I have new fans from Hong Kong, Japan and South Korea that try their luck attacking my sites
Since they all use the same technique, I am always making fun of them
Security is a common topic, since is a old condition that we all live in History. By reading History books, we see how security was exploited and how this topic is important to all. Putting away the approach of how this topic was developed in the last centuries, in actual days it is developing in a different way. Then as I like to explore any subject (like different trees that monkeys like to play with), I always try to explore a bit more, about each fragment of each "tree", to understand deeply.
Github is one of the most popular coding host to explore what projects are being developed, and with that, what topic we like to read and learn, since we can search by topic to see what kind of applications and documentations are exposed for all to use for Free. Today I found this guy who share a lot of security content to learn in a technical way, about each possible security flaw that exist on technology. A awesome Handbook to read about, some links about OSCP full of resources to explore each one Red Team creativity, while is always good to understand some abbreviation like I use to describe the Dragon as a OCPP, some other recommendation to follow and apply if needed, some other Playbooks to play with the mind, if you like to think about what you are doing, some exploit to test against your applications, some guides with tips for better choices, and many other resources to explore and test, if you like this topic inside the world of technology.
One of this days, I got an email from some "Muhamedxxxxx@gmail.com", asking to perform some security testing for my sites, while I am just one guy, not a company, I didn't answer because, whatever security issue I have, I cannot do much more, since I host my code on Github like all this projects are, and proxy the traffic using Cloudflare for Free. I don't spend a single coin on my sites to put them alive and I have no business behind the work I did develop these last years. But lets continue to explore a bit more about this topic.
This topic is interesting to me, even if by condition I am probably a bit safe from all this knowledge that can create some damage on many others, I always like to study by reading, without listening what others tell me to do, since I cannot think and organize my thougts, only by listening what others tell us to do.
Laboratories to test security of applications in a secure way, is what we can do to test and study about this topic that is a bit sensible to all others. The Arsenal of our tools, can be big and to understand how each work, takes a lot of time and research, while we can always RTFM and lose less time to understand how things work. Some of these tools target industry named commonly as "Enterprise" services. CTFs are always good tool to see if our data was target of what we cannot fully control, CTI tools to investigate deeper about IPs, which can be useful for me, to research about the attackers of my sites, some other tools that are useful to test our servers if they host some domain, and many other tools that can be helpful for industry, to ensure their service is secure. The technique to read and modify values using a Hex editor, known as Reverse Engineering, which declare a funny theory: "If You know Assembly, everything is Open Source". Some rootkits that can be used against your Linux system, some Phishing tools to hack people that don't pay attention to links descriptions, some other word lists to find passwords, a big list of CVEs to understand how exploits work in a technical way, and many other things that are interesting to read and think (in case you like to think, which is not a common choice within many). The Rats always like Cheese and Leaks to find more food to eat, and use simulators to manage the assessments of our attacks, since hackers always see their learning as some game to play, and be aware of all other possiblities.
I really enjoy reading about this, while I spend several hours on this readings I feel better to know about the possibilities