugBounty #CloudSecurity #Pentesting #InfoSec #EthicalHacking #CyberSecurity

[Vivek | Cybersecurity @VivekIntel]

Manage your entire hacking toolkit — 180+ tools in one place

• Covers recon, OSINT, web, cloud, mobile & more
• Install, update & run tools from one CLI
• Smart search, tags & recommendations
• Batch install + organized categories
• 180+ tools integrated in one interface

https://t.co/EyKNNwUOWF

#CyberSecurity #BugBounty #Pentesting

[Nana Sei Anyemedu @RedHatPentester]

A full file system extraction of an iPhone 15 Pro revealed extensive user data, including emails, Discord activity, and multiple social media accounts with associated artifacts. Notably, the presence of a burner number application highlights a common misconception; devices still retain significant traces of usage despite attempts at anonymity.
This demonstrates how modern smartphones continuously generate and store evidential data, making them highly valuable in digital investigations and reinforcing the importance of understanding mobile forensic exposure.

[Anastasis Vasileiadis @Anastasis_King]

🔓Best Password Cracking Tools

🔹Medusa
🔹Aircrack-ng
🔹Wfuzz
🔹OphCrack
🔹LophtCrack
🔹Hashcat
🔹Cain & Abel
🔹Rainbow Crack
🔹Brutus
🔹THC Hydra
🔹John the Ripper

🔖#infosec #cybersecurity #hacking #pentesting #security