What to learn after CTFs
https://www.reddit.com/r/Pentesting/comments/10mt5w9/what_to_learn_after_ctfs/
<!-- SC_OFF -->So for context, I've been working on CTFs for a while to learn hacking in the hopes of eventually getting into penetration testing professionally. Managed to get OSCP recently and a few other easier certifications that felt pretty similar to CTFs. However, several posts on this subreddit and other related subs have noted that CTFs are not a good way to learn past starting out, and I feel like I'm getting diminishing returns at this point as far as employability and relevant knowledge gained. I'd love to learn some new information so that I can feel confident moving into a real pentesting role, and more importantly be skilled enough to get hired in the first place, but I don't really know where to learn. I'm trying to read a decent amount of pentesting books and working on getting into bug bounties in my free time, starting out in IT helpdesk as a job, but I feel a bit directionless from here. Any good recommendations for what to work at and learn instead of just grinding CTFs all day? What would you call a good next step for someone trying to get into the field? <!-- SC_ON --> submitted by /u/one-moofin (https://www.reddit.com/user/one-moofin)
[link] (https://www.reddit.com/r/Pentesting/comments/10mt5w9/what_to_learn_after_ctfs/) [comments] (https://www.reddit.com/r/Pentesting/comments/10mt5w9/what_to_learn_after_ctfs/)
https://www.reddit.com/r/Pentesting/comments/10mt5w9/what_to_learn_after_ctfs/
<!-- SC_OFF -->So for context, I've been working on CTFs for a while to learn hacking in the hopes of eventually getting into penetration testing professionally. Managed to get OSCP recently and a few other easier certifications that felt pretty similar to CTFs. However, several posts on this subreddit and other related subs have noted that CTFs are not a good way to learn past starting out, and I feel like I'm getting diminishing returns at this point as far as employability and relevant knowledge gained. I'd love to learn some new information so that I can feel confident moving into a real pentesting role, and more importantly be skilled enough to get hired in the first place, but I don't really know where to learn. I'm trying to read a decent amount of pentesting books and working on getting into bug bounties in my free time, starting out in IT helpdesk as a job, but I feel a bit directionless from here. Any good recommendations for what to work at and learn instead of just grinding CTFs all day? What would you call a good next step for someone trying to get into the field? <!-- SC_ON --> submitted by /u/one-moofin (https://www.reddit.com/user/one-moofin)
[link] (https://www.reddit.com/r/Pentesting/comments/10mt5w9/what_to_learn_after_ctfs/) [comments] (https://www.reddit.com/r/Pentesting/comments/10mt5w9/what_to_learn_after_ctfs/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
What are some good USB 5Ghz Wi-Fi Adaptors ?
Not Alpha, Panda.
Something with swappable antenna
submitted by /u/RedditNoobie777
[link] [comments]
What are some good USB 5Ghz Wi-Fi Adaptors ?
Not Alpha, Panda.
Something with swappable antenna
submitted by /u/RedditNoobie777
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Inquiries on Raspberry Pi
I am a cybersecurity student and I am looking forward to start any project using Raspberry Pi to improve my resume since I will be having my internship soon. Well the thing is there are lots of Raspberry Pi type out there (Zero W, 3 Model B+ etc) and I dont have any knowledge about the capabilities of each Raspberry Pi, so can anyone recommend me a good one? The one that a newbie should start with. I thought of doing honeypot by the way.
submitted by /u/arfzmri
[link] [comments]
Inquiries on Raspberry Pi
I am a cybersecurity student and I am looking forward to start any project using Raspberry Pi to improve my resume since I will be having my internship soon. Well the thing is there are lots of Raspberry Pi type out there (Zero W, 3 Model B+ etc) and I dont have any knowledge about the capabilities of each Raspberry Pi, so can anyone recommend me a good one? The one that a newbie should start with. I thought of doing honeypot by the way.
submitted by /u/arfzmri
[link] [comments]
https://b.thumbs.redditmedia.com/SJvGTPeqA6qHUjYEK1XHyUiG9KVCEpVp9XHJe-BCYdM.jpg
the spearphish and sht, the full report is even weirder, iM just so lame Id look over all the things but I'm in a rush to know if I got my stuff compromissed, I'm on a vpn, but just that...if anyone could pls take a look, leave a coment ill reply with the full report!
submitted by /u/xcutionerkera
[link] [comments]
the spearphish and sht, the full report is even weirder, iM just so lame Id look over all the things but I'm in a rush to know if I got my stuff compromissed, I'm on a vpn, but just that...if anyone could pls take a look, leave a coment ill reply with the full report!
submitted by /u/xcutionerkera
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Is Game Hacking Still Relevant?
I am genuinely curious. I have been working in the field of cybersecurity for several years now and have become very interested in reverse engineering and exploit development. In my venture to learn more about this I was introduced to game hacking. First through very simple on the spot memory changes, then into patching binaries, and then into DLL injection, but I am struggling to go further than that; at least learning material wise. So I am wondering if this is because game hacking is just not very relevant anymore or if it is because the skills/knowledge are difficult to attain, or something else. If anybody has good learning materials or anything like that I would genuinely appreciate it because I do hope to continue learning about game hacking.
submitted by /u/batch_is_fun
[link] [comments]
Is Game Hacking Still Relevant?
I am genuinely curious. I have been working in the field of cybersecurity for several years now and have become very interested in reverse engineering and exploit development. In my venture to learn more about this I was introduced to game hacking. First through very simple on the spot memory changes, then into patching binaries, and then into DLL injection, but I am struggling to go further than that; at least learning material wise. So I am wondering if this is because game hacking is just not very relevant anymore or if it is because the skills/knowledge are difficult to attain, or something else. If anybody has good learning materials or anything like that I would genuinely appreciate it because I do hope to continue learning about game hacking.
submitted by /u/batch_is_fun
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
How are hackers paying for Google ads
How are hackers paying for Google ads to push their website which allows people to download fake .exe files in the name of legit sites such as Rufus, VLC etc..
Why is Google not able to stop them effectively
Although I am aware that Google is doing this, I keep seeing more and more websites being replaced by the old ones. I know they might be using fraudulent Stolen Credit cards and Google ad credits along with money laundering to hide their ways but are there any other ways that they are able to do this ?
submitted by /u/Snoo_42096
[link] [comments]
How are hackers paying for Google ads
How are hackers paying for Google ads to push their website which allows people to download fake .exe files in the name of legit sites such as Rufus, VLC etc..
Why is Google not able to stop them effectively
Although I am aware that Google is doing this, I keep seeing more and more websites being replaced by the old ones. I know they might be using fraudulent Stolen Credit cards and Google ad credits along with money laundering to hide their ways but are there any other ways that they are able to do this ?
submitted by /u/Snoo_42096
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Reset a Samsung Galaxy S7 and now I can't get past the Google Play services.
Google Play services stopped working and I can't get past that initial setup. I can't access the settings because I can't even look at the app screen. I reset many times and still nothing. Any advice? Can I find a way past this wall? No way to get into settings? Any way to get to my settings? The phone was free.
submitted by /u/propheticguy
[link] [comments]
Reset a Samsung Galaxy S7 and now I can't get past the Google Play services.
Google Play services stopped working and I can't get past that initial setup. I can't access the settings because I can't even look at the app screen. I reset many times and still nothing. Any advice? Can I find a way past this wall? No way to get into settings? Any way to get to my settings? The phone was free.
submitted by /u/propheticguy
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Major sudo vulnerabilty
CVE-2021-3156 is a critical vulnerability that affects the sudo command on Linux and macOS systems.
Continue reading on Medium »
Major sudo vulnerabilty
CVE-2021-3156 is a critical vulnerability that affects the sudo command on Linux and macOS systems.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Top five Cyber Threat Intel stories of the week: 01/23 to 01/27/2023
https://cdn-images-1.medium.com/max/1000/0*Kf72g2s8R5gounAl
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share with…
Continue reading on Hunter Strategy »
Top five Cyber Threat Intel stories of the week: 01/23 to 01/27/2023
https://cdn-images-1.medium.com/max/1000/0*Kf72g2s8R5gounAl
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share with…
Continue reading on Hunter Strategy »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
U.S. Federal Agencies Fall Victim to Cyber Attack Utilizing Legitimate RMM Software
https://cdn-images-1.medium.com/max/1689/0*0ozcxN28DF9tefEU
At least two federal agencies in the U.S. fell victim to a “widespread cyber campaign” that involved the use of legitimate remote…
Continue reading on Medium »
U.S. Federal Agencies Fall Victim to Cyber Attack Utilizing Legitimate RMM Software
https://cdn-images-1.medium.com/max/1689/0*0ozcxN28DF9tefEU
At least two federal agencies in the U.S. fell victim to a “widespread cyber campaign” that involved the use of legitimate remote…
Continue reading on Medium »