DEV Community

Md. Lavib Uddin Ashik
Md. Lavib Uddin Ashik

Posted on

Completed Two TryHackMe Cybersecurity Learning Rooms!

🔐 Completed Two TryHackMe Cybersecurity Learning Rooms!

āφāĻŽāĻžāϰ Cybersecurity learning journey-āĻāϰ āφāϰ⧇āĻ•āϟāĻŋ āϧāĻžāĻĒ āϏāĻŽā§āĻĒāĻ¨ā§āύ āĻ•āϰāϞāĻžāĻŽ TryHackMe-āĻāϰ āĻĻ⧁āϟāĻŋ hands-on learning room:

🔹 Offensive Security Intro
🔹 Defensive Security Intro

āĻāχ āĻĻ⧁āϟāĻŋ room āϏāĻŽā§āĻĒāĻ¨ā§āύ āĻ•āϰāĻžāϰ āĻŽāĻžāĻ§ā§āϝāĻŽā§‡ Cybersecurity-āϕ⧇ āĻļ⧁āϧ⧁ āĻāĻ•āϜāύ attacker-āĻāϰ āĻĻ⧃āĻˇā§āϟāĻŋāϕ⧋āĻŖ āĻĨ⧇āϕ⧇ āύāϝāĻŧ, āĻāĻ•āϜāύ defender-āĻāϰ āĻĻ⧃āĻˇā§āϟāĻŋāϕ⧋āĻŖ āĻĨ⧇āϕ⧇āĻ“ āĻŦā§‹āĻāĻžāϰ āϏ⧁āϝ⧋āĻ— āĻĒ⧇āϝāĻŧ⧇āĻ›āĻŋāĨ¤

đŸŸĨ Offensive Security āĻĨ⧇āϕ⧇ āϝāĻž āĻļāĻŋāϖ⧇āĻ›āĻŋ

Offensive Security āĻ…āĻ‚āĻļ⧇ āĻŽā§‚āϞāϤ āĻāĻ•āϜāύ ethical hacker āϕ⧀āĻ­āĻžāĻŦ⧇ āĻāĻ•āϟāĻŋ system āĻŦāĻž web application-āĻāϰ āĻĻ⧁āĻ°ā§āĻŦāϞāϤāĻž āϖ⧁āρāĻœā§‡ āĻŦ⧇āϰ āĻ•āϰāĻžāϰ āĻšā§‡āĻˇā§āϟāĻž āĻ•āϰ⧇, āϏ⧇āχ mindset āĻāĻŦāĻ‚ basic methodology āϏāĻŽā§āĻĒāĻ°ā§āϕ⧇ hands-on āϧāĻžāϰāĻŖāĻž āĻĒ⧇āϝāĻŧ⧇āĻ›āĻŋāĨ¤

āĻŦāĻŋāĻļ⧇āώāĻ­āĻžāĻŦ⧇ āĻļāĻŋāϖ⧇āĻ›āĻŋ:

â€ĸ Ethical hacking āĻ“ Offensive Security-āĻāϰ āĻŽā§ŒāϞāĻŋāĻ• āϧāĻžāϰāĻŖāĻž
â€ĸ āĻāĻ•āϟāĻŋ web application-āĻāϰ hidden āĻŦāĻž accessible pages āϖ⧁āρāĻœā§‡ āĻŦ⧇āϰ āĻ•āϰāĻžāϰ āĻĒā§āϰāĻ•ā§āϰāĻŋāϝāĻŧāĻž
â€ĸ Directory enumeration-āĻāϰ basic āĻŦā§āϝāĻŦāĻšāĻžāϰ
â€ĸ āϏāĻŽā§āĻ­āĻžāĻŦā§āϝ security weakness āϕ⧀āĻ­āĻžāĻŦ⧇ identify āĻ•āϰāĻž āϝāĻžāϝāĻŧ
â€ĸ āĻāĻ•āϟāĻŋ vulnerability āϕ⧀āĻ­āĻžāĻŦ⧇ āĻŦāĻžāĻ¸ā§āϤāĻŦ security risk āϤ⧈āϰāĻŋ āĻ•āϰāϤ⧇ āĻĒāĻžāĻ°ā§‡â€”āϤāĻžāϰ practical āϧāĻžāϰāĻŖāĻž
â€ĸ Attacker āϕ⧀āĻ­āĻžāĻŦ⧇ āϚāĻŋāĻ¨ā§āϤāĻž āĻ•āϰ⧇ āĻāĻŦāĻ‚ āϕ⧀ āϧāϰāύ⧇āϰ information āϖ⧁āρāϜāϤ⧇ āĻĒāĻžāϰ⧇

āϏāĻŦāĻšā§‡āϝāĻŧ⧇ āϗ⧁āϰ⧁āĻ¤ā§āĻŦāĻĒā§‚āĻ°ā§āĻŖ āĻŦāĻŋāώāϝāĻŧ āĻšāĻ˛ā§‹â€”āĻāϗ⧁āϞ⧋ āĻāĻ•āϟāĻŋ safe and controlled lab environment-āĻāϰ āĻŽāĻ§ā§āϝ⧇ āĻ…āύ⧁āĻļā§€āϞāύ āĻ•āϰ⧇āĻ›āĻŋāĨ¤

đŸŸĻ Defensive Security āĻĨ⧇āϕ⧇ āϝāĻž āĻļāĻŋāϖ⧇āĻ›āĻŋ

Defensive Security room-āϟāĻŋ āφāĻŽāĻžāϕ⧇ cybersecurity-āĻāϰ āĻ…āĻ¨ā§āϝ āĻāĻ•āϟāĻŋ āϗ⧁āϰ⧁āĻ¤ā§āĻŦāĻĒā§‚āĻ°ā§āĻŖ āĻĻāĻŋāϕ⧇āϰ āϏāĻ™ā§āϗ⧇ āĻĒāϰāĻŋāϚāϝāĻŧ āĻ•āϰāĻŋāϝāĻŧ⧇āĻ›ā§‡â€”āϕ⧀āĻ­āĻžāĻŦ⧇ attack detect, investigate āĻāĻŦāĻ‚ contain āĻ•āϰāĻž āĻšāϝāĻŧāĨ¤

āĻāĻ–āĻžāύ⧇ āφāĻŽāĻŋ āĻ…āύ⧁āĻļā§€āϞāύ āĻ•āϰ⧇āĻ›āĻŋ:

â€ĸ SOC-āĻāϰ basic workflow
â€ĸ Security alerts review āĻ“ alert triage
â€ĸ IOC (Indicator of Compromise) identify āĻ•āϰāĻž
â€ĸ Attacker-āĻāϰ activity āĻŦāĻŋāĻļā§āϞ⧇āώāĻŖ āĻ•āϰāĻž
â€ĸ Attack chain āĻŦāĻž attacker-āĻāϰ actions āĻ…āύ⧁āϏāϰāĻŖ āĻ•āϰ⧇ investigation āĻ•āϰāĻž
â€ĸ Suspicious activity āĻĨ⧇āϕ⧇ relevant information āĻŦ⧇āϰ āĻ•āϰāĻž
â€ĸ Attack containment-āĻāϰ basic concepts
â€ĸ IP blocking āĻ“ rate limiting-āĻāϰ āĻŽāϤ⧋ defensive measures
â€ĸ Web Application Firewall (WAF) rules āĻŦā§āϝāĻŦāĻšāĻžāϰ āĻ•āϰ⧇ malicious activity āĻĒā§āϰāϤāĻŋāϰ⧋āϧ⧇āϰ āϧāĻžāϰāĻŖāĻž
â€ĸ Incident Response-āĻāϰ āϏāĻ™ā§āϗ⧇ āĻāϏāĻŦ defensive actions-āĻāϰ āϏāĻŽā§āĻĒāĻ°ā§āĻ•

TryHackMe-āĻāϰ simulation-āĻāϰ āĻŽāĻžāĻ§ā§āϝāĻŽā§‡ āĻŦ⧁āĻāϤ⧇ āĻĒ⧇āϰ⧇āĻ›āĻŋ, cybersecurity āĻļ⧁āϧ⧁ vulnerability āϖ⧁āρāĻœā§‡ āĻŦ⧇āϰ āĻ•āϰāĻžāϰ āĻŦāĻŋāώāϝāĻŧ āύāϝāĻŧ; āĻāĻ•āϟāĻŋ attack detect āĻ•āϰāĻžāϰ āĻĒāϰ āĻĻā§āϰ⧁āϤ āĻāĻŦāĻ‚ āϏāĻ āĻŋāĻ•āĻ­āĻžāĻŦ⧇ response āĻĻ⧇āĻ“āϝāĻŧāĻžāĻ“ āϏāĻŽāĻžāύ āϗ⧁āϰ⧁āĻ¤ā§āĻŦāĻĒā§‚āĻ°ā§āĻŖāĨ¤

💡 āφāĻŽāĻžāϰ āϏāĻŦāĻšā§‡āϝāĻŧ⧇ āĻŦāĻĄāĻŧ āωāĻĒāϞāĻŦā§āϧāĻŋ

āĻāχ āĻĻ⧁āϟāĻŋ room āĻāĻ•āϏāĻžāĻĨ⧇ āϏāĻŽā§āĻĒāĻ¨ā§āύ āĻ•āϰāĻžāϰ āĻĒāϰ āφāĻŽāĻžāϰ āĻ•āĻžāϛ⧇ āĻāĻ•āϟāĻŋ āĻŦāĻŋāώāϝāĻŧ āφāϰāĻ“ āĻĒāϰāĻŋāĻˇā§āĻ•āĻžāϰ āĻšāϝāĻŧ⧇āϛ⧇:

“To defend a system effectively, you need to understand how it can be attacked.”

āĻāĻ•āĻĻāĻŋāϕ⧇ Offensive Security āφāĻŽāĻžāϕ⧇ attacker-āĻāϰ mindset āĻŦ⧁āĻāϤ⧇ āϏāĻžāĻšāĻžāĻ¯ā§āϝ āĻ•āϰ⧇āϛ⧇, āĻ…āĻ¨ā§āϝāĻĻāĻŋāϕ⧇ Defensive Security āĻļāĻŋāĻ–āĻŋāϝāĻŧ⧇āϛ⧇ āϕ⧀āĻ­āĻžāĻŦ⧇ āϏ⧇āχ āϧāϰāύ⧇āϰ activity detect, investigate āĻāĻŦāĻ‚ contain āĻ•āϰāĻž āϝāĻžāϝāĻŧāĨ¤

āĻāχ hands-on experience āφāĻŽāĻžāϰ Cybersecurity fundamentals āφāϰāĻ“ āĻļāĻ•ā§āϤāĻŋāĻļāĻžāϞ⧀ āĻ•āϰāĻžāϰ āĻĒāĻžāĻļāĻžāĻĒāĻžāĻļāĻŋ āĻ­āĻŦāĻŋāĻˇā§āϝāϤ⧇ Web Security, Penetration Testing, SOC āĻāĻŦāĻ‚ Incident Response-āĻāϰ āĻŽāϤ⧋ āĻ•ā§āώ⧇āĻ¤ā§āϰāϗ⧁āϞ⧋ āφāϰāĻ“ āĻ—āĻ­ā§€āϰāĻ­āĻžāĻŦ⧇ āĻļ⧇āĻ–āĻžāϰ āϜāĻ¨ā§āϝ āφāĻŽāĻžāϕ⧇ āĻ‰ā§ŽāϏāĻžāĻšāĻŋāϤ āĻ•āϰ⧇āϛ⧇āĨ¤

āĻāϟāĻŋ āφāĻŽāĻžāϰ learning journey-āĻāϰ āĻļ⧇āώ āύāϝāĻŧ—āĻŦāϰāĻ‚ āφāϰāĻ“ āĻŦāĻĄāĻŧ āĻāĻ•āϟāĻŋ journey-āĻāϰ āĻļ⧁āϰ⧁āĨ¤ 🚀

🔗 TryHackMe — Offensive Security Intro:
https://tryhackme.com/room/offensivesecurityintrokKx12

🔗 TryHackMe — Defensive Security Intro:
https://tryhackme.com/room/defensivesecurityintrocseus

CyberSecurity #TryHackMe #OffensiveSecurity #DefensiveSecurity #EthicalHacking #SOC #IncidentResponse #WebSecurity #PenetrationTesting #CyberSecurityLearning #LearningJourney #InfoSec

Written by Md. Lavib Uddin Ashik
Web Developer | Cybersecurity Enthusiast | Ethical Hacker

Top comments (0)