CSEC_Cybersecurity

🔥 THE RIGHT PAYLOAD. THE RIGHT IMPACT! SHELLS & PAYLOADS Understand the shell. Craft the payload. Explore the attack! Every connection has a purpose. Every payload has a story. Are you ready to explore how they work? — Cyber Security Division #CSECASTU #CyberSecurity #ShellsAndPayloads #EthicalHacking #HappeningNow

🔥 WE’RE LIVE 💻 Using Tools Nmap and Metasploit Scan the network. Discover the vulnerabilities. Explore ethical hacking! — Cyber Security Division #CSECASTU #CyberSecurity #HappeningNow

🔥 Happening Now 🔥 Summer Bootcamp Week 12 HTTP Request Smuggling

🌐 Wrapping up the 3-month summer camp with the HTTP desync attack. It's been a long journey.

— Cyber Security Division By Ammar Sabit @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #desync #requestsmuggling #lastlecture #productivesummer #SummerBootcamp

🔥 Happening Now 🔥 Summer Bootcamp Week 11

Server Side Template Injection (SSTI)

🌐 Understanding how user input slips into a template engine and gets executed instead of just displayed, turning a simple {{7*7}} into a foothold that leads straight to remote code execution. — Cyber Security Division By Alazar Hailegabriel @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #SSTI #templateinjection #productivesummer #SummerBootcamp

🔥 Happening Now 🔥 Summer Bootcamp Week 10

Cross Site Request Forgery (CSRF)

🌐 Understanding how a browser's automatic trust in cookies gets weaponized, tricking a logged-in user into firing off requests they never intended, and turning one click on a malicious page into an action taken in their name. — Cyber Security Division By Hawi Taye @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #CSRF #clientside #productivesummer #SummerBootcamp

Ethiopian CyberShield is back, and the mission is bigger. Capture The Flag Cybersecurity Competition: Towards A Secure Digital Ethiopia. Hack. Hunt. Harden. CyberShield 2026 brings bootcamps, live red team operations and real incident response into one intensive week. •⁠ ⁠Bootcamps: September 14–16 •⁠ ⁠Harden Day: September 17 •⁠ ⁠Red Team: September 18–19 •⁠ ⁠Hunt/Incident Response: September 20 By SecureLabs IT Technologies, ALX Ethiopia, Yekolo Temari & Gundancore. 📅 September 17–20, 2026 ⏰ 8:00 AM–6:00 PM (ከ2 ሰዐት–12 ሰዐት) 📍 ALX Tech Hub, Lideta Save your spot: https://luma.com/xyi6bn2f Join the community: t.me/CyberShield2026 #ALXEthiopia #ALXAfrica #CybersecurityCompetition #CTF

🔥 Happening Now 🔥 Summer Bootcamp Week 9

Cross Site Scripting  (XSS)

🌐 Understanding the most exploited classic vulnerability which leads to full account take over — Cyber Security Division By Lina Temam @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #xss #ATO #clientside #productivesummer #SummerBootcamp

🔥 Happening Now 🔥 Summer Bootcamp Week 7

Server Side Request Forgery (SSRF)

🌐 Tricking a server into fetching a URL it shouldn't - internal systems, cloud metadata, or private services hidden behind the firewall. Turning the server's own trusted network position into a way past defenses meant to keep outsiders out. — Cyber Security Division By Keneni Asefa @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #SSRF #requestforgery #productivesummer #SummerBootcamp

🔥 Happening Now 🔥 Summer Bootcamp Week 6

Race Conditions

⚡ Sending multiple requests at the exact same moment, before the system finishes checking the first one. Exploiting that tiny timing gap to redeem a coupon twice, withdraw money twice, or slip past a check meant to only allow it once. — Cyber Security Division By Salahadin Sadik @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #week6 #racecondition #productivesummer #SummerBootcamp

🔥 Happening Now 🔥 Summer Bootcamp Week 5

File Upload Vulnerabilities

Bypassing extension filters. Faking content-types. Sneaking payloads past MIME checks. Understanding how missing validation, weak storage paths, and blind trust in file metadata turn a simple upload form into remote code execution. 📁 — Cyber Security Division By Sirajudin Seid @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #fileupload #webshell #productivesummer #SummerBootcamp

Researchers documented JadePuffer, what they believe is the first known “agentic ransomware”, which adapts in real time and retries steps to execute an end-to-end extortion operation Not a new kind of evil, exactly. Just the old kind with fewer coffee breaks.

🔥 Happening Now 🔥 Summer Bootcamp Week 4 Business Logic Flow & Broken Access Control

Bypassing checks. Manipulating workflows. Understanding how broken logic and weak boundaries become full account takeover. 🔓"

— Cyber Security Division By Lina Temam @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #accesscontrol #businessflow #apitesting #Infosec #SummerBootcamp

🏆 Another Proud Moment for CSEC_ASTU 🏆 Today, we proudly celebrate the outstanding achievements of our members at the ICCA CTF 2026.

🌟 Girum Senay, a CSEC graduate, secured 1st Place with exceptional cybersecurity skills 🌟 Yonas Sisay, a CSEC graduate, secured 2nd Place, continuing our tradition of excellence 🌟 Their results reflect dedication, hands-on experience, and the strength of our community

Your achievements inspire our entire community and reinforce CSEC ASTU's commitment to nurturing the next generation of cybersecurity professionals. 🎉 Congratulations, Girum Senay and Yonas Sisay! Your CSEC ASTU family is incredibly proud of you and wishes you even greater success ahead. @CSEC_ASTU #ICCACTF2026 #CyberSecurity #CaptureTheFlag #CSEC_ASTU #CyberExcellence #GirumSenay #YonasSisay

🔥 Happening Now 🔥 Summer Bootcamp Week 3 Path Traversals & Command Injection

Escaping directories. Executing commands. Understanding how trusted input becomes system compromise. ⚡

— Cyber Security Division By Beka Abebe @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #CMDI #PathTraversal #CyberSecurityTraining #Infosec #SummerBootcamp

we did it again🔥🔥1 st and 2 nd🔥🔥

What an incredible experience hosting the #ICCA #CTF #2026! We are proud to have brought together cybersecurity enthusiasts, students, and professionals to test their skills, learn from one another, and engage in hands-on cybersecurity challenges. Events like these play a vital role in strengthening our cybersecurity community and fostering the next generation of cyber talent. A heartfelt thank you to the ECySA (Ethiopian Cybersecurity Association) for their collaboration and support in making this event a success. We would also like to extend our sincere appreciation to #HackSmarter.org and Tyler Ramsbey for generously providing the CTF platform that enabled participants to enjoy a seamless and engaging competition experience. Most importantly, thank you to all participants for your enthusiasm, dedication, and competitive spirit. Your participation is what made this event truly worthwhile. We look forward to organizing more opportunities for learning, collaboration, and cybersecurity excellence.

🔥 Happening Now 🔥 Authentication Vulnerabilities Workshop

Securing access. Breaking assumptions. Understanding how authentication really fails. 🔐

— Cyber Security Division By Ammar Sabit @csec_cybersecurity @CSEC_ASTU #CSEC_ASTU #Cybersecurity #WebSecurity #Authentication #CyberSecurityTraining #Infosec #SummerBootcamp

✨ Eidul-Adha Mubarak✨ Wishing all Muslim families a blessed and peaceful Eidul Adha filled with faith, happiness, love, and countless blessings. 🌙

May this sacred occasion strengthen our hearts with gratitude, sacrifice, unity, and compassion. May Allah accept your prayers, sacrifices, and good deeds, and shower your lives with success, peace, and endless joy. 🕋

تقبل الله منا ومنكم صالح الأعمال 🤍 Eid Mubarak to everyone celebrating around the world! 🐐 👥 Join us: 🔗 LinkedIn 💬 Telegram ▶️ YouTube #CSECASTU #EidulAdha #EidMubarak #Blessings #Celebration #Community #Faith #HolidayJoy

🎉 Announcement: Top 10 performers of the CSEC ASTU Cybersecurity Division Entrance CTF 2026 🏆

Congratulations to the top performers of this year’s Entrance CTF competition who have been accepted into the CSEC ASTU Cybersecurity Division:

🥇 Aeon 🥈 cyberchef00 🥉 mrkal 4. ivar 5. z3r0d4y 6. Natnael Tariku 7. CoderLA 8. maramawit 9. yeab_12 10. salim mohammed

👏 A huge shoutout to all participants who took part in the Entrance CTF and showcased their cybersecurity and problem solving skills throughout the competition.

We are also excited to invite the Top 10 performers and all participants who received an official email to our Kickoff Program. 📅 Date: Friday, May 15th ⏰ Time: 2:30 PM LT (ማታ) 📍 Venue: 508, ROOM 10 All participants should check their email for important updates and further information. Stay tuned for more exciting workshops, CTFs, and cybersecurity activities ahead! 🔐 Join us: @csec_cybersecurity @CSEC_ASTU #CSEC #ASTU #Cybersecurity #CTF #EntranceCTF

CVE-2026-41940 (cPanel) exploited within 24h • 44,000 IPs linked to scanning/brute-force activity • Targets: Southeast Asia gov/military + MSPs • Enables auth bypass → full system control • Mirai variants and Sorry ransomware observed Read: https://thehackernews.com/2026/05/critical-cpanel-vulnerability.html