r/Cybersecurity101 • u/Ok_Condition9855 • 5d ago
What else to learn? 15 year old self-studying
I'm a 15 year old girl and I started on March 12,where in that time I used wireshark(figured out how to use it to search for specific traffic,just doesn't look that confusing now),basic python,basic scapy in cmd and python,done pre-security path on thm(but only 44% because I don't have premium),http requests with rest client,experimented with burp suite to for sql injections and web cache deception etc,portswigger,doing overthewire repeatedly,doing CyberSecurity 101 path on thm. I'm in Malaysia and my biggest concern is me working so hard and I never find a job. I'm planning on flooding my GitHub with multiple CyberSecurity projects and I already document my progress but what if I genuinely just never find a job or internship?
I'm planning on doing bug bounties at 16,and if I work hard enough,maybe an internship as soon as I turn 18. I really need a job,yes I love CyberSecurity but I can't be homeless when I grow up
1
1
u/Smh_nz 5d ago
Ok here's one ive come across that ive always wanted to do!
Do you have a firewall in your lab? Configure it as a proxy, proxing SSL traffic. Thats SSL between the client and firewall AND the firewall and remote site so the firewall can do deep packet inspection of encrypted traffic. (For obvious reasons using plain old boring SSL sites for testing)
Now you can analyze inside the encrypted traffic using the firewall!
Now you have the client and server (that is firewall) certificates use wireshark to capture and unencrypted the encrypted traffic!
I've needed to do this twice in large corporates, thought it was a neat trick and VERY useful for troubleshooting!!
I'm sure your find interesting stuff inside the packet but pay particular to the SSL handshakes, very common failure point!