+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: Ethical Hacking/PenTesting CompTia Question (/showthread.php?tid=6039871)
Pages: Pages
1
2
Ethical Hacking/PenTesting CompTia Question - CrouchingTig3r - Jan 10, 2020
I was wondering what would be the appropriate route to go down to get into pen testing , ethical hacking when you're beginning or starting out.
Would it looking like this ?
Networking+ ---> Security+ ----> OSCP ??
Or what should be the exact time line or route
RE: Ethical Hacking/PenTesting CompTia Question - Fladrif - Jan 11, 2020
If you want to be the best, work in IT (network / server admin or development) for 10 years then get a job in infosec
RE: Ethical Hacking/PenTesting CompTia Question - CrouchingTig3r - Jan 11, 2020
(Jan 11, 2020 01:20 AM)Fladrif Wrote: If you want to be the best, work in IT (network / server admin or development) for 10 years then get a job in infosec
doesn't sound right but thanks for the comment .
RE: Ethical Hacking/PenTesting CompTia Question - Fladrif - Jan 11, 2020
Sorry but it is right, its not easy, but thats life :)
If you just want to be another junior pentester with specific skills in one area i.e. web pentesting then yeah maybe there are some shortcuts and OSCP/hackthebox/vulnhub are some of them, but youll never be as good as that person that spent 10 years developing web apps or managing a network and then moved into security...
RE: Ethical Hacking/PenTesting CompTia Question - CyberStrike - Jan 11, 2020
That is how old school InfoSec professionals did it, like you went from tech support to jr admin to admin ( of course you get certs and all that jazz). In truth and speaking from that school there are things I immediately think of which others may not. Security+ will teach you how an administrator thinks which is important but it's no where near what you need to know to tackle an actual pentesting cert, unless CEH or something.
RE: Ethical Hacking/PenTesting CompTia Question - CrouchingTig3r - Jan 11, 2020
(Jan 11, 2020 08:32 AM)CyberStrike Wrote: That is how old school InfoSec professionals did it, like you went from tech support to jr admin to admin ( of course you get certs and all that jazz). In truth and speaking from that school there are things I immediately think of which others may not. Security+ will teach you how an administrator thinks which is important but it's no where near what you need to know to tackle an actual pentesting cert, unless CEH or something.
This field will make you go far through experience but when starting out what should one know and obtain to get your foot even In the door.
RE: Ethical Hacking/PenTesting CompTia Question - Fladrif - Jan 11, 2020
Quick mode -> download Kali, sign up for hackthebox, watch ippsec videos, profit.
Yeah you'll learn how to compromise web servers and escalate privileges in very specific circumstances, but it wont do you a huge amount of good in the real world of infosec.
RE: Ethical Hacking/PenTesting CompTia Question - doth3righthong - Jan 11, 2020
You could also work your way into the skill with bounties. Find bugs and exploits as a side hobby.
RE: Ethical Hacking/PenTesting CompTia Question - CrouchingTig3r - Jan 11, 2020
(Jan 11, 2020 09:38 AM)Fladrif Wrote: Quick mode -> download Kali, sign up for hackthebox, watch ippsec videos, profit.
Yeah you'll learn how to compromise web servers and escalate privileges in very specific circumstances, but it wont do you a huge amount of good in the real world of infosec.
If Kali Linux didn't take so much of my space on my Mac id begin learning.
RE: Ethical Hacking/PenTesting CompTia Question - Fladrif - Jan 11, 2020
You don't necessarily need Kali. A browser and a copy of Burp will get you a fair way on a lot of CTFs and web challenges.
RE: Ethical Hacking/PenTesting CompTia Question - Bugsplat - Jan 11, 2020
Kali is just an OS with a bunch of shit you probably won't use. Just download what you need.
RE: Ethical Hacking/PenTesting CompTia Question - CrouchingTig3r - Jan 11, 2020
(Jan 11, 2020 02:51 PM)Fladrif Wrote: You don't necessarily need Kali. A browser and a copy of Burp will get you a fair way on a lot of CTFs and web challenges.
I've been trying to follow this TUT
https://www.youtube.com/watch?v=3Kq1MIfTWCE
RE: Ethical Hacking/PenTesting CompTia Question - Fladrif - Jan 11, 2020
It's a 14 hour long video, I'm not sure what you want from me but I'm not watching it all 😛
Just keep doing your research, don't ask questions that a million people have already asked, watch loads of tutorial videos and you'll be on the right track. It looks like quite a generic vid which is good when you're starting out, but you could also start looking at more specific attack types. And watch some blackhat/defcon videos and some sans instructional videos too. You'll be pwning in no time...
RE: Ethical Hacking/PenTesting CompTia Question - Bass_Reeves - Jan 11, 2020
(Jan 10, 2020 05:15 PM)CrouchingTig3r Wrote: I was wondering what would be the appropriate route to go down to get into pen testing , ethical hacking when you're beginning or starting out.
Would it looking like this ?
Networking+ ---> Security+ ----> OSCP ??
Or what should be the exact time line or route
The Cyber Mentor has literally answered your question - https://www.youtube.com/watch?v=dRTqRJsr1ss
Apprently took him just over 2 years from help desk - pentester.
RE: Ethical Hacking/PenTesting CompTia Question - CrouchingTig3r - Jan 11, 2020
(Jan 11, 2020 03:38 PM)Bass_Reeves Wrote: The Cyber Mentor has literally answered your question - https://www.youtube.com/watch?v=dRTqRJsr1ss
Apprently took him just over 2 years from help desk - pentester.
2 years isn't long, time isn't what im worried about, more so developing the skills to even get to the point where I want to be and mapping everything out.