Robinson ‘Legit’ Uche 𝕏

Building @ExploitForgeLTD. Cybersecurity • Governance. Charged by belief: if I seek, I find. How can I lose when I started with nothing?

[Robinson ‘Legit’ Uche 𝕏 @He_is_Legit]

Don’t choose lifeless order or destructive freedom. Choose a path that blends strength and soul, built with care, filled with meaning. Tweets like these aren’t just meant to be read, they’re meant to unfold in your mind over time.

[Mr. Possible @Mrpossidez]

Do not abandon structure for soul, nor soul for structure. Demand both. An intellect with character, a sharp mind that embodies the felt quality of life. Many people build rigid cages with structure, or dissolve into chaos with too much soul. Aim to build a cathedral.

[Instablog9ja @instablog9ja]

“There was a time in some churches when watching television was an abomination, but now it’s accepted. Those who also said they don’t take blood transfusion now also take it. If it can change, it was never the truth” — Apostle Femi Lazarus

[Exploit-Forge @ExploitforgeLTD]

Penetration testing and threat modelling are not the same thing.
A pen test validates what exists. A threat model defines whether you're testing the right things in the first place.

#pentest #cybersecurity

[Robinson ‘Legit’ Uche 𝕏 @He_is_Legit]

I pray you get something soon enough. All these would be stories one day. Glad you are documenting your journey publicly.

[Damilola Ashiedu | Pretty Cyber Girl 💻💡 @prettycyb3rgirl]

I finally got a rejection email from moniepoint for their women in tech program after the assessment phase.

I am not sad at all but then again that assessment I prepared like kilode, because I understand how gorilla tests can be

I was on leetcode and hacker rank solving everything I knew would help me for the coding part and I am sure I answered it very well during the assessment.

I am pretty decent at maths, so I’m sure I did not do bad in that section.

Even the critical assessment, my weakest point, days before I was trying to understand the logic of solving those types of questions and I think I got it but did not have enough time.

The reading section, I have been preparing for those type of questions since secondary school literally 😅 SAT’s, Toefl, GRE prep etc, so I don’t know where I must have gone wrong during the assessment.

The video interviews, I am sure I answered everything well, because I had an interview before then that asked me the same thing, so I obviously prepared better and had good answers.

But such is life, I am very used to rejection emails and I am glad they sent it so I can have closure 😂

If you got to the next stage, I am rooting for you❤️

[Damilola Ashiedu | Pretty Cyber Girl 💻💡 @prettycyb3rgirl]

I finally got a rejection email from moniepoint for their women in tech program after the assessment phase.

I am not sad at all but then again that assessment I prepared like kilode, because I understand how gorilla tests can be

I was on leetcode and hacker rank solving everything I knew would help me for the coding part and I am sure I answered it very well during the assessment.

I am pretty decent at maths, so I’m sure I did not do bad in that section.

Even the critical assessment, my weakest point, days before I was trying to understand the logic of solving those types of questions and I think I got it but did not have enough time.

The reading section, I have been preparing for those type of questions since secondary school literally 😅 SAT’s, Toefl, GRE prep etc, so I don’t know where I must have gone wrong during the assessment.

The video interviews, I am sure I answered everything well, because I had an interview before then that asked me the same thing, so I obviously prepared better and had good answers.

But such is life, I am very used to rejection emails and I am glad they sent it so I can have closure 😂

If you got to the next stage, I am rooting for you❤️

[Exploit-Forge @ExploitforgeLTD]

Balance restored.

#security

[Exploit-Forge @ExploitforgeLTD]

Most organisations still imagine cyberattacks as loud, obvious events.
Modern breaches are rarely that simple.

#cybersecurityawareness #zerotrust

[Exploit-Forge @ExploitforgeLTD]

Prevention is always cheaper than recovery. Always. No exceptions.
Yet here we are, organizations consistently choosing the 500k lesson over the 50k conversation.
Spend now to find the problem. Or spend later when the attacker already did.
Both are a choice.

[Exploit-Forge @ExploitforgeLTD]

We'll make four bets about your Active Directory.
A service account no one currently working there remembers creating. At least one user with Domain Admin privileges and a password last set in 2021 or earlier. A delegation rule that was "temporary" two restructures ago. A nested group that grants more privilege than any single person on it would think to request directly.

#CyberSecurity #activedirectory

[Exploit-Forge @ExploitforgeLTD]

GitHub got hacked.
Entry point? A VS Code extension.
~3,800 repos gone.
Touch grass and audit your developer tools. 😭

Read more below👇:
#CyberSecurity #GitHub

[Exploit-Forge @ExploitforgeLTD]

AN UNPOPULAR OPINION ABOUT AFRICAN CYBERSECURITY.
The African cybersecurity industry is over-indexed on certifications and under-indexed on adversarial testing. 

#cybersecurity #infosec

[Exploit-Forge @ExploitforgeLTD]

Security theatre is more common than most organisations realise.
It looks like security. It gets reported as security. It satisfies the questions leadership asks in quarterly reviews. And it leaves real gaps that real attackers walk through without effort.

#CyberSecurity #Infosec

[Exploit-Forge @ExploitforgeLTD]

“We're on the internal network" used to mean something.
It doesn't anymore.
Zero Trust is built on a simple principle: trust nothing by default. Not the user. Not the device. Not the network segment. Every access request is verified regardless of where it originates.

#zerotrust #cybersecurity

[Robinson ‘Legit’ Uche 𝕏 @He_is_Legit]

@akintunero @0xCocofelon @commando_skiipz @adesh1624 😂😂

[Ghost St Badmus @commando_skiipz]

DAY 1 AS THE HUSBAND TO THE MOST BEAUTIFUL WOMAN IN THE WORLD.

[Exploit-Forge @ExploitforgeLTD]

We don't lead with a network diagram. We lead with a conversation about your business…what you actually protect, what 'a bad day' looks like for you, who you think might want to compromise you and why. That conversation is what shapes everything downstream. If a security firm proposes a fixed scope before they've understood your business, that's a sign you're buying a template, not a tailored engagement. Both exist in the market. They're priced similarly. They produce very different outcomes. If you've been on the buying side of a security engagement and felt like something was off; drop the situation in the comments. We'll tell you what we'd push back on.

#cybersecurity

[Exploit-Forge @ExploitforgeLTD]

We get asked fairly often what it's actually like to start working with us. The honest answer is that the most important part of the engagement happens before any signature.

#securityawareness #securityengagement

[Robinson ‘Legit’ Uche 𝕏 @He_is_Legit]

@Omotafede Another angle. Better to try first

[Robinson ‘Legit’ Uche 𝕏 @He_is_Legit]

If you check my LinkedIn, I have been preaching this. In as much as global license will be a tough one but it’s good Ghana has taken the bold step. I hope the right body in Nigeria is formed for this. This has been of concern to me and seeing some people practice it feels good.

[Nana Sei Anyemedu @RedHatPentester]

Yes bro, the @CSAGhana wants the cybersecurity profession to be regulated similarly to fields like medicine. According to the Act, practicing without a license could lead to legal enforcement, and companies that employ unlicensed practitioners may also face sanctions.

I’ll strongly encourage you to do your best to get licensed. Once you meet their requirements and you have the skills for backing, obtaining the license becomes straightforward. Being licensed shows that you meet the professional standards and you have the skills expected within the industry.

[Robinson ‘Legit’ Uche 𝕏 @He_is_Legit]

@prettycyb3rgirl @RedHatPentester But they are not.

[Robinson ‘Legit’ Uche 𝕏 @He_is_Legit]

I deeply need this in Nigeria. It will help sanitize our community.

[Elorm Daniel @elormkdaniel]

@He_is_Legit Yes 😂
Without a license from the Ghana Government, you can’t practice.

[Robinson ‘Legit’ Uche 𝕏 @He_is_Legit]

@Bigsam_tj @RedHatPentester I hope it gets addressed. If you don’t mind, I’d love to read and collaborate with you on this struggle.