Mvenyi Donald Mbutu
Cybersecurity professional at Corynth Tech, Cameroon
I am an enthusiastic person with great passion in computing and IT. I got a Bachelor of Technology in Computer Software Engineering from the University of Bamenda in 2020, and in 2025, I got a master in Cybersecurity from the same university. I attended PyCon Africa 2925 in Johannesburg South Africa, and I am looking forward to be part of PyCon 2026 which is scheduled to take place in Kampala, Uganda.
Currently, I am working with like minded peers in our startup called Corynth Tech; it's a training institution and python and Django are highly valorised.
Abstract
Africa is equally seen on the global stage of digital growth, but with rising level of digitalization, comes in security threats ranging from SIM swapping, mobile money fraud to data breaches, ransomware, and email and ARP spoofing. The attacks are incredibly smarter as the days go by. In this practical and eye-opening session, I’ll show you how Python has become one of the most effective languages for ethical hacking and cybersecurity — and how you can start using it too. This therefore calls on Python developers across Africa to get involved in defending digital future through ethical hacking and cybersecurity. We will cover: * Why python is the language loved by many cybersecurity professionals ( it is definitely easy to learn, has many powerful libraries and when it comes to automation, it is friendly). * Essential tools every ethical hacker should know: Scapy, Requests, Beautiful Soup, I packet, Python-Nmap, Pwntools, and more. * Practical (live) demonstrations: network scanning and reconnaissance, building a password brute-forcer, bug bounty, creating security tools tailored for African challenges like securing USSD-based system and mobile money traffic pattern analysis. Real Case Study: "Spoofing Attacks in Action" I’ll walk you through a complete hands-on scenario: - Mounting a realistic spoofing attack (IP and ARP spoofing) using Python to show how easy it is for attackers to do same. - Detecting and defending against the same attack in real time How this exact type of spoofing is used in mobile money and fintech fraud across Africa The tools and techniques I used to build both the attack and the defense scripts You’ll see the full lifecycle: reconnaissance - attack - detection - mitigation, all done with clean and precised Python code. We’ll also discuss the following: * The ethics and legal side of hacking (responsible disclosure, bug bounties, just to stay on the right side of the law) * How African developers can contribute to securing local fintech, healthcare, and government systems * Getting started safely: building your own lab, beginner projects, and resources.