Print Daniel Kelley post on a t-shirt
@danielmakelley
If you're ever in charge of security at a company that gets hacked, make sure incident response actually identifies the attack vector that was used in the hack and not just some random vulnerability. This occurred twice to 2 different businesses that I hacked in 2015.
Other Daniel Kelley posts to print
@danielmakelley
It’s hard to find good podcasts about cybersecurity.
In fact, I’ve listened to loads (trying to find the good ones).
Here are my Top 3:
• @DarknetDiaries
• @MaliciousLife
• @HackingHumansCW
What's your favourite podcast?
@danielmakelley
Here's a list of 43 cybersecurity YouTube channels:
1. Hak5 — General cybersecurity coverage.
2. The XSS Rat — Everything bounty hunting.
3. ITProTV — General cybersecurity coverage.
4. Infosec Institute — Cybersecurity awareness.
5. Cyrill Gössi — Extensive cryptography videos.
@danielmakelley
Hands-on experience beats everything in the cybersecurity industry.
If you're offered a job that may not seem like your ideal role:
Consider taking it away.
Gaining that initial experience can make it easier to pivot around.
@danielmakelley
30 cybersecurity search engines for researchers:
1. Dehashed—View leaked credentials.
2. SecurityTrails—Extensive DNS data.
3. DorkSearch—Really fast Google dorking.
4. ExploitDB—Archive of various exploits.
5. ZoomEye—Gather information about targets.
@danielmakelley
Do you consider the "freemium" model to be free?
I ask this because a lot of businesses will use this model to claim, that they are in fact a free service.
@danielmakelley
Anyone with an Internet connection can get into cybersecurity with nothing but a laptop:
@rootme_org is free.
@LetsDefendIO is free.
@Vulnmachines is free.
@hackthebox_eu is free.
@RealTryHackMe is free.
@OverTheWireCTF is free.
The resources are already out there.
@danielmakelley
You don't need someone that's highly regarded in cybersecurity to help you.
Instead, speak with someone who is a few steps ahead of you.
This is true for any profession.
@danielmakelley
10 resources if you're trying to get into cybersecurity:
@echoCTF
@rootme_org
@TCMSecurity
@PentesterLab
@LetsDefendIO
@Vulnmachines
@certifiedsecure
@hackthebox_eu
@RealTryHackMe
@OverTheWireCTF
These will save you 100s of hours.
@danielmakelley
"How do I get started in cybersecurity?"
It's quite simple, you start by starting.
- Advice is not starting.
- Planning is not starting.
- Information is not starting.
None of these things are starting.
The only way you can learn how to do something, is by doing it.
@danielmakelley
14 websites to find remote jobs:
▪ Hired
▪ Flex Jobs
▪ Jobspresso
▪ Remote OK
▪ Just Remote
▪ JS Remotely
▪ Daily Remote
▪ Remote Leaf
▪ Remote Work
▪ Remote Leads
▪ AngelList Talent
▪ Working Nomads
▪ Product Hunt Jobs
▪ We Work Remotely
@danielmakelley
If you're ever in charge of security at a company that gets hacked, make sure incident response actually identifies the attack vector that was used in the hack and not just some random vulnerability. This occurred twice to 2 different businesses that I hacked in 2015.