Hacking Articles Tips Tricks Videos Tutorials

machines, blood works, they can manipulate them again with the tools that biochemists make (pharmacuticals) and basically hack the body doing stuff that they ought to be doing. So being a doctor can be really fun, and maybe every great doctor should have decent enough of Dr. House in them, however they are not the guys who work on the molecular level on why something works the way it works, they can understand it figure connections out, but they are not creating anything new. So very skilled Pentesters are like Dr. House, they know all kinds of stuff, they can research them, they can put them in practice, with the right tools and methodologies for diagnosis they can test them and even again with the right tools they can manipulate and treat them, in a way they are fiddling with hacking, but without the biochemistry, there will be nothing but guessing, there will be no tools and methods to diagnose and no tools to treat, there will be some hacking, but no science. This doesn't mean that Dr. House is not awesome, it just means is different. In the real world I believe the number of people that are as good and deep in their knowledge as pentesters as Dr. House is as a doctor, is very few, just like in the real world where most doctors are very superficial, specialists included. So I am not talking about those people, I am talking about the Dr. Houses of pentesting, people that truly learn, research and implement and test and are curious, people that know a lot about all kinds of technologies and they know how and when to use each new tool to counter anything that counters achieving their goal, however they are not the guys working on the theorems, they are practical, they apply and they know how and when to apply it, but they do not discover it. While there can be great difference between two pentesters, it seems that AppSec allows less of that, just because tools are not the primary use, the skill ceiling can be higher of course. Pentesting can be a spectrum of Dr. House to script kiddie practitioners. Reading this subreddit there are a lot of people mentioning that they learn each day, I first wondered to ask, what do you guys learn each day? Do you just update yourself on the latest CVEs or is there more to it? Or maybe all your free time you spent learning of low level code, binary exploitation, work on embedded hardware, solder, lockpick, do you do CTFs - surely those are interesting, but not as applicable in day to day job. What exactly do you mean when you say you never stop studying and it is a 40 hour work week, but not lifestyle? Maybe I should post a poll about this very question, because if you do work as a pentester for a few years, I believe you can soak up the new information that you need to know the next day at work in 30 minutes average at best and/or learn more during your that work day. It seems that in a perfect world, I would be interested in both AppSec and Pentesting, to me it seems they compliment each other in terms of the hacker mindset, I cannot understand how LO says that he is not interested in checking tools at metasploit regularly, but also cannot understand if someone never studies binary exploitation. I am not there yet, so maybe I am too new too understand that it is not a natural progression and it truly is just different as I mentioned earlier, maybe I am just more into AppSec and I do not know that as I have not started with, or maybe Pentesting is what I truly like and I just am curious about the basics of low level code and nothing beyond, at last I have always been interested in new technologies and learning ways to use them efficiently and differently, so can I truly throw that out Maybe I know too little to understand all of this? Maybe Pentesting people are truly the hacker type of people, while AppSec guys would be the more academic research type of people that want to dwell into particular problems and find ways around them. Maybe I cannot categorize all of this and I am wasting

___________________________
@hacking_Attack
@Hacking_Video

8 viewsedited 19:38

time trying to map personality traits of a person to this concept? I am just baffled and in a way want to look into the future of how some of my opinions will form, but I know I probably lack the knowledge and experience to come to that conclusion on my own, so I am asking you guys, not to give me a conclusion that I will consume as a bible, however read into some of your thoughts if any of you were in a similar thought situation as me at some point and how it turned out on the end. submitted by /u/appwizcpl (https://www.reddit.com/user/appwizcpl)
[link] (https://www.reddit.com/r/Pentesting/comments/udauts/pentesting_vs_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/udauts/pentesting_vs_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video