Top Tweets for #100daysofCybersecurity
Day 23/100๐
Completed Module 4 (Build a Home Network) + Checkpoint Exam with a perfect 100% on both! ๐ Today learned about Home Network Basics, Network Technologies, Wireless Standards, and how to Set Up a Home Router. ๐ป๐ก๏ธ
#100DaysOfCyberSecurity #Networking #CiscoNetAcad
Feels like a lot separately but it's slowly clicking into one big picture instead of random terms.
Day by day this is starting to feel less like memorizing and more like actually understanding how networks work.
#Cybersecurity #Networking #100DaysOfCyberSecurity
Day 34/100 of #100DaysOfCybersecurity ๐ฅ
Heavy study day โ finished 2 Google Cybersecurity modules on networking + knocked out 2 more PortSwigger SQL injection labs. Breaking it all down below.
Module 1: Network Architecture & Fundamentals
Networks = devices (laptops, servers, IoT) connected via wired/wireless, identified by IP address (logical) + MAC address (physical/hardware)
LAN = small area (home/office) | WAN = large area, connects multiple LANs (Internet = biggest WAN)
Key devices: Hub (broadcasts to all) โ Switch (sends to intended device only) โ Router (connects networks) โ Modem (connects to ISP)
Cloud/SDN: virtual versions of routers/switches/firewalls โ SaaS, PaaS, IaaS models + hybrid/multi-cloud
Data packets = Header (where) + Payload (what) + Footer (integrity check)
Bandwidth = Data รท Time | Packet sniffing = capturing/analyzing traffic (used by both defenders and attackers)
TCP/IP Model (4 layers, "NITA"): Network Access โ Internet โ Transport โ Application
OSI Model (7 layers, "All People Seem To Need Data Processing"): Physical โ Data Link โ Network โ Transport โ Session โ Presentation โ Application
IPv4 (32-bit, ~4.3B addresses) vs IPv6 (128-bit, way bigger) | Public IP (internet-facing) vs Private IP (LAN-only)
Network Layer: routers read destination IP + use TTL/checksum/protocol fields in the IPv4 header to route packets correctly
Module 2: Connect and Protect โ Network Security
Protocols: TCP (reliable, 3-way handshake) vs UDP (fast, no handshake) | HTTP (80, insecure) vs HTTPS (443, encrypted)
Management protocols: SNMP (monitor devices) | ICMP (ping/traceroute, error reporting)
NAT (privateโpublic IP translation) | DHCP (auto-assigns IPs, UDP 67/68) | ARP (IPโMAC resolution)
Telnet (insecure, plaintext, port 23) โ replaced by SSH (encrypted, port 22)
Email protocols: POP3 (download, 110/995) | IMAP (sync across devices, 143/993) | SMTP (sends mail, 25/587)
Wireless security evolution: WEP (weak/obsolete) โ WPA (TKIP) โ WPA2 (AES+CCMP) โ WPA3 (SAE, most secure today)
Firewalls: Hardware vs Software vs Cloud (FaaS) | Stateless (rule-based only) vs Stateful (tracks sessions, more secure) | NGFW = deep packet inspection + IPS + threat intel
VPNs = Encryption + Encapsulation + IP Masking โ main goal is confidentiality. Remote Access VPN (userโserver) vs Site-to-Site VPN (networkโnetwork). Protocols: WireGuard (fast/modern) vs IPSec (older/enterprise standard)
Security Zones: Internet (uncontrolled) โ DMZ (public-facing servers) โ Internal Network โ Restricted Zone (most sensitive data) = defense in depth
Subnetting & CIDR: dividing networks into smaller subnets (e.g. /24 = 255.255.255.0) for better performance, security, and segmentation
Proxy servers: Forward proxy (protects users) | Reverse proxy (protects servers) | Email proxy (blocks phishing/spam)
PortSwigger Labs โ SQL Injection UNION Attacks
Lab 1: Used ORDER BY to confirm the query returned 3 columns, then tested ' UNION SELECT NULL,'string',NULL-- across each position to find which column accepted text. Column 2 was the winner.
Lab 2: Took it further โ used UNION SELECT to pull username/password directly from the users table, exposing the administrator's credentials, then logged in to solve the lab.
Reminder: parameterized queries + input validation would've shut both of these down.
Key takeaway: Today connected the dots between how data legitimately moves through a network (protocols, zones, devices) and how attackers abuse the same data flow (SQLi). Networking theory is making the offensive labs make a lot more sense.
#CyberSecurity #InfoSec #SOCAnalyst #Networking #TCPIP #OSImodel #SQLInjection #PortSwigger #TryHackMe #WebSecurity #BlueTeam #LearnInPublic #GoogleCybersecurity #CyberSecurityTraining
๎๎ป๎๎ป๎น
๎
Day 72/100 of #100DaysOfCyberSecurity
I learned about the default gateway what it is and how it acts as the route that devices use to communicate with networks outside their LAN . I also learned how Network Address Translation (NAT)
@Sisinerd @ireteeh
#Lenovo: 131 #CVEs, 0 CISA KEV exploited. 99% unpatched. Trust Score: C. Your ThinkPad might be a risk. #cybersecurity #InfoSec #pentesting #developers #sysadmins #100daysofcybersecurity #StockCommunity #stock #trade #investments Detailed info https://t.co/LRhWEJP2Ps
Day 84 of #100DaysOfCybersecurity:
Completed Sysmon Log Analysis. Traced the attack kill chain from an updater.hta foothold to Python malware. Analyzed LOLBIN abuse (ftp.exe), %comspec% hijacking, and JuicyPotato usage to get a reverse shell.
#SOC #DFIR
#Dassault Systรจmes: 52 #CVEs, 100% unpatched. Avg CVSS 8.42, max 9.8. Trust Score: D. High-severity flaws in CATIA, SOLIDWORKS. #cybersecurity #infosec #pentest #devsecops #devops #sysadmin #hackers #100daysofcybersecurity #cybersecuritynews #cybernews https://t.co/w5QZtB5vvE
Day 22/100๐
Completed Module 3 (Wireless and Mobile Networks) with a perfect 100% score! ๐ถ๐ Slowly but steadily leveling up my networking fundamentals and core skills on the path to becoming a Cybersecurity Analyst. ๐ป๐ก๏ธ
#100DaysOfCyberSecurity #Networking #CiscoNetAcad
Day 33 โ #100DaysOfCybersecurity (Today)
Packed day diving deep into the Google Cybersecurity Certificate ๐
Here's everything I covered:
Logs & SIEM Tools
Learned what logs are (firewall, network, server) and how SIEM platforms like Splunk & Google Chronicle collect, analyze, and centralize them for real-time threat detection. Also explored SIEM dashboards โ Security Posture, Incident Review, Risk Analysis, IOC Matches, and more.
The Future of SIEM
Cloud-hosted vs cloud-native, how IoT expands the attack surface, and how AI/ML + SOAR are automating incident response. SIEM detects. SOAR responds automatically.
Open-Source vs Proprietary Tools
Linux & Suricata (open-source) vs Splunk & Chronicle (proprietary). Open-source โ less secure. Transparency often makes it stronger.
Incident Response Playbooks
The 6 phases: Preparation โ Detection & Analysis โ Containment โ Eradication & Recovery โ Post-Incident Activity โ Coordination. Playbooks are living documents โ always evolving with new threats.
PortSwigger SQL Injection Labs โ
Completed 2 labs:
โ Oracle UNION-based SQLi โ enumerated tables, extracted admin credentials, logged in as administrator
โ UNION column enumeration โ identified a 3-column query using NULL payloads
Every day the concepts are clicking more. Onto Networks tomorrow
#CyberSecurity #GoogleCybersecurity #SQLInjection #SIEM #Splunk #Chronicle #EthicalHacking #PortSwigger #SOC #Infosec #PenTesting #LearningInPublic #CareerChange
Day 32 โ #100DaysOfCybersecurity (ps; this was yesterday)
Shifted focus to networking protocols and how attackers actually exploit them ๐
TryHackMe โ Protocols & Servers (Rooms 1 & 2)
Here's what I learned:
Core Protocols (and why they're dangerous)
โ Telnet (port 23) โ cleartext remote access, replaced by SSH
โ HTTP (port 80) โ cleartext web traffic, response headers leak server info
โ FTP (port 21) โ cleartext file transfers, always test anonymous login
โ SMTP (ports 25/587/465) โ email sending, vulnerable to open relays & spoofing
โ POP3 (port 110/995) โ downloads email, credentials sent in cleartext
โ IMAP (port 143/993) โ server-stored email, multi-device sync, bigger post-compromise impact than POP3
Key Security Concepts
โ CIA Triad vs DAD (Disclosure, Alteration, Destruction)
โ Sniffing attacks โ violate Confidentiality
โ MITM attacks โ violate Integrity
โ SPF, DKIM & DMARC protect against email spoofing
โ Every legacy protocol has a secure alternative: TelnetโSSH, HTTPโHTTPS, FTPโSFTP, SMTPโSMTPS, POP3โPOP3S, IMAPโIMAPS
Understanding how these protocols work under the hood โ not just through GUIs โ is foundational for both offense and defense. 32 days in and the pieces are connecting ๐
#CyberSecurity #Networking #TryHackMe #Protocols #EthicalHacking #BlueTeam #RedTeam #SOCAnalyst #Infosec #LearningInPublic #100DaysOfCyberSecurity #CareerChange #PenTesting
#CVE-2026-47260 - #SSRF in Koel music streaming prior to 9.3.5 Episode enclosure URLs bypass validation, allowing server-side request forgery #CVSS 7.7 #infosec #cybersecurity #pentesting #pentesters #CVEAlert #100daysofcybersecurity Detailed info: https://t.co/ZIKwFEek9N
#CVE-2026-44168 - Command Injection in #MariaDB. #CVSS 8. Unvalidated SST parameters allow joiner to execute commands on donor. Update immediately. #infosec #cybersecurity #pentester #100daysofcybersecurity #database #hackers More detailed info: https://t.co/KzGTPLFvpd
@tryhackme @ireteeh @4osp3l @_DeejustDee @TemitopeSobulo @segoslavia Also finished:
โ
IAM Module (SAA-C03) - users, groups, roles, policies, federation & best practices
โ
Major progress on BookMyShow Clone
Grinding both security + full-stack.
@ireteeh @cyberjeremiah
#AWS #SAA #100DaysOfCyberSecurity
Day 42 #100DaysOfCyberSecurity
Big day ๐ฅ
โ
Completed "Preparation" (Incident Response) on @tryhackme
โ
Day 2 & 3 of AEE: DB schema, ingest endpoint, Celery tasks + two-phase approval gate done ๐ฏ
@ireteeh @4osp3l @_DeejustDee @TemitopeSobulo @segoslavia
#Zimbra: 47 #CVEs, 8 #CISA KEV exploited, 100% unpatched. Trust Score: D. Critical flaw (CVSS 10) unaddressed. Donโt let email be your weakest link. #cybersecurity #infosec #CVEAlert #stock #BusinessSuccess #100daysofcybersecurity #pentesting More info: https://t.co/qdba9eNsRP
#Flowise: 60 #CVEs, avg CVSS 8.03, max 10. 68% unpatched. Trust Score: C. #Opensource AI workflows are #vulnerableโfix flaws fast. #cybersecurity #infosec #cvealert #100daysofcybersecurity #pentester #developers #git #gitlab #github More information: https://t.co/7nyrvIsRrt
#Tuleap 38 CVEs, 1 high severity, 100% unpatched. Top weaknesses: CSRF + info exposure. Trust Score: C. Open-source ALM needs urgent patching. #infosec #cybersecurity #CVEAlert #CVE #linux #python #100daysofcybersecurity #InvestSmart Detaield info https://t.co/jcL7sb7p2r
#CVE-2026-48748 - DoS in Netty HTTP/3 codec. Memory exhaustion from infinite blocked streams. #CVSS 7.5. Update to https://t.co/L67dxwRxue immediately. #infosec #Netty #cyebrsecurity #100daysofcybersecurity #cybersecuritynews More detailed information: https://t.co/v4ts8Xsbhq
@ireteeh Currently, I am participating in the #100DaysOfCyberSecurity challenge, where I document my daily learning journey I have completed practical FTP and SFTP projects and I am looking forward to starting more hands-on Cybersecurity projects while learning under your mentorship Ma.
Last Seen Hashtags on Sotwe
nehasharma
omegle
Seen from France
letsgo
Seen from United States
เนเธญเธฒเธซเธต
Seen from Thailand
SRIAYUTARISA
Seen from Indonesia
flowersonfriday
pendikgay
Seen from Turkey
incestoconpapรก
Seen from United States
nolimit momson nolimit() +filter:native_video
Seen from Indonesia
AnjuKurian
Seen from France
Most Popular Users
Elon Musk 
@elonmusk
240.3M followers
Barack Obama
@barackobama
119.3M followers
Donald J. Trump
@realdonaldtrump
111.6M followers
Cristiano Ronaldo
@cristiano
109.6M followers
Narendra Modi
@narendramodi
106.9M followers
Rihanna
@rihanna
97.4M followers
NASA
@nasa
92.1M followers
Justin Bieber
@justinbieber
90.7M followers
KATY PERRY
@katyperry
87.2M followers
Taylor Swift
@taylorswift13
81M followers
Lady Gaga
@ladygaga
72.5M followers
Kim Kardashian
@kimkardashian
69.5M followers
Virat Kohli
@imvkohli
69.1M followers
YouTube
@youtube
68.6M followers
Bill Gates
@billgates
63.6M followers
The Ellen Show
@theellenshow
62.5M followers
CNN
@cnn
61.9M followers
Neymar Jr
@neymarjr
61.8M followers
X
@x
60.9M followers
Selena Gomez
@selenagomez
60.3M followers