Security Testing Journal Entry | w/e Friday January 26, 2024 - "Mentees Winning" Ed.

Highlights for the week

I am a proud "papa" this week. My mentees are thriving. Ony one from France is successfully advancing through her studies. My other mentee is being courted by two potential employers, each with promising paths to success. She and I spent the better part of last week rehearsing interview skills. She passed all the preliminary rounds and is now in the final stages.

As for me, job hunt remains a grind, but the learning goes on. Huge lesson learned regarding testing LLM and Salesforce.

What We Loved

1. As noted above, being a mentor and watching others thrive is a super I've unlocked.

What We Learned

1. Pen Test for "Cartlane" - 75% complete. Goal this week is to be 100% done
2. Burp Suite - LLM tests ... this was fun and relevant!; Will revist web cache poisoning
3. QA Day - Learned Saleforce testing. Good stuff. Goal this week -- python practice, all week (autom., scripts)
4. Cult.ure - paused! "Husband" - new chapter "Illumina" started

What We Longed For

1. As always, looking forward to getting hired soon. Happily, I applied to a Jr. Pen Test role (fingers crossed)

What We Loathed

1. Unemployment!!
2. Seeing far too many tech workers getting laid off for silly reasons, when clearly its to rerout the budget from payroll to R&D

Security Testing Journal Entry | w/e Friday January 19, 2024

Highlights for the week

Huge wins for my mentees. One is doing well getting back to her work and learning. The other is interviewing for a highly sought-after job that could propel her into a new light. We've been practicing her interviewing. As such she succeeded past the recruiter call. There was also a great module dropped on Burp Suite regarding LLM and ChatGPT security testing. Waiting for the steps and bug fixes to play with it. Also, started a new pen test applying an involved checklist.

What We Loved

1. Watching others succeed!

What We Learned

1. ISC(2) - Finished! Need to take the exam (if free)
2. Pen Testing - started with Cartlane
3. Automation - Playwright with Typescript: Finished! Need to get back to PW/Python
4. SQL Fundamentals: Done! Learned some basic SQL for data validation .. some test scenarios
5. Cult.ure - paused! "Husband .. Hipocrate": In progress
6. Burp Suite: LLM Module: In progress

What We Longed For

1. As always, longing for a job. I really need to ramp up the search.

What We Loathed

1. Tech Layoffs. The're starting to pick up pace.

Security Testing Journal Entry | w/e Friday January 12, 2024

Highlights for the week

The week came and went and there's a lot I don't feel got done. I'm at the tail-end of the ISC(2) modules, not sure I'm going to pay for the exam. Grinding through burp suite. Lot's of fun stuff. Been writing more too.

What actionable steps have I take so far?

1. Practiciing Burp Suite consistentl. But I need to start practicing more web app pen testing. I should also start with mobile.
2. Writing is helping me communicate a lot better.
3. I need to really start working. Task Rabbit or consulting.
4. I have to start my blog .. like seriously! I've been wasting my powers on reddit.

What tasks both home, and work are priorities?

1. Job Hunting takes precedence.
2. Pen Test practice is the no. 2 - lately, its ISC(2)
3. Burp Suite, no. 3
4. Writing as the no. 4

What small goal will I accomplish this week?

1. Start another Pen Test for a practice site

Am I setting time aside to prioritize my health?

1. YES

Security Testing Journal Entry | w/e Friday January 5, 2024 - "The first week of the New Year"

Highlights for the week

Trying to recouperate from a week off. Getting my sleep back in order. The great news is I lost some weight since I last recorded the value. Something on the order of 20lbs. The goal was for 165lbs, but to even be at 175lbs for all the work put in is worth celebrating. I'm liking what I see when I look at naked self in the mirror.

Goals for 2024

1. Let it all go, no matter what it is. All the hurts, traumas, and failures. LET IT GO!!
2. Land a new job!
3. Hopefully make the $$ to get certified
4. Start the blog "Expected Results"

What We Learned in 2023

1. For Security - Tons of Security-related things, most importantly being Burp Suite and Metasploit
2. For QA - Automation frameworks in Cypress, Playwright (using Python and Javascript)
3. For QA - Performance Testing w. JMeter; DB Test w. SQL;
4. Getting my writing mojo back
5. Also learned posting on Linked in is the worst!

What We Longed For

1. Money and benefits

What We Loathed

1. The lack of employment was the frustrating part of 2023. I hope thigns turn around this year