Oct 10, 2017 08:18 AM
(This post was last modified: Oct 10, 2017 08:19 AM by Trouble-Maker.)
As the title says, I'm looking for a tutor. I've been learning on my own for about a year. But in a few lessons with someone I realised one-on-one is best.
My current lessons are really good but not nearly frequent enough to enable me to become pentester in the intended time frame.
I can do daily morning sessions (UK time zone), hoping to change careers in 3-4 months. Please get in touch if you can do this with me.
Man - learn frm book and check JackKtutorials , try using CTF challenges to test your skills and learn from others
Oct 10, 2017 10:55 AM
(This post was last modified: Oct 10, 2017 10:55 AM by sergey klykbaytovich.)
Quote:My current lessons are really good but not nearly frequent enough to enable me to become pentester in the intended time frame.
why do you need to become a pentester within a given time frame?
doesn't seem like very efficient time scheduling to me
DO NOT DEAL WITH THIS MEMBER
Two best things I did was read the following books:
Penetration Testing: A Hands-On Introduction to Hacking
Web Application Hackers HandBook
Then I discovered vulnhub after a month I was in pretty good shape. Hands on in a safe environment is important. It takes a little bit of time so setting up a time frame really isn't the best move, I did that and more than anything I hurried through material so I can get to labs, due to the time frame I set for myself.
Oct 10, 2017 01:44 PM
(This post was last modified: Oct 10, 2017 01:47 PM by Trouble-Maker.)
(Oct 10, 2017 10:55 AM)sergey klykbaytovich Wrote: why do you need to become a pentester within a given time frame?
doesn't seem like very efficient time scheduling to me
The reason is irrelevant.
(Oct 10, 2017 11:09 AM)CyberStrike Wrote: Two best things I did was read the following books:
Penetration Testing: A Hands-On Introduction to Hacking
Web Application Hackers HandBook
Then I discovered vulnhub after a month I was in pretty good shape. Hands on in a safe environment is important. It takes a little bit of time so setting up a time frame really isn't the best move, I did that and more than anything I hurried through material so I can get to labs, due to the time frame I set for myself.
I don't expect to know everything in that time, obviously. I expect ti keep learning. But I want to be able to do basic jobs as soon as may be.
I'll make my way through the material you recommend. But it's good to have a mentor, at least to fall back on.
(Oct 10, 2017 01:44 PM)Trouble-Maker Wrote: The reason is irrelevant.
regardless of whether it's irrelevant to you, it's a completely stupid.
you need a better timing schedule, or you need to get rid of it so you can learn pentesting properly
(Oct 10, 2017 09:28 AM)SIM-947411 Wrote: Man - learn frm book and check JackKtutorials , try using CTF challenges to test your skills and learn from others
No reason to assume I'm not doing that already. But I like access to someone who can answer questions at times. Obviously I'm willing to pay for the right quality of tuition.
DO NOT DEAL WITH THIS MEMBER
(Oct 10, 2017 01:44 PM)Trouble-Maker Wrote: The reason is irrelevant.
I don't expect to know everything in that time, obviously. I expect ti keep learning. But I want to be able to do basic jobs as soon as may be.
I'll make my way through the material you recommend. But it's good to have a mentor, at least to fall back on.
Very good yeah it takes about 3 months or so of dedication to start to be competent at pentesting. Most companies who want to be PCI compliant are just going to want a vulnerability scan, and you are rated on how much of your report you can stuff into excel, did that for a few years hated it although the money was decent and the work load was not too much. A good teacher is sometimes hard to get but there are good teachers out there you got us here as a resource till you find a teacher.
bumping for later results.
(Oct 10, 2017 03:06 PM)CyberStrike Wrote: Very good yeah it takes about 3 months or so of dedication to start to be competent at pentesting. Most companies who want to be PCI compliant are just going to want a vulnerability scan, and you are rated on how much of your report you can stuff into excel, did that for a few years hated it although the money was decent and the work load was not too much. A good teacher is sometimes hard to get but there are good teachers out there you got us here as a resource till you find a teacher.
Thanks for that information. I've been learning for almost a year. But being such an extensive field of knowledge, I'd like to get a structured foothold with someone's guidance. I've ordered the books recommended above and intend to spend several hours daily.
My current tutor is really knowledgeable. But in case we keep missing each other, I may need a plan B.
DO NOT DEAL WITH THIS MEMBER
I agree it takes a while to get your bearings then it takes a while to get proficient there are many aspects as well I personally have not messed with hacking phones in depth just a few times against personal devices and if scope includes company devices of a client. But you will get it you have already invested a year and I am confident that you will be very good at your trade craft. Best of luck to you.
Hi,
I'm pretty much new in this subject,
Ive seen the 2 books its recommended in this thread (penetration testing) and the web application handbook.
But i know i should start learning python and other languages (which i am) but i know im limited on what im learning by self guidance.
is there any type of notes, or other books that actually is more a way on how to start? or what to get proficient in? or how to apply your knowledge in this subject?
I feel i have so much information but not structured that im limited on what to do or how to get actually started.
I guess i should say what im interested in doing, how do you actually create a virus from 0? and how to configure it after knowing about a loophole?.
any recommendations?
Oct 26, 2017 08:15 AM
(This post was last modified: Oct 26, 2017 08:19 AM by Trouble-Maker.)
(Oct 10, 2017 01:53 PM)sergey klykbaytovich Wrote: regardless of whether it's irrelevant to you, it's a completely stupid.
you need a better timing schedule, or you need to get rid of it so you can learn pentesting properly
1 My reason is irrelevant to you, i.e. none of your damn business.
2 According to some, even in this thread, a few months is perfectly realistic for someone adequately committed.
(Oct 11, 2017 12:52 AM)CyberStrike Wrote: I agree it takes a while to get your bearings then it takes a while to get proficient there are many aspects as well I personally have not messed with hacking phones in depth just a few times against personal devices and if scope includes company devices of a client. But you will get it you have already invested a year and I am confident that you will be very good at your trade craft. Best of luck to you.
I've been working with the two books you recommended. They both seem very good. But a lot of the resources they refer to are no longer available. I'm not sure if I should continue or find more recent substitutes. I understand that the fundamental methods don't change that much.
|
