วีดีโอ

Tbh, I'm not an expert in white box bug bounties. But I still do code analysis a lot at work. Static code analysis tool is your best friend for simple vulnerabilities like the ones you listed. But usually they are covered/fixed cause they are pretty easy to find. I'd invest in learning the application thoroughly and looking for vulnerabilities related to its business logic (finding vulnerable integrations, edge cases, etc.).

Thanks. You too!

Thanks! I'm considering some audio programming videos, and will probably touch AI topics in them.

hey TLDR: I'd recommend CS. I don't think the exact degree matters for work. Try to swap roles and imagine yourself as a hiring manager who needs to fill in the role. Will you choose one with a more specific degree over skills and certificates? Definitely not. Will you choose one with more specific degree over another one with the same skillset and certificates? Most likely not. You'll look deeper into soft skills and overall "fit" for the team. In addition, you actually need to learn a lot how different systems work to be a good cybersecurity specialist. And a general CS degree might be better for that. You'll definitely learn cybersecurity specifics preparing for certificates and doing actual work. Also, As a fellow 3rd world country expat and a CS bachelor, I would recommend you to pick the CS one to have better visa and work options. I got mine in my home country and I never had problems with it, but it might be better to get one in Germany for the knowledge and the people you meet. Also, it should be a lot easier to stay in Germany after the university than relocate there with a working visa if you're considering that. Best luck

Thanks! This is Roland TD-30 with a couple of additional cymbals

@@maksyche That is so cool! What model are the additional cymbals?

@@josephwarth939 I think they are Roland CY-5 for splash and CY-8 for china

Thanks a lot!

Wow. Thanks a lot. Nice to see you here I think I missed the deadline and I'm not that good yet :D

I've been using VMware fusion for the past 4 years. Cannot say if it's better or worse than others, but I found settings that work great for me

@@maksyche Thanks you. I just learned Cybersecurity for 3 months now and I am using VMware fusion too but something I use UTM to install Parrot OS and Vulnhub Machine because on Vmware Fusion doesn't support.

@@khunjame7 Parrot provides an ARM image that's suitable for VMware. I haven't tried to install it, but that's what they say on the website. It might work for you. Anyway, I'm actually thinking about switching from Kali to something more desktop-friendly and stable (cause I still have problems with different screens sizes and some graphic issues). Almost all tools I use are available for every linux, so it should be very easy to switch.

It often does, but I think you can still find a way to make income out of your passion without ruining it if you're patient enough

Can you make a video or guide on how to go from zero to passing the oscp. Or just tips idc

@@CSchwan58273 I passed mine in 2021 and the exam changed at least twice after, so my experience is a little bit outdated. But I'll think about it

Kali linux (which is recommended for OSCP) fully supports ARM, just install it as a VM. Most of the tools you need, work out of the box, others can be replaced with similar ones. The main problem is that sometimes you need to compile exploits for x86 and cross-compilers usually have many issues. In this case I recommend you to rent a VM in any cloud when you need it. Smallest Windows/Linux VMs are usually covered by the "free" plan and they are enough for such tasks. Best luck

@@maksyche thanku..

Hi! I'm not thinking about such a video for now, but maybe later. SQL injection prevention implementation depends on the language and the library you use, but generally, you should avoid any concatenation or parametrization of SQL queries using string utils. You should always rely on prepared statements. Also, static code analyzers (like SonarQube) highlight you almost all possible SQL injections, so it's helpful to use them in your IDE (or even better in build pipelines of your project).

@@maksyche thankyou for your guidance 🙏😄

If I find enough time to make videos, I hope you'll see more of them in the future.

I didn't mention this in the video, but with that learning pace and having a full-time job on top, I accumulated some health issues. A healthier work-life balance and going slow might be even better in the long run. Best luck with your journey

Thank you! It's an old Roland TD-30. I modified the frame and added a couple of cymbals

Roland TD-30 with a couple of additional cymbals