Landed a PenTesting job with no real experience - help
https://www.reddit.com/r/Pentesting/comments/mbqcoc/landed_a_pentesting_job_with_no_real_experience/

<!-- SC_OFF -->Hello everyone, I'm hoping I can get some feedback here but please let me know if there's a subreddit better suited for PenTesting career questions. Some Background: I graduated last year with a CS degree and have spent the last year looking for software engineering jobs with no luck. I had one InfoSec internship as a student but I didnt think it would be enough to land me a job so I stuck with SE in the meantime while I figured out how to get my foot in the cyber world. I'm familiar with some security tools and the cyber field but have zero hands on experience working with things like metasploit or ctf's. Played around with some cyber websites likes tryhackme. Current Situation: I just recently started branching off into cyberSec job applications and interviewed for a junior embedded systems penetration tester position and some how landed the job. The recruiting manager said they don't expect me to know everything (its a very niche field) but as you can expect, I'm quite nervous. The job description sounds incredible but Im scared I might not be prepared for whats to come. Fortunately, I have one month until my official start date and I'm hoping I can use this time to familiarize myself with the field before I start.
My new manager said they would teach me the ropes but I can honestly say I've never done anything with embedded systems and PenTesting them is not turning up anything on google. Thoughts? Appreciate any help in the matter <!-- SC_ON --> submitted by /u/sloan0101 (https://www.reddit.com/user/sloan0101)
[link] (https://www.reddit.com/r/Pentesting/comments/mbqcoc/landed_a_pentesting_job_with_no_real_experience/) [comments] (https://www.reddit.com/r/Pentesting/comments/mbqcoc/landed_a_pentesting_job_with_no_real_experience/)

CTF-Party - A Ruby Library To Enhance And Speed Up Script/Exploit Writing For CTF Players

A library to enhance and speed up script/exploit writing for CTF players (or security researchers, bug bounty hunters, pentesters but mostly focused on CTF) by patching the String class to add a short syntax of usual code patterns. The philosophy is also to keep the library to be pure ruby (no dependencies) and not to re-implement what another library is already doing well (eg. xorcist for xor). For example instead of writing: require 'base64'myvar = 'string'myvar = Base64.strict_encode64(myvar) Just write (shorter and easier to remember): require 'ctf_party'myvar = 'string'myvar.to_b64! Features base64: to_b64, to_b64!, from_b64, from_b64!, b64? digest: md5, md5!, sha1, sha1!, etc. flag: flag, flag!, flag? (apply/check a flag format) rot: rot, rot!, rot13, rot13! hex: hex2dec, dec2hex, to_hex, from_hex, hex2bin, bin2hex and bang versions References Homepage / Documentation: https://noraj.github.io/ctf-party Author Made by Alexandre ZANNI (@noraj), pentester from Orange Cyberdefense. Download Ctf-Party
Read more...

KitPloit - PenTest Tools!
CTF-Party - A Ruby Library To Enhance And Speed Up Script/Exploit Writing For CTF Players

https://1.bp.blogspot.com/-UDClO79plco/YFegS0yAm0I/AAAAAAAAVpQ/I_F8U8tJa-IARnnT0gmFY9x2ZHY3mt2aACNcBGAsYHQ/s16000/logo.png
A library to enhance and speed up script/exploit writing for CTF players (or security researchers, bug bounty hunters, pentesters but mostly focused on CTF) by patching the String class to add a short syntax of usual code patterns. The philosophy is also to keep the library to be pure ruby (no dependencies) and not to re-implement what another library is already doing well (eg. xorcist for xor).
For example instead of writing:

require 'base64'

myvar = 'string'
myvar = Base64.strict_encode64(myvar)

Just write (shorter and easier to remember):

require 'ctf_party'

myvar = 'string'
myvar.to_b64!

Features

* base64: to_b64, to_b64!, from_b64, from_b64!, b64?
* digest: md5, md5!, sha1, sha1!, etc.
* flag: flag, flag!, flag?(apply/check a flag format)
* rot: rot, rot!, rot13, rot13!
* hex: hex2dec, dec2hex, to_hex, from_hex, hex2bin, bin2hexand bang versions

References

Homepage / Documentation: https://noraj.github.io/ctf-party

Author

Made by Alexandre ZANNI (@noraj), pentester from Orange Cyberdefense.
Download Ctf-Party

Deep Web
Revenge😈

So some mf on Twitter scammed for the ps5 and a guy on Reddit helped me find his IP address I wanna kno if any of you guys know how to get his real address out of the IP I’ll pay 5 dollars And if someone helps me get his address what are some fucked up ways of getting revenge on him😈

submitted by /u/nicodagoatt
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

Dark Reading: Attacks/Breaches
Disgruntled IT Contractor Sentenced in Retaliatory Office 365 Attack

Former contractor deleted 1,200 user accounts in revenge.

Dark Reading: Attacks/Breaches
Inside the Web Shell Used in the Microsoft Exchange Server Attacks

The history and details of China Chopper - a Web shell commonly seen in the widespread Microsoft Exchange Server attacks.

Hacking on Medium
DFACE HACKER

We Hack every thing

Continue reading on Medium »

Hacking on Medium
El malware Purple Fox se abre camino en los sistemas Windows expuestos.

https://cdn-images-1.medium.com/max/1600/0*kvCV388PO3TJo3PF
Purple Fox, un malware que anteriormente se distribuía a través de kits de explotación y correos electrónicos de phishing, ahora ha…

Continue reading on Medium »

Hacking on Medium
How To Recover Your Social Media Account

SKILL HACKER

Continue reading on Medium »

IP address checking
https://www.reddit.com/r/Pentesting/comments/mbvef1/ip_address_checking/

<!-- SC_OFF -->So with some login systems, they check your IP address to see if you've previously logged in using that device. Let's say I have someone's user login details and their public IP address, but it's only the IP-checking that's preventing me from logging into their account. Any way to bypass this? All I can think of is changing my own device's public IP address to that user's IP address. The only methods I'm aware of that comes close to that are using proxy chains or use packages like kalitorify on Kali to set a random IP address to hide your own. But what I need is to set my device's to a SPECIFIC public IP. Possible? Or is there some other magical way to bypass this? <!-- SC_ON --> submitted by /u/machodeisteeny (https://www.reddit.com/user/machodeisteeny)
[link] (https://www.reddit.com/r/Pentesting/comments/mbvef1/ip_address_checking/) [comments] (https://www.reddit.com/r/Pentesting/comments/mbvef1/ip_address_checking/)