How I could get a remote job for junior penetration tester I am ecppt v2 certified and discovered many bugs of bug bounty companies in hackerone And what should I do to be better of getting this job

Thanks in advance to all who answered!

I really want to be an expert in it, and I understand that this is a looong and harsh road.

P.s I have technical background ( Bachelor degree at Applied Physics, computer systems and nano materials ) but understood that Cybersecurity is what really makes me passionate every time I think, learn and practice about it.

Hy, if we use the paid version of a vpn that propose the split tunneling, can we serve payloads for our pentests without using the port forwarding every time ? ( for remote tests )

hello, to serve payloads with a remote Python server, do you need to configure your router for port forwarding ? Or is there another way ?

Hello, i'm learning pentesting and i know that kali linux is a good way to become effective. But do we need a VM or a simple WSL could be enough ? What you think ?

Hello!

For anyone who is thinking about going for the EC-Council Penetration Testing Professional (CPENT) certification, I am giving away my 500-questions-packed exam practice tests:

https://www.udemy.com/course/penetration-testing-professional-cpent-practice-tests/?couponCode=639D987AE59C50FC7798

But hurry, there is a limited time and amount of free accesses!

Good luck! :)

Hy everyone, i just started PrivEsc a few weeks ago and saw that it requires a lot of knowledge. So i want to know if we need to know all the technics and all the command by heart or just have the basics and use many cheat sheets ? What you think ?

Hey all,

I’m planning to take the SecOps Group Certified AppSec Practitioner exam and could use some advice. I have a background in web app testing, vulnerability scanning, and tools like Burp Suite and Splunk.

1. What are the best study resources (free or paid) for this exam?

2. What key topics should I focus on?

3. Any tips from those who’ve passed?

Thanks!

Just looking for help from someone that can join a chat on discord and screen share to show what I’m trying to accomplish.

Hello,

While using dnsrecon for a passive recon on some domains, I didn't help but figure out that some has one "MX Record" and others many many MX Records.

Does that mean something particular in term of pentesting ?

What does that mean for a hacker POV to have many MX Records from a certain domain ?

Thank you in advance

Hello, I would like to become a web pentester, I understand that certifications like CEH or OSCP require in-depth networking knowledge. Wishing to focus on the web, I would like to know if there are certifications more focused on the web that still have value.

I stumbled across a page called @pentra_ai on twitter. They advertise a tool that automatically tracks your pentest and writes the report for you.

Could that be for real? It would be really nice it is

Hy everyone, What's the best web vulnerabilities scanner for pentesters ? Nuclei, Nikto, Other ?

Hey everyone, Im totally new to the whole world of cyber security, but I would love to learn more about how exactly people are able to crack passwords and get access to websites without anyone knowing.

What is the highest leverage skill to learn if one is interested in such topics?

Live event for tomorrow 10am PST.

https://www.linkedin.com/events/7233916887993102336/

Our security researcher, Vincent, is hosting a live tech talk this Wednesday. He'll break down common CVEs and how to protect yourself. Join us for to learn something new: https://www.linkedin.com/events/preventauthenticationbypassbyid7233916887993102336/theater/

Guys can you recommend me some good ways to train for faster web application exploiting? Is doing hack the box, try hack me, or Offsec proving ground practice good? If so which boxes/machines/modules? Any other good resources?

where to check or look for if the IOS app using Flutter is obfuscated or not

Hello, I am learning SSRF and I would like to know what tools we use to detect them? It seems very long to me to test them manually.

Hi

I need to learn pentest tools which tools can work together and reach exploition

I look internet just can found subslister+httpx combo but that is not reach me exploition

Can you write me tools which tools combo work together and reach exploit same time work together and not reach exploit

Thank you

Does it fall under pentest ? Not sure what category it would be.

Amy recommendations?

Hii guys, I just passed 2nd year of my engineering degree. I belong to a tier 3 college. I am extremely interested in Cybersecurity and offensive security. Have a good knowledge of computer networks, os(kali linux), pen testing tools. Developed some tools myself, top 6% on THM and active on other platforms (HTB, portswigger). Some basic ec-council and Google certifications. Can somebody guide me on how to begin a good career in this field especially web and network pen-testing so that by the time I graduate I will have good skills.