mertangy

CyberSecurity | Information security| Data privacy |

[mertangy @ericmagesho]

Check out my first article on https://t.co/byDhs8w1WW
https://t.co/AWRZZnYcad

[mertangy @ericmagesho]

Another day ,another opportunity to give thanks to God for His Grace.

[mertangy @ericmagesho]

@TransunionK must be the most unfriendly service ever!!! Service is pathetic.Very disappointed.

[Marc Menninger @MarcMenninger]

🔥 Top 7 Nmap Hacks Every Cybersecurity Pro Should Know

Nmap isn’t just a port scanner - it’s a powerful recon tool that can uncover vulnerabilities, detect firewalls, and even evade security defenses.

Here are 7 Nmap hacks to level up your security game. 🧵

[Moe @moneyacademyKE]

The number of Kenyan workers earning Sh50,000 to Sh100,000 monthly increased by 62,778 to 1,426,245 last year, according to KNBS.

Of the new 62,778 workers, 4,609 were men and 58,171 were women

[mertangy @ericmagesho]

LinkedIn hit with $335 million fine for using member data for ad targeting without consent https://t.co/Lj8T2iTMON

[mertangy @ericmagesho]

Cyber Risks Threaten Innovation in Kenya’s Banking Space https://t.co/mU327QzRTi via @kenyanwalstreet

[Harshleen @0xharshleen]

OSINT Tools Collections📝

OSRFramework: https://t.co/O6TzrZlIRK

OSINTLeaks: https://t.co/uTWvggIdUd

OSINT Tool: https://t.co/KA3hdmrl6r

Maltego: https://t.co/goFUXoAfkq

SpiderFoot: https://t.co/YR8vtqDjqh

FOFA: https://t.co/dJt9WuK4MC

Intelx: https://t.co/DjdPqlgu1L

Awesome Offensive OSINT Tools: https://t.co/ubwYf7r5PI

Awesome OSINT: https://t.co/G47sruOUjE

HermitPurple Transform Maltego: https://t.co/mHQ8Q7zq82

SpiderSuite: https://t.co/K58Oj0sVLD

OSINT Framework: https://t.co/osXdnBjuJC

TraceLabs OSINT VM: https://t.co/H2MactPxUX

FBI Tools: https://t.co/w75pIM1sNA

Mantis: https://t.co/wrIF2cNkoT

Telegram Explorer: https://t.co/lupvAPTZKt

Leak Peek: https://t.co/MTA0ctXYBe

Ahmia: https://t.co/0qhtjEXpwR

CRT: https://t.co/5d7RMGJjXD

Web-check: https://t.co/htgJin8ilU

Shodan: https://t.co/96GS6E6W4D

Censys: https://t.co/notv3pp5cM

Scam Alert: https://t.co/ff5uItrTqq

Chain Abuse: https://t.co/ZxpHQDK70o

Pulsedive: https://t.co/TFjxvggW1E

Sherlock: https://t.co/YNlK008SUM

https://t.co/Zigwja3G7W: https://t.co/H522d18DvQ

Axiom: https://t.co/gx4n2imc0j

DorkGPT: https://t.co/Jqxfn7pm6y

reference: LinkedIn

[Harshleen @0xharshleen]

New Free Practice Exams | CEHv12 . CCSP ☁️. SSCP
Certified Ethical Hacker (CEHv12) 🛡️: Over 1,000 unique questions structured in 8 practice exams fully simulated and timed to put you under actual exam conditions.

- CEHv12 Practice Exam 1: https://t.co/CX4yhV7q9l
- CEHv12 Practice Exam 2: https://t.co/bGaRpC73Cc
- CEHv12 Practice Exam 3: https://t.co/LdrfAN6oNP
- CEHv12 Practice Exam 4: https://t.co/KRlFkBSoxl
- CEHv12 Practice Exam 5: https://t.co/H9tTNFGCzI
- CEHv12 Practice Exam 6: https://t.co/ISL40CNz7G
- CEHv12 Practice Exam 7: https://t.co/zCnhKwVAWv
- CEHv12 Practice Exam 8: https://t.co/KEsLh6dMxM

- ISC2 CCSP Practice Exam 1: https://t.co/cLz1VR4yy6
- ISC2 CCSP Practice Exam 2: https://t.co/Dt4CvDuw4L
- ISC2 CCSP Practice Exam 3: https://t.co/M90leqU35s
- ISC2 CCSP Practice Exam 4: https://t.co/ktWCZVOfIN
- ISC2 CCSP Practice Exam 5: https://t.co/Xnp1lGrbiR
- ISC2 CCSP Practice Exam 6: https://t.co/EFC1fH6OVh
- ISC2 CCSP Practice Exam 7: https://t.co/1XABmk9pAC
- ISC2 CCSP Practice Exam 8: https://t.co/oXP0P8uuRn

- SSCP Practice Exam 1: https://t.co/xOEo0m1pa4
- SSCP Practice Exam 2: https://t.co/BPcHfjxsIS
- SSCP Practice Exam 3: https://t.co/hZHXplPl29
- SSCP Practice Exam 4: https://t.co/io5gK7VxIK
- SSCP Practice Exam 5: https://t.co/hZzklO8fmQ
- SSCP Practice Exam 6: https://t.co/SXNgWpeyro
- SSCP Practice Exam 7: https://t.co/Ye7rzS3Rws
- SSCP Practice Exam 8: https://t.co/yQySGfLeNd

Other Practice Exams You Might Be Interested In:

- Security+ SY0-701: https://t.co/viiynM4WUI
- CISSP: https://t.co/g30OL1RtMk
- ISC2 CC: https://t.co/6wgA51J7AE
- CISM: https://t.co/fllBoS1w1e
- CISA: https://t.co/d100zzeb32
- AWS CLF-C02: https://t.co/f9mK4ZgKEf
- Azure Fundamentals (AZ-900): https://t.co/kMOBJABoNk
- CYSA+: https://t.co/F95Qsq5ysl
- CCNA: https://t.co/vimdyrqDGp
- A+: https://t.co/8FY7WHmqdk

credit-https://t.co/g9jq5nrj7m

[Harshleen @0xharshleen]

Defensive Security tool list

[Harshleen @0xharshleen]

Sites for CTF practice and Latest CVEs💻❗️

Bandit - Aimed at absolute beginners and teaches the basics of remote server access.
https://t.co/BjS4x869dH

Natas - Teaches the basics of serverside web-security.
https://t.co/K7iMbWgIKU

Post Exploitation Basics - Learn the basics of post-exploitation and maintaining access with mimikatz, bloodhound, powerview and msfvenom.
https://t.co/aS4RjS1t7W

Smag Grotto - An obsecure boot to root machine.
https://t.co/zHTZJq927P

Dogcat - I made a website where you can look at pictures of dogs and/or cats! Exploit a PHP application via LFI and break out of a docker container.
https://t.co/cMEhtDQCBN

Buffer Overflow Prep - Practice stack-based buffer overflows.
https://t.co/EOZK8VCDSB

Break out the cage - Help Cage bring back his acting career and investigate the nefarious going on of his agent.
https://t.co/BB0k6cfnHI

Lian Yu - A beginner-level security challenge.
Insecure Kubernetes - Exploiting Kubernetes by leveraging a Grafana LFI vulnerability.
https://t.co/hqpShiZhwq

The Great Escape (docker) - Escaping docker container.
https://t.co/ghNGlJbUuO

Solr Exploiting Log4j - Explore CVE-2021-44228, a vulnerability in log4j affecting almost all software under the sun.
https://t.co/oHHSwUh7QP

Spring4Shell - Interactive lab for exploiting Spring4Shell (CVE-2022-22965) in the Java Spring Framework.
https://t.co/8GlFTMqwMd

Most Recent threats - Learn about the latest industry threats. Get hands-on experience identifying, exploiting, and mitigating critical vulnerabilities.
https://t.co/YNlSMGiFPg

[Harshleen @0xharshleen]

Beginner roadmap for Red Team🎯❤️

📍Networking Fundamentals
├── TCP/IP Model
│ ├── Layers
│ ├── Protocols
│ └── Data Flow
├── Subnet Masking
│ ├── Network Addresses
│ ├── Subnet Masks
│ └── Broadcast Addresses
├── IP Routing
│ ├── Routing Protocols
│ │ ├── RIP
│ │ ├── OSPF
│ │ └── BGP
│ └── Packet Forwarding
└── Network Devices
├── Routers
├── Switches
└── Firewalls

📍Operating Systems
├── Linux
│ ├── Command-Line Interface
│ ├── File Systems
│ ├── Processes
│ └── System Administration
├── Windows
│ ├── Registry
│ ├── File Systems
│ ├── Services
│ └── User Management
└── macOS
├── Architecture
└── Command-Line Tools

📍Programming
├── Python
│ ├── Data Structures and DBMS
│ ├── Control Flow
│ └── Libraries
│ ├── Scapy
│ └── BeautifulSoup
├── Bash
│ └── Shell Scripting
└── C/C++ (Optional)
└── Exploitation and Malware Development

📍Cybersecurity Basics
├── Threat Landscape
│ ├── Malware
│ ├── Phishing
│ └── DDoS
├── Vulnerability Types
│ ├── SQL Injection
│ ├── XSS
│ └── Buffer Overflows
└── Security Controls
├── Firewalls
├── Intrusion Detection Systems
└── Antivirus

📍Information Gathering
├── OSINT (Open-Source Intelligence)
│ ├── Techniques
│ │ ├── Search Engines (Google Dorking)
│ │ ├── Social Media (Facebook, Twitter, LinkedIn)
│ │ ├── WHOIS Lookups
│ │ ├── Public Records (Domain Registrations, SSL Certificates)
│ │ └── Data Breaches (Have I Been Pwned, Breach Compilation Sites)
│ ├── Tools
│ │ ├── Maltego
│ │ ├── Recon-ng
│ │ ├── theHarvester
│ │ └── SpiderFoot
│ └── Gathering Information
│ ├── Identifying Domain Names
│ ├── Collecting Email Addresses
│ ├── Mapping Company Infrastructure
│ └── Gathering Employee Information
├── Footprinting
│ ├── Network Footprinting
│ │ ├── Identifying Network Blocks
│ │ ├── Mapping Network Topology
│ │ └── Discovering Active Hosts
│ ├── Website Footprinting
│ │ ├── Identifying Web Server Technology
│ │ ├── Mapping Web Application Structure
│ │ └── Gathering Information from HTTP Headers
│ ├── DNS Footprinting
│ │ ├── DNS Zone Transfers
│ │ ├── Enumerating DNS Records (A, MX, TXT, CNAME)
│ │ └── Reverse DNS Lookups
│ └── Tools
│ ├── Nmap
│ ├── Dig
│ ├── Netcat
│ └── Shodan
└── Scanning
├── Nmap (Network Mapper)
│ ├── Port Scanning
│ │ ├── TCP SYN Scan
│ │ ├── UDP Scan
│ │ └── Service Version Detection
│ ├── OS Detection
│ ├── Network Mapping
│ │ ├── Host Discovery
│ │ ├── Traceroute
│ │ └── Network Topology Mapping
│ └── Scriptable Scanning
│ ├── NSE Scripts (Nmap Scripting Engine)
│ └── Custom Scripts
└── Nessus
├── Vulnerability Scanning
│ ├── Configuration Checks
│ ├── Network Vulnerability Scanning
│ └── Web Application Scanning
├── Plugin Management
│ ├── Using Built-In Plugins
│ └── Custom Plugin Development
├── Report Generation
│ ├── Customizing Reports
│ ├── Severity Assessment
│ └── Remediation Recommendations
└── Credentialed Scanning
├── Configuring Credentials
└── Enhanced Detection Capabilities

📍Vulnerability Assessment
├── Manual Testing
├── Vulnerability Scanners
└── Exploit Databases

📍Exploitation
├── Web Application Exploitation
│ ├── SQL Injection
│ ├── XSS
│ ├── CSRF
│ └── Remote Code Execution
├── Network Exploitation
│ ├── Buffer Overflows
│ └── Format String Vulnerabilities
└── Privilege Escalation

📍Post-Exploitation
├── Lateral Movement
├── Persistence
└── Data Exfiltration

📍Evasion
├── Antivirus Evasion
├── Intrusion Detection System Evasion
└── Network Forensics Evasion

📍Reporting
├── Effective Communication
├── Report Structure
└── Visualization

📍Practical Application
├── CTF (Capture The Flag) Participation
│ ├── Types of CTFs
│ │ ├── Jeopardy-Style
│ │ ├── Attack-Defense
│ │ └── Mixed
│ ├── Popular CTF Platforms
│ │ ├── Hack The Box CTF
│ │ ├── PicoCTF
│ │ ├── CTFtime (for finding and tracking CTF events)
│ │ └── Google Capture The Flag (Google CTF)
│ ├── Skills Developed
│ │ ├── Exploitation Techniques
│ │ ├── Reverse Engineering
│ │ ├── Forensics
│ │ ├── Cryptography
│ │ └── Web Application Security
│ └── Tips for Success
│ ├── Build a Team
│ ├── Review Previous Challenges
│ ├── Time Management
│ └── Document Solutions and Techniques
├── Lab Environment
│ ├── Setting Up a Lab
│ │ ├── Virtualization Software (VMware, VirtualBox)
│ │ ├── Creating Virtual Machines
│ │ ├── Networking Configuration (NAT, Host-Only, Bridged)
│ │ └── Snapshots and Backups
│ ├── Recommended Lab Setups
│ │ ├── Penetration Testing Lab
│ │ ├── Web Application Testing Environment
│ │ ├── Reverse Engineering Lab
│ │ └── Malware Analysis Sandbox
│ ├── Lab Tools
│ │ ├── Kali Linux
│ │ ├── Metasploit
│ │ ├── Burp Suite
│ │ ├── Wireshark
│ │ └── Custom Scripts and Tools
│ └── Security and Isolation
│ ├── Network Segmentation
│ ├── Host Isolation
│ └── Regular Updates and Patching
└── Online Resources
├── TryHackMe
│ ├── Learning Paths
│ │ ├── Offensive Security
│ │ ├── Defensive Security
│ │ └── Introduction to Cybersecurity
│ ├── Labs and Challenges
│ │ ├── Room-Based Challenges
│ │ ├── Skills-Based Labs
│ │ └── Weekly Challenges
│ ├── Community and Support
│ │ ├── Discussion Forums
│ │ ├── Discord Channels
│ │ └── Study Groups
│ └── Progress Tracking
│ ├── Achievements and Badges
│ └── Skill Assessments
├── Hack The Box
│ ├── Boxes and Machines
│ │ ├── Active Machines
│ │ ├── Retired Machines
│ │ └── Challenge Types (Easy, Medium, Hard)
│ ├── Labs and Endgames
│ │ ├── Hack The Box Labs
│ │ ├── Pro Labs
│ │ └── Capture The Flag Events
│ ├── Community and Resources
│ │ ├── Forums
│ │ ├── Write-Ups
│ │ └── Discord Community
│ └── Training and Progression
│ ├── User Rank System
│ └── Skills Development Tracking
└── VulnHub
├── Vulnerable Machines
│ ├── Beginner
│ ├── Intermediate
│ └── Advanced
├── Machine Downloads
│ ├── OVA/OVF Files
│ ├── VM Images
│ └── Instructions and Walkthroughs
├── Community Contributions
│ ├── User-Submitted Machines
│ ├── Walkthroughs
│ └── Reviews and Feedback
└── Setting Up and Usage
├── Importing VMs
├── Customization and Configuration
└── Network Configuration and Isolation

follow for more- @harshleenchawl2

[mertangy @ericmagesho]

@harshleenchawl2 @X hi

[Craig Rowland - Agentless Linux Security @CraigHRowland]

Many people know SSH is encrypted, but this doesn’t mean using a password with it is safe.

The encryption only protects a password in transit from an eavesdropper. It does not protect your password if the remote system is compromised. It can be saved off in cleartext.

[Nana Sei Anyemedu @RedHatPentester]

Loan Apps
I once performed forensics on a mobile device and a loan app on his phone had an exclusive permission.
Anytime you download a loan app, you give them access to your phone after you tick or agree to their the terms & conditions. This tells you that they’ll backdoor your phone and get access to your contacts. That’s how they reach your contacts and be sending your pictures to them if fail to repay the loan.
After disabling contact permission on your mobile device, online loan companies should no longer have access to your contacts. Disabling contact permission restricts the app's ability to access and use your contact list. However, it's important to note that any contacts that were previously stored in the loan company's database may still be retained by them.

[Dr Iretioluwa Akerele @ireteeh]

If you are unsure of the Cybersecurity career path you want to focus on, go to youtube and search for “A day in the life series”. E.g A day in the life of a GRC Specialist, Ethical Hacker, DevSecOps Engineer, Cloud Security specialist etc.

[mertangy @ericmagesho]

U.S. Justice Department Sues Apple Over Monopoly and Messaging Security https://t.co/DSu02U2Gf4 via @TheHackersNews
#CyberSecurityAwareness

[mertangy @ericmagesho]

@kcsfa C) something you are.

[Moe @moneyacademyKE]

Kenya is now planning to have a local US dollar bond to help finance budget.

[mertangy @ericmagesho]

Nmap - I have just completed this room! Check it out: https://t.co/mLI29OYCpw #tryhackme #beginner #nmap #scanning #furthernmap #tutorial #walkthrough #muirlandoracle #port-scanning #network-scanning #windows #SYNScan #Stealth #Xmas #Fin #Null #furthernmap via @tryhackme

[The Hacker News @TheHackersNews]

⚠️ Attention, Sysadmins! A newly discovered critical #vulnerability (CVE-2024-21410) in #Microsoft Exchange Server is currently being actively exploited.

Details here → https://t.co/5M0IxD6eTX

Attackers can hijack user accounts & gain admin-level control. Update ASAP!