🚀 Day 3: STL in C++, CSRF & HTTP Request Smuggling, and Python Fundamentals

Building consistency one day at a time while preparing for opportunities in Cybersecurity and Software Development 💻🛡️

🎯 Today’s Goal

🧠 DSA: Complete STL and solve 2–3 array problems 🛡️ Cybersecurity: Learn CSRF and HTTP Request Smuggling basics 🐍 Rotative Slot: Python Fundamentals

📚 What I Studied

🧠 DSA

Completed learning the C++ Standard Template Library (STL) and practiced understanding its usage.

I did not solve any DSA problems today, which was a missed opportunity to reinforce the concepts.

🛡️ Cybersecurity

Focused mainly on CSRF basics.

I did not complete hands-on practice, read technical articles, or attempt the HTTP Request Smuggling lab.

🐍 Python

No Python study today.

💡 What I Learned

🧠 DSA

Completed core STL concepts including List, Pair, Map, Set, Multiset, Multimap, Queue, Stack, Deque, Unordered Map, Unordered Set, and Priority Queue.

Also revised useful built-in C++ functions such as sort(), reverse(), max_element(), __builtin_popcount(), and next_permutation().

Although resume building and job searching were necessary, I regret not allocating enough time to actual problem-solving practice today.

🛡️ Cybersecurity

Learned the fundamentals of CSRF (Cross-Site Request Forgery).

I also briefly explored YouTube’s source code to better understand how large platforms structure client-side data and requests.

🐍 Python

No progress in Python, backend development, or Kotlin today.

This needs to be prioritized in upcoming sessions, especially Python fundamentals such as Lists, Sets, Tuples, Dictionaries, Functions, args, kwargs, Modules, and Scope Resolution.

🛠️ What I Practiced

🧠 DSA

Practiced STL syntax and usage examples.

🛡️ Cybersecurity

Completed approximately half of a CSRF lab on TryHackMe.

🐍 Python

No practice today.

🔐 Vulnerabilities / Technical Concepts Learned

CSRF (Cross-Site Request Forgery)

CSRF is an attack where an attacker forges a request and sends it through an authenticated victim.

If the victim is already logged in to the target application, the browser may automatically include session cookies, causing the server to process the malicious request as legitimate.

This happens because the target application trusts the request without properly validating its origin.

Key Observations

✅ CSRF can affect both GET and POST requests ✅ Before testing for CSRF, check for state-changing functionality ✅ Applications relying only on session cookies are often vulnerable

🛡️ Basic Mitigations

• Validate Origin and Referer headers
• Use anti-CSRF tokens
• Follow a zero-trust validation approach

📖 Notes from Learning Resources

Articles & Videos

📌 TakeUForward — STL Guide 📌 AlgoMaster — C++ Crash Course

🏋️ Health and Discipline

💪 Exercise: 60-second jumping jacks 60-second plank 22 Russian twists Crunches 12 leg raises 26 bicycle crunches

🧘 Meditation: 5 minutes

🎵 Mental Wellness: Listened to music to reset focus

⏳ Time Audit

🕒 Time Wasted: Idle scrolling on LinkedIn and extended job searching

Main Distractions

• Frequent phone checks 📱
• Context switching
• Spending excessive time on resume building
• Poor time allocation for lower-priority tasks

✅ Wins

✨ Completed C++ STL ✨ Started learning web vulnerabilities through CSRF ✨ Maintained exercise and meditation discipline

⚠️ Failures / Friction Points

• Delayed starting due to late sleep 😴
• Spent too much time on routine tasks
• Lost focus because of unnecessary distractions
• Notes could have been sharper and more concise

📈 Improvement Plan for Tomorrow

✅ Avoid checking social media for the first hour after waking up ✅ Keep the phone away during deep work sessions ✅ Solve 3 array problems + revise 2 previous ones ✅ Write sharper technical notes ✅ Follow stricter time blocks

📅 Tomorrow’s Learning Plan

🧠 DSA

Learn hashing, continue array concepts, and solve array problems.

🛡️ Cybersecurity

Complete the CSRF lab on TryHackMe, study content discovery and OSINT reconnaissance, attempt an HTTP Request Smuggling lab from PortSwigger, and complete INE Module 3: Recon.

🐍 Python

Learn Lists, Sets, Tuples, Dictionaries, Functions, args, kwargs, Modules, and Scope Resolution.

Practice building a Hangman project and solving basic encryption exercises.

⚙️ Productivity / Setup

Learn Notion and create a GitHub account.

📝 Daily Reflection

Today was not the kind of day I want to repeat.

The biggest lesson I learned is that starting early matters. It is easy to lose momentum when focusing on time already wasted instead of making the most of the time still available.

I would not call this a bad day because resume building and job searching are also important parts of my long-term goals. However, I need to manage these tasks better so they do not consume the time reserved for deep technical learning.

This day reminded me that not every day will be perfect. Some days expose weaknesses in discipline, focus, and planning — and those lessons are valuable.

The most important thing is this:

I showed up. I learned something meaningful. And I built momentum for tomorrow. 🚀

MyDailyJournal #Cybersecurity #DSA #CPP #Python #Productivity #SelfImprovement #SoftwareDevelopment