🚨 GIVEAWAY TIME 🚨
I’m giving away 1× lifetime access to the Pwned Labs Kubernetes Attack & Defense Bootcamp (KRTP)!
Get hands-on with Kubernetes security from local k8s to EKS, GKE, and AKS. Plus the KRTP certification exam path.
To enter:
Like this post ❤️
Repost 🔁
Tag 1 friend who should learn Kubernetes attack & defense 👇
🔗 pwnedlabs.io/bootcamps/krtp-…
The winner will be picked at random.
Good luck! 🚀
McSam retweeted
It started as an idea, now it’s a platform that creates opportunities for young Ghanaians to become the nation’s digital defenders.
#brCTF2025 #OsagyefoEdition #DigitalSovereignty #CaptureTheFlagGH #NSCAM2025
McSam retweeted
Join our 2-day Adversarial Tradecraft & Detection training; hands-on tactics, real-world defence.
📅 23rd–25th Oct | 📍Kobi’s Event Center, Accra
💰 GHC 1,900
🔗 Register: breakthecodectf.com/adversar…
#brCTF2025 #OsagyefoEdition #DigitalSovereignty #CaptureTheFlagGH #NSCAM2025
McSam retweeted
The codes are cracking.
The teams are ready.
The flag awaits. 🚩
Be there for #brCTF2025 – The Finals!
📍Venue: Kobis Event Centre
🗓️Date: 24th–25th October
Don’t miss Ghana’s biggest cybersecurity showdown
#brCTF2025 #OsagyefoEdition #DigitalSovereignty #CaptureTheFlagGH
McSam retweeted
The long awaited is finally here‼️
The brCTF Osagyefo Edition Qualifiers kicks off today
Start: 10AM today
End: Sunday, 11:59PM
#brCTF2025
#OsagyefoEdition
#DigitalSovereignty
#CaptureTheFlagGH
#NSCAM2025
👉 Sign up now: brctf.africa
McSam retweeted
🧑💻🔎From Logs to Insights: Bridging the Gap between AI and Security Operations ⭐️
Security teams often spend hours digging through alerts, logs, and vulnerabilities. What if you could just ask a question in plain English and get the answer instantly?
I’ve built an AI agent that connects directly to Wazuh SIEM using the Model Context Protocol (MCP). This means you can chat with your security data in real time:
“Show me critical vulnerabilities on web servers.”
“Which agents are offline?”
“Are we meeting PCI-DSS requirements?”
Instead of running complex queries, you get clear, actionable answers—fast.
The goal is simple: democratize AI for SOC teams, threat hunting, and SecOps.
No more barriers between your data and your decisions.
I believe this is a step towards making AI a real partner in everyday security operations.
Would you add this to your SOC?
#CyberSecurity #AI #SIEM #SecOps #ThreatHunting #Wazuh #SecurityOperations #SOC #InfoSec #ArtificialIntelligence #MCP #SecurityAutomation #CyberDefense #DemocratizingAI #NextGenSOC
McSam retweeted
To celebrate our badge launch, we're giving away FIVE free 6-month licenses to @pentesterlab.
✅ Comment BADGELIFE and retweet this post to enter.
Additionally, pre-order a custom badge at shop.bugbountydefcon.com for a chance to win one of FIVE Annual VIP+ subscription to @hackthebox_eu. Purchasing a badge helps us run and fund the village.
That's a total of TEN WINNERS! Winners will be picked on August 1st. Good luck!
Note: Badges are pre-order only. Order online, pick up in village. No shipping. #BadgeLife #DEFCON33 #BugBounty
McSam retweeted
📢 BYTE TIME SESSIONS: BINARY EXPLOITATION WEBINAR
🎯 Topic: Bending the Bytes of Software — Basics of Binary Exploitation
In the world of hacking, understanding software at the binary level is essential.
(1/5)
RCE in Gogs (CVE-2024-39930)
CVE-2024-39930 is a Remote Code Execution vulnerability affecting the SSH server built into Gogs. While the Sonar's blog post explains the vulnerability well, no working exploit or guide to exploiting this vulnerability had been made public.
(1/4)
I've documented the full process, including technical insights and a step-by-step breakdown, on my blog: themcsam.github.io/posts/gog…
The PoC exploit code is available here: github.com/theMcSam/CVE-2024…
(3/4)
To help others test the vulnerability in a controlled environment, I’ve included a setup script for Gogs: github.com/theMcSam/CVE-2024…
I hope it helps others better understand and validate this issue.
(4/4)
McSam retweeted
Hello Byte Time Ninjas! @everyone
Remember our promise to host monthly knowledge-packed sessions? Well, it's that time again!
This Saturday at 6 PM, we’re diving into the Basics of SIEM (Security Information and Event Management).
(1/3)
McSam retweeted
Yo, hacker crew! 🚀 Join our X Space as the hackmaster 🥷 @ens_nii drops 7 years of epic hacking & defending secrets. 🧠 Bring your questions—this is unmissable! Let’s spark a wild discussion! 🔥💬
xitter.cf/i/spaces/1mnGegekBkZxX
McSam retweeted
🎉 GIVEAWAY ALERT! 🎉 From InfoSec Pat and a special thanks to ,
The Hack The Box Cyber Apocalypse CTF is live and in full swing 🟢 I hope you are all loving it. I am enjoying all the fun challenges.
To celebrate this awesome event, I’m giving away an AWESOME swag voucher 🎟️ – because what's better than hacking and free gear?
How to enter:
Simply FOLLOW ME, LIKE and RESHARE this post and why you should win – that’s it!
Good luck, and may the flags be ever in your favor! 🏴☠️👾
#hackthebox #HTB #Hacking #Hackers #cyber #cyberapocalypse
McSam retweeted
CVE-2024-57170 SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichier_to_delete" parameter allows authenticated attackers to specify fi… cve.org/CVERecord?id=CVE-202…
McSam retweeted
CVE-2024-57169 A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php. This vulnerability allows remote attackers to bypass upload rest… cve.org/CVERecord?id=CVE-202…
We played in the Snyk Fetch The Flag CTF 2025, hosted by @_JohnHammond and @snyksec, and we put up an impressive fight!
Massive shoutout to my incredible teammates @markuche1337, @TroyLynx, and @QuophiZiv—y’all were skillful and unstoppable!
#Pwn #FetchTheFlag


















