gondragon@webdev: ~\ $ projects --help


===================================================================

██████╗ ██████╗  ██████╗      ██╗███████╗ ██████╗████████╗███████╗
██╔══██╗██╔══██╗██╔═══██╗     ██║██╔════╝██╔════╝╚══██╔══╝██╔════╝
██████╔╝██████╔╝██║   ██║     ██║█████╗  ██║        ██║   ███████╗
██╔═══╝ ██╔══██╗██║   ██║██   ██║██╔══╝  ██║        ██║   ╚════██║
██║     ██║  ██║╚██████╔╝╚█████╔╝███████╗╚██████╗   ██║   ███████║
╚═╝     ╚═╝  ╚═╝ ╚═════╝  ╚════╝ ╚══════╝ ╚═════╝   ╚═╝   ╚══════╝

===================================================================

Video-Game Modding

Modding is the action of modify a video game with the intention of add new content, change its looks, add new mechanics, etc. A mod is a single project that modifies one or various aspects of a game. Mods can be either done by replacing original files of the game, using differents APIs and Frameworks provided by the game developers, or somehow injecting code / assets.

The process varies from game to game, as it depends of how the game developers made the game, what technologies they used, and if they were intending the game to being moddable. As result, if you want to mod many games, you will end learning many technologies in the process. Many modern games are developed using Unity, a popular game engine. To mod a Game made in Unity, you need to use C# as a language, and learn how to inject your code using reflection. But other games may use other game engine, or even it's own. Lua and Python are popular languages for scripting, and they are generally used alongside a more performant language, like C++.

Thanks to this, I developed a variety of skills, on various languages and about various topics. UI, Pathfinding, Performance are just some of the ones that came to my mind. Most of the mods I made can be found on my Steam Workshop, but some may also be on independent websites, like that UI mod I made for Skyrim. There are also a lot of mods that I considered small enough to not upload them, that are not even on my github.

Bug Bounty Hunting and CTFs

Because the technology advances at a seemingly increasing speed, it became really hard to maintain a robust security layer between the code and the net. This lead many companies to implement Bug Bounty Programs. In these programs, the companies let individuals (from now on, "hackers") test the security of his websites, aps, webservices, servers, etc. There are always a set of rules of what and what not the hackers may test, how they may test it, and how they will be rewarded if they found a vulnerability.

Trying to vulnerate systems is certainly fun, but only when its legal. That's why the Bug Bounty Programs are so handy, you can have fun trying to vulnerate a target in scope, and if you find something, even receibe a reward. The sites I generally use to find Bounty Programs, are HackerOne and BugCrowd, but I'm always on the lookout for independent and local Bounty Programs.

And when I'm not trying to earn a bounty, or studying about a new topic in cybersecurity, I'm participating in a CTF of some sort. CTF are the initials of Capture The Flag, and it's a kind of competitive hacking, or gamified hacking. In a CTF, you're presented with a system (that may be a vulnerable website, an insecure entry point to a closed network, a corrupted or compiled file, a giant log of net traffic, etc.) and within the system, there is hidden one or manny "flags". These flags are easily recognizable and unique strings of text, that you need to find and show in order to proof that you beated the challenge. All the year there are CTF events, and you can also try some other more permanent challenges, as the security labs of PortSwigger, or the machines from Hack The Box.


gondragon@webdev: ~\ $ _