Get ready for Ethiopia CyberShield Showdown Week, featuring bootcamps, red-team exploits, incident response simulations, and a high-stakes Capture the Flag (CTF). Join us to learn, compete, and connect with a chance to win prizes, merch, and recognition.

📅 Event Details

🔹 Online Bootcamp: Sept 17 to 18 | 8:00 PM to 10:00 PM
🔹 In-Person CTF: Sept 19 to 21 | 9:00 AM to 5:00 PM
📍 Capstone, ALX Tech Lideta Hub, Lideta

🔗 Register now: https://luma.com/jyu7twze

#ALXEthiopia #CyberShieldShowdown #CTF2025 #Cybersecurity #ALXAfrica #dohardthings #lifeatalx #yekolotemari

💡 Same-Origin Policy (SOP)
It prevents one website from reading/writing data to another site unless protocol, host, and port all match.
🔒 But what about attacks like XSS?
Cross-Site Scripting (XSS) is a web vulnerability where attackers inject malicious noscripts into trusted websites to run in the victim’s browser.
⚡ Types of XSS:
Stored XSS → Malicious noscript is permanently saved on the target server (e.g., in a database, comment section).
Reflected XSS → Script comes from a crafted link or request and reflects back in the response.
DOM-based XSS → The attack happens fully on the client side due to unsafe JavaScript handling in the DOM.
👉 In short: XSS abuses the trust a site has with your browser.

Samsung fixes critical zero-day CVE-2025-21043 exploited in android attacks and it releases security update for these phones https://security.samsungmobile.com/workScope.smsb

Have u ever wondered why college degree is called "bachelor's degree"?

Just linux things😁

🔰 Famous Platforms to practice Pentesting 🔰

tryhackme
https://tryhackme.com

bWAPP
http://itsecgames.com

flAWS Cloud
http://flaws.cloud

Hack Yourself First
http://hackyourselffirst.troyhunt.com

OWASP Juice Shop
http://juice-shop.herokuapp.com

Google Gruyere
https://google-gruyere.appspot.com

Hack Me
https://hack.me

HackTheBox
https://hackthebox.eu

Root-Me
https://root-me.org

XSS Game
https://xss-game.appspot.com

Pentesterlab
https://pentesterlab.com

OverTheWire
https://overthewire.org/wargames/

Hacking Lab
https://hacking-lab.com/index.html

IO
http://io.netgarage.org

smashthestack
http://smashthestack.org

microcorruption
https://microcorruption.com/login

ExploitMe Mobile
http://securitycompass.github.io/AndroidLabs/index.html

Hax.Tor
http://hax.tor.hu/welcome/

Java Vulnerable Lab
https://github.com/CSPF-Founder/JavaVulnerableLab

Pwnos
http://pwnos.com

Ringzero
https://ringzer0team.com/challenges

Avatao
https://avatao.com

GameOver
https://sourceforge.net/projects/null-gameover/

HSCTF3
http://hsctf.com

#ThreatX
#ThreatXSecurity

I like this😁
Hacker level 0

🚨 Chrome users: a new zero-day is under active attack.

CVE-2025-10585 targets Chrome’s V8 engine—Chrome’s 6th zero-day of 2025.

Details → https://thehackernews.com/2025/09/google-patches-chrome-zero-day-cve-2025.html

⚡ Update now: 140.0.7339.185/.186 (Win/macOS), 140.0.7339.185 (Linux).

If you use Edge/Brave/Opera/Vivaldi, patch too.

Continued 😁
Hacker level 1

just wanted to rehearse the basics and i feel i didn't do enough labs there so ....yeah i'm not here for shortcut just building strong foundations will share the labs and some reports 😊
not to end up being a noscript kiddie😁

🫩

https://www.instagram.com/reel/DO8oaMaEeqt/?igsh=MTBjZ2w0c2o4Ymtqbw==
We got AI gaslighting before GTA6

True😭 JS

Search history😁