Cybersecurity, cloud & everything in between ☁️
127.0.0.1 but root
- Tweets 7,071
- Following 488
- Followers 1,005
- Likes 104,985
Tory☁️ retweeted
messaging my wife a link containing proof of her husband cheating on her from an anonymous instagram account and then when she clicks on it texting her to let her know she failed the family phishing test and she has to retake my cybersecurity course
233
4,836
89,734
1,244,678
Tory☁️ retweeted
Congratulations Leo Messi for the 2026 Princess of Asturias Award for Sports.
Richly deserved recognition for your outstanding talent, which has left a lasting impact both on and off the pitch, making you a benchmark in world football due to your excellence, commitment to sport and solidarity.
A highly successful career during which FC Barcelona was a key part of your life and story. An inseparable bond that forms part of the Club’s legacy and for which your involvement will always be a source of pride.
📸 @fpa
771
11,850
80,340
708,295
Tory☁️ retweeted
Just started learning about ospf and tried doing a mini wan connection between lans , tho couldn't get it as good and detailed as online examples seen.
The .pkt lab is here for reviewing.
github.com/totdking/network-…
1
1
4
296
Tory☁️ retweeted
This is literally one of the first things you learn to do in steganography. Y’all should stop with this unnecessary fearmongering about Anthropic’s models.
9
10
75
3,928
Tory☁️ retweeted
maybe the point of cybersecurity was the friends we made along the way
19
222
1,586
27,744
Tory☁️ retweeted
Days 21-23/30:
I've been working on some side projects and also working on the phishing analysis section on tryhackme
@Niffeey007 @malik_cybersec @DefendWithFelix @KoredeSec @gabbytech01 @cyberjeremiah
#30DaysCybersecurityChallenge
Day 20/30:
I always knew about port scans that involve scanning multiple ports of a particular device (vertical scanning), but attackers can also scan one port using multiple ip addresses (horizontal scanning)
@DefendWithFelix @malik_cybersec
#30DaysCybersecurityChallenge
6
11
258
Tory☁️ retweeted
Day 81/100
Found and exploited SQL injection in InsecureBankv2’s exported content provider. Dumped the full database schema via adb, no login, no app, just a crafted --where clause.
Confirmed read access → boolean-based test → full UNION injection.
@commando_skiipz @ce3nerd
Day80/100
After getting a username and password yesterday i was able to change the person's username and the password was sent to my SMS in plaintext making any other app that has SMS priv can read it
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
1
3
22
614
Tory☁️ retweeted
Security Alert: PHP2Shell⚠️⚠️
The PHP Project has released fixes for two critical vulnerabilities — CVE-2026-109618 & CVE-2026-109619 — allowing unauthenticated remote code execution.
With nearly all PHP versions since 5.4 affected and public exploits in the wild, immediate patching is critical.
Update now. Don't make it easy for them.
#CybersecurityAwarenessMonth
37
91
199
39,367
Tory☁️ retweeted
I am asking again. What will it take for the Nigerian government to mandate that its agencies have dedicated, in-house Cybersecurity professionals? And is there a way to ensure that these positions are openly advertised and accessible to qualified, competent professionals through a transparent, merit-based recruitment process?
15
41
177
8,856
Tory☁️ retweeted
Week 1 at DG Interns Hub: completed✅
I built a cybersecurity home lab from scratch.
Lab: VirtualBox with Kali Linux (2GB), Ubuntu (2GB) and Windows (4GB), all on one isolated custom Host-only network. I confirmed they could reach each other (using ping) and took a clean snapshot of each.
Linux: I created users and groups, built a shared folder with the right permissions, used find, grep, ps and ss, and scheduled a cron job.
OverTheWire Bandit: levels 0 to 10 completed.
TryHackMe: 8 rooms on Linux, networking and the Pyramid of Pain.
Lessons Learned:
- A vulnerable lab should never be bridged to your real network. Isolation keeps mistakes contained.
- Snapshots make sure you can rollback if something breaks.
- Permissions are like security lock. One wrong `chmod` can expose or lock out a whole folder.
- Small tools combined (grep, sort, uniq) are surprisingly powerful.
Full Documentation on my GitHub: github.com/chukwupg/dg-inter…
Week 2, up next!
#cybersecurity #homelab #Linux #networking #TryHackMe #OverTheWire #DGInternsHub #LearningInPublic
SOC analyst vs penetration tester: what is the difference?
I'm on Week 1 of the DG Interns Hub cybersecurity internship, and one of the first things I wanted to get clear was how these two roles differ. In 5 points:
Goal: A SOC analyst detects and responds to attacks as they happen. A penetration tester finds weaknesses before attackers do.
Team:
- SOC analysts are the blue team (defensive).
- Penetration testers are the red team (offensive).
Daily work:
- SOC: watching alerts, investigating suspicious activity, escalating incidents.
- Pentest: scanning, testing, exploiting (with permission) and documenting what they find.
Tools:
- SOC: SIEM, SOAR, EDR, Wireshark.
- Pentest: Nmap, Burp Suite, Metasploit, Kali Linux.
Output:
- SOC: triaged alerts and better detection rules.
- Pentest: an actionable report with findings and recommended fixes.
Different jobs, same mission: make the organization harder to break.
Which side would you start with?
#cybersecurity #SOC #PenetrationTesting #BlueTeam #RedTeam #DGInternsHub #InfoSec
4
2
10
193
Tory☁️ retweeted
Today I graduated from the Women Techsters Fellowship, Class of 2026 (Cybersecurity)🎓🥳💃🏽
It's been months of learning, building & growing
Grateful to @Tech4DevHQ
One chapter completed. More growth ahead🚀
#WTFellowship26 #Tech4Dev #BeyondtheFellowship #Classof2026Graduation
25
12
109
1,765
Tory☁️ retweeted
Today’s PHP security risks got me thinking about how I could have been more vulnerable with you. Perhaps we can patch things up and be there 4 one another.
100
4,334
33,950
519,137
Threat actors are working overtime. Three days of chasing campaigns, watching domains rotate, and trying to get ahead of the next victim. 👇
A bank sign-in clone jumped across 4 domains in 5 days. I reported each one as it appeared. Three hosts pulled theirs, and I caught the fourth the same night it went live.
Fake copies of a telecom’s official sites went down 1h 28m, 1h 33m, 5h, and 10h after my reports.
A recurring brand scam? Its newest domain lasted just 2h 20m after my report.
Then came the worst one: an SMS telling a Nigerian bank’s customers to “verify your identity within 24 hours.” Someone reportedly lost money to this.
I traced it to one operation running 8 domains. All 8 reported. Two blocked within an hour. I also found a domain already prepared to impersonate a second bank and reported it to give an heads up.
So far, 172 reports since October 12.
The actors aren’t slowing down. Neither am I. : )
Follow-up: the brands are responding 👇
A fintech confirmed in writing that a lookalike domain I flagged isn't theirs. It had no website at all, just a full email setup built to pass the usual security checks, so emails from it would land looking legit. Reported to the registrar and the mail provider.
Another brand told me their IT team is on it and they've alerted their customers. That scam came back on a new domain, registered minutes before the old one was taken down. They had the replacement ready. Caught it anyway.
Meanwhile, from last night's reports:
the internet banking clone was taken offline ~6 hours after my report
the "rewards" page collecting bank details was blocked by its provider ~9 hours after
I’m also looking for cracked security engineers who want to contribute to making Nigeria’s digital space safer.
If you’re interested in doing some real work, shoot me a DM. : )
4
6
52
978
Claude Security now keeps up with your code as it changes.
Connect your repositories once. Claude runs a deep first scan, then re-scans as changes land, so findings stay close to the current state of your code.
In public beta on Claude Enterprise.
373
563
11,028
792,154
