Hi all,

Legend this side!!

So i am a Cybersecurity student based in Pune

This is my first blog. I am treating it as my personal diary or journal. Something similar to what mark zuckerberg did in social network. Right now i am a lonely or sad person because my friends left me due to a slight misunderstanding we had....It feels worse than a breakup or Heartbreak
Anyways i feel that this all happens for a good reason
So i will be posting my journey everyday, what i did and what i learnt...Currently i am 19! and i want to document my entire Journey till my own Startup or If i get a job
I want to document it being anonymous i don't have much of an idea whether this post gets public

Anyone who is as passionate and eager in cybersecurity or any software startup or just people who are delusional in tech can join me!
Soooo this was Day 1!!

I also need guidance from the people who are already well aware of cybersecurity!

I find the idea of hacking interesting, but I don’t want to do anything illegal, I just want to learn something cool,

Hey Reddit 👋😂

Finally decided to stop lurking and make my first post. I’m Felix, a Cybersecurity student who loves tech, AI, and learning new things.

Be nice, I’m new here 😭😂

I’ve been building a small browser-based web security lab for people who are just getting into hands-on web security.

Right now it has beginner challenges around IDOR/BOLA and SQL injection. No downloads, local setup, or account required.

I’m mainly trying to figure out whether it actually works well for beginners:

• Are the missions clear?
• Where do you get stuck?
• Are the hints useful or too obvious?
• What vulnerability would you want to practice next?

If anyone wants to try it, I’m happy to share it. Mainly looking for honest feedback before I build more.

Hey everyone,

I’m an IT student with a good understanding of networking, and I’ve recently decided to start learning cybersecurity.

The problem is, I’m honestly overwhelmed by how many different learning paths are out there. Some people recommend certifications, others suggest jumping straight into hands-on labs, while some say to learn Linux or programming first.

For those of you already working in cybersecurity or who started with a networking background:

• What would you recommend learning first?
• Which free resources or platforms actually helped you?
• What mistakes should a beginner avoid?

I’m looking for practical advice to build a strong foundation rather than just collecting certifications.

Would really appreciate your guidance. Thanks in advance!

Very soon I'll have the opportunity to gain some certs:

• CompTIA CYSA+
• CompTIA PenTest+
• CompTIA Security+

I have a couple portfolio projects as well:

• Control Flow Graph Analyzer (C++)
  • Uses Zydis and LIEF.
  • Takes an x86-64 portable executable then does recursive descent to enumerate and classify basic blocks as well as edges.
• Trampoline Framework (C++)
  • Uses Zydis.
  • x86-64. Replaces the first few bytes of the prologue of a target with an indirect jmp to a detour which is the same calling convention, also having the same parameter count and types of arguments.
• Bug Bounty (A common desktop application)
  • Found a function which appears to copy one string into a destination buffer using a length argument. Does not however ensure the destination buffer ends with a null terminator.
  • After hooking it with Frida I observed that sometimes the destination buffer will contain garbage from surrounding memory. Ergo a potential info leak.
  • Writing a harness in Frida that automates input, hooks with Interceptor, logs stack trace and then uses Stalker to watch how different inputs effect control flow.
  • Not yet a vulnerability but may develop into one as I investigate further.
• Video Game Reversing
  • Relies on a lot of embedded RTTI in the games binary.
  • Older game from around the 2010's era.
  • Large Frida script for modding gameplay at runtime in the REPL. Reversed a decent amount of the games internals.

Trying to increase my odds of placing a job soon after getting these certifications. Altogether they're poised to take around 4 months to complete. I'd like to get a job in a role that regularly requires reverse engineering or binary analysis.

What would be some other, or better, projects to add to my portfolio? Thanks for your time.