Learning method, 20K and Asia

Since the past two weeks, I did a lot of stuff, and I mostly hunted, so I was pretty bus,y which is nice.

I'm working way more than before, and learning a lot more thanks to the collaboration I'm doing on a program. Also it will soon be my "vacations" in Asia so I'm preparing for it.

Learning method

Last week, I wrote about the fact that it's important to read a lot about this field, doing challenges and CTFs to improve his skills.

But I think that only reading articles won't help enough to implement it in your brain, and you need to do more than that. Doing CTF is great as it forces you to work and to search by yourself. And I know that it's nice doing it, but each time I'm doing a CTF, I'm like I'm wasting my time even if I know it's not the case.

Everyone think differently and learn differently as well. I love to read stuff and understand them, but I know that to really use it, I need to implement it. Before being on the attacker side, I was a developer, so to learn stuff, I was used to just create a new project and implement stuff myself.

Here is quite different. To implement something in Bug Bounty, you can do challenges, or find a part of an app you want to dig deep and implement something to break it. Another great way to learn something that works pretty well on myself is to teach it to someone else. Even if I'm not good at a subject, being forced to teach it to someone will help me going very deep to be sure I'm teaching it the right way.

It can be done by writing articles, doing videos or courses. It's pretty long but it works. Now, with AI, you can teach them stuff and ask for questions to help you be sure that you understood the concept. The only issue with that is about very technical stuff that is not very documented, which is what I'm mainly looking for.

So, I will try another method and will see if it can fit me. Instead of only reading a lot of articles without implementing them, I will pick a big program I have wanted to dig deep for a long time. On this program, I will take each part of the app, and dig deep as much as possible into each feature and learn this way by reading articles specific to the technology being used on that feature.

If there is a PDF generation setup on this app, I will dig deep as much as possible into every single possibility to exploit it, and will see if it's possible. I'm sure I'm going to learn a lot this way, and as a Bonus, I will find bugs and be good at this program by knowing it by heart.

I already have this program I wanted to try for a long time, so I just need to start. And I will tell you how it was.

20K of Paris

It's been now a month that I took a coach for running. And it's been very great, not having to think about what to do next and how.

This way, I can just focus on my stuff and do what the coach is giving me. And it works, I did a race last week and it was amazing. It was a 20K and I goat a new Personal Record on it which is what I was looking for.

It's crazy as this pace was like my sprint pace 2 years ago, and by running 4 times a week since that, I'm now able to run this pace for 20K.

I'm now running like 60K per week which is a lot. Around that, I'm still going to the gym like 2 or 3 times. 3 years ago, I didn't workout at all, and now I'm doing that. It changed a lot for me, and helped a lot, especially for my discipline.

My next big race is a 80K trail next March.

Asia Trip

Like every year, I'm doing a trip to Asia. I love going there, it's my safe place. This time, I will discover some new places.

I will start by going to Hong Kong for a few days, and then go to Chine, mainly going to Beijing and Shanghai.

Then, I will move to Busan for a few days before flying to Tokyo for two weeks. Busan and Tokyo is like a second home for me, so it will mainly be to work, run and eat, which is what I love the most.

I will continue posting here, with pictures to show you the best stuff I'm doing. It's so nice doing a job where you can move for a month anywhere and chill out this way.