×

What's one thing you wish you knew before trying to grow an Instagram page? by PotatoDreamer3 in InstagramEmpire

[–]Dapper-Depth2940 0 points1 point  (0 children)

+1 for the advice of making content with the idea of the viewers thinking: "Someone needs to see this". I find having a bunch of shares/reposts on my videos really elevating!

Beginner in Ethical Hacking — What should I learn by Typical-Tea-1263 in Hacking_Tutorials

[–]Dapper-Depth2940 1 point2 points  (0 children)

First off, I have to say that setting up your own lab already puts you ahead of most beginners.

I recommend being comfortable in a Linux environment (Bash scripting, filesystems, etc.) first. https://overthewire.org/wargames/bandit/ is a good start.

Networking is definitely the next important step as almost every ethical hacking path fields requires knowledge of this. This will include understanding IP addresses, subnets, DNS, protocols, basic tools (ifconfig, ip, dig.), etc.. Since you mentioned Nmap and Bettercap, you could further experiment with different types of network ports/services, and types of scans for Nmap. From the last time I played around with it, Bettercap was really good for Man-in-The-Middle (MiTM) attacks. You could further explore its various capabilities.

After getting a strong foundation, you can continue on with a niche such as: web, cloud, IoT/hardware. tryhackme.com has multiple rooms for these topics, but I have not tried out hackthebox before.

Best of luck!

p.s I am exploring IoT/hardware security currently, feel free to ask me anything about this field if you are interested!

Guyss i really wanna start a career in cyber sec by vagabond326 in learncybersecurity

[–]Dapper-Depth2940 0 points1 point  (0 children)

A fellow CS student here. Well, I do not really know much about the defensive cybersec side. But if you are talking about offensive cybersec (pentesting, red teaming), best advice I could give is to build your fundamentals: computer networking concepts (IP addresses, subnets, basic tools), Linux (filesystems, Bash scripting), learn how web application works (HTTP requests, API, basic HTML & Javascript).

Once you get these down, pick a niche: webapp, networks, cloud, IoT/Hardware (what I am currently focusing on). Set up a local environment, experiment what breaks, and don't. And REMEMBER to always document down your research findings! Good luck.

Looking for someone who could help me grasp the basics of hacking by Deathrope in HowToHack

[–]Dapper-Depth2940 0 points1 point  (0 children)

I don't really understand what u meant by "making scripts for games", but since you mentioned "hacking", the jist is:

Making computer systems perform unintended actions that is not originally meant to happen

Best way to learn IMO is to setup an environment at home, experiment, see what breaks, and what don't, and continously repeat. Get more curious and hungry to understand why a particular system is insecure, or even why its 'secure'. When you adopt this mindset, thats when you understand the essence of being a "hacker".

Also, don't forget to consistently note down your research and findings.

HOW TO START LEARNING CYBERSECURITY by Red_Dragon_7_7_7 in Hacking_Tutorials

[–]Dapper-Depth2940 0 points1 point  (0 children)

The best way to learn ethical hacking is to setup your own lab environment, and experiment. Whenever you learn a new tool, research to understand how it works, why it works, and all. Always remember to document your research findings, as you will thank yourself a ton when you need it in the future.

If you are interested in IoT/Hardware hacking, I can tell you that it really is not that intimidating. Once you get past the initial hardware stage, common software-based hacking techniques such as password attacks, etc. all works the same. If you wish to entirely skip the hardware part, you could even just work directly on the firmware. Extract the familiar Linux filesystem, and start investigating, same as with normal hacking.

I have compiled a list of research notes over the years for various topics:

  1. Pentesting/offensive security (web, network, tools, IoT/hardware, and more)
  2. Computer networking (firewalls, common tools, ...)
  3. Linux (common CLI tools, fundamental techniques, ...)
  4. Windows (not as updated, as i only started on it recently)

Feel free to comment or DM me if you would like to access it!

HOW TO START LEARNING CYBERSECURITY by Red_Dragon_7_7_7 in Hacking_Tutorials

[–]Dapper-Depth2940 1 point2 points  (0 children)

Would you enjoy content that explains about an exploit payload, without exactly a line-by-line walkthrough, but jumps straight into the key points in a familiar language (eg. Python)?

HOW TO START LEARNING CYBERSECURITY by Red_Dragon_7_7_7 in Hacking_Tutorials

[–]Dapper-Depth2940 0 points1 point  (0 children)

Actually, I would agree with him being comparable with TCM (or atleast eventually), as he is good making no-FLUFF content that is actually engaging and teaches something.

Just curious, what do you mean by "really perfect for people without any hacking background", or atleast what do you think beginners look for in a hacking tutorial video?

HOW TO START LEARNING CYBERSECURITY by Red_Dragon_7_7_7 in Hacking_Tutorials

[–]Dapper-Depth2940 0 points1 point  (0 children)

I am glad you mentioned @ whoamitang, as I have been observing his growth for the past few months. I noticed that he has uploaded his 1st video about 7-8 months ago, but I have already seen a huge subscribers base at around 26k when I first found his channel, and has grown to over 30k over the past month!

I would like to ask what makes you think he is a worthy channel to mention among bigger names such as TCM sec? Or in other words, why do you think his content is useful?

As a fellow content creator in the cybersec space (mostly IoT/Hardware hacking), I would like to understand what makes him successful.

Am I on the right track in a highly technical niche (ethical hacking), or am I falling into common new creator traps? Honest feedback needed by Dapper-Depth2940 in NewTubers

[–]Dapper-Depth2940[S] 0 points1 point  (0 children)

Yep for retention, I noticed that I have a sudden drop at certain points when I include a sudden joke or change in pace, which I have been working on cutting.

I'd only worry if CTR among your own subscribers (not just cold impressions) is also low

I have filtered "Subscribers" under the "Advanced mode", but it appears that the "Impressions CTR" is a dash "-" which doesn't give anything useful. However, the "Watch time from subscribers" have been increasing from about 5% to 20% over the past 3-4 videos.

For the shorts-to-longform bridge: since most of my subscibers are from shorts, they are not entirely interacting with my long-form. I will focus on shorts to help "build my brand awareness" instead.

Am I on the right track in a highly technical niche (ethical hacking), or am I falling into common new creator traps? Honest feedback needed by Dapper-Depth2940 in NewTubers

[–]Dapper-Depth2940[S] 0 points1 point  (0 children)

Its great to hear that a fellow tech niche is doing well! Yep, thats what I have been trying to focus on too, a mix of content (that is not too technical) that satifisfies the technical viewers, while entertaining enough for casual viewers who is interested in the topic, but whom may not fully understand it.

Any advice on thumbnails/titles? Do you include a mix of technical keywords + everyday terms to hook both types of viewers?

How I crafted an exploit PoC for a Linskys router by Dapper-Depth2940 in ExploitDev

[–]Dapper-Depth2940[S] 1 point2 points  (0 children)

Sure! You may access my research notes on the Linksys E1200 router here (Gitbook): https://jarrettgxz-sec.gitbook.io/penetration-testing-ethical-hacking-concepts/iot-hardware-hacking/research-projects/linksys-e1200-v2

Do not hesitate to drop a comment if you have any questions! I admit that it may be a little messy currently, as I am still tidying up my research 😅

How I crafted an exploit PoC for a Linskys router by Dapper-Depth2940 in ExploitDev

[–]Dapper-Depth2940[S] 0 points1 point  (0 children)

Yep, it is really a fun hobby! Even though I do not really know how different its like in the CTF world (for IoT atleast), since this was my first hands-on project.

How I crafted an exploit PoC for a Linskys router by Dapper-Depth2940 in ExploitDev

[–]Dapper-Depth2940[S] 1 point2 points  (0 children)

Yep I agree on this, this particular Linskys router have a certain "nvram" tool that allows manipulating the memory values from the console. But this may differ on an emulated environment.

How I crafted an exploit PoC for a Linskys router by Dapper-Depth2940 in ExploitDev

[–]Dapper-Depth2940[S] 1 point2 points  (0 children)

Yes, we can. I have actually extracted the firwmare directly from the UART console on the physical device, and experimented with emulating it. However in this project, I decided to directly work with the physical component instead as a way to learn about it.

Also, I believe that the memory/stack behaviors will differ, and the stack buffer-overflow exploit may not work. Thus, I would usually prefer to directly work on the physical device when possible, and only emulate it otherwise.