I’m currently working through (and banging my head against) working with Python scripts to simulate pentesting techniques.
I enjoy watching the TCM Security YouTube channel for several reasons:
- It’s entertaining
- It’s informative and current
- And it gives you ideas to help you stand out in a crowded pool of applicants in InfoSec
The one video in particular stood out to me:
In it, The Cyber Mentor talks about having side projects to throw on your GitHub and as such, list on your resume.
I thought this was a wonderful idea, and while you don’t need to code to be in InfoSec, to stand out, it might be helpful.
Since I come from a software dev background, this felt like the right thing to do.
It’s cool to move blazingly fast and enshittify things #
I worked with Python almost 10 years ago when I was learning to code. I enjoyed it, but the wave was frontend; the framework wars were brewing and I was caught up in the hype, such as this:
No offense to Kent, but this is certianly one of the videos of all time
There was a very chic mystic about frontend engineering and I fell into it, even though I really didn’t like it.
I kept up with it, made my bones and bacon in and with it, lost jobs with it, but I remained in that space, hating every bit of it.
I began to get angry at the very thought of something breaking because 10 million upstream dependenices depended on this:
Which is just checking to see if there is some property on an object. This is basically one line of code that is an upstream dependency on millions of projects. That’s just one example.
I’m not trying to rant here, just trying to set context. Anyway.
Simple scripts and their lack of being simple #
I’m back to using Python to write a simple DDoS script.
I’ve spent majority of my time on GitHub repos doing similar things, in the Python docs, and writing, overengineering, then simplifying the script.
There are bizarre errors I am not familiar with, however I am lucky to have a good friend to pair program with, who has been helpful.
You can find the script on my repo.
Simple proof of concept script to demonstrate ddos with Python