Buna Byte
Photo
#ቀን_10፦ ለReverse Engineering የሚያስፈልጉ Tools
ትናንት የምስጠራ(cryptography) መሳሪያዎችን አይተናል፤ ዛሬ ደግሞ የሶፍትዌሮችን የውስጥ አወቃቀር የምንመረምርባቸውን (Reverse Engineering) ዋና ዋና መሳሪያዎች እንመለከታለን።
የሶፍትዌር ምንጭ ኮድ (Source Code) በሌለበት ሁኔታ፣ እነዚህ መሳሪያዎች የፕሮግራሙን ሚስጥር ለማውጣት አይነተኛ ሚና ይጫወታሉ፦
1. Ghidra (የደህንነት ባለሙያዎች ምርጫ)
በአሜሪካ ብሔራዊ የደህንነት ኤጀንሲ (NSA) የተገነባው Ghidra፣ ሶፍትዌሮችን ገላልጦ ለማየት የሚረዳ እጅግ ዘመናዊ መሳሪያ ነው።
- Decompiler፦ ዝቅተኛ ደረጃ ያለውን ባይነሪ ኮድ (Binary) ወደ ሰው ልጅ ሊረዳው ወደሚችል የC ቋንቋ ኮድ ይቀይረዋል።
- Multi-platform፦ በዊንዶውስ፣ ማክ እና ሊኑክስ ላይ ያሉ የተለያዩ ፕሮግራሞችን መተንተን ይችላል።
- Graph View፦ የፕሮግራሙን የፍሰት መስመር (Control Flow) በግራፍ መልክ ያሳያል።
Tool link: https://ghidralite.com
2. IDA Pro / IDA Free
IDA በዓለም አቀፍ ደረጃ ለReverse Engineering በጣም የታወቀ እና ተወዳጅ መሳሪያ ነው።
- Disassembler፦ ማሽኑ የሚረዳውን ቁጥር ወደ አሰምብሊ (Assembly) ቋንቋ በመቀየር ኮዱ ምን እንደሚሰራ ለማየት ይረዳል።
- Interactive፦ ተመራማሪው ኮዱን እንዲሰይም፣ ማስታወሻ እንዲጽፍ እና የኮዱን አወቃቀር እንዲቀይር ያስችለዋል።
Tool link: https://lnkd.in/eSAgbYsy
3. GDB (GNU Debugger)
ፕሮግራሙ በሚሰራበት ሰዓት (Runtime) በሜሞሪ ውስጥ ምን እየተከናወነ እንደሆነ ለማየት የሚያገለግል መሳሪያ ነው።
- Breakpoint፦ ፕሮግራሙን በምንፈልገው ቦታ ላይ በማቆም በውስጡ ያሉትን መረጃዎች (Registers/Memory) ለመፈተሽ።
- Dynamic Analysis፦ የፕሮግራሙን ባህሪ በሚንቀሳቀስበት ጊዜ ለማጥናት በጣም አስፈላጊ ነው።
Tool link: https://lnkd.in/e_qQNvY9
የዛሬው ተግባር (Challenge): ወደ Buna Byte CTF መድረክ ይግቡና አንድ የ"Reverse Engineering" ጥያቄ ይምረጡ። በፋይሉ ውስጥ ያሉትን ጽሁፎች ለማየት በቀላል መሳሪያ (strings) ይጀምሩ፤ ከዚያም ወደ Ghidra ወይም IDA በመጫን የኮዱን ፍሰት ለመረዳት ይሞክሩ።
🔗 ሶፍትዌሩን ይመርምሩ፦ ctf.bunabyte.com
Connect me on Linkedin to get this 30 day ctf challenge
ትናንት የምስጠራ(cryptography) መሳሪያዎችን አይተናል፤ ዛሬ ደግሞ የሶፍትዌሮችን የውስጥ አወቃቀር የምንመረምርባቸውን (Reverse Engineering) ዋና ዋና መሳሪያዎች እንመለከታለን።
የሶፍትዌር ምንጭ ኮድ (Source Code) በሌለበት ሁኔታ፣ እነዚህ መሳሪያዎች የፕሮግራሙን ሚስጥር ለማውጣት አይነተኛ ሚና ይጫወታሉ፦
1. Ghidra (የደህንነት ባለሙያዎች ምርጫ)
በአሜሪካ ብሔራዊ የደህንነት ኤጀንሲ (NSA) የተገነባው Ghidra፣ ሶፍትዌሮችን ገላልጦ ለማየት የሚረዳ እጅግ ዘመናዊ መሳሪያ ነው።
- Decompiler፦ ዝቅተኛ ደረጃ ያለውን ባይነሪ ኮድ (Binary) ወደ ሰው ልጅ ሊረዳው ወደሚችል የC ቋንቋ ኮድ ይቀይረዋል።
- Multi-platform፦ በዊንዶውስ፣ ማክ እና ሊኑክስ ላይ ያሉ የተለያዩ ፕሮግራሞችን መተንተን ይችላል።
- Graph View፦ የፕሮግራሙን የፍሰት መስመር (Control Flow) በግራፍ መልክ ያሳያል።
Tool link: https://ghidralite.com
2. IDA Pro / IDA Free
IDA በዓለም አቀፍ ደረጃ ለReverse Engineering በጣም የታወቀ እና ተወዳጅ መሳሪያ ነው።
- Disassembler፦ ማሽኑ የሚረዳውን ቁጥር ወደ አሰምብሊ (Assembly) ቋንቋ በመቀየር ኮዱ ምን እንደሚሰራ ለማየት ይረዳል።
- Interactive፦ ተመራማሪው ኮዱን እንዲሰይም፣ ማስታወሻ እንዲጽፍ እና የኮዱን አወቃቀር እንዲቀይር ያስችለዋል።
Tool link: https://lnkd.in/eSAgbYsy
3. GDB (GNU Debugger)
ፕሮግራሙ በሚሰራበት ሰዓት (Runtime) በሜሞሪ ውስጥ ምን እየተከናወነ እንደሆነ ለማየት የሚያገለግል መሳሪያ ነው።
- Breakpoint፦ ፕሮግራሙን በምንፈልገው ቦታ ላይ በማቆም በውስጡ ያሉትን መረጃዎች (Registers/Memory) ለመፈተሽ።
- Dynamic Analysis፦ የፕሮግራሙን ባህሪ በሚንቀሳቀስበት ጊዜ ለማጥናት በጣም አስፈላጊ ነው።
Tool link: https://lnkd.in/e_qQNvY9
የዛሬው ተግባር (Challenge): ወደ Buna Byte CTF መድረክ ይግቡና አንድ የ"Reverse Engineering" ጥያቄ ይምረጡ። በፋይሉ ውስጥ ያሉትን ጽሁፎች ለማየት በቀላል መሳሪያ (strings) ይጀምሩ፤ ከዚያም ወደ Ghidra ወይም IDA በመጫን የኮዱን ፍሰት ለመረዳት ይሞክሩ።
🔗 ሶፍትዌሩን ይመርምሩ፦ ctf.bunabyte.com
Connect me on Linkedin to get this 30 day ctf challenge
⚡8❤5🔥2
🏴☠️ New #challenge incoming
Classified Transmission
Category: Web Security
Difficulty: Easy
Points: 100
🕐 Drops tonight at 1:00 (Local Time)
Join the challenge on Buna Byte CTF Platform
@bunabytecs
Classified Transmission
Category: Web Security
Difficulty: Easy
Points: 100
A signal from an unknown source.
The page appears empty, yet something lingers in the static.
Not all secrets are written some are carried in the spaces between.
🕵️ What does the courier hide in the envelope?
Prepare your browser, inspect everything, and uncover the hidden transmission.
🕐 Drops tonight at 1:00 (Local Time)
Join the challenge on Buna Byte CTF Platform
@bunabytecs
🔥9❤4👀1
Buna Byte
🏴☠️ New #challenge incoming Classified Transmission Category: Web Security Difficulty: Easy Points: 100 A signal from an unknown source. The page appears empty, yet something lingers in the static. Not all secrets are written some are carried in the spaces…
Challenge is live. Sorry, electricity was out.
👍9⚡3
🔥 Friday is here… and so is our weekly CTF #challenge.
Phantom jpg
Category: Digital Forensics
Difficulty: Medium
Points: 150
This week’s case:
Drops Tonight at 1:00 local time.
Your mission:
🕵️ Analyze the traffic
🏁 Find the flag
Think like an analyst. Hunt like an attacker.
Join the hunt on: ctf.bunabyte.com
#CTF #DigitalForensics
@bunabytecs
Phantom jpg
Category: Digital Forensics
Difficulty: Medium
Points: 150
This week’s case:
Our network intrusion detection system detected unusual ICMP activity across the network.
We suspect this was a "marker" for a larger exfiltration. Find the hidden file chunks and reconstruct the image to find the flag.
Drops Tonight at 1:00 local time.
Your mission:
🕵️ Analyze the traffic
🏁 Find the flag
Think like an analyst. Hunt like an attacker.
Join the hunt on: ctf.bunabyte.com
#CTF #DigitalForensics
@bunabytecs
🔥11⚡5❤4
🔥Friday #challenge is here ⚡️
Name: Sound Waves
🟢 Now LIve.
#CTF #Steganography
Join the ctf: https://ctf.bunabyte.com
Name: Sound Waves
We recovered this recording from a satellite that was thought to be decommissioned years ago.
Most people hear only atmospheric static, but our experts believe a "digital signature" was whispered. It’s as if someone tacked a secret note onto the end of a dead signal.
Can you find what was left behind?
🟢 Now LIve.
#CTF #Steganography
Join the ctf: https://ctf.bunabyte.com
🔥10👍4⚡1
🚀 Buna Byte CTF is now live on Launch.et!
We're excited to share Ethiopia's hands-on cybersecurity learning and CTF platform with the wider startup and tech community.
Buna Byte CTF is designed to help aspiring cybersecurity professionals build real-world skills through practical challenges in web security, digital forensics, OSINT, cryptography, reverse engineering, binary exploitation, and more.
Whether you're taking your first steps into cybersecurity or sharpening advanced offensive security skills, our platform provides a safe environment to learn, practice, and compete.
Check us out on Launch.et and support our mission to build the next generation of cybersecurity talent in Ethiopia and across Africa.
🎁 https://launch.et/product/buna-byte-ctf
#CTF #EthicalHacking #InfoSec #EthiopiaTech @bunabytecs
We're excited to share Ethiopia's hands-on cybersecurity learning and CTF platform with the wider startup and tech community.
Buna Byte CTF is designed to help aspiring cybersecurity professionals build real-world skills through practical challenges in web security, digital forensics, OSINT, cryptography, reverse engineering, binary exploitation, and more.
Whether you're taking your first steps into cybersecurity or sharpening advanced offensive security skills, our platform provides a safe environment to learn, practice, and compete.
Check us out on Launch.et and support our mission to build the next generation of cybersecurity talent in Ethiopia and across Africa.
🎁 https://launch.et/product/buna-byte-ctf
#CTF #EthicalHacking #InfoSec #EthiopiaTech @bunabytecs
Launch.et
Buna Byte CTF — A professional-grade CTF environment bridging…
A professional-grade CTF environment bridging the cybersecurity skill gap in Ethiopia and Africa. Buna Byte CTF is a digital product in Cybersecurity by Buna Byte Cybersecurity. 8 community claps on Launch.et.
❤11👌6⚡1
One thing we're experimenting with at Buna Byte is turning challenge solving into a public cybersecurity portfolio.
Every user gets a profile showing their activity, solved challenges, skills, achievements, and progress over time.
As we continue building the platform, we want participants to have something more valuable than points a record of their learning journey.
Imagine searching your name and seeing evidence of your cybersecurity growth.
Explore Buna Byte:
🧧 https://ctf.bunabyte.com
My profile:
🧧 https://ctf.bunabyte.com/p/0xfke
What features would you want to see in a cybersecurity portfolio platform?
@bunabytecs
Every user gets a profile showing their activity, solved challenges, skills, achievements, and progress over time.
As we continue building the platform, we want participants to have something more valuable than points a record of their learning journey.
Imagine searching your name and seeing evidence of your cybersecurity growth.
We're still early 300+ users, 16 public challenges 2 Private events hosted, and a lot more to build but seeing player profiles appear in Google search results is one of those moments that reminds us we're heading in the right direction.
Explore Buna Byte:
🧧 https://ctf.bunabyte.com
My profile:
🧧 https://ctf.bunabyte.com/p/0xfke
What features would you want to see in a cybersecurity portfolio platform?
@bunabytecs
❤13⚡4🔥2
🚨 Friday CTF Update
No Friday CTF challenge will be released today.
We're using this time to work on improvements, create better challenges, and continue building the Buna Byte platform for the community.
Thank you to everyone who has been participating, solving challenges, and supporting the journey. More content, labs, and challenges are on the way.
Stay curious. Keep hacking. ☕️
@bunabytecs
No Friday CTF challenge will be released today.
We're using this time to work on improvements, create better challenges, and continue building the Buna Byte platform for the community.
Thank you to everyone who has been participating, solving challenges, and supporting the journey. More content, labs, and challenges are on the way.
Stay curious. Keep hacking. ☕️
@bunabytecs
❤13⚡2🔥2💔2
Forwarded from AfroSec
CRTO EXAM: DONE 🙃🙃🎉🎉🎉🎉🎉
Just finished the CRTO exam after several hours of living inside Active Directory.
What started as enumeration quickly turned into privilege escalation, lateral movement, Kerberos abuse, delegation attacks, credential hunting, and eventually chasing domain compromise.
Things that got heavily exercised:
⚡️ AD Enumeration
⚡️ Cobalt Strike
⚡️ Kerberos Attacks
⚡️ RBCD
⚡️ Credential Abuse
⚡️ Privilege Escalation
⚡️ Lateral Movement
⚡️ Domain Takeover Techniques
This wasn't a "run tool = get flag" type of exam.
It demanded understanding attack paths, adapting when things didn't work, troubleshooting, and thinking like an actual operator.
Definitely one of the most enjoyable and challenging offensive security experiences I've had so far.
am sooo happy happy now :)
#CRTO #RedTeam #CyberSecurity
@AfroSec
Just finished the CRTO exam after several hours of living inside Active Directory.
What started as enumeration quickly turned into privilege escalation, lateral movement, Kerberos abuse, delegation attacks, credential hunting, and eventually chasing domain compromise.
Things that got heavily exercised:
⚡️ AD Enumeration
⚡️ Cobalt Strike
⚡️ Kerberos Attacks
⚡️ RBCD
⚡️ Credential Abuse
⚡️ Privilege Escalation
⚡️ Lateral Movement
⚡️ Domain Takeover Techniques
This wasn't a "run tool = get flag" type of exam.
It demanded understanding attack paths, adapting when things didn't work, troubleshooting, and thinking like an actual operator.
Definitely one of the most enjoyable and challenging offensive security experiences I've had so far.
am sooo happy happy now :)
#CRTO #RedTeam #CyberSecurity
@AfroSec
🔥14😈5⚡1🍾1
🎯 WEEKEND CHALLENGE DROPS TOMORROW
Think you can beat the house?
RECOGNITION ROULETTE is coming to the Buna Byte CTF platform.
The rules are simple:
🔒 The application trusts its defenses.
☕️ You prove it shouldn't.
Difficulty: HARD/Medium
Category: Web Exploitation
Points: 400
Join the hunt: ctf.bunabyte.com
@bunabytecs
Think you can beat the house?
RECOGNITION ROULETTE is coming to the Buna Byte CTF platform.
A seemingly harmless employee recognition portal hides a dangerous flaw beneath a blacklist filter. Your mission is to bypass the restrictions, manipulate the prototype chain, and uncover the flag hidden within the server environment.
The rules are simple:
🔒 The application trusts its defenses.
☕️ You prove it shouldn't.
Difficulty: HARD/Medium
Category: Web Exploitation
Points: 400
Join the hunt: ctf.bunabyte.com
@bunabytecs
🔥10⚡3❤2👏1🍾1
Buna Byte
🎯 WEEKEND CHALLENGE DROPS TOMORROW Think you can beat the house? RECOGNITION ROULETTE is coming to the Buna Byte CTF platform. A seemingly harmless employee recognition portal hides a dangerous flaw beneath a blacklist filter. Your mission is to bypass…
☕️ Weekend Challenge drops today @ 10:00 LT.
The house is confident. You should make it nervous.
Are you ready? 🎯
#BunaByte #CTF @bunabytecs
The house is confident. You should make it nervous.
Are you ready? 🎯
#BunaByte #CTF @bunabytecs
3❤11🔥2
Forwarded from AfroSec
Discord
Join the Red1 Discord Server!
Check out the Red1 community on Discord - hang out with 58 other members and enjoy free voice and text chat.
we’ve got something fresh 🔥
A group study session where we explore topics together.
No lectures, no mentors just a pack of curious minds building skills side by side.
Topics I’m thinking we could dive into:
• Malware development
• BOF (Beacon Object File) development
• Evasion techniques
• Tooling & automation
• Whatever else YOU want to bring 🛠
❗️ Important vibe check:
This is not a mentoring session :)
we are not standing at the front of the class, we also at the start of our malware dev journey, just like many of you.
We’ll share resources, trade questions, test ideas, and figure things out together.
https://discord.gg/zfy4frqb
@AfroSec
A group study session where we explore topics together.
No lectures, no mentors just a pack of curious minds building skills side by side.
Topics I’m thinking we could dive into:
• Malware development
• BOF (Beacon Object File) development
• Evasion techniques
• Tooling & automation
• Whatever else YOU want to bring 🛠
❗️ Important vibe check:
This is not a mentoring session :)
we are not standing at the front of the class, we also at the start of our malware dev journey, just like many of you.
We’ll share resources, trade questions, test ideas, and figure things out together.
https://discord.gg/zfy4frqb
@AfroSec
❤13
Forwarded from Yekolo Temari (የቆሎ ተማሪ)
We are back with REAL CHALLENGES. REAL SKILLS. REAL IMPACT.
Put your cybersecurity knowledge to the test, solve hands-on challenges, and capture the flag in an exciting competition designed to challenge and sharpen your practical skills.
📅 Date: June 25, 2026
🕘 Time: 9:00 AM
📍 Location: UNECA, Addis Ababa
👤 Participation: Individual
🔗 Registration: Google Form
⚠️ Limited Spots available
Brought to You in Collaboration With:
ICCA • Ethiopian Cybersecurity Association • UNECA • Yekolo Temari
Put your cybersecurity knowledge to the test, solve hands-on challenges, and capture the flag in an exciting competition designed to challenge and sharpen your practical skills.
📅 Date: June 25, 2026
🕘 Time: 9:00 AM
📍 Location: UNECA, Addis Ababa
👤 Participation: Individual
🔗 Registration: Google Form
⚠️ Limited Spots available
Brought to You in Collaboration With:
ICCA • Ethiopian Cybersecurity Association • UNECA • Yekolo Temari
🔥7⚡1
Forwarded from AfroSec
I finished 3rd place in a CTF competition and to be honest i didnt expect any of this fr :)
It was a fun, AD-focused red team challenge. Every challenge teaches something new, and this one was no exception. I'm glad to see the hours spent learning, practicing, and breaking things in labs paying off. 😄
To the people I met at the event: I am so glad to have met you. It was really a good chat. Thank you! :))
Also, thank you @temari_yekolo; your effort is incredible. 🙏🙏
@AfroSec
It was a fun, AD-focused red team challenge. Every challenge teaches something new, and this one was no exception. I'm glad to see the hours spent learning, practicing, and breaking things in labs paying off. 😄
To the people I met at the event: I am so glad to have met you. It was really a good chat. Thank you! :))
Also, thank you @temari_yekolo; your effort is incredible. 🙏🙏
@AfroSec
🔥9
AfroSec
I finished 3rd place in a CTF competition and to be honest i didnt expect any of this fr :) It was a fun, AD-focused red team challenge. Every challenge teaches something new, and this one was no exception. I'm glad to see the hours spent learning, practicing…
🏆 Congratulations to Yoseph AKA Afrosec.et for securing 3rd Place in the ICCA CTF 2026! 🎉
A strong performance and impressive problem-solving throughout the competition. Well-earned result from consistent effort and skill under pressure.
More milestones ahead 🚀
A strong performance and impressive problem-solving throughout the competition. Well-earned result from consistent effort and skill under pressure.
More milestones ahead 🚀
❤🔥14❤2👍2🔥2
🚨 Buna Byte is heading to EACA Summit 2026!
We're proud to be an official partner of the East Africa Cyber & AI Summit, happening July 2nd–3rd in Addis Ababa two days where CISOs, policymakers, and builders set the agenda for AI-era defense and digital sovereignty across East Africa.
Our team has been hard at work behind the scenes, designing the CTF challenges for the summit's hackathon track, bringing the same hands-on, hack-it-to-learn-it spirit we've built Buna Byte on to the national stage.
From building Ethiopia's only 24/7 CTF platform to now crafting challenges for one of the region's biggest cybersecurity gatherings, this is a big step for what we've been building together for over two years.
See you there. Let's defend the future. 🇪🇹
📍 Addis Ababa Science and Technology University, Industrial Innovation and Entrepreneurship Hub
🗓 July 2–3, 2026
#BunaByte #EACASummit2026 #CyberSecurity #CTF #EthiopiaTech
We're proud to be an official partner of the East Africa Cyber & AI Summit, happening July 2nd–3rd in Addis Ababa two days where CISOs, policymakers, and builders set the agenda for AI-era defense and digital sovereignty across East Africa.
Our team has been hard at work behind the scenes, designing the CTF challenges for the summit's hackathon track, bringing the same hands-on, hack-it-to-learn-it spirit we've built Buna Byte on to the national stage.
From building Ethiopia's only 24/7 CTF platform to now crafting challenges for one of the region's biggest cybersecurity gatherings, this is a big step for what we've been building together for over two years.
See you there. Let's defend the future. 🇪🇹
📍 Addis Ababa Science and Technology University, Industrial Innovation and Entrepreneurship Hub
🗓 July 2–3, 2026
#BunaByte #EACASummit2026 #CyberSecurity #CTF #EthiopiaTech
🔥19❤8🤯2⚡1👍1🎉1