How to become a Pentester

#ctf #programming #beginners #webdev

𝙒𝙝𝙖𝙩 𝙞𝙨 𝙖 𝙥𝙚𝙣𝙩𝙚𝙨𝙩𝙚𝙧

“A Pentester is someone who helps a business test their security posture through a structured attack simulation with a predefined and agreed scope, this is referred to as a penetration test. They help businesses see their vulnerabilities from an attacker’s perspective to highlight the impact of successful exploitation, they will also provide the necessary remediation to mitigate those vulnerabilities."

𝙒𝙝𝙖𝙩 𝙖𝙧𝙚 𝙩𝙝𝙚 𝙨𝙠𝙞𝙡𝙡𝙨 𝙧𝙚𝙦𝙪𝙞𝙧𝙚𝙙?

Solid understanding of all IT fundamentals (Networking Included).
In depth Knowledge of administering Windows, MacOS and Linux operating systems.
Basic understanding of Web servers and their technologies
Basic understanding of Database servers and their technologies
Basic understanding of Application development
Basic understanding of Mobile Application development
Expert in Report writing

𝙒𝙝𝙮 𝙖𝙧𝙚 𝙩𝙝𝙚𝙨𝙚 𝙨𝙠𝙞𝙡𝙡𝙨 𝙧𝙚𝙦𝙪𝙞𝙧𝙚𝙙?

Penetration testing mainly involves identifying vulnerabilities. Attempting to exploit some of them to demonstrate potential impact may be possible depending on the project. You will also need to portray them in a non-technical way to stakeholders and then make recommendations on fixes. To do this accurately and quickly, in-depth knowledge of as much as possible is required. Where knowledge doesn't exist, a penetration tester can acquire it quickly and efficiently. Penetration testing is a vital part of an organisational security plan, however, the output needs to be aligned with business needs. Being able to understand this need and scope it appropriately can have a drastic effect on the career progression of a penetration tester. When studying ensure you have a firm grasp on all of the concepts and invest time in learning how you, as an individual, absorb information quickly.

𝗥𝗲𝗰𝗼𝗺𝗺𝗲𝗻𝗱𝗲𝗱 𝘁𝗿𝗮𝗶𝗻𝗶𝗻𝗴

𝙄𝙏 𝙁𝙪𝙣𝙙𝙚𝙢𝙚𝙣𝙩𝙖𝙡𝙨

CISCO Netacad https://www.netacad.com/
Professor Messer - https://lnkd.in/gF7QqZDj

𝙄𝙣𝙩𝙧𝙤𝙙𝙪𝙘𝙩𝙞𝙤𝙣 𝙩𝙤 𝙥𝙚𝙣𝙩𝙚𝙨𝙩𝙞𝙣𝙜

https://ine.com/ - The eJPT free course, overall best foundation cert in the field.

𝙋𝙚𝙣𝙩𝙚𝙨𝙩𝙞𝙣𝙜 𝙋𝙧𝙖𝙘𝙩𝙞𝙘𝙖𝙡 𝙩𝙧𝙖𝙞𝙣𝙞𝙣𝙜

TCM Academy - https://lnkd.in/dWRhH_NX
TryHackMe - https://tryhackme.com/
HackThebox - https://lnkd.in/d-zvvHGN
Virtual Hacking Labs - https://lnkd.in/d9PQR9UK
OSCP Prep - https://lnkd.in/eaUgBjK

𝙒𝙚𝙗 𝘼𝙥𝙥𝙡𝙞𝙘𝙖𝙩𝙞𝙤𝙣 𝙋𝙚𝙣𝙩𝙚𝙨𝙩𝙞𝙣𝙜

OWASP - https://lnkd.in/gKT8qBq
Portswigger Web security academy - https://lnkd.in/dGbVHbN

𝗔𝗱𝗱𝗶𝘁𝗶𝗼𝗻𝗮𝗹 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻

Public Pentest Reports - https://lnkd.in/eYV-Aku

Ask Cyber Security related question on
https://discourse.heeraj.com/

Join my telegram Group to know about latest Ethical hacking news and tools more than 270 members I have big plans for you
Join Now
https://t.me/infosecbugbounty