Buna Byte
1.2K subscribers
387 photos
15 videos
2 files
256 links
Learn, Hack, and Defend. Building Africa’s Cybersecurity Ecosystem. 💜

Website: bunabyte.com
Ctf platform: ctf.bunabyte.com
Academy: academy.bunabyte.com

YouTube: youtube.com/@bunabyte
BunaByte Files: @hacker_habesha

Support: @bunabytesupport
Download Telegram
We’re set up and ready.

Come find Buna Byte at the booth, try the CTF, and test your skills.

We’re waiting for you.
#GDG_AASTU_TechFest 2026

@bunabytecs
🔥12❤4⚡1
🚨 Friday Night Challenge Drop

The Missing Friend

Category: OSINT
Difficulty: Easy
Points: 75

Your close friend Alex went on a short trip to Addis Ababa last week. He posted one photo on his new Instagram account and then went silent. His family is worried and asked you to check if he's okay.

He only left this clue:
"I'm chilling where the coffee is strong and the view is green."


🕐 Drops tonight at 1:00 AM (Local Time)

Join the hunt on Buna Byte CTF Platform

@bunabytecs #challenge_drop
❤9🔥5
Buna Byte
Photo
#ቀን_10፦ ለReverse Engineering የሚያስፈልጉ Tools

ትናንት የምስጠራ(cryptography) መሳሪያዎችን አይተናል፤ ዛሬ ደግሞ የሶፍትዌሮችን የውስጥ አወቃቀር የምንመረምርባቸውን (Reverse Engineering) ዋና ዋና መሳሪያዎች እንመለከታለን።

የሶፍትዌር ምንጭ ኮድ (Source Code) በሌለበት ሁኔታ፣ እነዚህ መሳሪያዎች የፕሮግራሙን ሚስጥር ለማውጣት አይነተኛ ሚና ይጫወታሉ፦

1. Ghidra (የደህንነት ባለሙያዎች ምርጫ)
በአሜሪካ ብሔራዊ የደህንነት ኤጀንሲ (NSA) የተገነባው Ghidra፣ ሶፍትዌሮችን ገላልጦ ለማየት የሚረዳ እጅግ ዘመናዊ መሳሪያ ነው።

- Decompiler፦ ዝቅተኛ ደረጃ ያለውን ባይነሪ ኮድ (Binary) ወደ ሰው ልጅ ሊረዳው ወደሚችል የC ቋንቋ ኮድ ይቀይረዋል።
-
Multi-platform፦ በዊንዶውስ፣ ማክ እና ሊኑክስ ላይ ያሉ የተለያዩ ፕሮግራሞችን መተንተን ይችላል።
- Graph View፦ የፕሮግራሙን የፍሰት መስመር (Control Flow) በግራፍ መልክ ያሳያል።


Tool link: https://ghidralite.com

2. IDA Pro / IDA Free
IDA በዓለም አቀፍ ደረጃ ለReverse Engineering በጣም የታወቀ እና ተወዳጅ መሳሪያ ነው።

- Disassembler፦ ማሽኑ የሚረዳውን ቁጥር ወደ አሰምብሊ (Assembly) ቋንቋ በመቀየር ኮዱ ምን እንደሚሰራ ለማየት ይረዳል።
- Interactive፦ ተመራማሪው ኮዱን እንዲሰይም፣ ማስታወሻ እንዲጽፍ እና የኮዱን አወቃቀር እንዲቀይር ያስችለዋል።


Tool link: https://lnkd.in/eSAgbYsy

3. GDB (GNU Debugger)
ፕሮግራሙ በሚሰራበት ሰዓት (Runtime) በሜሞሪ ውስጥ ምን እየተከናወነ እንደሆነ ለማየት የሚያገለግል መሳሪያ ነው።

- Breakpoint፦ ፕሮግራሙን በምንፈልገው ቦታ ላይ በማቆም በውስጡ ያሉትን መረጃዎች (Registers/Memory) ለመፈተሽ።
- Dynamic Analysis፦ የፕሮግራሙን ባህሪ በሚንቀሳቀስበት ጊዜ ለማጥናት በጣም አስፈላጊ ነው።


Tool link: https://lnkd.in/e_qQNvY9

የዛሬው ተግባር (Challenge): ወደ Buna Byte CTF መድረክ ይግቡና አንድ የ"Reverse Engineering" ጥያቄ ይምረጡ። በፋይሉ ውስጥ ያሉትን ጽሁፎች ለማየት በቀላል መሳሪያ (strings) ይጀምሩ፤ ከዚያም ወደ Ghidra ወይም IDA በመጫን የኮዱን ፍሰት ለመረዳት ይሞክሩ።

🔗 ሶፍትዌሩን ይመርምሩ፦ ctf.bunabyte.com

Connect me on Linkedin to get this 30 day ctf challenge
⚡8❤5🔥2
🏴‍☠️ New #challenge incoming

Classified Transmission
Category: Web Security
Difficulty: Easy
Points: 100

A signal from an unknown source.
The page appears empty, yet something lingers in the static.
Not all secrets are written some are carried in the spaces between.

🕵️ What does the courier hide in the envelope?

Prepare your browser, inspect everything, and uncover the hidden transmission.


🕐 Drops tonight at 1:00 (Local Time)

Join the challenge on Buna Byte CTF Platform

@bunabytecs
🔥9❤4👀1
🔥 Friday is here… and so is our weekly CTF #challenge.

Phantom jpg
Category: Digital Forensics
Difficulty: Medium
Points: 150


This week’s case:
Our network intrusion detection system detected unusual ICMP activity across the network.

We suspect this was a "marker" for a larger exfiltration. Find the hidden file chunks and reconstruct the image to find the flag.


Drops Tonight at 1:00 local time.

Your mission:
🕵️ Analyze the traffic
🏁 Find the flag

Think like an analyst. Hunt like an attacker.

Join the hunt on: ctf.bunabyte.com

#CTF #DigitalForensics

@bunabytecs
🔥11⚡5❤4
🔥Friday #challenge is here ⚡️

Name: Sound Waves

We recovered this recording from a satellite that was thought to be decommissioned years ago.

Most people hear only atmospheric static, but our experts believe a "digital signature" was whispered. It’s as if someone tacked a secret note onto the end of a dead signal.

Can you find what was left behind?

🟢 Now LIve.

#CTF #Steganography

Join the ctf: https://ctf.bunabyte.com
🔥10👍4⚡1
🚀 Buna Byte CTF is now live on Launch.et!

We're excited to share Ethiopia's hands-on cybersecurity learning and CTF platform with the wider startup and tech community.

Buna Byte CTF is designed to help aspiring cybersecurity professionals build real-world skills through practical challenges in web security, digital forensics, OSINT, cryptography, reverse engineering, binary exploitation, and more.

Whether you're taking your first steps into cybersecurity or sharpening advanced offensive security skills, our platform provides a safe environment to learn, practice, and compete.
Check us out on Launch.et and support our mission to build the next generation of cybersecurity talent in Ethiopia and across Africa.

🎁 https://launch.et/product/buna-byte-ctf

#CTF #EthicalHacking #InfoSec #EthiopiaTech @bunabytecs
❤11👌6⚡1
One thing we're experimenting with at Buna Byte is turning challenge solving into a public cybersecurity portfolio.

Every user gets a profile showing their activity, solved challenges, skills, achievements, and progress over time.

As we continue building the platform, we want participants to have something more valuable than points a record of their learning journey.

Imagine searching your name and seeing evidence of your cybersecurity growth.

We're still early 300+ users, 16 public challenges 2 Private events hosted, and a lot more to build but seeing player profiles appear in Google search results is one of those moments that reminds us we're heading in the right direction.


Explore Buna Byte:
🧧 https://ctf.bunabyte.com

My profile:
🧧 https://ctf.bunabyte.com/p/0xfke

What features would you want to see in a cybersecurity portfolio platform?

@bunabytecs
❤13⚡4🔥2
🚨 Friday CTF Update

No Friday CTF challenge will be released today.

We're using this time to work on improvements, create better challenges, and continue building the Buna Byte platform for the community.

Thank you to everyone who has been participating, solving challenges, and supporting the journey. More content, labs, and challenges are on the way.

Stay curious. Keep hacking. ☕️

@bunabytecs
❤13⚡2🔥2💔2
Forwarded from AfroSec
CRTO EXAM: DONE 🙃🙃🎉🎉🎉🎉🎉

Just finished the CRTO exam after several hours of living inside Active Directory.

What started as enumeration quickly turned into privilege escalation, lateral movement, Kerberos abuse, delegation attacks, credential hunting, and eventually chasing domain compromise.

Things that got heavily exercised:

⚡️ AD Enumeration
⚡️ Cobalt Strike
⚡️ Kerberos Attacks
⚡️ RBCD
⚡️ Credential Abuse
⚡️ Privilege Escalation
⚡️ Lateral Movement
⚡️ Domain Takeover Techniques

This wasn't a "run tool = get flag" type of exam.

It demanded understanding attack paths, adapting when things didn't work, troubleshooting, and thinking like an actual operator.

Definitely one of the most enjoyable and challenging offensive security experiences I've had so far.

am sooo happy happy now :)

#CRTO #RedTeam #CyberSecurity

@AfroSec
🔥14😈5⚡1🍾1
🎯 WEEKEND CHALLENGE DROPS TOMORROW

Think you can beat the house?

RECOGNITION ROULETTE is coming to the Buna Byte CTF platform.

A seemingly harmless employee recognition portal hides a dangerous flaw beneath a blacklist filter. Your mission is to bypass the restrictions, manipulate the prototype chain, and uncover the flag hidden within the server environment.


The rules are simple:

🔒 The application trusts its defenses.
☕️ You prove it shouldn't.

Difficulty: HARD/Medium
Category: Web Exploitation
Points: 400

Join the hunt: ctf.bunabyte.com

@bunabytecs
🔥10⚡3❤2👏1🍾1