Cybersecurity

Careers I find interesting (ranked)

Security Engineer

Design, monitor and maintain security controls, networks and systems to help prevent cyber attacks.

Digital Forensics Examiner

Collect, analyze and document digital evidence to report to detectives.

Malware Analyst (aka the Reverse Engineer)

Usually knowledge of assembly and C.

Penetration Tester

Responsible for testing technology products for security loopholes.

Red Teamer

Plays the role of an adversary, attacking an organization and providing feedback from an enemies perspective.

Offensive Security (red)

is breaking into systems, exploiting bugs, ...

Defensive Security (blue)

is protecting networks, analyzing threats, ...

Security Operations Center (SOC)

• vulnerabilities
• policy violations
• unauthorized activity
• network intrusions

Digital Forensics and Incident Response (DFIR)

• digital forensics: file system, system memory, system logs, ... analysis
• incident response
• malware analysis: virus, Trajan horse, ransomware, ...

Tools

Finding Hidden Directories with gobuster

gobuster dir --url http://www.onlineshop.thm/ -w /usr/share/wordlists/dirbuster/directory-list.txt

Automate Password Bruteforce with hydra

hydra -l admin -P passlist.txt www.onlineshop.thm http-post-form "/login:username=^USER^&password=^PASS^:F=incorrect" -V

Nmap

Vulnerabilities

The most simple security breaches happen, when developers leave login credentials, or hidden links in the HTML source code.

Searching for vulnerabilities using:

• Exploit DB
• or searchsploit on KALI Linux
• NVD - National Vulnerability Database
• CVE - Common Vulnerabilities and Exposures

Learning Platforms

TryHackMe | Cyber Security Training

1. Introduction to Cyber Security
2. Pre-Security
3. Complete Beginner
4. Web Fundamentals
5. SOC Level 1
6. Jr Penetration Tester
7. Offensive Pentesting
8. Red Teaming
9. Cyber Defense
10. Attacking and Defending AWS
11. CompTIA Pentest+