Daily learning part twelve

Today I started at 16:00. I didn’t do any JavaScript sections because I’m at the end of the course, so I’m doing small projects to make me stronger at scripting.

I started by giving the book I bought yesterday a look and testing different MAC spoofing tools. I plan to make a tool myself, but not right now - maybe on the weekend.

IP LOOKUP SCRIPT
From 16:30 to 18:00 I was scripting a really simple IP lookup script in Python. It might be simple for some of you, but for me as a beginner it took me an hour and a half. Most of that time was spent staring at the screen and trying to figure out why my code wasn’t working.

I tried debugging it, but I set the breakpoint on the function call. When I stepped over it, the debugger just ran the function and moved to the next line without showing me anything. I thought my code was broken, but I had simply forgotten to put print() around the function call.

Vulnerability Class and Severity Filter
The second script I made was a Vulnerability Class and Severity Filter. This one took me about an hour. It took way longer to understand the concept than to actually script it. It’s a really simple script - I think I just wasn’t fully concentrated during this one. Anyway, here is the script:

Vulnerability Reporter in JavaScript
This was the last one and it took me an hour and a half. It was easy to understand, but the lack of sleep does its thing. Here is the code:

The last three hours were spent dealing with grep, trying to understand query parameters, watching videos on web vulnerabilities, and enrolling in the OWASP Top 10 IAAA Failures room on TryHackMe. In web parameter tampering I learned how to spot vulnerabilities like this:

<input type="hidden" id="1008" name="cost" value="70.00">

I need to keep these skills sharp — any recommendations?
Anyway, the last thing I did was build my next two‑week roadmap.
I finished the session at 23:40.

For now, I’m sticking to the plan. Tomorrow I’ll start with curl exercises , then move on to the Access Control lab. I’ll report back on how it goes.