Friday, August 21, 2020

Friday August 21 2020 Completed THM Web Scanning

      Another room completed for Friday. In this room learned about zaproxy and nikto. Quick easy room. Not much to say about this room. Read through the manual. I am almost completed with the Complete Beginner learning path. hopefully by the end of this week I will be done and then move onto another learning path. I am at 82% right now. It is driving me to complete more and more. 

Friday August 21 2020 Completed THM Network Services

     Another room underneath my belt. I am especially proud of this room for learning about FTP and relearning about Hydra. Everything will come into full circle. I am going to keep this one short and start another room.

Friday August 21 2020 Completed THM Metasploit

      I just completed the Metasploit room. Why this room, I went out of order because there is a Tools R Us room that utilize this tool. I wanted a little bit of hands-on instead of going in blindly. Room was a while to complete, but ultimately finished. I learned load kiwi. On to the next room. I will be seeing if I can go into Network Chuck system to get password. Its a Youtube challenge that he put out there. Lets see if I can put what I learn into practice. I will be doing it later on, since I want to learn more instead of testing. 

Friday August 21 2020 Completed THM Hydra

      I just completed another room named Hydra. The best part of this room is ssh in the CLI. I am happy to feel comfortable with cat, pwd, and ls -lash for my starting point. That's how I found in the lab that Molly had a text file for the flag I was looking for. It was simple enough, it was named flag2.txt. For some reason I wanted to /etc/passwd. My habits are forming or shall I say my rituals for ssh into a system.

Thursday, August 20, 2020

Friday August 21 2020 Completed THM WebApp Sec 101

 I have finished another room, on a beautiful Friday morning. I am seven days in and learning a lot. Burpsuite, I am getting to know you very well. Just need to find your spider mode , which I can use on Maltego. For some reason the color of Maltego reminds me of Kratos from God of War. I feel proficient at the community edition, not yet a pro. I am just waiting to go back to the CLI, maybe in the next room I go into.

Thursday August 20, 2020 Completed THM Burpsuite

     I have just completed the Burpsuite room, and it is an interesting one. The room showed me the basics of using the application. They are straight-forward. It is my second day being in this room so now i know how to download the CA certificate, and am definitely remembering 127.0.0.1. Even though I keep stopping and coming back to labs might look like a negative thing. I think it's better because you don't want to read the steps over and over, you go by memory and look at steps if you forget. Now on to the next room. Don't forget port 8080.

Wednesday, August 19, 2020

Wednesday August 19, 2020 Completed THM Comon Linux Privsec and Intro to Python

     I just completed to rooms in my THM learning path. Some of the rooms are getting me  out of my comfort zone. Even though, i am still new to this it helps me find my areas on which I need to focus more upon. I know some of the basics, but this is opening my eyes to more information. I ma an eternal student, I am always learning. This will be a great career field for myself to join in the future. i love that things are ever changing, it means its hard to get complacent. You have to have that drive to learn. After I finish my other videos on ethical hacking, I will be moving back to ITPro.TV to learn about the cloud. I usually bounce from the learning platform ITPro.TV to O'Reilly Learning. The major takeaway from the two rooms is learning about cronjobs and the 7 sets that make up a username and password.

Wednesday Augst 19, 2020 Completed THM Networking

      Yes, I have finally finished THM Networking room. This room didn't look complicated, except finding that right answer. It's like going to the store when your in a rush and you see long line. You go in the shorter line , and you find out it is the longest line. Well I finished it what I learned instead of the answer being default gateway, it is just gateway for another name of a router. Don't know if I am going to do anymore tonight, if I do I will post. All I am waiting is to go on my well-deserved break.

Tuesday, August 18, 2020

Wednesday August 19, 2020 Completed THM TMUX

 Terminal Multiplexer (TMUX), is the room I just completed. This room is helping me learn more about using the man on my Terminal. I really enjoyed this room as it is more of a beginner friendly room. I am just trying to get my fundamentals solidified. Overall, I enjoyed the TMUX room. So it's on to the next.

Tuesday August 18, 2020 Completed THM Introductory Networking

      As the title states, I have completed another room. This room was straightforward and not difficult for the most part. The most difficult part was OSINT of what golf course was by Microsoft. I eventually found the answer. I learned some information about Wireshark in this room. I am feeling awake, I am going on to another room. Hopefully I will complete a couple more. i have done some tasks in some of the rooms so it will go quickly sooner or later.

     I have went to my virtual class on ART200 today. I learned about foreground, middleground, and background. I don't remember the name of the painting, it was created in 1627, A turkey pot pie. it looked like a feast was going on after Thanksgiving with how food, a biscuit was off the plate. We talked about how it was by people who had luxury. I wanted to add on that the pot was polished and you can see the reflection of the food. I like art, one day I will go to an art show.

     Note: OSINT always made me nervous, but now I know it stands for open source intelligence calms the acronym down for me. I always wanted to do some type of forensics, mostly be a private investigator like Dick Tracy. Now going through and learning that it is important in cybersecurity makes me elated.

Tuesday August 18, 2020 Completed THM Web Fundamentals

 I have completed Web Fundamentals on THM. In this room you learn about cURL. this room is straightforward. The verbs and path is the big takeaway from this room. The reason I went back to this room is because the Burpsuite room reccomends you complete this one first. I will try to finish another room before my ART200 class begins.

Monday, August 17, 2020

Tuesday August 18, 2020 Completed THM Nmap

 I just completed THM Nmap room. I will say this room was a little bit easier, thanks to looking the man nmap. I though it would be a little bit harder. I been viewing the ITPro.TV about Nmap to get some more knowledge. What I enjoyed about this room is how to scan every port, -p-.

Monday, August 17, 2020 Completed THM Learn Linux

     I successfully completed the learn Linux room. I have been on this room for a couple days now. Given it a break, looking at Linux videos help me a lot. I did get some help via YouTube, but it is now on to the next room which is named Linux Challenges. 

     I am listening to ITPro.Tv and following along with them, and at the same time I am utilizing THM. The reason I do this is I will not get hands-on practice looking at just videos. On the other hand, I will not get more knowledge by just having hands-on practice. It is the best of both worlds. 

     What I learned about the Learn Linux room by being stuck? I had to deploy the machine more often than once which in turn solidified my knowledge to ssh shiba1@IP address. I been looking more into manuals. I found utilizing search by using forward slash. I can use the keyboard "u" and "n" to search through man.The other thing that I learned that is important to me,  i would need to press exit to get out of su. I would usually close the Terminal. This might be trivial to some, but if I saw myself last week and explained all I know now I wouldn't believe it.

Monday, August 17, 2020 Learning More of Linux

      I am learning more of Linux CLI. I am using ITPRO.TV to get more comfortable to using Linux. I am not trying to speed through the THM courses to say I finished it. I am making sure my fundamentals are solid, so I won't have to go back and better yet seem unintelligible.

Saturday, August 15, 2020

Saturday, August 15, 2020 TryHackMe Room Completion Google Dorkling

      I have completed the Google Dorkling room on TryHackMe (THM), the second room in the learning path Complete Beginner. Earlier today, at midnight, i subscribed and completed the Introductory Room. Now I will be going to the Linux Fundamentals section on my path. I know I will enjoy this room a lot. I been utilizing Kernel Auditing Linux for about a week. I havent been using the applications, just the Terminal. i know some of the basics, still need to learn python3. On my virtual machine,Ii have to use it that way since --version will give me version 2. 

     Here is a basic example of what I learned:

Hello_World = True

if Hello_World:

     print("Bonjour World") 

     


In a video course that I am also doing on Python 3 has given this note: if you don't see parenthesis after print then they are using Python 2. I feel it is a good time for me to start learning Python sinceit recently gotten a newer version and the newer version is the only one I am used to.

     In my spare time, I change my background . I have updated my terminal to black and green. Also, I have used Kali undercover. Read it in the book. Yes I know I am being vague, but some things needs to be vague. This will help in the learning process. About to take a break, and get to my new room. I think I will write a small report without giving anything out on the rooms. This is becoming a good knowledge based. 

Saturday, August 15, 2020 Revamped Intro

     I have gain my composure s learning about penetration testing is vast. Even though it is a specialty, learning the basics is the slow part. I have put over 100 hours into ITPRO.TV. Recently I have subscribed to TryHackMe to make it easier for my type of learning. I will be doing hand-on more in stead of lecture-based. This is how my blog will now be configured. By explaining more in details about the process that I am going through. 

     As of now I have my CompTIA Security+ certification, and this is the only certification that I have attained so far. Within due time, I will be going for more. My main certification I am trying to attain is the Offensive Security Certified Professional. 

     As of now, I am currently enrolled in college at National University pursuing a Bachelor's degree in Cybersecurity - Digital Forensics. Why am I trying to become a penetration tester while pursuing digital forensics? It's simple to become well rounded, even though this will take longer to learn doing it this way, in the long run it will all come together. 

     As you will soon visualize that, this blog has gotten revamped. I will blog more than once on some days and not at a set time. This will help for my content to become more in-depth. Now all will see the journey and time and effort it take to have your dreams become a reality. 

     On TryHackMe my username is nmwily. 

Wednesday, August 12, 2020

Small Break

 I will be taking a break to learn more fundamentals will be back at the end of August

Tuesday, August 11, 2020

Saturday, August 8, 2020

August 6-7, 2020 Thursday and Friday Study Hours

CompTIA Network+ (N10-007)                                                 Times

Common Networking Attacks Part 2                                       34:07

Network Device Hardening Part 1                                           28:44

Network Device Hardening Part 2                                           25:27

Common Mitigation Techniques Part 1                                  29:18

Common Mitigation Techniques Part 2                                  32:02

Common Mitigation Techniques Part 3                                 28:33

Network Troubleshooting Method                                         25:42

Network Troubleshooting Tools Part 1                                  27:56

Network Troubleshooting Tools Part 2                                  23:24

Network Troubleshooting Tools Part 3                                 34:26

Network Troubleshooting Tools Part 4                                 27:17

Network Troubleshooting Tools Part 5                                 33:11

Common Wired Network Issues                                            32:29

Common Wireless Network Issues                                       28:40

Common Network Service Issues Part 1                             21:10

Common Network Service Issues Part 2                             26:42

Common Network Service Issues Part 3                            31:06

CompTIA Network+ Book 5 Lessons  out of 15


Wednesday, August 5, 2020

August 5, 2020 Wednesday Study Hours

CompTIA Network+ (N10-007)                                                 Times

Business Continuity and Disaster Recovery Part 1                29:33

Business Continuity and Disaster Recovery Part 2                37:54

Scanning, Monitoring and Patching                                        42:36

Remote Access Methods Part 1                                               26:56

Remote Access Methods Part 2                                              26:24

Remote Access Methods Part 3                                              29:45

Policies and Best Practices Part 1                                           26:58

Policies and Best Practices Part 2                                           24:15

Physical Security Devices                                                         32:10

Authentication and Access Control Part 1                            25:34

Authentication and Access Control Part 2                           33:10

Basic Wireless Network Security                                            32:29

Common Networking Attacks Part 1                                    24:54

Total Time 6 hours 32 minutes 38 seconds


Tuesday, August 4, 2020

August 4, 2020 Tuesday Study Hours

CompTIA Network+ (N10-007)                                  Times

Cabling Solutions-Fiber Part 1                                  25:39

Cabling Solutions-Fiber Part 2                                  31:47

Network Devices                                                       31:50

Advanced Networking Devices Part 1                      28:31

Advanced Networking Devices Part 2                      30:39

Virtualization and Network Storage Part 1              30:04

Virtualization and Network Storage Part 2              28:48

WAN Technologies Part 1                                        25:37

WAN Technologies Part 2                                        30:16

WAN Technologies Part 3                                        24:19

Network Diagrams and Documentation                  28:04         

Total Time 5 hours 15 minutes 34 seconds


August 3, 2020 Monday Study Hours

CompTia Network+ (N10-007)                                  Times

 

IPv6 Addressing Part 2                                               24:29

Network Topologies Part 1                                         26:26

Network Topologies Part 2                                         33:05

Wireless Technologies                                                30:29

Cloud Concepts                                                           23:21

Network Service Functions Part 1                              27:33

Network Service Functions Part 2                              32:27

Network Service Functions Part 3                              40:33

TCP/IP Model Part 1                                                  27:28

TCP/IP Model Part 2                                                  17:06

Cabling Solutions-Copper Part 1                                28:55

Cabling Solutions-Copper Part 2                                29:40

Cabling Solutions-Copper Part 3                                34:15

          Total Time 6 hours 15 minutes 47 seconds


Sunday, August 2, 2020

August 2, 2020 Sunday Study Hours

CompTia Network+ (N10-007)                         Times
    Routing Technologies Part 1                          29:59
    Network Performance Concepts                    25:20
    IP Addressing Part 1                                      29:54
    IP Addressing Part 2                                      25:40
    IP Addressing Part 3                                      26:53
    IP Addressing Part 4                                      30:11
    Classless IPv4 Addressing Part 1                  28:59
    Classless IPv4 Addressing Part 2                  38:10
    Classless IPv4 Addressing Part 3                  35:59  
    Classless IPv4 Addressing Part 4                  40:30
    IP Address Assignments                               35:58
    IPv6 Addressing Part 1                                 28:43
      
          Total Time 6 hours 16 minutes 16 seconds

Saturday, August 1, 2020

August 1, 2020 Saturday Study Hours

I have been viewing ITPRO.TV to become more knowledgeable in the field of cybersecurity. I am currently going to college. Today I have viewed the following videos:
CompTia Network+ (N10-007)                         Times
    Parts and Protocol Part 2                               32:59
    OSI Model Part 1                                          20:24
    OSI Model Part 2                                          16:33
    Network Traffic Properties Part 1                 26:34
    Network Traffic Properties Part 2                 30:25
    Switching Technologies                                39:33
    Routing Technologies Part 1                         26:16
        Total Time 3 hours 12 minutes 49 seconds

Introduction Post

This will be my blog for becoming a penetration tester. 

Update

     It has been a long time since I blogged on this. I have been learning the eCPPT, which I have finally passed. The goal is to change thi...