[CrouchingTig3r]

I was wondering what would be the appropriate route to go down to get into pen testing , ethical hacking when you're beginning or starting out.

Would it looking like this ?

Networking+ ---> Security+ ----> OSCP ??

Or what should be the exact time line or route

[Fladrif]

If you want to be the best, work in IT (network / server admin or development) for 10 years then get a job in infosec

[CrouchingTig3r]

If you want to be the best, work in IT (network / server admin or development) for 10 years then get a job in infosec

doesn't sound right but thanks for the comment .

[Fladrif]

Sorry but it is right, its not easy, but thats life :)

If you just want to be another junior pentester with specific skills in one area i.e. web pentesting then yeah maybe there are some shortcuts and OSCP/hackthebox/vulnhub are some of them, but youll never be as good as that person that spent 10 years developing web apps or managing a network and then moved into security...

[CyberStrike]

That is how old school InfoSec professionals did it, like you went from tech support to jr admin to admin ( of course you get certs and all that jazz). In truth and speaking from that school there are things I immediately think of which others may not. Security+ will teach you how an administrator thinks which is important but it's no where near what you need to know to tackle an actual pentesting cert, unless CEH or something.

[CrouchingTig3r]

That is how old school InfoSec professionals did it, like you went from tech support to jr admin to admin ( of course you get certs and all that jazz). In truth and speaking from that school there are things I immediately think of which others may not. Security+ will teach you how an administrator thinks which is important but it's no where near what you need to know to tackle an actual pentesting cert, unless CEH or something.

This field will make you go far through experience but when starting out what should one know and obtain to get your foot even In the door.

[Fladrif]

Quick mode -> download Kali, sign up for hackthebox, watch ippsec videos, profit.

Yeah you'll learn how to compromise web servers and escalate privileges in very specific circumstances, but it wont do you a huge amount of good in the real world of infosec.

[doth3righthong]

You could also work your way into the skill with bounties. Find bugs and exploits as a side hobby.

[CrouchingTig3r]

Quick mode -> download Kali, sign up for hackthebox, watch ippsec videos, profit.

Yeah you'll learn how to compromise web servers and escalate privileges in very specific circumstances, but it wont do you a huge amount of good in the real world of infosec.

If Kali Linux didn't take so much of my space on my Mac id begin learning.

[Fladrif]

You don't necessarily need Kali. A browser and a copy of Burp will get you a fair way on a lot of CTFs and web challenges.

[Bugsplat]

Kali is just an OS with a bunch of shit you probably won't use. Just download what you need.

[CrouchingTig3r]

You don't necessarily need Kali. A browser and a copy of Burp will get you a fair way on a lot of CTFs and web challenges.

I've been trying to follow this TUT



https://www.youtube.com/watch?v=3Kq1MIfTWCE

[Fladrif]

It's a 14 hour long video, I'm not sure what you want from me but I'm not watching it all 😛

Just keep doing your research, don't ask questions that a million people have already asked, watch loads of tutorial videos and you'll be on the right track. It looks like quite a generic vid which is good when you're starting out, but you could also start looking at more specific attack types. And watch some blackhat/defcon videos and some sans instructional videos too. You'll be pwning in no time...

[Bass_Reeves]

I was wondering what would be the appropriate route to go down to get into pen testing , ethical hacking when you're beginning or starting out.

Would it looking like this ?

Networking+ ---> Security+ ----> OSCP ??

Or what should be the exact time line or route

The Cyber Mentor has literally answered your question - https://www.youtube.com/watch?v=dRTqRJsr1ss

Apprently took him just over 2 years from help desk - pentester.

[CrouchingTig3r]

The Cyber Mentor has literally answered your question - https://www.youtube.com/watch?v=dRTqRJsr1ss

Apprently took him just over 2 years from help desk - pentester.

2 years isn't long, time isn't what im worried about, more so developing the skills to even get to the point where I want to be and mapping everything out.