Hacking Articles Tips Tricks Videos Tutorials

How to transition to a consulting role?
https://www.reddit.com/r/Pentesting/comments/tbxwnk/how_to_transition_to_a_consulting_role/

I’m looking to move into a pentesting consultant role. However, the problem that I am facing is that pretty much every consultancy wants you to either be a senior-level tester, have prior consulting experience, or both. I have 3 years of pentesting experience from my time in the military which had a heavy appsec and embedded focus, but I performed some full-scope network pentests as well. It’s been nearly a year since I left the military, and I landed in a cybersecurity role at a defense contractor where I was told that I would be building out a pentest/vulnerability assessment capability, but I have mostly been stuck doing ISSO/ISSM work, which I find mind-numbingly boring, hence I am looking for a new job. I want to make the switch back to pentesting. I know I would excel in a consultancy position because I have strong soft skills needed for a client-facing role and I thrive when I am constantly diving into new projects and challenges. The problem is, how do I get experience as a consultant when consultancies want you to already have experience as a consultant? Also, I view myself as more of a mid-level tester than a senior. I feel that the guidance and mentorship that I could get from a senior would be invaluable, but it seems that most companies just want a senior that they can immediately throw into the weeds on day one. I have been unsuccessful so far in my efforts, despite applying for quite a few roles and receiving a handful of interviews. Any advice on how to move into one of these roles is much appreciated. I am young, hungry, and eager to learn! To that end, if anyone knows of companies openly hiring mid-level roles or who are open to mid-level professionals, I would love to hear about them. Some additional background on myself: I have my OSCP, CISSP, TS Clearance, and B.S. in Computer Engineering. My career has consisted of about 3 years of pentesting, but nearly 6 years overall of InfoSec/cybersecurity related experience. Currently been spending plenty of my free time on Hack the Box to try and keep my skills sharp since they aren’t being actively utilized in my current role. I’ve thought about working on some bug bounties as well, but with my free time being limited, Hack the Box has seemed like a better tool to stay sharp because of the wide variety of machines and challenges that the platform offers. submitted by /u/Systemtechno (https://www.reddit.com/user/Systemtechno)
[link] (https://www.reddit.com/r/Pentesting/comments/tbxwnk/how_to_transition_to_a_consulting_role/) [comments] (https://www.reddit.com/r/Pentesting/comments/tbxwnk/how_to_transition_to_a_consulting_role/)

___________________________
@hacking_Attack
@Hacking_Video

How to transition to a consulting role?

I’m looking to move into a pentesting consultant role. However, the problem that I am facing is that pretty much every consultancy wants you to...

4 viewsedited 01:56

How I access other domains in infinityfree.net using Directory Traversal
https://xkurtph.medium.com/how-i-access-other-domains-in-infinityfree-net-using-directory-traversal-4625692d6a2d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

How I access other domains in infinityfree.net using Directory Traversal

Hi, it’s me again haha Kurt Russelle Marmol aka xkurtph, Web Developer (noobie) and Security Researcher.

3 viewsedited 02:21

Hacking Articles Tips Tricks Videos Tutorials

3 views02:21

Hacking Articles Tips Tricks Videos Tutorials

Hi, it’s me again haha Kurt Russelle Marmol aka xkurtph, Web Developer (noobie) and Security Researcher.Continue reading on Medium » (https://xkurtph.medium.com/how-i-access-other-domains-in-infinityfree-net-using-directory-traversal-4625692d6a2d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

How I access other domains in infinityfree.net using Directory Traversal

Hi, it’s me again haha Kurt Russelle Marmol aka xkurtph, Web Developer (noobie) and Security Researcher.

6 viewsedited 02:21

Hacking Articles Tips Tricks Videos Tutorials

How I access other domains in infinityfree.net using Directory Traversal

Hi, it’s me again haha Kurt Russelle Marmol aka xkurtph, Web Developer (noobie) and Security Researcher.Continue reading on Medium »
Read more...

8 views02:46

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Noob here... Bypassing payment gateways is still a thing in 2022 or the world has become too advanced for this?

If it's possible kindly guide me towards any tutorials... Prerequisites... And blogs so that i can learn more...

submitted by /u/girish_kumar_v
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Noob here... Bypassing payment gateways is still a thing in 2022...

If it's possible kindly guide me towards any tutorials... Prerequisites... And blogs so that i can learn more...

7 viewsedited 05:30

Hacking Articles Tips Tricks Videos Tutorials

7 views05:30

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Automated WiFi Hacker

After watching David Bombal's most recent video using hcxdumptool & hashcat to crack WiFi passcodes, I Created a Python script to automate the capturing, sorting and creating hash files of matching WiFi networks to password hashes. On my GitHub if you guys wanna use it.

https://github.com/TrevorSatori/Wifi-Sweep

submitted by /u/BradPittOfTheOffice
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

From the hacking community on Reddit: Automated WiFi Hacker

Explore this post and more from the hacking community

7 viewsedited 05:30

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
Dünya Tarihindeki En İlginç Bilişim Suçları

https://cdn-images-1.medium.com/max/960/0*qZwXMwajvMssV-Z-.jpeg
Herkesin teknoloji ile bir şekilde bağlantılı olduğu günümüzde veri güvenliği son derece önem kazanmaktadır. Sizler için en ilginç bilişim…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Dünya Tarihindeki En İlginç Bilişim Suçları

Herkesin teknoloji ile bir şekilde bağlantılı olduğu günümüzde veri güvenliği son derece önem kazanmaktadır. Sizler için en ilginç bilişim…

9 viewsedited 05:33

Hacking Articles Tips Tricks Videos Tutorials

From Recon via Censys and DNSdumpster, to Getting P1 by Login Using Weak Password — “password”

A simple story when Allah allowed me to get P1 by combining several issues, one of which was related to “weak credentials”.Continue reading on InfoSec Write-ups »
Read more...

8 views06:46

Hacking Articles Tips Tricks Videos Tutorials

From Recon via Censys and DNSdumpster, to Getting P1 by Login Using Weak Password — “password”
https://infosecwriteups.com/from-recon-via-censys-and-dnsdumpster-to-getting-p1-by-login-using-weak-password-password-504e617956ce?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

From Recon via Censys and DNSdumpster, to Getting P1 by Login Using Weak Password — “password”

A simple story when Allah allowed me to get P1 by combining several issues, one of which was related to “weak credentials”.

6 viewsedited 07:10

Hacking Articles Tips Tricks Videos Tutorials

7 views07:10

Hacking Articles Tips Tricks Videos Tutorials

A simple story when Allah allowed me to get P1 by combining several issues, one of which was related to “weak credentials”.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/from-recon-via-censys-and-dnsdumpster-to-getting-p1-by-login-using-weak-password-password-504e617956ce?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium