CyberSecCord

Raising cybersecurity awareness in Nigeria | Street Interviews & Games
Open to Media Features | DM or Email for Collabs
📩 [email protected]

[Ghost St Badmus @commando_skiipz]

No shades to developers, but a lot of them genuinely don’t realize they need to factor in security best practices during development.

A few years back, I was contracted to perform a penetration test for a bank. They were under pressure to release a their new application immediately, management had ordered a go-live, and they had less than 48 hours or so before meeting the Change Advisory Board (CAB).

Normally, before I start testing any application, I interact with all the functionalities, from registration to the last user flow, just to understand the system before I start analyzing each request and response in burp.

After exploring the app, I opened my HTTP history & began reviewing the requests. I checked the first, second, & third endpoints after login, & I mumbled to myself:

“Wait… what’s going on here? Where’s the Authorization header? Are they using a different type of header or what?”

Shockingly, all thirty-something API endpoints after login had no authorization header whatsoever.
Meaning: any random person on the internet could call something like /dashboard/users and get a 200 OK response filled with sensitive data.
You could view, modify, or delete data freely, zero authorization checks.

I reported it immediately. They added me to a call, I shared my screen, and walked them through the issue. The backend developer went silent for a moment… then turned to the PM and said:

“Why are you just telling me this now? Why didn’t you inform me from the start that it was a requirement?”

I swear to God I couldn’t believe my ears. I was so pissed, I unmuted and said:

“Even if the PM didn’t give you any ‘security requirement,’ shouldn’t you already know that you’re supposed to authenticate first and authorize every subsequent API call?”

He later apologized, explaining that he hadn’t slept for three days trying to meet the release deadline. He promised to fix it immediately.

Many developers still treat security like a thing that needs to be handed to them before they take it seriously.

[Kennedy Emeanuri @SecureByKennedy]

Another end of the year with Tryhackme's Advent of Cyber (AoC) challenges🔥

Came across this initiative in 2022 and ever since my Christmas experience has never remained the same...

Calling upon all like minds to participate in this year's event

[Abdulkadir | Cybersecurity @cyber_razz]

The Certified Cybersecurity Educator Professional (CCEP) exam is now available for free by using this code: CCEP100OFF to get 1 free attempt.

What it covers :

•Fundamentals & Network Security
•Security Architecture
•IAM
•Offensive Security
•Cloud Security
•Security Operations
•Application Security
•Incident Response

Exam Details:

•80 questions • 2 hours
•Pass mark: 80%

🔗 Apply here: https://t.co/mBSbnzeb8Z

Coupon Code: CCEP100OFF

[Kennedy Emeanuri @SecureByKennedy]

As a Security Operations Center (SOC) expert, one key goal is to effectively and efficiently monitor and analyze logs...

With that being said, practice how to use your SIEM tools

#securityupdate #IT #cybersecurity @CyberSecCord

[CyberSecCord @CyberSecCord]

As a newbie in cybersecurity, prioritize building your portfolio/projects...

#CyberSecurity #linux #growth #awareness

[CyberSecCord @CyberSecCord]

Little things matter 💯
#linux #cybersecurity #Kali #EthicalHacking

[CyberSecCord @CyberSecCord]

Who has experienced this?? The feeling of ecstasy and fulfillment 😌

#viralvideo #linuxuser #CyberSecurity #WebDev #Frontend #backend #fullstack #code #DeveloperLife

[CyberSecCord @CyberSecCord]

Which do you prefer guys??
Working on Laptop or working on a desktop app??

[CyberSecCord @CyberSecCord]

Cisco packet tracer vs GNS 3 which do you prefer networkers??

#Cisco #gns3 #networking #DesignInspo

[CyberSecCord @CyberSecCord]

Important concepts in Networking:
✅ DHCP
✅ MAC address
✅ IP address
Drop others in the comment section guys
#cisconetworking #networks #networksecurity

[CyberSecCord @CyberSecCord]

@SecurityTrybe We will be launching our cybersecurity community for newbies soon...
Kindly follow our X handle @CyberSecCord and turn on your notification so you can get notified when it's launched
Domains:
✅Ethical Hacking
✅Network Security
✅Web App Testing
✅Security Operations Centre

[CyberSecCord @CyberSecCord]

@cyber_razz I really miss my networking days😩😩
Why did I move to cybersecurity?

[CyberSecCord @CyberSecCord]

Add "iOS users" to the list @linuxopsys 😂😂

[CyberSecCord @CyberSecCord]

We just had our first ever Linux coass @CyberSecCord and truth be told it was pretty much hands-on 💯

Basic commands: ls, pwd, cat, cd, cd .., sudo, etc

God bless Linux 🙏
God bless @kalilinux 🙏
God bless @CyberSecCord ����

#linux #Cybersecurity

[Raybo 🍺 @lewiray]

@SecurityTrybe Solid advice. Learning networking and Linux will lead you down an awesome path.

[Raybo 🍺 @lewiray]

@SecurityTrybe Solid advice. Learning networking and Linux will lead you down an awesome path.

[CyberSecCord @CyberSecCord]

Newbies: You better focus on the fundamentals my people...
Sometimes you might be hoping to get an interview of advanced/technical level stuffs and the hiring manager fit shock you with *what is CIA Triad* or *can you explain this role you are applying for?*
#Awareness

[CyberSecCord @CyberSecCord]

As a beginner, you need as much skill as possible to break into the field of cybersecurity... You need to stand out, be unique... Employers want to see a reason to pick you over the next person... One thing is for sure that alot of people applying would have big certifications.

[CyberSecCord @CyberSecCord]

The best part of Cybersecurity for me, will always remain Networking ❤️

That field speaks to me directly and I love the work @Cisco is doing there
#network #cisco #cybersecurity

[CyberSecCord @CyberSecCord]

As a beginner, prioritize building projects over certifications, and if you're a beginner in Nigeria, take that advice twice as seriously.
#cybersecuritytips #buildingsuccess

[CyberSecCord @CyberSecCord]

@mozypellyXP @mikemillercyber Thanks for this opinion @mozypellyXP I will always stan for prioritizing building your portfolio and networking with individuals over taking certifications💯
Always strive to show workings...