Cybersecurity Learning Notes

Documenting my journey through Nigeria's 3MTT Cohort 3 Cybersecurity Fellowship (Ethical Hacking & Cloud Security track) — from the basics up to where I currently am, plus my own personal security research on the side.

Real notes, real commands, real screenshots where possible. Not a polished course — a working log of what I'm actually learning, as I learn it.

Structure

/notes
  01-foundations/              - Intro to cybersecurity, CIA triad, Linux/Kali,
                                  sysadmin reference, hosting & practice targets
  02-networking/                - OSI model, DNS/TCP/UDP, ports & protocols,
                                  subnetting, Wireshark, OSINT/recon tools,
                                  binaries/hex, devices, topologies, wireless,
                                  mobile device security
  03-attacks/                   - Network attacks, DDoS, password cracking,
                                  social engineering, web app attacks, IoT
  04-frameworks-and-governance/ - NIST/ISO frameworks, risk management,
                                  compliance, cryptography, IAM
  05-defense-and-assessment/    - Network security, vuln assessment,
                                  pentesting methodology, incident response,
                                  digital forensics
  06-web-app-security/          - Burp Suite & manual testing workflow

/projects                       - Full standalone deliverables applying the
                                  concepts above: audits, risk assessments,
                                  IAM/PKI/crypto implementations, IR plans.
                                  See /projects/README.md for the index.

/research
  mitm/                         - Personal research: ARP poisoning, other MITM
                                  techniques, Wi-Fi MITM (with/without adapter)

/capstone                       - CS-07 NDPA Compliance Checklist capstone
                                  (docx + pdf + lab setup script)

/tools                          - Tools I build along the way (e.g. subrecon)
/resources                      - Curated links, wordlists, cheatsheets

What's covered so far

• Linux CLI fundamentals & Kali install/setup
• Intro to cybersecurity, CIA triad, daemons
• Networking fundamentals (OSI, DNS, TCP/UDP, ports, subnetting)
• Wireshark basics
• OSINT & recon tools, ProxyChains/Tor, fingerprinting
• Network attacks, DDoS, password attacks, social engineering
• Web app attacks (XSS, SQLi, HTML tampering) + Burp Suite
• IoT security
• Frameworks (NIST/ISO), risk management, compliance
• Cryptography, IAM
• Network security defenses, vulnerability assessment, pentesting methodology
• Incident response & digital forensics concepts
• MITM research (ARP poisoning, Wi-Fi MITM)
• Binaries/hex, network devices, topologies, wireless & mobile device security
• Capstone deep-dive (NDPA compliance report) — see /capstone
• Applied project portfolio — see /projects for full audits, risk assessments, and implementations (ISO 27001, IAM, PKI, incident response, network design, and more)

Note on scope: this repo intentionally excludes malware creation code or other functional offensive payloads - it covers attack concepts, detection, and defense, plus tool usage against explicitly authorized/ legal practice targets only.

About Me

I'm James "Syco" Omeiza - cybersecurity professional and bug bounty hunter based in Lagos, Nigeria. Find me on GitHub and X / @MrSyco09 for cybersecurity content.