McSam (@theMcSam) header
McSam (@theMcSam) profile picture

computerphile

core
Joined April 2020
Photo by McSam (@theMcSam)Photo by McSam (@theMcSam)Photo by McSam (@theMcSam)Photo by McSam (@theMcSam)Photo by McSam (@theMcSam)Photo by McSam (@theMcSam)Photo by McSam (@theMcSam)Photo by McSam (@theMcSam)Photo by McSam (@theMcSam)Photo by McSam (@theMcSam)
McSam retweeted
🚨 GIVEAWAY TIME 🚨 I’m giving away 1× lifetime access to the Pwned Labs Kubernetes Attack & Defense Bootcamp (KRTP)! Get hands-on with Kubernetes security from local k8s to EKS, GKE, and AKS. Plus the KRTP certification exam path. To enter: Like this post ❤️ Repost 🔁 Tag 1 friend who should learn Kubernetes attack & defense 👇 🔗 pwnedlabs.io/bootcamps/krtp-… The winner will be picked at random. Good luck! 🚀
82
95
176
8,158
It started as an idea, now it’s a platform that creates opportunities for young Ghanaians to become the nation’s digital defenders. #brCTF2025 #OsagyefoEdition #DigitalSovereignty #CaptureTheFlagGH #NSCAM2025
11
19
461
Join our 2-day Adversarial Tradecraft & Detection training; hands-on tactics, real-world defence. 📅 23rd–25th Oct | 📍Kobi’s Event Center, Accra 💰 GHC 1,900 🔗 Register: breakthecodectf.com/adversar… #brCTF2025 #OsagyefoEdition #DigitalSovereignty #CaptureTheFlagGH #NSCAM2025
4
6
286
The codes are cracking. The teams are ready. The flag awaits. 🚩 Be there for #brCTF2025 – The Finals! 📍Venue: Kobis Event Centre 🗓️Date: 24th–25th October Don’t miss Ghana’s biggest cybersecurity showdown #brCTF2025 #OsagyefoEdition #DigitalSovereignty #CaptureTheFlagGH
1
7
17
455
The long awaited is finally here‼️ The brCTF Osagyefo Edition Qualifiers kicks off today Start: 10AM today End: Sunday, 11:59PM #brCTF2025 #OsagyefoEdition #DigitalSovereignty #CaptureTheFlagGH #NSCAM2025 👉 Sign up now: brctf.africa
10
1
19
417
🧑‍💻🔎From Logs to Insights: Bridging the Gap between AI and Security Operations ⭐️ Security teams often spend hours digging through alerts, logs, and vulnerabilities. What if you could just ask a question in plain English and get the answer instantly? I’ve built an AI agent that connects directly to Wazuh SIEM using the Model Context Protocol (MCP). This means you can chat with your security data in real time: “Show me critical vulnerabilities on web servers.” “Which agents are offline?” “Are we meeting PCI-DSS requirements?” Instead of running complex queries, you get clear, actionable answers—fast. The goal is simple: democratize AI for SOC teams, threat hunting, and SecOps. No more barriers between your data and your decisions. I believe this is a step towards making AI a real partner in everyday security operations. Would you add this to your SOC? #CyberSecurity #AI #SIEM #SecOps #ThreatHunting #Wazuh #SecurityOperations #SOC #InfoSec #ArtificialIntelligence #MCP #SecurityAutomation #CyberDefense #DemocratizingAI #NextGenSOC
1
3
1
8
789
To celebrate our badge launch, we're giving away FIVE free 6-month licenses to @pentesterlab. ✅ Comment BADGELIFE and retweet this post to enter. Additionally, pre-order a custom badge at shop.bugbountydefcon.com for a chance to win one of FIVE Annual VIP+ subscription to @hackthebox_eu. Purchasing a badge helps us run and fund the village. That's a total of TEN WINNERS! Winners will be picked on August 1st. Good luck! Note: Badges are pre-order only. Order online, pick up in village. No shipping. #BadgeLife #DEFCON33 #BugBounty
310
261
13
317
55,686
Hackers, this Saturday is the day — mark your calendars!
📢 BYTE TIME SESSIONS: BINARY EXPLOITATION WEBINAR 🎯 Topic: Bending the Bytes of Software — Basics of Binary Exploitation In the world of hacking, understanding software at the binary level is essential. (1/5)
2
2
119
📢 BYTE TIME SESSIONS: BINARY EXPLOITATION WEBINAR 🎯 Topic: Bending the Bytes of Software — Basics of Binary Exploitation In the world of hacking, understanding software at the binary level is essential. (1/5)
1
3
1
5
437
RCE in Gogs (CVE-2024-39930) CVE-2024-39930 is a Remote Code Execution vulnerability affecting the SSH server built into Gogs. While the Sonar's blog post explains the vulnerability well, no working exploit or guide to exploiting this vulnerability had been made public. (1/4)
2
1
6
334
I've documented the full process, including technical insights and a step-by-step breakdown, on my blog: themcsam.github.io/posts/gog… The PoC exploit code is available here: github.com/theMcSam/CVE-2024… (3/4)
1
2
156
To help others test the vulnerability in a controlled environment, I’ve included a setup script for Gogs: github.com/theMcSam/CVE-2024… I hope it helps others better understand and validate this issue. (4/4)
1
127
Hello Byte Time Ninjas! @everyone Remember our promise to host monthly knowledge-packed sessions? Well, it's that time again! This Saturday at 6 PM, we’re diving into the Basics of SIEM (Security Information and Event Management). (1/3)
1
2
6
147
Yo, hacker crew! 🚀 Join our X Space as the hackmaster 🥷 @ens_nii drops 7 years of epic hacking & defending secrets. 🧠 Bring your questions—this is unmissable! Let’s spark a wild discussion! 🔥💬 xitter.cf/i/spaces/1mnGegekBkZxX

8
15
674
🎉 GIVEAWAY ALERT! 🎉 From InfoSec Pat and a special thanks to , The Hack The Box Cyber Apocalypse CTF is live and in full swing 🟢 I hope you are all loving it. I am enjoying all the fun challenges. To celebrate this awesome event, I’m giving away an AWESOME swag voucher 🎟️ – because what's better than hacking and free gear? How to enter: Simply FOLLOW ME, LIKE and RESHARE this post and why you should win – that’s it! Good luck, and may the flags be ever in your favor! 🏴‍☠️👾 #hackthebox #HTB #Hacking #Hackers #cyber #cyberapocalypse
1
6
1
13
1,032
McSam retweeted
CVE-2024-57170 SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichier_to_delete" parameter allows authenticated attackers to specify fi… cve.org/CVERecord?id=CVE-202…
1
1
477
McSam retweeted
CVE-2024-57169 A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php. This vulnerability allows remote attackers to bypass upload rest… cve.org/CVERecord?id=CVE-202…
1
1
442
We played in the Snyk Fetch The Flag CTF 2025, hosted by @_JohnHammond and @snyksec, and we put up an impressive fight! Massive shoutout to my incredible teammates @markuche1337, @TroyLynx, and @QuophiZiv—y’all were skillful and unstoppable! #Pwn #FetchTheFlag
2
3
1
13
992
Move in silence.
3
1
2
465