Cybersecurity Student | SOC Trainee | Cisco Certified Junior Cybersecurity Analyst | Cisco Cybersecurity Defense Analyst | ISC2 Certified in Cybersecurity
VPN ON
Joined April 2023
- Tweets1.3K
- Following102
- Followers248
- Likes1.6K
Day 92 of #100DaysOfCybersecurity ✅
Started YARA. Sigma hunts suspicious behavior in logs, YARA hunts patterns inside files. My first rule matched only the test file with my phrase.
8 days to go. 🛡️
#SecFelix #YARA #DetectionEngineering #BlueTeam
@malik_cybersec @ife0x01
Day 91 of #100DaysOfCybersecurity ✅
A reader pointed out my Sigma rule missed accounts created with PowerShell. I tested it: they were right. Fixed it with a rule on Windows Event 4720, which caught all 3 test accounts.
9 days to go. 🛡️
#SecFelix #SigmaRules @malik_cybersec
Oluwanifemi Felix Oyeniyi retweeted
I'm officially AWS Certified Cloud Practitioner! 🎉
Some months ago, I joined the AWS re/Start program with lil knowledge of cloud. Look at how far I've come
Also thankful to @CyberRealm_HQ for providing access to the AWS Academy courses & labs. Really helped
More to build! 🚀
Oluwanifemi Felix Oyeniyi retweeted
Day 91/100
I completed the Android Application security fundamentals on @MobileHackLab
@commando_skiipz @ce3nerd @ife0x01 @KoredeSec @DefendWithFelix
Day 90/100
Android security where i learnt about system security , Network security , software isolation and Anti exploitation
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Day 91 of #100DaysOfCybersecurity ✅
A reader pointed out my Sigma rule missed accounts created with PowerShell. I tested it: they were right. Fixed it with a rule on Windows Event 4720, which caught all 3 test accounts.
9 days to go. 🛡️
#SecFelix #SigmaRules @malik_cybersec
Day 90 of #100DaysOfCybersecurity ✅
Wrote my 2nd Sigma rule: it detects a new local user being created, a common persistence trick (T1136.001). Triggered it in my lab and caught it in Splunk.
10 days to go. 🛡️
#SecFelix #SigmaRules #Splunk #DetectionEngineering
@malik_cybersec
Oluwanifemi Felix Oyeniyi retweeted
Days 29-30/30:
I completed my 30 days challenge by continuing my Security+ course
@Niffeey007 @malik_cybersec @DefendWithFelix @KoredeSec @gabbytech01 @cyberjeremiah
#30DaysCybersecurityChallenge
Days 26-28/30:
I started taking a course to prepare myself for Comptia Security+
@Niffeey007 @gabbytech01 @KoredeSec @malik_cybersec @DefendWithFelix @cyberjeremiah
#30DaysCybersecurityChallenge
Oluwanifemi Felix Oyeniyi retweeted
Day 90/100
Android security where i learnt about system security , Network security , software isolation and Anti exploitation
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Day 89/100
I started Android Application Security on mobilehacking lab academy starting all over again but not as begginer
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Day 90 of #100DaysOfCybersecurity ✅
Wrote my 2nd Sigma rule: it detects a new local user being created, a common persistence trick (T1136.001). Triggered it in my lab and caught it in Splunk.
10 days to go. 🛡️
#SecFelix #SigmaRules #Splunk #DetectionEngineering
@malik_cybersec
Day 89 of #100DaysOfCybersecurity ✅
Wrote my first custom Sigma rule to detect encoded PowerShell, converted it to Splunk, triggered it in my lab and caught it.
11 days to go. 🛡️
#SecFelix #SigmaRules #Splunk #DetectionEngineering
@malik_cybersec @ife0x01 @KoredeSec
Oluwanifemi Felix Oyeniyi retweeted
Day 89/100
I started Android Application Security on mobilehacking lab academy starting all over again but not as begginer
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Day 88/100
Set up Frida on the rooted emulator today — frida-server pushed, confirmed process listing works. Also read MASTG's root detection test and mapped it against InsecureBankv2
@commando_skiipz @KoredeSec @ife0x01
Day 89 of #100DaysOfCybersecurity ✅
Wrote my first custom Sigma rule to detect encoded PowerShell, converted it to Splunk, triggered it in my lab and caught it.
11 days to go. 🛡️
#SecFelix #SigmaRules #Splunk #DetectionEngineering
@malik_cybersec @ife0x01 @KoredeSec
Days 84-88 of #100DaysOfCybersecurity ✅
Sysmon logs from my Windows VM now flow into Splunk, ready for testing my Sigma rules.
Next: writing my first custom rule. 🛡️
#SecFelix #SigmaRules #Splunk #Sysmon
@malik_cybersec @ife0x01 @KoredeSec
Days 84-88 of #100DaysOfCybersecurity ✅
Sysmon logs from my Windows VM now flow into Splunk, ready for testing my Sigma rules.
Next: writing my first custom rule. 🛡️
#SecFelix #SigmaRules #Splunk #Sysmon
@malik_cybersec @ife0x01 @KoredeSec
Day 82-83/100 🎮 #100DaysOfCybersecurity
Completed the “Grand Larceny Auto II” room on TryHackMe! ✅
A vault you can’t just decompile your way into. Good reminder that reverse engineering takes patience.
#TryHackMe #SecFelix
@malik_cybersec @ife0x01 @KoredeSec
Oluwanifemi Felix Oyeniyi retweeted
Day 87/100
Made a write up on all the vulnerabilities i have found in the app i have been testing for the last few days
medium.com/@abdulmalikadebay…
@commando_skiipz @ce3nerd @ife0x01 @KoredeSec @DefendWithFelix
Day 86/100
Today I read some documentation on medium about Android testing .
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Oluwanifemi Felix Oyeniyi retweeted
Days 26-28/30:
I started taking a course to prepare myself for Comptia Security+
@Niffeey007 @gabbytech01 @KoredeSec @malik_cybersec @DefendWithFelix @cyberjeremiah
#30DaysCybersecurityChallenge
Days 24-25/30:
I went back to the basics of SIEMs, logs. How can you understand what a SIEM outputs if you don't know how to dissect and digest a log file
@Niffeey007 @malik_cybersec @DefendWithFelix @gabbytech01 @KoredeSec @cyberjeremiah
#30DaysCybersecurityChallenge
Oluwanifemi Felix Oyeniyi retweeted
Day 85/100
InsecureBankv2’s ViewStatement activity is exported loaded another user’s full transaction statement into a WebView with zero login, same bypass pattern as PostLogin and ChangePassword.
@commando_skiipz @ce3nerd @DefendWithFelix @KoredeSec @ife0x01
Day 84/100
Chained 3 findings into one exploit on InsecureBankv2: broadcast an intent from the terminal with a phone number I made up, and the app decrypted the real stored password and tried to send it via SMS to that number. Zero login, zero app interaction.
@commando_skiipz
Oluwanifemi Felix Oyeniyi retweeted
Day 86/100
Today I read some documentation on medium about Android testing .
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
Day 85/100
InsecureBankv2’s ViewStatement activity is exported loaded another user’s full transaction statement into a WebView with zero login, same bypass pattern as PostLogin and ChangePassword.
@commando_skiipz @ce3nerd @DefendWithFelix @KoredeSec @ife0x01
Oluwanifemi Felix Oyeniyi retweeted
Day 24 of #31DaysSafer 🔐
Today: Harden Online Payments. 💳
When was the last time you reviewed the payment methods saved to your online accounts?
Stolen card details, fake checkout pages, and compromised accounts can lead to unauthorized purchases.
Take a few minutes to review your online payment security.
→ Remove saved payment methods you no longer use.
→ Enable MFA on your payment accounts.
→ Turn on transaction alerts when available.
→ Review recent activity for unfamiliar charges.
Small changes can help protect your financial information when shopping or paying online.
One small step. One day safer. 🍂
#CybersecurityAwarenessMonth #DigitalHygiene #InfoSec
Oluwanifemi Felix Oyeniyi retweeted
Days 24-25/30:
I went back to the basics of SIEMs, logs. How can you understand what a SIEM outputs if you don't know how to dissect and digest a log file
@Niffeey007 @malik_cybersec @DefendWithFelix @gabbytech01 @KoredeSec @cyberjeremiah
#30DaysCybersecurityChallenge
Days 21-23/30:
I've been working on some side projects and also working on the phishing analysis section on tryhackme
@Niffeey007 @malik_cybersec @DefendWithFelix @KoredeSec @gabbytech01 @cyberjeremiah
#30DaysCybersecurityChallenge
Oluwanifemi Felix Oyeniyi retweeted
Day 83/100
Finished exploiting InsecureBankv2’s content provider: confirmed read, inject, insert, update, AND delete, all unauthenticated.Full CRUD compromise through one exported provider with zero permission checks.
@commando_skiipz @ce3nerd @KoredeSec @DefendWithFelix @ife0x01
Day 82-83/100 🎮 #100DaysOfCybersecurity
Completed the “Grand Larceny Auto II” room on TryHackMe! ✅
A vault you can’t just decompile your way into. Good reminder that reverse engineering takes patience.
#TryHackMe #SecFelix
@malik_cybersec @ife0x01 @KoredeSec
Day 80-81/100 ☕ #100DaysOfCybersecurity
Completed the “Have a Break” room on TryHackMe! ✅
Two more days down, and the learning continues.
#TryHackMe #SecFelix
@malik_cybersec @ife0x01 @KoredeSec
Day 82-83/100 🎮 #100DaysOfCybersecurity
Completed the “Grand Larceny Auto II” room on TryHackMe! ✅
A vault you can’t just decompile your way into. Good reminder that reverse engineering takes patience.
#TryHackMe #SecFelix
@malik_cybersec @ife0x01 @KoredeSec
Day 80-81/100 ☕ #100DaysOfCybersecurity
Completed the “Have a Break” room on TryHackMe! ✅
Two more days down, and the learning continues.
#TryHackMe #SecFelix
@malik_cybersec @ife0x01 @KoredeSec
Oluwanifemi Felix Oyeniyi retweeted
Day 81/100
Found and exploited SQL injection in InsecureBankv2’s exported content provider. Dumped the full database schema via adb, no login, no app, just a crafted --where clause.
Confirmed read access → boolean-based test → full UNION injection.
@commando_skiipz @ce3nerd
Day80/100
After getting a username and password yesterday i was able to change the person's username and the password was sent to my SMS in plaintext making any other app that has SMS priv can read it
@commando_skiipz @ce3nerd @KoredeSec @ife0x01 @DefendWithFelix
