ShreKy Profile picture
Sep 27, 2022 โ€ข 14 tweets โ€ข 7 min read โ€ข Read on X
Want to learn #coding in 2022?

Here are the BEST FREE/PAID resources for you to learn as FAST as possible.

Thread๐Ÿงต

#programming #IT #cybersecurity #code #infosec #python #java #javascript #web
โœ‹Before we start, make sure to RT the first tweet to spread these tips with others.
First off, you need to decide what language(s) to learn.

Below is a list of the most popular languages to help you decide which one is best for you:
(source: dzone.com/articles/top-1โ€ฆ) Image
Now that you decided(or maybe not), START LEARNINGโ€ผ๏ธ

Remember, SPEED is key to SUCCESS.(doesn't mean you have to sacrifice quality in exchange)

No time to wait, the next tweet will contain training sites/courses to learn/practice coding:
1. FreeCodeCamp(Free) โ€“ freecodecamp.org

2. Codecademy(Free trial) โ€“ codecademy.com

3. Team Treehouse(Paid) - teamtreehouse.com

4. Programming with Mosh(Free) - youtube.com/playlist?list=โ€ฆ

5. Other YouTube courses(Free) / Udemy courses(paid)
Here are a couple/IDEs:

1. Visual Studio Code(all around) - visualstudio.microsoft.com

2. Pycharm(for Python) - jetbrains.com/pycharm/

3. Eclipse(for Java) - eclipse.org/ide/

And Text Editors:

1. Sublime - sublimetext.com

2. Atom

3. Notepad++
Now that you know where to learn from and what to use, here are some tips to keep in mind during your learning process๐Ÿ‘‡
1๏ธโƒฃ Learn everyday

It is important to be consistent.

Dedicate time EVERY SINGLE DAY, even if its a couple of minutes at once, its important to get into the habit of not quitting.

Rather than cramming a bunch of info in one sitting, it's better to spread it in multiple sessions.
2๏ธโƒฃ Master the fundamentals

IMPORTANTโ—

When learning something new, it may be tempting to go through all the material at once.

However, don't get too cocky and focus on mastering the basics FIRST.

Don't jump into advanced stuff straight away after finishing the first lessons. Image
3๏ธโƒฃ Apply what you learn

After you learn something new, a way to make sure you understand it is to put it in PRACTICE.

This means to not just watch/read all the material mindlessly, but to actually make sure you grasped the subject of the lesson.

Pull up an IDE and practice.
4๏ธโƒฃ Teach others

Arguably the BEST way to enhance your knowledge is to teach others.

It is a great learning experience not only for them,but also for you.

If you can teach your mom something you learnt about coding, that's when you know you understand what you're talking about.
5๏ธโƒฃ Get on GitHub --> github.com

As a coder, you have to be there.

There you will manage your projects, work with others, etc.

"GitHub is a code hosting platform for version control and collaboration. It lets you and others work together on projects from anywhere."
6๏ธโƒฃ Practice

This ties to 3๏ธโƒฃ.

Build your own projects, create a portfolio of them, solve problems online, participate in competitions.

After the basics, continue to progress into more advanced stuff.

An example of a platform to practice any language โžก๏ธ hackerrank.com
Congratulations on getting to the end๐Ÿฅณ

Hopefully this thread will help you kickstart your journey on learning how to code.

What are you waiting for now?

GET LEARNINGโ—

Also, don't forget to RT the first tweet, and drop me a follow for more of these.

โ€ข โ€ข โ€ข

Missing some Tweet in this thread? You can try to force a refresh
ใ€€

Keep Current with ShreKy

ShreKy Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @shrekysec

Oct 27, 2022
Bug Testing Methodology Series:

๐’๐’๐‘๐… (๐’๐ž๐ซ๐ฏ๐ž๐ซ ๐’๐ข๐๐ž ๐‘๐ž๐ช๐ฎ๐ž๐ฌ๐ญ ๐…๐จ๐ซ๐ ๐ž๐ซ๐ฒ)

Learn how to test for #SSRF step by step on real #bugbounty programs

Thread๐Ÿงต๐Ÿ‘‡

#cybersecurity #cybersecuritytips #infosec #hacking #bugbountytips #infosecurity
Before we start, this thread won't teach how SSRF works, but rather a methodology to follow while actively testing for it.

To learn about how SSRF attacks work, have a read here โžก๏ธ portswigger.net/web-security/sโ€ฆ
1๏ธโƒฃ Finding an attack vector

This step simply implies using the web app THOROUGHLY and finding a place where you input a URL and the server fetches it.

Ex: profile pic from URL, URL Redirects, etc.

The best tip I can give you for this step is: CLICK EVERY SINGLE BUTTON YOU SEE
Read 9 tweets
Oct 24, 2022
Introduction to #XSS

Learn the basics of ๐‚๐ซ๐จ๐ฌ๐ฌ-๐’๐ข๐ญ๐ž ๐’๐œ๐ซ๐ข๐ฉ๐ญ๐ข๐ง๐  (๐—๐’๐’)

Thread๐Ÿงต๐Ÿ‘‡

#bugbounty #bugbountytips #bugbountytip #cybersecurity #cybersecuritytips #infosec #infosecurity #hacking
Let's inspect the name first:

The ๐’๐œ๐ซ๐ข๐ฉ๐ญ๐ข๐ง๐  part indicates, obviously, scripting, so we can think about what kind of scripting we know exist in Web Apps: HTML & JavaScript being the 2 most common.

Secondly, XSS is part of the INJECTION bug class (see @owasp's Top 10)
So, we now know XSS consists of injecting scripts in websites.

Types of XSS:

1. Reflected
2. Stored
3. DOM-based
They can also be Blind too (you don't see the reflection)

As this thread is aimed at beginners, I will focus on the first 2 as they're easier to understand at first
Read 12 tweets
Oct 18, 2022
Bug Testing Methodology Series:

๐๐€๐‚ (๐๐ซ๐จ๐ค๐ž๐ง ๐€๐œ๐œ๐ž๐ฌ๐ฌ ๐‚๐จ๐ง๐ญ๐ซ๐จ๐ฅ)

Learn how to test for Broken Access Control step by step on real #bugbounty programs.

Thread๐Ÿงต๐Ÿ‘‡

#cybersecurity #cybersecuritytips #infosec #hacking #bugbountytips #infosecurity
Before we start, this thread will not teach exactly how Broken Access Control vulnerabilities arise, but rather a testing methodology.

If you want to learn how BAC bugs work, check this out โžก๏ธ portswigger.net/web-security/aโ€ฆ
1๏ธโƒฃ Know your target

In order to know what which user role can do, you have to know your target well.

If documentations are available, make full use of them, if not, use the app as much as you can from the perspective of each user role (have a different account for each role)
Read 9 tweets
Oct 13, 2022
#BugBounty Writeup Timeโฐ

Application DOS through unfinished image contents:
๐Ÿงต๐Ÿ‘‡

#bugbountytips #infosec #cybersecurity #cybersecuritytips #hacking #bugbountytip
Context about target:

Small blockchain platform allowing users to launch and contribute to projects.

Projects can contain a banner image, and this is where the bug resides.

This is gonna be a short one.
When uploading an image for the project, it sent a POST request with an "image" WebKitFormBoundary parameter, which contained the image contents.

After some XSS testing, I came across that removing the last line of the image contents resulted in weird behavior.
Read 6 tweets
Oct 5, 2022
Bug Testing Methodology Series:

๐—๐’๐’ (๐‚๐ซ๐จ๐ฌ๐ฌ ๐’๐ข๐ญ๐ž ๐’๐œ๐ซ๐ข๐ฉ๐ญ๐ข๐ง๐ )

Learn how to test for #XSS step by step on real #bugbounty programs.

Thread๐Ÿงต๐Ÿ‘‡

#cybersecurity #cybersecuritytips #infosec #hacking #bugbountytips #infosecurity
Before we start, it should be mentioned that this thread will only focus on the testing methodology of XSS, not teaching how it works.

If you don't already know what XSS is, check this out โžก๏ธ portswigger.net/web-security/cโ€ฆ
1๏ธโƒฃ Look for reflections

This is the first step in finding XSS.

Anywhere you see user input is reflected in the response (not limited to what you see on the page, it could be in source code/HTTP response only), note the location/parameter down, that's a potential attack vector.
Read 10 tweets
Oct 4, 2022
Complete roadmap to get into #cybersecurity in 2022:

Thread๐Ÿงต๐Ÿ‘‡

#cybersecurity #cybersecuritytips #infosec #hacking #hacker #bugbounty #bugbountytips #infosecurity
1๏ธโƒฃ IT Fundamentals

Before jumping into more advanced fields, you gotta know the basics.

You can learn everything you need for FREE from
@ProfessorMesser's course โžก๏ธ professormesser.com/free-a-plus-trโ€ฆ

For reference, you should be apt for @CompTIA's A+ certification before the next step.
2๏ธโƒฃ Networking

It's time to get technical.

Networking will teach you how the internet works, and it's CRUCIAL to have a SOLID understanding of this subejct.

You don't have to be a network engineer, but know things like the OSI Model, TCP/IP, Ports & Services, CIDR, Subnets, etc
Read 18 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(