#cyber-and-careers | TryHackMe | Page 72

uncut falcon Nov 2, 2020, 2:03 AM

#

thanks

south juniper Nov 2, 2020, 3:24 AM

#

Boy I done fuct up. I have a screening for Sr. Pen tester. I only passed my CEH , know a little about nmap and metaploit. I a SOC analyst with zero pen test experience . I’m gonna do this for all you fools here and give it my all.

polar rock Nov 2, 2020, 3:34 AM

#

I wanna know how you got into a screening for a sr, pen testing position with only CEH and some nmap and metasploit knowledge

#

Like what

grave needle Nov 2, 2020, 3:40 AM

#

How did this happen. There comes a point somewhere between optimistic and blatant disregard for requested qualifications, and while there is a fine line, you sir have passed over it at 30,000 feet with no idea where or when you did. I find this hilarious, but at the same time heartening, because when I go in to interview for a job I am not qualified for, at least I know I will get as far as you have.

south juniper Nov 2, 2020, 4:30 AM

#

@polar rock my resume has zero pen test keywords. My whole resume is the opposite of pen test experience. I worked as Noc analyst , Disatser Revoery analyst , Change mgmt, Sys admin, and now I am SOC analyst

#

I have a MBA and Sec+, expired CCENT

#

I’m just gonna be open and honest. I can’t hit the ground running, but at best a slow crawl.

#

Also Zero knowledge of python or anything like that

#

@grave needle I kinda used my fear into fuel. Often when I apply to stuff - I think of Charlie Murphy in one interview - he said - “Fook it I make my own rules .” Now there is times when I have been bodied in an interview ...

#

One time HR asked do you have 3 plus year of reverse malware engineering? 3 +threat hunting ? Dev Ops ? Etc.... it was awful but I did dunk on her when she asked why I applied to the job- she said it was a well crafted answer

ancient prairie Nov 2, 2020, 4:44 AM

#

I mean SOC analyst and sysadmin are good enough keywords to get thru keyword screening

#

blue-teamers generally make good red-teamers

languid hearth Nov 2, 2020, 4:47 AM

#

you were passed along for some reason

south juniper Nov 2, 2020, 4:58 AM

#

@languid hearth it gets better. Required if you have bachelor degree- you need 7 years of IT experience and 5 of them need to be in Cyber. I have like 1.8yrs lol

languid hearth Nov 2, 2020, 5:00 AM

#

get this -- after 4 months of being a PenTester I applied for a red team position

#

got an interview

#

they flew me out

#

they ultimately went with another candidate

#

but they still gave me a job.

south juniper Nov 2, 2020, 5:01 AM

#

Damn a fly out is nuts

languid hearth Nov 2, 2020, 5:01 AM

#

companies work in mysterious ways -- you never know what the totality of circumstances may be

eager badge Nov 2, 2020, 6:01 AM

#

I have some made up prior experience no certs not degrees and I had a screening for a SOC Analyst tier 1 position with a very large company. I did however get all of the questions right except for one. They asked me how you would go about elevating to admin in Linux or windows I answered something about "//ADMINISTRATOR" then the next day realized what they were actually asking me and realized I could have just said "sudo -i" they passed on me but said they would like to give me another shot if they have another opening

south juniper Nov 2, 2020, 6:06 AM

#

Damn missed 1 q! They harsh man

eager badge Nov 2, 2020, 6:09 AM

#

Haha yeah. It gets better. The director of threat response sent my resume to the hiring manager for that position after he talked to me for a few minutes. I have the right knowledge but no academic backing. Just self taught bs to get by and alot of studying for the CASP+ it was also my first cyber security interview and I was a bit nervous

south juniper Nov 2, 2020, 6:13 AM

#

Damn you’ll get the second one for sure

eager badge Nov 2, 2020, 6:15 AM

#

I hope so. I also don't know how long it will be until they have a nother opening though.

unkempt nova Nov 2, 2020, 2:17 PM

#

@eager badge How you studied CASP+?

high belfry Nov 2, 2020, 3:54 PM

#

I would love peoples opinion on this. I'm treating Try Hack Me like a video game, I spend my free time trying to get CTFs and going through the walkthroughs for fun. I feel it's a better use of my time than playing Runescape or WoW in my free time. I already have a job in computers as a C++ coder and I like it well enough.
If you were in my position would you pay for a certification at any level?

pseudo creek Nov 2, 2020, 4:06 PM

#

depends, could be a fun challenge depending on the certification

high belfry Nov 2, 2020, 4:09 PM

#

I was thinking that, maybe over Christmas get the eJPT. I don't know, is $200 worth it if I'm not going to use it? I don't know. Just kicking around the idea.

pseudo creek Nov 2, 2020, 4:09 PM

#

plus you'd be surprised how your current job would react, like I got the AWS Developer Associate and people were amazed... I'm not a developer, never will be one but was surprised how much management liked that

high belfry Nov 2, 2020, 4:10 PM

#

Good point :D

ancient prairie Nov 2, 2020, 4:10 PM

#

At the very least you can talk about your experience with certs which employers are sometimes more interested in than the actual cert

#

For example I had an interviewer recently ask me "what unique software experience have you had", and I talked about eJPT, getting into pentesting and how I was learning a new tool basically every day and how I approached that process, and they seemed happy with my answer

pseudo creek Nov 2, 2020, 4:13 PM

#

and even if it isn't directly related to your job, I'd definitely put it in your resume/yearly review

high belfry Nov 2, 2020, 4:17 PM

#

Good points guys. Thanks for answering definitely makes me think more about getting a certification.

eager badge Nov 2, 2020, 5:57 PM

#

@unkempt nova I have a thing through icollege it's basically all of itpro TV's videos and show notes.

tepid zenith Nov 2, 2020, 9:30 PM

#

Good evening all, I look forward to chatting with you all over the coming months.

cosmic ingot Nov 2, 2020, 9:41 PM

#

well I for one am flattered

pseudo creek Nov 2, 2020, 10:01 PM

#

we are here

eager badge Nov 2, 2020, 10:45 PM

#

I just got offered a 6+ month contract for internet security specialist. It seems like it's a 3rd party recruiter is going to submit my resume to the client. It sound promising. They asked me if I have any experience analyzing maleware though.

pseudo creek Nov 2, 2020, 10:47 PM

#

be truthful and my guess is that isn't an offer?

eager badge Nov 2, 2020, 10:58 PM

#

You are correct. I was honest. I told them I never analyzed any maleware. They just sent me a rate and right to represent form that stated it isn't a job offer. But it's a start.

#

When I spoke with the recruiter she made it sound like an offer. It's still pretty promising though.

meager hazel Nov 2, 2020, 11:02 PM

#

Best of luck!

eager badge Nov 2, 2020, 11:02 PM

#

@meager hazel thank you.

pseudo creek Nov 3, 2020, 1:22 AM

#

You also may want to spell malware correctly

polar rock Nov 3, 2020, 1:22 AM

#

I was going to say that but didnt want to be mean

quasi stream Nov 3, 2020, 1:24 AM

#

Best of luck with the opportunity @eager badge. Hope it works out for you!

#

I’m sure the message/offer/opportunity was given for good reasons so (:

eager badge Nov 3, 2020, 1:28 AM

#

All of my malware is male. I was typing with one hand feeding my son. My bad on the spelling

quasi stream Nov 3, 2020, 1:29 AM

#

You can learn a fairly good amount about malware without doing any actual reverse engineering of it

#

Indicators of compromise etc

#

No assembly required

polar rock Nov 3, 2020, 1:31 AM

#

ISACs are awesome and I may or may not be making a room about them

#

and generating basic IOCs

quasi stream Nov 3, 2020, 1:31 AM

#

Understanding the basics of it isn’t too hard to approach, mastering it however and how it interacts with the OS is very hard to get into

#

I’m hoping the malware analysis pathway will cover the scale/transition of both

eager badge Nov 3, 2020, 1:42 AM

#

That's good to know thank you.

quick forum Nov 3, 2020, 1:48 AM

#

Hey I was gonna use that hugo theme!

quasi stream Nov 3, 2020, 1:48 AM

#

https://blog.cmnatic.co.uk/posts/so-you-want-to-analyse-malware/

#

But if you’re looking to get hands-on with samples that replicate real-life characteristics (without being maliciois) then look at my current malware rooms

#

(Where the REMnux room is being peer reviewed that covers PDF & Microsoft office macro malware which is a very current payload)

#

Ah yeah ahah. I heavily adapted the theme I use for that @quick forum

polar rock Nov 3, 2020, 1:51 AM

#

macros are the bomb

#

however I think their use will go down once the sandbox is implemented

quasi stream Nov 3, 2020, 1:52 AM

#

Oh definitely

quick forum Nov 3, 2020, 1:53 AM

#

Betcha it'll still work on the NHS etc

#

Give them another 20 years

quasi stream Nov 3, 2020, 1:53 AM

#

I’ve introduced all kinds of real-world (but non malicious) payloads. Just waiting to get these working on AWS at an affordable cost for the rest of THM

#

I’m genuinely beyond buzzing to be able to excuse the time into that sorta stuff

#

It’s really lacking on the platform and I think that whole malware analysis topic would be super welcome

polar rock Nov 3, 2020, 1:54 AM

#

I cant wait to start taking my malware dev courses so I can make custom malware for rooms

quasi stream Nov 3, 2020, 1:55 AM

#

MS are slowly implementing sandboxing for MS office stuff so it’s gonna interesting what comes from that in both parties

#

But damn

#

What’s out there IRL is rather sophisticated so

polar rock Nov 3, 2020, 1:56 AM

#

oh yeah

#

they get into some crazy crap

#

will definitly be interesting to see the bypasses for it

quasi stream Nov 3, 2020, 1:57 AM

#

@polar rock ditto. I signed up to the malware dev course - it’s a very different perspective writing it then analysing or detecting it

#

My knowledge of C# is very, very limited so that course is making leaps and bounds

distant pier Nov 3, 2020, 1:57 AM

#

Office 365 sandboxing?

quasi stream Nov 3, 2020, 1:58 AM

#

I’m very much hoping to get release onto networks to simulate C2C activity. I’ve got the CooctusRansom but can’t get it to C2 on THM too well

distant pier Nov 3, 2020, 1:58 AM

#

CooctusRansom 😄

quasi stream Nov 3, 2020, 1:59 AM

#

Genuinely excited to see what I’ve implemented being to life in THM

#

Oooh yes Tim

distant pier Nov 3, 2020, 1:59 AM

#

It demands 10 CooctusCoins per day.

quasi stream Nov 3, 2020, 2:01 AM

#

#general message

#

The C2C is working lxoally

#

I just gotta Docker it all for THM

distant pier Nov 3, 2020, 2:02 AM

#

CooctusSec 😄

quasi stream Nov 3, 2020, 2:02 AM

#

😄

#

Exciting times if I can pull it off (:

distant pier Nov 3, 2020, 2:05 AM

#

That would be interesting to see. Is that going to be a Network or single box?

quasi stream Nov 3, 2020, 2:06 AM

#

I’m desperately trying to get it as a set of network boxes (:

#

That way you can see how the “malware” executes on a device from a a malicious endpoint like a URL and then contacts home for instructions etc

#

I’ve been working a heap tonne on it but uh ... given my new role...it may appear sooner then you think 😄

distant pier Nov 3, 2020, 2:10 AM

#

Looking forward to it. Use the power! 😄

quasi stream Nov 3, 2020, 2:11 AM

#

Definitely!

#

I’ve been offered a fantastic opportunity and I really can’t wait to tuck into it

#

I’ve always said that I’ve loved loved loved room devving. But my work in the NHS formerly is a big restriction on the huge amounts of time it takes

#

Now that it’s been redirected to say the least, I’m very excited (and grabbing the opportunity given to the fullest)

distant pier Nov 3, 2020, 2:13 AM

#

Do what you love, is the best job. 🥇

quasi stream Nov 3, 2020, 2:14 AM

#

Definitely!

distant pier Nov 3, 2020, 2:15 AM

#

I've been summoned by the master of the household to watch a movie. Good night. 🙋‍♂️

quasi stream Nov 3, 2020, 2:15 AM

#

I’m very excited for this aha

📎 image0.png

#

Bless! Enjoy your evening @distant pier I appreciate your words of encouragement especially

fast heart Nov 3, 2020, 2:18 AM

#

ohno

#

a cooctus ransomware 👀

quasi stream Nov 3, 2020, 2:21 AM

#

kekw

#

Just you’ve wait

tribal flicker Nov 3, 2020, 4:30 AM

#

What in Pars' name am I witnessing.

unkempt nova Nov 3, 2020, 5:45 PM

#

How is the itpro.tv?

#

Is it good enough for casp certification and renewing?

ancient prairie Nov 3, 2020, 6:31 PM

#

Just wanted to share some good news, finally got my first job in IT as a support specialist, and its fully remote! wouldnt be possible without the mentorship and knowledge I gained here ❤️

south nest Nov 3, 2020, 6:32 PM

#

Congratz!

lofty apex Nov 3, 2020, 6:50 PM

#

Congrats

gray reef Nov 3, 2020, 6:59 PM

#

Congrats!

somber bramble Nov 3, 2020, 7:01 PM

#

dang congrats man, thats awesome!

shrewd sparrow Nov 3, 2020, 9:09 PM

#

@unkempt nova Hey. I use Itpro.tv, it is VERY good especially for the practice tests and labs. the only thing I will say is that the videos are not like your bite size you find on Udemy... I have found myself loosing a little interest because of that. however, all in all still a very good product!

gleaming basin Nov 3, 2020, 10:32 PM

#

Congrats@ancient prairie I am also trying to do the same. Unfortunately, I had to put the job hunt on pause for a little bit. Want to get a few certs to bridge the salary gap. Otherwise, Id be taking quite a pay cut.

#

What certs have you managed to obtain priot to getting your first gig?

stoic lotus Nov 3, 2020, 10:43 PM

#

is it possible to ethical hack without any linux software?

tribal flicker Nov 3, 2020, 10:44 PM

#

is it possible to ethical hack without any linux software?
@stoic lotus Yes.

ancient prairie Nov 3, 2020, 10:58 PM

#

@gleaming basin so the certs I currently hold are; A+, Google IT Pro, Test Out Client Pro, eJPT, and Fortinet Level 2 NSE associate, I was able to bring up that I'm studying for Security+. For reference I have zero background in tech. I'm also in school for a generic IT degree but it's not a bachelor's program.

gleaming basin Nov 3, 2020, 11:27 PM

#

@ancient prairie I also did Google IT thing and currently in process of completing google it automation with python and IBM Cyber Security Analyst Pro Certification. Honestly, I am ready to take A+ but as of few days ago I decided to go ahead and take ITF+ for practice + its another thing to add to my resume.

#

I have a Bachelors degree in another field as well

#

How was eJPT? Something i looked into taking for my personal gain

gleaming basin Nov 4, 2020, 12:04 AM

#

Thanks for sharing

ancient prairie Nov 4, 2020, 12:54 AM

#

@gleaming basin eJPT was awesome, had a great experience, learned a ton, and got a piece of paper saying I know how to pentest (kinda). With the new price being $200 (I think) I would say this cert is a must-get if you are new to infosec. That being said, you could feasibly learn waaaay more by just doing the offensive-pentesting path on THM if you are only looking to learn and don't care about having a certification.

gleaming basin Nov 4, 2020, 1:09 AM

#

Cool. I might consider that. Thanks!

gleaming basin Nov 4, 2020, 3:03 AM

#

$400 for nse level 4 cert. Jeez.@ancient prairie

gleaming basin Nov 4, 2020, 6:26 AM

#

Really would like to roll into course material for eJPT. I really have a hard time forking out $2000 right of the back for it. It would be better if monthly subscription for cybersec pass was available

#

Doesnt even include an exam voucher vent

#

You have to enroll in PTS by paying $1999/yr now + 200 for the exam.@ancient prairie

#

😫

cobalt helm Nov 4, 2020, 6:41 AM

#

Just wanted to share some good news, finally got my first job in IT as a support specialist, and its fully remote! wouldnt be possible without the mentorship and knowledge I gained here ❤️
@ancient prairie Congrats mate!

lyric temple Nov 4, 2020, 8:36 AM

#

What should I learn for freelancing?

cobalt escarp Nov 4, 2020, 10:52 AM

#

It depends what do you want to do

unkempt nova Nov 4, 2020, 12:49 PM

#

@shrewd sparrow Same problem in infosec institute too. I was looking for CASP+ video training. Also preparing for OSCP

elder grove Nov 4, 2020, 2:27 PM

#

You get PTS for free now @gleaming basin

#

Only have to pay for the exam fee.

cosmic ingot Nov 4, 2020, 2:37 PM

#

^^

#

check the pinned messages guys

#

look for the starter pass

stiff imp Nov 4, 2020, 3:18 PM

#

@elder grove labs are there in PTS?

elder grove Nov 4, 2020, 3:22 PM

#

If they haven't been instituted yet they will be.

#

All free.

glass plinth Nov 4, 2020, 4:02 PM

#

Does anyone have any recommendations for books to read to get into pentesting and cybersecurity. I’m new to this field and I really wanna dive in it. Doing stuff in thm and get advanced enough for higher level activities.

pseudo creek Nov 4, 2020, 4:07 PM

#

check out #bookclub

stoic lotus Nov 4, 2020, 4:29 PM

#

what are the basic skills needed to start a help desk career?

unkempt nova Nov 4, 2020, 5:38 PM

#

@ancient prairie fully remote? Are you in dffierent country?

ancient prairie Nov 4, 2020, 5:47 PM

#

naw Im in US. My home office is like 15 minutes away, there's a physical network we RDP into for work that has our software suite.

quick forum Nov 4, 2020, 6:02 PM

#

what are the basic skills needed to start a help desk career?
@stoic lotus troubleshooting, patience for non technical people, being able to explain stuff without patronising is a big one.

gleaming basin Nov 4, 2020, 7:04 PM

#

@elder grove I will be on the lookout for it. As of now it is part of the cybersec pass

#

Signed up and ready :) This community is too helpful :)

barren robin Nov 5, 2020, 9:25 AM

#

Hi everyone I wan't to start a Cyber carreer which entry level certification can you suggest me (Sec+, eJPT, OSCP ...)

remote mauve Nov 5, 2020, 10:48 AM

#

It depends on the country you are from and what role are you actually looking for, there's no "one size fits all"

barren robin Nov 5, 2020, 11:06 AM

#

Am in Germany

unkempt nova Nov 5, 2020, 12:07 PM

#

@barren robin You want to be penetration tester?

barren robin Nov 5, 2020, 12:13 PM

#

Yes

unkempt nova Nov 5, 2020, 12:19 PM

#

Sec+ is well known but eJPT is more relevant. I have done only Sec+,Pentest+ now maybe casp+ or/and oscp

#

@barren robin OSCP is more valuable!

unkempt nova Nov 5, 2020, 4:25 PM

#

Should I study for Comptia CASP+? I want to do some certs which have weight in the resume. I can't get CISSP as i can't proof my experience. Next certs would be OSCP and OSEP as my main concentration on penetration testing.

quick forum Nov 5, 2020, 4:30 PM

#

eJPT is much more basic than OSCP (For anteste)

meager hazel Nov 5, 2020, 5:38 PM

#

CASP+ only weight if you want to work in US DoD at a level that requires it, otherwise it's probably not worth much. I've considered taking it 95% for the learning only

exotic epoch Nov 5, 2020, 6:16 PM

#

The PTS Labs in the Starter Pass are now live!

For those not in the know...

The INE Starter Pass is a free collection of snippets from various courses in the 4 INE Passes (Networking, Cloud, Data Science and CyberSec). However, there is one full training path (not snippets or sample videos) that comes absolutely free with the Starter Pass and that’s our popular and fully practical Penetration Testing Student offering that comes with slides, videos, unlimited lab time and 3 Black Box real-world practice pentests. It does not come with the eJPT exam voucher which is a separate $200 USD purchase. So you can think of it as getting PTS Elite for free without the exam and is available now for everyone.

Thanks for your patience and happy hacking!
https://checkout.ine.com/starter-pass?utm_source=77&utm_medium=referral&utm_campaign=starterpass&utm_content=vip

#

Sorry for what may seem like a sales pitch. But it's really just an update.

languid hearth Nov 5, 2020, 6:17 PM

#

exotic epoch The PTS Labs in the Starter Pass are now live! For those not in the know... Th...

somber bramble Nov 5, 2020, 8:04 PM

#

Anyone here take the CNSS?

#

Or certified in it or whatever

gleaming basin Nov 5, 2020, 8:06 PM

#

@exotic epoch Awesome. Thank you! Looking forward to learning :)

somber bramble Nov 5, 2020, 8:34 PM

#

ive been reading up on the eJPT. Can anyone give me an idea on the difficulty level of the boxes? Just a general description, don't want any specifics or anything

#

@ me if someone responds

#

I am Blob

#

blobheart

cosmic ingot Nov 5, 2020, 8:46 PM

#

@somber bramble quite easy

#

but since the labs are live, you can try doing the blackbox labs to see for yourself. I've went for the ejpt without doing any labs (because I had the barebones edition), but I've heard that if you can do those 3 labs, then you're ready for the exam

somber bramble Nov 5, 2020, 8:48 PM

#

those labs are free?

cosmic ingot Nov 5, 2020, 8:48 PM

#

I wasn't subtle with my reaction spamming lol

#

yes they are

somber bramble Nov 5, 2020, 8:48 PM

#

haha

#

oh wow thats awesome to know

#

ok, ill go try those out at some point!

#

and so youre saying if i can do those, im probably ready to purchase and take the test immediately?

cosmic ingot Nov 5, 2020, 8:49 PM

#

probably, but I can't say for sure now, although I'm planning to do them myself at some point even though I've got the cert

somber bramble Nov 5, 2020, 8:50 PM

#

awesome, thanks!

#

blobheart

cosmic ingot Nov 5, 2020, 8:51 PM

#

np. feel free to message me if you have questions about it. if you tell me roughly at which level you are, I can tell you if you're ready or not. that said, it never hurts to study more though, not necessarily for the cert, but for you

somber bramble Nov 5, 2020, 8:52 PM

#

ill take you up on that rn 😉

exotic epoch Nov 5, 2020, 9:03 PM

#

We consider the Black Box labs to be eJPT exam prep. Was a great addition to the course for the Elite Edition when on eLS. Now free to everyone. Really does help get hands-on pentest practice for help on the exam and in the technical portion of a job interview.

somber bramble Nov 5, 2020, 9:15 PM

#

Thanks so much for that Don!

#

Very helpful 🙂

exotic epoch Nov 5, 2020, 10:28 PM

#

Help spread the word of a great free way to get your toes in the pentesting waters:
https://twitter.com/ethicalhacker/status/1324467990075760640

The Ethical Hacker Network (EH-Net) (@ethicalhacker)

Calling All #Hackers: Get Free IT Training w/ Starter Pass @INE Now! Parts of #Networking, #Cloud & #DataScience Passes... AND... full Penetration Testing Student path w/ slides, videos, black box practice pentests & UNLIMITED labs... FREE! https://t.co/zxmB0WCzIU #CyberSecur...

sleek sedge Nov 5, 2020, 10:55 PM

#

The is honestly fucking amazing

warm hinge Nov 5, 2020, 10:57 PM

#

flushed_cowboy

ancient prairie Nov 5, 2020, 11:26 PM

#

Finally caved and bought the pass, excited to start towards eCPPT 😄

exotic epoch Nov 5, 2020, 11:27 PM

#

https://tenor.com/view/lol-haha-wow-mr-robot-laugh-gif-5711275

Tenor

lol

▶ Play video

elder grove Nov 6, 2020, 2:42 AM

#

@somber bramble RE: the eJPT test. There is some network pivoting on the exam that you should at least practice in the "Find the secret server" lab before taking the test.

#

Your experience otherwise is probably fine.

somber bramble Nov 6, 2020, 2:43 AM

#

Appreciate it!

#

blobheart

elder grove Nov 6, 2020, 2:43 AM

#

That lab shows how to use routing table modification to pivot to other networks.

somber bramble Nov 6, 2020, 2:59 AM

#

I’ll definitely take a look before taking it, thanks

warm anvil Nov 6, 2020, 6:40 AM

#

I am new to security. Are there any roles which involve analyzing security incidents? I am not interested in a coordinator type role. I am thinking of technical analysis - what went wrong, lessons learned.

loud marsh Nov 6, 2020, 7:16 AM

#

the hell is the starter pass

#

is it just bunch sample video ?

#

@exotic epoch

#

When i click on filter out video for starter pass

#

it want me to upgrade to cyber security pass 😂

#

damn everything looks pretty clean

#

but 2k

#

fk that

#

They should sell a course for $10 like udemy i would buy sadcooctus

sleek sedge Nov 6, 2020, 8:08 AM

#

https://my.ine.com/CyberSecurity/learning-paths/a223968e-3a74-45ed-884d-2d16760b8bbd/penetration-testing-student

#

These are the courses include with the free pass

#

I belive

#

https://my.ine.com/search?query=pentesting

#

@loud marsh

#

Ton of free stuff to learn

cosmic ingot Nov 6, 2020, 8:36 AM

#

@loud marsh did you try to find the answer to your question before posting? check the top post in the pins. you used to be able to get the material for the PTS course for free, just the slides though. with the starter pass you get slides + videos + labs, for free. it's a much, much higher value than a $10 course on udemy, and very helpful for people just starting out and/or people on a limited budget.

somber bramble Nov 6, 2020, 3:10 PM

#

Any feedback on CNSS?

#

from ISCI

elder grove Nov 6, 2020, 3:11 PM

#

lol. Sell eLearn/INE courses for 10 bucks like Udemy.

#

They're literally giving one away for free.

somber bramble Nov 6, 2020, 3:13 PM

#

I have a coupon for free, so I'm wondering how difficult it is

unreal arrow Nov 6, 2020, 3:14 PM

#

I’ve done the free material for it which was pretty good for the exam i’m not so sure

somber bramble Nov 6, 2020, 3:24 PM

#

gotcha, thank you

loud marsh Nov 6, 2020, 3:28 PM

#

@cosmic ingot alright thanks

#

I found TCM udemy course is really good starting point, not sure if INE course any better for starter

#

🤔

sleek sedge Nov 6, 2020, 3:39 PM

#

INE is great honestly

#

I've done some research and basically

#

For the free pass

#

You get 150 videos

#

From all the categorys

#

@loud marsh

loud marsh Nov 6, 2020, 3:41 PM

#

but learning path probably the only thing worth it. Otherwise I would use THM to learn specific thing

sleek sedge Nov 6, 2020, 3:41 PM

#

THM to learn a specific thing

loud marsh Nov 6, 2020, 3:41 PM

#

Im in middle of TCM course

#

not sure i would want to test it out

sleek sedge Nov 6, 2020, 3:41 PM

#

If you want to go into more detial

#

Then INE

#

Fair enough, do what you prefer best

loud marsh Nov 6, 2020, 3:45 PM

#

There are some topic haven't been cover by TCM, could use INE course as a supplement.

unreal arrow Nov 6, 2020, 3:46 PM

#

@somber bramble I found this which it might help https://khroot.com/2020/05/30/certified-network-security-specialist-review/

KHroot

Certified Network Security Specialist Review - KHroot

Certified Network Security Specialist (CNSS) provides a holistic view of modern network security including operating system hardening, firewalls, intrusion-detection systems, VPNs and Encryption.

somber bramble Nov 6, 2020, 3:46 PM

#

i read up on that before, thank you tho 🙂

#

also found some practice stuff on gitub, was trying to get a firsthand experience

#

no biggie

unreal arrow Nov 6, 2020, 3:48 PM

#

I was actually thinking of taking it as well and now they have the offer again but it does look like an interesting exam

somber bramble Nov 6, 2020, 4:04 PM

#

well then take it before me and tell me how it is 😅

barren robin Nov 6, 2020, 4:13 PM

#

eJPT is much more basic than OSCP (For anteste)
@quick forum

Is it better than the comptia sec+ ?

languid hearth Nov 6, 2020, 4:13 PM

#

for the most part

#

anything practical is better than anything theoretical.

#

my opinion is this:
You need theoretical certs to back your practical certs, if you're U.S. based, skipping Sec+ is shooting yourself in the foot

barren robin Nov 6, 2020, 4:15 PM

#

Is the training of the eJPT certification ?

languid hearth Nov 6, 2020, 4:15 PM

#

see the pinned message

barren robin Nov 6, 2020, 4:15 PM

#

Am in Germany

#

see the pinned message
It's Free

languid hearth Nov 6, 2020, 4:17 PM

#

yeah, it is lol

barren robin Nov 6, 2020, 4:19 PM

#

Am just a high school student.
For example if I wanna have a job in the cybersec the eJPT better ?

#

Last time someone wrote this is it good ?

#

Sec+ -> CCNA (optional) -> eJPT (PenTestStudent ) -> eCPPT -> OSCP -> Let your employer pay for anything els

cosmic ingot Nov 6, 2020, 4:20 PM

#

you should take all of this with a grain of salt

polar rock Nov 6, 2020, 4:20 PM

#

^

cosmic ingot Nov 6, 2020, 4:20 PM

#

we're mainly posting our opinions and back that with our experience, nothing more

polar rock Nov 6, 2020, 4:20 PM

#

I have insane opportunities and I have no certs in high school

#

just work your ass off, I wouldn’t worry about certs in high school unless you’re really invested in this, certs can get expensive

quick forum Nov 6, 2020, 4:20 PM

#

Sec+ -> CCNA (optional) -> eJPT (PenTestStudent ) -> eCPPT -> OSCP -> Let your employer pay for anything els
@barren robin that's a very expensive list

barren robin Nov 6, 2020, 4:21 PM

#

Yeah I know 😅

#

I can't afford it

polar rock Nov 6, 2020, 4:21 PM

#

If you’re in high school you don’t need all that trust me

barren robin Nov 6, 2020, 4:21 PM

#

Thx

languid hearth Nov 6, 2020, 4:22 PM

#

highschool is the opportune time to get them.

lofty apex Nov 6, 2020, 4:22 PM

#

How would we get experience because all they ask is 2 yrs of experience and some certs , how would a student do that ?

exotic epoch Nov 6, 2020, 4:22 PM

#

@quick forum

Is it better than the comptia sec+ ?
@barren robin CompTIA Sec+ is a multiple choice general security cert. eJPT is a practical exam on pentesting. SO quite different.

barren robin Nov 6, 2020, 4:23 PM

#

@languid hearth but most of the certs expire

#

Is the eJPT a lifetime certification ?

cosmic ingot Nov 6, 2020, 4:23 PM

#

@lofty apex don't take job requirements literally. a lot of people apply for jobs they're underqualified for and end up doing fine. the main thing is to understand exactly what your responsibilities will be, and have something to show for it, i.e. that you are the right person for the job

languid hearth Nov 6, 2020, 4:23 PM

#

Lots of certs have re-ups if you take a high level cert. Time things correctly, and you'll be fine.

#

waiting til you're in your final semester of Uni trying to tackle a bunch of certs isn't the best idea

polar rock Nov 6, 2020, 4:24 PM

#

Don’t do that either ^

#

but don’t take multiple grand worth of certs in one year, get what you can afford and make sure you have your school stable first

#

don’t be like me and over schedule yourself with studying for cyber, working, and studying for school and end up stressed

#

it’s not a vibe

barren robin Nov 6, 2020, 4:26 PM

#

Thank you 😅

#

@exotic epoch
Is the eJPT a lifetime cert ?

exotic epoch Nov 6, 2020, 4:36 PM

#

Tricky wording. Short answer yes. For that matter, all certs are. You can keep something like an MCSE on your resume as long as you state clearly from what year it is. We have updated our exams before, but same idea applies. As an example, we updated the eCPPT exam. So one could put eCPPT or eCPPTv2 on their resume. Also it does not require CPEs to maintain it's status like CISSP. Not to sound like a broken record, but you can put lapsed creds on your resume. When your career gets to a certain level, certs are not that important. If I let my CISSP lapse, I could still put on my resume that I attained the CISSP and held it for x # of years.

loud marsh Nov 6, 2020, 4:39 PM

#

my boss don't give a shit about cert when hiring, he only had a comp science degree from 8 years ago with 0 cert. But he pay his employee to get cert after hired kekw

exotic epoch Nov 6, 2020, 4:40 PM

#

Is a degree lifetime? Yes. But is something you learned in college 20 years ago really still applicable? Some yes but overall people are looking for the ability to attain that goal. Some do require them to get past filters but most (like @loud marsh said) are more interested if you can do the job.

cosmic ingot Nov 6, 2020, 4:41 PM

#

thanks a lot for your insights Don

loud marsh Nov 6, 2020, 4:41 PM

#

he did an interview with sans, he said it all self-taught, skip classes most of the time to test his university network.

#

so i don't think degree help him anything beside make him a better thinker

#

vent

cosmic ingot Nov 6, 2020, 4:42 PM

#

I disagree with that, but to each their own

loud marsh Nov 6, 2020, 4:43 PM

#

well that is my opinion take it with a grain of salt

barren robin Nov 6, 2020, 4:44 PM

#

my boss don't give a shit about cert when hiring, he only had a comp science degree from 8 years ago with 0 cert. But he pay his employee to get cert after hired
@loud marsh

It's hard to find a job without a cert

loud marsh Nov 6, 2020, 4:45 PM

#

I don't have any cert

#

i just lurking around linkedin and hit connect then he dm me offer a position. Many LLC don't require you to have cert i believe, they pay high too.

#

part of it i live near the area where the company is

barren robin Nov 6, 2020, 4:47 PM

#

Everyone is asking for the CEH or the OSCP but it's expensive

cosmic ingot Nov 6, 2020, 4:47 PM

#

@loud marsh a lot of that largely varies depending on the area. where is your company based?

loud marsh Nov 6, 2020, 4:47 PM

#

Austin, TX

#

@barren robin yeah most of job poster will require, but some companies do not have HR so the guy in charge just find people and hire directly

distant pier Nov 6, 2020, 4:50 PM

#

Certifications might lapse, the knowledge and skills gained from the course does not. They merely become somewhat outdated over time, which can be easily maintained through staying up to date with alternate ways through researching/learning/work.

polar rock Nov 6, 2020, 4:54 PM

#

Everyone is asking for the CEH or the OSCP but it's expensive
@barren robin I know people with insane jobs and positions who don’t or didn’t have their OSCP or CEH when they started

warm hinge Nov 6, 2020, 5:05 PM

#

is there any way to hack insta id?

#

i mean my id was lost so

barren robin Nov 6, 2020, 5:06 PM

#

@exotic epoch
If i fail the exam can i retake it for free or do I have to pay ?

distant pier Nov 6, 2020, 5:06 PM

#

is there any way to hack insta id?
@warm hinge Doesn't sound legal.

quick forum Nov 6, 2020, 5:07 PM

#

They're banned

distant pier Nov 6, 2020, 5:07 PM

#

And I never knew who they were 😄 😉

exotic epoch Nov 6, 2020, 5:14 PM

#

@exotic epoch
If i fail the exam can i retake it for free or do I have to pay ?
@barren robin Free retake https://elearnsecurity.com/cyber-launch-faqs/

eLearnSecurity

tharman

Cyber Launch FAQs - eLearnSecurity

INE Cyber Security Pass launch requently asked questions.

barren robin Nov 6, 2020, 5:22 PM

#

It's awesome

distant pier Nov 6, 2020, 5:35 PM

#

eLearnSecurity is awesomeness. Never doubt. 😄

lofty apex Nov 6, 2020, 5:52 PM

#

Sweet !

strong jacinth Nov 6, 2020, 7:10 PM

#

hey guys, I was wondering if I need a bachelors degree to be able to get a good job in cyber security. Is this true?

tired whale Nov 6, 2020, 7:11 PM

#

Can definitely help, and is necessary to some companies, but I wouldn't say it's needed to get into cybersec.

quick forum Nov 6, 2020, 7:11 PM

#

it depends where you are as well

timber hill Nov 6, 2020, 7:11 PM

#

Are we allowed to advertise open positions here?

quick forum Nov 6, 2020, 7:12 PM

#

In the UK, it seems to be (degree || experience) && cert

gray reef Nov 6, 2020, 7:12 PM

#

Are we allowed to advertise open positions here?
@timber hill go for it

polar rock Nov 6, 2020, 7:12 PM

#

hey guys, I was wondering if I need a bachelors degree to be able to get a good job in cyber security. Is this true?
@strong jacinth do you NEED one, short answer no I know people who worked their ass off and have some really good jobs because they’re talented, it will very much help though. It also depends on where you’re located

gray reef Nov 6, 2020, 7:12 PM

#

We're looking to add an official job listing board soon but for now go wild with posting here

strong jacinth Nov 6, 2020, 7:15 PM

#

I seee okay well, I'm currently located in NYC, but I'm working on an associates degree and was wondering if I should continue on with getting a bachelors. Also I have no prior job experience in cybersec and was curious if I should just jump right into it since I will get that "experience" sooner rather than later. Just looking for some advice 🙂

#

would certs equate to what could be missing in a job app? Like a bachelors or not really

polar rock Nov 6, 2020, 7:20 PM

#

Ughhh I wouldn’t really say drop out unless you know for sure you have a really solid offer and you can go back later

#

This is touchy and depends on what you’re comfortable with

languid hearth Nov 6, 2020, 7:23 PM

#

if you have your associates, its enough to scrape by.

#

you'll be walled off from a lot of companies if you don't get your B.S.

timber hill Nov 6, 2020, 7:24 PM

#

Hello everyone, my company is looking to hire a Cybersecurity Incident Response Analyst and a security focused position; Production Operations Engineer. Both are based in Austin, TX.
Cybersecurity Incident Response: https://boards.greenhouse.io/clear/jobs/2327678
Production Operations Engineer: https://boards.greenhouse.io/clear/jobs/2415471?gh_src=1c01fa0f1us

Please let me know if you decide to apply and Ill whip you a referal.

Cyber Incident Response Analyst

Austin, Texas, United States

Production Operations Engineer

Austin, Texas, United States

polar rock Nov 6, 2020, 7:25 PM

#

Clear, as in the airport security company? ... interesting

timber hill Nov 6, 2020, 7:26 PM

#

Yes, that Clear

#

We do biometric identification for a lot more than airports now, but yes that is what we are known for.

quick forum Nov 6, 2020, 7:27 PM

#

Well that's heckin' awesome and I'm happy to see those posted here!

timber hill Nov 6, 2020, 7:28 PM

#

There are plenty more open positions in NYC, so worth checking out those also https://www.clearme.com/about-us/#careers

About Us and Careers | CLEAR

At CLEAR, we're always improving our technology, and our people are powering the movement. SAFETY Act Certified.

barren robin Nov 6, 2020, 8:02 PM

#

📎 Ek30SZaXIAETfdo.jpeg

#

I found that Roadmap interesting

quick forum Nov 6, 2020, 8:02 PM

#

~~Just a heads up, CEH is on there as a meme~~

barren robin Nov 6, 2020, 8:07 PM

#

CEH :
The one to rule them all.
The certificate of the ultimate penetration tester.
(It's a joke avoid this thing) - Commonly required by the govermments 🤣

gray reef Nov 6, 2020, 8:41 PM

#

@rancid adder you've been summoned

#

Tux created that^

rancid adder Nov 6, 2020, 8:41 PM

#

henlo

#

oh

#

Yes, I had to fill the spots with something

distant pier Nov 6, 2020, 8:59 PM

#

CEH: Couldn't Even Hack. v11 now!

rugged sable Nov 7, 2020, 12:47 AM

#

Does this webpage actually explain how to get the cert https://www.accessibilityassociation.org/cpacccertification

CPACC Certification

#

i can't tell if it's not there, or if i am blind

polar rock Nov 7, 2020, 12:48 AM

#

Check here? https://www.accessibilityassociation.org/certificationfaq

rugged sable Nov 7, 2020, 12:48 AM

#

oh

#

The 2020 November/December Exam Session is now accepting applications. Exams can be taken November 9 - December 11.

#

you have to apply

#

its $325 too

polar rock Nov 7, 2020, 12:50 AM

#

Not too bad

rugged sable Nov 7, 2020, 12:50 AM

#

If I get it I can become THM's Official Resident A11Y Expert™️

polar rock Nov 7, 2020, 12:51 AM

#

Convince thm to pay for it

rugged sable Nov 7, 2020, 12:52 AM

#

I'm not even a room tester / fall under commissioned creators the likely hood of that is slim to none

polar rock Nov 7, 2020, 12:53 AM

#

you’re a staff though

#

and Accessibility liaison?

rugged sable Nov 7, 2020, 1:11 AM

#

hmmmm

meager hazel Nov 7, 2020, 1:11 AM

#

Having been in UX it's weird when I pentest apps that I think are designed like crap and don't really know if I should tell the team or not pikapika

rugged sable Nov 7, 2020, 1:11 AM

#

i am not A11Y liaison but I basically do that for a lot of rooms

#

I will ask Ashu, it's $325 and I'd be perfectly happy to help out for free, but it'd be cool to have someone that is certified A11Y "expert" to help with rooms and stuff 😄

meager hazel Nov 7, 2020, 1:12 AM

#

Informational finding: Set alt values on your damn images

rugged sable Nov 7, 2020, 1:13 AM

#

Thansk @polar rock ! ❤️

polar rock Nov 7, 2020, 1:18 AM

#

Having been in UX it's weird when I pentest apps that I think are designed like crap and don't really know if I should tell the team or not
@meager hazel pentest finding - app designed like dookie

meager hazel Nov 7, 2020, 1:19 AM

#

Medium Finding: Can't read anything. Remediation: https://snook.ca/technical/colour_contrast/colour.html

Colour Contrast Check - snook.ca

For people with impaired vision, we are required to ensure that there is a minimum amount of contrast between our foreground and background colors. formulas for determining optimum color contrast. W3C's specification on color contrast... hp color palette. style sheet text colo...

gleaming basin Nov 7, 2020, 5:20 AM

#

Finally started the path

📎 20201107_001544.jpg

#

I know its not much and a lot of people will probably say its worthless but its not for me. eJPT that is....

cosmic ingot Nov 7, 2020, 9:04 AM

#

No one says it's worthless. Some people just say you may decide to skip it and save your money for something else. But everyone who's taken the exam (myself included) says the best things about it. The course itself is undoubtedly a great way to introduce you to pentesting and enumerating.

gleaming basin Nov 7, 2020, 9:20 AM

#

Doing Offensive Pentesting path on THM along side PTS

barren robin Nov 7, 2020, 11:14 AM

#

Can someone explain what's the difference between eJPT and PTS ?

rancid adder Nov 7, 2020, 11:17 AM

#

eJPT, is the certificate you can get after passing the exam (an exam voucher costs $200).
PTS (Penetration Testing Student) is the course that you may take to prepare for the exam (it's now completely free as part of the INE starter pass)

barren robin Nov 7, 2020, 11:17 AM

#

thx

warm hinge Nov 7, 2020, 11:51 AM

#

Completing computer science program soon and earned a few certs in the process, appreciate any feeback on updated resume. This resume is for entry level pentest or analyst role. Thanks.

📎 john-doe-resume1.png

#

📎 john-doe-resume2.png

#

📎 john-doe-resume3.png

quick forum Nov 7, 2020, 11:51 AM

#

IIRC you wanna keep it to 2 sides max?

warm hinge Nov 7, 2020, 11:54 AM

#

good to know, thank you

pseudo creek Nov 7, 2020, 11:55 AM

#

thats a lot of white space in general, try to get it down to 1 page. 2 page max would really be for extensive history

#

its not an exam paper, learn how to effectively use the white space available. No reason for bullet points to have a space between them plus you are primarily using the left side instead of using both left and right sides. Things like your email address (and add your phone number) could be on the right side of the page opposite your name. I wouldn't put your linkedin page there, it is just being redundant and someone if they care are going to search for you on linkedin anyway. You might want to look at various examples. This page has some examples which are kept to 1 page. https://www.livecareer.com/resume/examples/information-technology

LiveCareer

11 Amazing IT Resume Examples | LiveCareer

The competition is fierce, but you can write an attention-grabbing resume. Study our it resume examples and snag an interview in no time.

tropic girder Nov 7, 2020, 1:41 PM

#

@warm hinge seems 42 SV is dead, welcome to 42 Paris mate ;-)
So basically you can write the 2 campus on the résume now.

ancient prairie Nov 7, 2020, 3:45 PM

#

@warm hinge Don't be scared of having some color or a unique layout. I've had really good feedback with this resume template. My hiring manager showed me previews of all the resumes he received for the job and they literally all looked identical to yours.

📎 unknown.png

#

btw the template is from Canva, they offer a free subscription with the GitHub student developer pack, I use Canva quite often whenever I need some sort of professional looking graphic

cosmic ingot Nov 7, 2020, 5:24 PM

#

https://flowcv.io/ I can't recommend this enough

#

you need an account, and it's free for 1 cv, $$ for more

languid hearth Nov 7, 2020, 5:52 PM

#

@warm hinge unless you earned CySA from CompTIA, putting that is misleading

stoic lotus Nov 7, 2020, 5:59 PM

#

any good resources for learning power shell scripting?

quick forum Nov 7, 2020, 5:59 PM

#

Under the wire

polar rock Nov 7, 2020, 6:00 PM

#

powershell documentation

languid hearth Nov 7, 2020, 6:03 PM

#

Get-Help

polar rock Nov 7, 2020, 6:06 PM

#

ok so I thought you were telling me to get help rather than telling them to use the get help menu

languid hearth Nov 7, 2020, 6:10 PM

#

both

cosmic ingot Nov 7, 2020, 6:45 PM

#

I will

ancient prairie Nov 7, 2020, 6:56 PM

#

get-help examples are really useful too, powershell is starting to grow on me

gleaming basin Nov 8, 2020, 1:21 AM

#

If you dont mind me asking @ancient prairie what was the biggest factor for you in obtaining your first it gig

#

Dm if its not a public matter

ancient prairie Nov 8, 2020, 7:48 AM

#

honestly it was a bit of luck, I was the first one to apply and also had a resume that stood out. Apparently I gave a really strong interview which solidified it for me. I also live in an area saturated with jobs like these and you can get entry level gigs with just a high-school diploma and an A+ certification so it's not the most difficult thing to do depending on your local job market.

gleaming basin Nov 8, 2020, 7:50 AM

#

Ive seen so many "entry-levels" that required ba in cs or IT

#

Or 3+ years of experience

#

Also, since you got your eJPT. Out of curiosity, should i take the long way to get the "flag" or whatever way I know how.

#

Some of their methodology is so lengthy vent

#

Definitely reminds me of a few thm rooms ive completed :)

ancient prairie Nov 8, 2020, 7:57 AM

#

I hear you and definitely agree it can be lengthy, the most important thing is getting out of the "flag" mentality and leaving no stone unturned. So yes definitely take the long way but just make sure you are enumerating every single possible attack vector, if you are planning on pursuing red-teaming/penetration testing this is very crucial.

gleaming basin Nov 8, 2020, 7:58 AM

#

I get that. Its not a ctf per se. Even if I get the "you got it" and it appears they give you 3 machines to enumerate. With each one contains a piece for another

ancient prairie Nov 8, 2020, 7:59 AM

#

And yeah I've seen those same "entry-level" posts, it's bs but most of the time due to an out of touch HR rep. I was wayyy underqualified on paper for my current job but I was able to prove I (somewhat) know what I'm talking about. Just keep at it and try to not get discouraged.

gleaming basin Nov 8, 2020, 8:00 AM

#

Definetely not going to be discouraged. Reason i asked about the boxes is Im not sure whether or not you are graded on end result or how you are getting there

ancient prairie Nov 8, 2020, 8:02 AM

#

It's a little bit of both, but the exam is definitely structured in a way that requires you to enumerate very well or you won't pass, the exploits are rudimentary it's just about finding everything

gleaming basin Nov 8, 2020, 8:04 AM

#

Hopefully Ill find out soon. Definetely not until Im breezing thru the black boxes

#

Thanks for the info

ancient prairie Nov 8, 2020, 8:05 AM

#

No problem, once you bang out the black boxes those are a really good test to know if you're ready for the exam. DMs are always open if ya have questions, best of luck.

tranquil oasis Nov 8, 2020, 12:28 PM

#

THM beginner pentest learning path is a great way to get started for the eJPT in my opinion

static tide Nov 8, 2020, 1:47 PM

#

if anyone is looking to be a software engineer, this really cool company called TryHackMe is looking for one:)

rugged sable Nov 8, 2020, 1:51 PM

#

Who?

static tide Nov 8, 2020, 2:06 PM

#

𝓣𝓻𝔂𝓗𝓪𝓬𝓴𝓜𝓮

rugged sable Nov 8, 2020, 2:07 PM

#

Oh them

willow gate Nov 9, 2020, 11:37 AM

#

𝓣𝓻𝔂𝓗𝓪𝓬𝓴𝓜𝓮
@static tide never heard of them

coral mango Nov 9, 2020, 5:44 PM

#

Looking for someone who is good in website penetrations or web cracking expert for a paid gig, DM me to get more details of the job!

quick forum Nov 9, 2020, 5:50 PM

#

Banned.

polar rock Nov 9, 2020, 5:51 PM

#

https://tenor.com/view/apu-thank-you-come-again-the-simpsons-gif-11605188

Tenor

lyric falcon Nov 10, 2020, 12:13 AM

#

I consider myself an Intermidite Pentester/0x8 H4CK3R Do you guys think I should get the eJPT Certification if searching for a job?

ancient prairie Nov 10, 2020, 12:18 AM

#

To me intermediate pentester means you could easily pass the OSCP. eJPT is an entry-level pentesting cert and while it doesn't hurt to have, I've maybe only seen it mentioned in a job listing like once or twice. My advice is if you are intermediate level to just pursue OSCP because your job prospects will skyrocket.

polar rock Nov 10, 2020, 12:22 AM

#

OSCP considered an entry level cert

lyric falcon Nov 10, 2020, 1:36 AM

#

@ancient prairie I decided to go for eJPT first then I'll go straight for OSCP

elder grove Nov 10, 2020, 3:00 AM

#

PTS is free nowadays. Doesn't hurt to do the course for the foundations. Not really a need in my opinion to do the certification unless it's for validation. https://checkout.ine.com/starter-pass?utm_source=73&utm_medium=referral&utm_campaign=starterpass&utm_content=vip

#

(I don't get rewarded for that link, by the way.)

polar rock Nov 10, 2020, 3:04 AM

#

then what is the refferal for?

elder grove Nov 10, 2020, 3:49 AM

#

They're giving them to track us I guess.

#

¯_(ツ)_/¯

#

📎 unknown.png

polar rock Nov 10, 2020, 3:50 AM

#

interesting

elder grove Nov 10, 2020, 3:53 AM

#

I'm not one of those content creators who gets free stuff and then gives a 10/10 review for it.

#

¯_(ツ)_/¯

naive cypress Nov 10, 2020, 4:18 PM

#

Hello everyone

cosmic ingot Nov 10, 2020, 6:00 PM

#

https://www.nitrd.gov/news/national-cybersecurity-career-awareness-week-2020/resources.aspx

National Cybersecurity Career Awareness Week 2020

Check out NITRD’s Spotlight on Cybersecurity Careers and see why people in cybersecurity share a passion and a path to an exciting career!

warm hinge Nov 10, 2020, 6:07 PM

#

@naive cypress hi

warm hinge Nov 10, 2020, 11:18 PM

#

@ancient prairie I decided to go for eJPT first then I'll go straight for OSCP
@lyric falcon I was thinking about getting the eJPT too. Did you pay for the INE training or nah?

polar rock Nov 10, 2020, 11:22 PM

#

eJPT training is free no need to pay for it

warm hinge Nov 10, 2020, 11:23 PM

#

Thanks for the link though. Will put in good use @elder grove

#

I tried searching for this, but was too dumb so rip.

#

So u guys recommend oscp after the eJPT training right?

languid hearth Nov 10, 2020, 11:25 PM

#

sure

warm hinge Nov 10, 2020, 11:26 PM

#

Will it be enough though? I'm a newbie with no certs atm.

languid hearth Nov 10, 2020, 11:26 PM

#

back in the day i did HTB -> two months -> PWK 30 days -> passed OSCP

#

if you know what networking is, ports, protocols (SMB, FTP, NTP, TFTP, HTTP, SSH, HTTPS, etc), IP addresses you'll be fine

warm hinge Nov 10, 2020, 11:27 PM

#

HTB is a pain for me atm. can complete THM's rooms 40% of the time without the writeups and solutions

#

i know a few of those, but have a vague idea about them.

languid hearth Nov 10, 2020, 11:28 PM

#

if you can get to the point where you've got a methodology developed, i.e. do what you can, research all the technologies that are in use, research exploits, successfully exploits, then you're ready

#

im no SQLi guru, but I know how to resesrch SQLi

quick forum Nov 10, 2020, 11:29 PM

#

Remember that you get PWK with OSCP

undone shore Nov 10, 2020, 11:30 PM

#

^^ That said, the OSCP exam is designed to be "realistic", which means that not every exam will be the same level. Some are very easy. Some are virtually impossible. Most fall somewhere in the middle.
For the upper end of that set, the PWK is nowhere near enough to prepare you.

warm hinge Nov 10, 2020, 11:31 PM

#

are there any practical hands on courses for networking? i got the network+ course but its basically just a course and they don't test you on how much you know.

#

my networking basics are trash. but i guess i have a vague idea about what i do inside a box like scanning, enumeration etc.

languid hearth Nov 10, 2020, 11:32 PM

#

CCNA

#

you're hands on configuring networks

#

otherwise, you'll want a broad systems administration course

#

im sure they exist

warm hinge Nov 10, 2020, 11:34 PM

#

is david bombal's ccna enough? im not too sure if he uploaded the entire course on youtube.

languid hearth Nov 10, 2020, 11:34 PM

#

100%

warm hinge Nov 10, 2020, 11:34 PM

#

Alrighty

pseudo creek Nov 10, 2020, 11:35 PM

#

I think Droogy mentioned a course they took... if you see Droogy ask them about what the course they thought was helpful for sysadmin stuff

languid hearth Nov 10, 2020, 11:35 PM

#

I was a networking guy before I was a security guy

quick forum Nov 10, 2020, 11:35 PM

#

I was a server guy before I was a security guy

warm hinge Nov 10, 2020, 11:35 PM

#

thats probably why its harder for me lol, grade 11

pseudo creek Nov 10, 2020, 11:35 PM

#

also the shaved bald dude on Udemy is pretty good for CCNA

languid hearth Nov 10, 2020, 11:35 PM

#

I did my CCNA in 11/12th grade

warm hinge Nov 10, 2020, 11:35 PM

#

shaved bald guy hmm.

#

nice

pseudo creek Nov 10, 2020, 11:36 PM

#

my husband re-upped his CCNA... after 20 years and all I saw was some shaved bald dude on the screen ha

#

base CCNA is required for other Cisco certs

#

https://www.udemy.com/course/ccna-complete/ this one

Udemy

Learn Cisco CCNA 200-125: Guide to Getting Certified

The top rated CCNA course online and only one where all questions get a response. Full lab exercises included.

languid hearth Nov 10, 2020, 11:37 PM

#

dudes made at least 200k off that course

#

amazing

warm hinge Nov 10, 2020, 11:37 PM

#

ngl finding ccna courses are way harder to find than normal udemy courses

#

ill give it a shot tho ty

#

got it.

#

38 hours!! paradox

languid hearth Nov 10, 2020, 11:41 PM

#

that's udemys model

#

the sale is going on 24/7

warm hinge Nov 10, 2020, 11:43 PM

#

just found another ccna course with 80 hours on it. udemy is serious when it comes to cisco oof

languid hearth Nov 10, 2020, 11:45 PM

#

udemy's sales model is sale 24/7

#

it adds perceived value

#

the discount price is the normal price

warm hinge Nov 10, 2020, 11:46 PM

#

oh I don't buy udemy courses. i just use google dork it accessgranted

languid hearth Nov 10, 2020, 11:47 PM

#

yeah we don't do that here

warm hinge Nov 10, 2020, 11:47 PM

#

concernedhex

languid hearth Nov 10, 2020, 11:47 PM

#

since were a partnered server, we don't condone piracy.

warm hinge Nov 10, 2020, 11:48 PM

#

i can't really afford it online, i got the money in cash. would yeet if I could yell_cat

#

i have a feeling i might get banned soon cuz of this. lightsaberpepe

elder grove Nov 11, 2020, 12:25 AM

#

I didn't use any HTB Exotic.

#

📎 oscp_prep_list.png

#

You can do well using the CyberSecLabs and Tryhackme rooms there.

#

Add some of the newer ones as well (Relevant and Internal, for instance).

pseudo creek Nov 11, 2020, 12:37 AM

#

If anyone is interested, Nike is hiring for a Lead Cloud Security Engineer. Catch it is in Beaverton, OR (I was just geeking out about possibly working for Nike but Oregon is bleh for me) . I can share link if interested (recruiter reached out to me)

elder grove Nov 11, 2020, 12:42 AM

#

I would love to live in Oregon.

#

Lucky job.

pseudo creek Nov 11, 2020, 12:43 AM

#

it sounded cool, I just need a lot more diversity than Oregon offers

warm hinge Nov 11, 2020, 12:59 AM

#

Thanks for the resources. Really appreciate it @elder grove

#

you too! :)@pseudo creek

ancient prairie Nov 11, 2020, 1:34 AM

#

@warm hinge I did end up getting the INE training, its pretty awesome tbh, and definitely worth it but I am trying to cope with "drinking water from a fire hydrant" syndrome because there are so many courses and modules I wanna learn

#

And to whoever asked about sysadmin stuff I got Testout Client Pro certified, which is a practical exam that covers the same objectives as MD-100/MD-101

#

Basically I am doing some sysadmin work now, and I would strongly suggest learning the hell out of Microsoft 365 if you wanna go that route

south nest Nov 11, 2020, 1:38 AM

#

I might have to look into that, I just wanna get out of helpdesk

frigid niche Nov 11, 2020, 2:54 AM

#

Ugh helpless desk, where you have to follow the script, even when it is inefficient

warm hinge Nov 11, 2020, 7:35 AM

#

I can’t really afford INE, 1999$ for the cyber security pass. Thats like 2 years of saving pocket money. Sadly that amount too is taken as a whole and not on monthly leases.

#

@ancient prairie

static tide Nov 11, 2020, 7:55 AM

#

@ancient prairie i see you have ejpt, did you get the course while it was still on elearn? if so, how does the experience compare? i really liked the experience of everything on elearn and i will buy ine if it’s near enough the same

cosmic ingot Nov 11, 2020, 10:35 AM

#

@warm hinge I know it's a lot of mine, but for anyone who is interested, the els-cyber coupon is still valid.

#

@static tide I'm not the one you asked but that's what I did. got the basic tier of the PTS course and got the eJPT with it. RIght now I also have the INE starter pass, and I think it's really great (the labs mainly). very well laid out.

lyric falcon Nov 11, 2020, 12:13 PM

#

@static tide I'm not the one you asked but that's what I did. got the basic tier of the PTS course and got the eJPT with it. RIght now I also have the INE starter pass, and I think it's really great (the labs mainly). very well laid out.
@cosmic ingot I also got the eJPT but I don't know why it is not showing up on my dashboard. I bought it yesterday

cosmic ingot Nov 11, 2020, 12:16 PM

#

@lyric falcon I'm not sure what's up with that. But I recently needed to get a pdf of my cert and I went to the old members area in elearnsec and got it off there, so you can definitely do that

lyric falcon Nov 11, 2020, 12:16 PM

#

@lyric falcon I'm not sure what's up with that. But I recently needed to get a pdf of my cert and I went to the old members area in elearnsec and got it off there, so you can definitely do that
@cosmic ingot How did you go there?

cosmic ingot Nov 11, 2020, 12:16 PM

#

Elearnsecurity.com then login

#

Like we used to before ine

#

It's still there, plus your courses (if you had bought any)

lyric falcon Nov 11, 2020, 12:18 PM

#

I can't see it. They said my voucher was processed on my email.

#

@cosmic ingot I just got the voucher not the course

cosmic ingot Nov 11, 2020, 12:20 PM

#

Alright, I meant it generally though; if you had bought any courses before ine, they are still there

#

Now I got my cert before ine so now I'm not sure where its supposed to show up

#

(the voucher)

static tide Nov 11, 2020, 12:23 PM

#

same place

#

members.elearnsecurity.com > Exams

lyric falcon Nov 11, 2020, 12:24 PM

#

📎 Capture.PNG

static tide Nov 11, 2020, 12:24 PM

#

interesting

#

you get an email?

lyric falcon Nov 11, 2020, 12:24 PM

#

📎 Capture.PNG

static tide Nov 11, 2020, 12:25 PM

#

is there no link to it or anything?

lyric falcon Nov 11, 2020, 12:25 PM

#

is there no link to it or anything?
@static tide It just says Thanks for shopping with us

#

No

static tide Nov 11, 2020, 12:26 PM

#

uhh i’d say give them an email or live chat

#

nvm live chat has gone

lyric falcon Nov 11, 2020, 12:26 PM

#

uhh i’d say give them an email or live chat
@static tide I did send them an email this morning

static tide Nov 11, 2020, 12:27 PM

#

yeah not much you can do apart from wait now then i guess

lyric falcon Nov 11, 2020, 12:29 PM

#

From: eLearnSecurity Certifications info@elearnsecurity.com
Date: Tue, Nov 10, 2020 at 11:24 AM
Subject: Your eLearnSecurity order is now complete
To: ********@gmail.com

#

Does elearnsecurity have a link with https://www.caendra.com/?

static tide Nov 11, 2020, 12:34 PM

#

yes

#

Caendra Inc. is the Silicon Valley company behind eLearnSecurity and its projects.
Caendra is in fact, eLearnSecurity.

lyric falcon Nov 11, 2020, 12:37 PM

#

I updated my banking details on there so maybe something will appear this time?

elder grove Nov 11, 2020, 12:42 PM

#

Maybe contact customer service.

round crown Nov 11, 2020, 1:58 PM

#

Pts and ejpt will let you in solid skill for oscp?

#

I mean i need a two years in IT field or i can study hard and try?

lofty apex Nov 11, 2020, 2:02 PM

#

eJPT won't but eCPPT will

round crown Nov 11, 2020, 2:03 PM

#

Thxx arz i will look for

ancient prairie Nov 11, 2020, 2:06 PM

#

@static tide I love it, I would argue the quality is just as good if not better than eLS last platform, my biggest gripe is that we can't download PDFs of the slides (or I'm missing that option) which is something I'm going to talk to support about

lofty apex Nov 11, 2020, 2:06 PM

#

Thxx arz i will look for
@round crown But it's good to have a eJPT cert if you are new in this field

round crown Nov 11, 2020, 2:07 PM

#

@lofty apex eCPPT it will be same difficult like oscp?

lofty apex Nov 11, 2020, 2:08 PM

#

I can't say as I haven't took it but I heard a lot of people saying it's not harder than OSCP as you can use tools in eCPPT while in OSCP your not allowed to use tools , you have to exploit the machines manually , if I am wrong please correct me

ancient prairie Nov 11, 2020, 2:09 PM

#

you can use certain tools, I believe sqlmap and Metasploit (can only be used once) are restricted

#

Since the OSCP is kinda crapshoot I have heard that the eCPPT can be harder, especially since there is pivoting involved

lofty apex Nov 11, 2020, 2:09 PM

#

I haven't got any certification but I'm planning to take eCPPT then OSCP because eJPT is very basic and the material is also available in eCPPT too

ancient prairie Nov 11, 2020, 2:10 PM

#

I would argue that eCPPT is much more realistic tho in the sense that you can usually use whatever tools you want in an engagement

lofty apex Nov 11, 2020, 2:10 PM

#

Yes pivoting is also involved in eCPPT

languid hearth Nov 11, 2020, 2:10 PM

#

ill be honest, in my OSCP my attempt, I never found myself feeling like tools were the only way

round crown Nov 11, 2020, 2:10 PM

#

@lofty apex i was looking for solid base to go an oscp, i can try with hard study to eCPPT i mean nearly basic level?

languid hearth Nov 11, 2020, 2:11 PM

#

nor did I feel like tools would have been remotely useful

#

i think the restriction is more of a "don't complicate it, stupid" thing.

ancient prairie Nov 11, 2020, 2:12 PM

#

by tools you mean automated tools?

lofty apex Nov 11, 2020, 2:12 PM

#

@round crown I think droggy can answer that as he had done eJPT

languid hearth Nov 11, 2020, 2:12 PM

#

yeah, like SQLMap, Burp Pro, etc.

ancient prairie Nov 11, 2020, 2:13 PM

#

eCPPT is not really "basic" level per se, it is relative to your experience

#

for some people eJPT will seem like a mountain, to others an ant hill

round crown Nov 11, 2020, 2:13 PM

#

@ancient prairie mmh im confuse now 😅😅😂

languid hearth Nov 11, 2020, 2:14 PM

#

personally, I think that a lot of it has to do with your prior experience with IT/Networking/SysAdmin

ancient prairie Nov 11, 2020, 2:14 PM

#

eCPPT imo is supposed to be equivalent to OSCP

languid hearth Nov 11, 2020, 2:14 PM

#

I had a lot of prior experience so I was just like /shrug yolo oscp

ancient prairie Nov 11, 2020, 2:14 PM

#

so yes, basic in the sense of entry-level pentesting, but not basic in terms of basic computer usage and skills

cosmic ingot Nov 11, 2020, 2:18 PM

#

@lyric falcon It's not an active exam, you just have the voucher. You should be able to see the voucher immediately upon purchase, along with a "begin exam" button. Then it will show up in the exams field.

#

I just logged in and realized I'm not entirely sure where my "begin exam" button used to be. Maybe it was there. So yeah, if you've navigated your account and nothing is showing up, you could contact them

lyric falcon Nov 11, 2020, 2:40 PM

#

I just logged in and realized I'm not entirely sure where my "begin exam" button used to be. Maybe it was there. So yeah, if you've navigated your account and nothing is showing up, you could contact them
@cosmic ingot What does Verify Certificate mean?

cosmic ingot Nov 11, 2020, 2:40 PM

#

I can send a link to someone to verify that I (name, surname) indeed am ejpt certified

#

so no need to send or upload anything else

#

you'll be able to do that once you pass the exam

lyric falcon Nov 11, 2020, 2:42 PM

#

Several people were having this problem too I don't know why

cosmic ingot Nov 11, 2020, 2:42 PM

#

oh yeah, they changed something in their system, but right now you can tick a box to make your cert publicly accessible and send a link. otherwise I think you have to manually fill in the name etc.

lyric falcon Nov 11, 2020, 2:43 PM

#

oh yeah, they changed something in their system, but right now you can tick a box to make your cert publicly accessible and send a link. otherwise I think you have to manually fill in the name etc.
@cosmic ingot Where and how?

cosmic ingot Nov 11, 2020, 2:44 PM

#

you can't do that right now because you don't have the cert 🙂

#

when you get it, you click "certifications" iirc, from there it's really straight-forward

elder grove Nov 11, 2020, 3:00 PM

#

eCPPT was a far more difficult and relevant exam.

#

The eCPPT exam and OSCP exam are two completely different exams. One is a pentesting engagement, the other is not.

cosmic ingot Nov 11, 2020, 3:02 PM

#

for that matter, even ejpt is a pentesting engagement, just a more basic one

#

except the report part

elder grove Nov 11, 2020, 3:04 PM

#

And even that exam has more pivoting than the OSCP.

polar rock Nov 11, 2020, 3:05 PM

#

why is pivoting such an important thing for a cert I really don’t get it

ancient prairie Nov 11, 2020, 3:06 PM

#

Just look at a logical map for any corporate network and you can see how important pivoting is

cosmic ingot Nov 11, 2020, 3:07 PM

#

@polar rock cause it's covered in the course material and then you put it to the test during the exam

undone shore Nov 11, 2020, 3:08 PM

#

That and you're presumably gonna be doing a lot of it irl

polar rock Nov 11, 2020, 3:09 PM

#

I mean I understand the importance of pivoting I made an entire network that used a ton of segmentation but I really wouldn’t pick one over the other due to pivoting and that’s the main argument I hear when eCPPT v OSCP comes up

cosmic ingot Nov 11, 2020, 3:09 PM

#

pick what over what?

polar rock Nov 11, 2020, 3:10 PM

#

eCPPT v OSCP

ancient prairie Nov 11, 2020, 3:10 PM

#

I mean it's kinda baffling that OSCP has the respect it does given that it's not a realistic exam at all, I think that's the main thing, eCPPT will better prepare you for real-world pentesting imo

#

OSCP just means you are stubborn bastard 😛

#

but yeah it comes down to personal goals for sure, it will be a while before eCPPT is recognized well

cosmic ingot Nov 11, 2020, 3:12 PM

#

@polar rock we weren't discussing which one we'd pick though, just talking about how different the exams are

polar rock Nov 11, 2020, 3:13 PM

#

I’m not referring to this conversation it’s just something I’ve seen come up a lot and the pivoting in eCPPT made my mind think of it

cosmic ingot Nov 11, 2020, 3:13 PM

#

but to contribute further to this discussion, john hammond said he's taken both exams, and believes if you pass the eCPPT you can go for the OSCP exam with no additional preparation, and he believes that's not possible the other way around

#

alright then. even so, I would definitely pick ecppt over oscp considering the skills I would gain from each one, based on the feedback from people on this server

#

I would only pick oscp between the two for job aspects, because it's more widely recognised, and that's it

polar rock Nov 11, 2020, 3:16 PM

#

I personally would just pick up all the practical knowledge for free by researching rather than paying for it and taking the OSCP and getting the better resume from it

#

at the end of the day everyone wants a job and if you get a good job they’ll pay for any knowledge they want you to have

cosmic ingot Nov 11, 2020, 3:17 PM

#

the last point is not necessarily true

#

it largely varies from employer to employer, and even when it's an option afaik you have a limited budget

polar rock Nov 11, 2020, 3:18 PM

#

that’s what I meant by a good job just wasnt verbose enough

meager hazel Nov 11, 2020, 3:23 PM

#

There are good jobs that don't cover training (ie: boutique consulting). Depends on how you're compensated and other growth opportunities they can provide

#

Unrelated: just passed my AWS Solutions Architect - Associate exam

#

Bring on teh cloudz

elder grove Nov 11, 2020, 3:35 PM

#

The OSCP's continued value in the workplace only exists because people won't consider other valid, if not better, options.

#

If we're taking an exam for nothing more than a resume bullet, that really says a lot about it.

ancient prairie Nov 11, 2020, 3:38 PM

#

Nice if I wasn't using Windows everyday at work I would be pursuing more AWS stuff

#

Azure here we come

#

And to piggy-back on the Mayor's point I think once this current generation is in Senior roles and hiring positions we will see OSCP get slowly phased out

elder grove Nov 11, 2020, 3:40 PM

#

And I agree with John Hammond. There's no way I'd pass eCPPT with PWK/OSCP experience. Absolutely could have in reverse though.

ancient prairie Nov 11, 2020, 3:41 PM

#

Interesting, that's good to know considering I plan on taking both, maybe Ill just be an absolute madman and do them back-to-back

languid hearth Nov 11, 2020, 3:41 PM

#

I mean I understand the importance of pivoting I made an entire network that used a ton of segmentation
@polar rock
What I see IRL:
Most engagements (void red teams) they put you on the native VLAN which allows you to more or less traverse throughout the network at will.
The thing that most important imho is knowing how to catch a shell over the public internet

elder grove Nov 11, 2020, 3:41 PM

#

No one does a good job of that.

languid hearth Nov 11, 2020, 3:42 PM

#

~~I tried to convince Ashu to let us have a public IP address allocation for the new network, but no dice :(~~

#

something about AWS and their stupid rules

elder grove Nov 11, 2020, 3:43 PM

#

I think that's a concept that is poorly covered everywhere. Most people see VPN when learning and that's all it is. Never understand that you can't just grab a shell from your LAN without a forwarding rule

polar rock Nov 11, 2020, 3:44 PM

#

@languid hearth lmao did you see the amount of logon requests that came when we had the one server public for a couple minutes

languid hearth Nov 11, 2020, 3:44 PM

#

yeah

#

the great thing about that is anything exploitable is hidden behind vhosts

#

with a non-standard tld

polar rock Nov 11, 2020, 3:46 PM

#

lmao a couple 100 logon attempts per minute

naive cypress Nov 11, 2020, 3:51 PM

#

Hiii

undone shore Nov 11, 2020, 4:12 PM

#

I was going to make one of the What the Shell boxes public, but the option is gone from the console 😢

#

Also probably not a good idea anyway, given how flippin' exploitable those things are

stoic lotus Nov 11, 2020, 4:28 PM

#

does anyone use nmap regularly?

polar rock Nov 11, 2020, 4:33 PM

#

Pretty sure all of us do why

lofty apex Nov 11, 2020, 4:36 PM

#

@stoic lotus Everyday 😄

stoic lotus Nov 11, 2020, 4:46 PM

#

im trying to figure out how to get nmap to work in my kali linux command line, im on a windows computer but i have the kali linux command prompt installed. my windows command prompt is reading nmap but my kali linux cmd isnt

languid hearth Nov 11, 2020, 4:51 PM

#

WSL 1.0 doesn't suppose raw sockets

#

which breaks nmap @stoic lotus

stoic lotus Nov 11, 2020, 4:53 PM

#

damnnn

#

so do i need to create a virtual machine and download linux and nmap on the vm? and if so what software should i use because oraclebox seems to be glitched

delicate wing Nov 11, 2020, 5:01 PM

#

personally i use vmware and kali since it was pretty easy for me to set up on windows

#

or if you wanted you could download the gui version of nmap; zenmap, as that works for windows

elder grove Nov 11, 2020, 5:11 PM

#

WSL2 works though.

stoic lotus Nov 11, 2020, 5:31 PM

#

what vm software do you guys use

elder grove Nov 11, 2020, 5:38 PM

#

VMWare

polar rock Nov 11, 2020, 5:40 PM

#

VMware pro > Virtualbox > VMware player

frigid niche Nov 11, 2020, 5:57 PM

#

Virtual box, and VMWare workstation

#

WSL 2.0 is out, so update your windows and perhaps have better luck.

dense dome Nov 11, 2020, 8:35 PM

#

@undone shore

silver sierra Nov 11, 2020, 10:48 PM

#

Is VMware pro cheap for students?

polar rock Nov 11, 2020, 10:52 PM

#

It can be free for students depends on your uni iirc

silver sierra Nov 11, 2020, 10:59 PM

#

Ooh I'll need to see if they works

#

Thanks

frigid niche Nov 12, 2020, 2:17 AM

#

Look for their black Friday sale, that has been the best price I have seen it at. (I'm not a student at Uni)

lyric falcon Nov 12, 2020, 5:40 AM

#

Has anyone recently taken an eJPT exam? If so, how long did you have to wait to get your exam on your dashboard?

loud marsh Nov 12, 2020, 5:55 AM

#

have anyone here work for NSA before?

pseudo creek Nov 12, 2020, 10:06 AM

#

I know people who have worked at NSA, but not myself

silver sierra Nov 12, 2020, 10:34 AM

#

If you worked for the NSA, could you say that you worked for the NSA? thinkalution 🕵️‍♀️

pseudo creek Nov 12, 2020, 10:40 AM

#

yeah

#

lots of them don't, but I know people that publicly will say it

olive forge Nov 12, 2020, 1:06 PM

#

Hi everyone, I would like to ask for some of your inputs.
Currently my job is on vulnerability management for more than two years, now I wanted to transfer into SOC. we don't have a SOC yet in my current company so it means transferring to another company. I like what I do in vulnerability management and I still learn during every project that I handle. It's just that I feel/think that it's time for me to try new things. is this a bad thinking?

I'm thinking if it is a valid reason to say to the interviewer that I want to explore and gain more knowledge on the other areas of cybersecurity thats why I am applying for a SOC position. I would like to experience how to respond in an incident.
any other reason I could say to give more proof/assurance that I want to work in a SOC?

distant pier Nov 12, 2020, 2:15 PM

#

Good thinking. You might also mention that you want to learn how to pro-actively defend the enterprise. @olive forge

cedar terrace Nov 12, 2020, 3:28 PM

#

Excuse me @distant pier Do you have a blog or something like that? i like your blue team opinions and want to learn more from you

stoic lotus Nov 12, 2020, 5:08 PM

#

what vulnerability scanners do yall use?🕵️‍♂️

quick forum Nov 12, 2020, 5:08 PM

#

Nessus is pretty standard

olive forge Nov 12, 2020, 5:27 PM

#

thanks @distant pier I'll will remember to mention that.

distant pier Nov 12, 2020, 5:42 PM

#

I don't have a blog. F-Secure has an interesting series called Attack Detection Fundamentals that you might find useful. It's 4 workshops from June/July 2020. https://www.f-secure.com/en/consulting/events/attack-detection-fundamentals-workshops @cedar terrace

Workshop Series: Attack Detection Fundamentals | F-Secure

Join us for four technical attack detection workshops led by our own cyber defence and detection teams.

cedar terrace Nov 12, 2020, 5:43 PM

#

Thanks !!!

loud marsh Nov 12, 2020, 9:48 PM

#

I saw NSA hired tons of unexperienced people with a very good salary. Is there any reason why to avoid them?

languid hearth Nov 12, 2020, 10:29 PM

#

They hire two types of people, strictly:

People with Higher Education degrees (A.S + 2 Yr Exp, B.S. + 0 Yr Exp)
People with Experience ( No Degree + 4 yr Exp)

loud marsh Nov 13, 2020, 12:11 AM

#

i had a friend did path 2

undone shore Nov 13, 2020, 12:12 AM

#

Let's not be advertising black hat hacking please 🙂

loud marsh Nov 13, 2020, 12:13 AM

#

yea jail mess people up mentally

ancient prairie Nov 13, 2020, 12:13 AM

#

or the whole thing where if you get convicted of a computer crime you generally can't touch a computer for years per the terms of your probation

rugged sable Nov 13, 2020, 12:17 AM

#

@loud marsh Please do not swear.

turbid glacier Nov 13, 2020, 1:32 AM

#

hi so i have no degree or relevant experience , i love doing red team but i feel more drawn to blue team ( i guess i like red team to know what i should look for), is there any advice anyone could give me?

cosmic ingot Nov 13, 2020, 1:43 AM

#

No because I have no idea what you just said

turbid glacier Nov 13, 2020, 1:53 AM

#

alright which part do you not get?

static tide Nov 13, 2020, 1:53 AM

#

have you done any blue team?

turbid glacier Nov 13, 2020, 1:54 AM

#

a little bit, as in basic volatility , RE and malware analysis

static tide Nov 13, 2020, 1:55 AM

#

i recommend setting up your own lab

turbid glacier Nov 13, 2020, 1:59 AM

#

yeah i'm saving up to get my other desktop fixed since my current one doesnt support virtualization

static tide Nov 13, 2020, 2:00 AM

#

ah

turbid glacier Nov 13, 2020, 2:00 AM

#

both my ssd and hdd became raw one day so yeh

static tide Nov 13, 2020, 2:01 AM

#

yeah get a lab setup with a couple hosts, firewall, siem and kali and just go crazy

turbid glacier Nov 13, 2020, 2:02 AM

#

i heard gns3 is good for that , would you recommend that?

polar rock Nov 13, 2020, 2:04 AM

#

gns3 can be nice I personally love it

turbid glacier Nov 13, 2020, 2:04 AM

#

thx for the opinion

polar rock Nov 13, 2020, 2:04 AM

#

a good way to get started if you cant support virtualization would be to particpate in some blue team ctfs like opensoc and nifelham network

static tide Nov 13, 2020, 2:05 AM

#

i only used it a tiny bit when doing ccna but i really should use it more

turbid glacier Nov 13, 2020, 2:06 AM

#

a good way to get started if you cant support virtualization would be to particpate in some blue team ctfs like opensoc and nifelham network
@polar rock thank you added them to my bookmarks

distant pier Nov 13, 2020, 2:15 AM

#

Check out Security Onion https://securityonionsolutions.com/software @turbid glacier

Security Onion Solutions

Security Onion Solutions, LLC

turbid glacier Nov 13, 2020, 2:15 AM

#

Check out Security Onion https://securityonionsolutions.com/software @turbid glacier
@distant pier thank you

Security Onion Solutions

Security Onion Solutions, LLC

remote mauve Nov 13, 2020, 11:43 AM

#

security onion is brilliant in my opinion

#

i need to implement that solution in my workplace, but need to be considerate of the load it will need to intake and desing it correctly

lyric temple Nov 13, 2020, 1:26 PM

#

Anyone here doing freelancing Or has done it

distant pier Nov 13, 2020, 1:29 PM

#

Blue Team Handbook by Don Murdoch has good considerations on Security Onion. @remote mauve

remote mauve Nov 13, 2020, 1:35 PM

#

awesome, thanks for that @distant pier

unkempt nova Nov 14, 2020, 12:40 PM

#

As a penetration tester having blue team skills is good idea... right?

polar rock Nov 14, 2020, 12:46 PM

#

Yep

unkempt nova Nov 14, 2020, 12:49 PM

#

Is there any well respected Blue Team course?

#

Perhaps CySA+?

quick forum Nov 14, 2020, 12:51 PM

#

I think Splunk fundamentals is free?

#

Plus there's some forensics stuff?

polar rock Nov 14, 2020, 12:56 PM

#

Splunk, autopsy are all free but won’t help a lot with red teaming

#

If you have the money I would buy the INE pass and take the eCIR or eTHP or if you want to a little bit Tryhackme is slowly rolling out an amazing blue team path

lofty apex Nov 14, 2020, 1:31 PM

#

Is Blue Team Level 1 certification of any worth ?

polar rock Nov 14, 2020, 1:34 PM

#

so, it looks to be a very good certification. But I have heard some not too good things about the instructor for the course and it’s not really worth it, I won’t go into details but just be warned.

lofty apex Nov 14, 2020, 1:36 PM

#

Oh okay

distant pier Nov 14, 2020, 4:30 PM

#

Is there any well respected Blue Team course?
@unkempt nova EC|Council has Certified Network Defender (CND), it has courseware material, lab session material, and practical labs. It's mostly foundational information pertaining to defensive technologies. It's probably one of the least known courses by EC|Council, so it's hard to gauge whether it is considered as respected.

unkempt nova Nov 14, 2020, 5:00 PM

#

@distant pier Not sure if EC-Council course is really good. And they pricy

distant pier Nov 14, 2020, 5:01 PM

#

Yes, it's crazy expensive. 😄

unkempt nova Nov 14, 2020, 5:03 PM

#

My main focus is Red team. To become a good red team member, wanted to learn some defending technique

languid hearth Nov 14, 2020, 6:10 PM

#

take a look at CCNA CyberOps for some of the basics

#

there's a blue team path in the works right now, so thm will have more content eventually

unkempt nova Nov 14, 2020, 6:20 PM

#

@languid hearth CyberOps advanced course than Security+?

languid hearth Nov 14, 2020, 6:23 PM

#

lol yes

unkempt nova Nov 14, 2020, 6:31 PM

#

Searching for a online course for this cert!

median rune Nov 15, 2020, 6:19 PM

#

Stupid question time guys.. FOr your last cyber job. Did your current employer contact your previous employer to check up on you? I've done 4 applications now and no prospect has contacted my old company (Although i did have this letter about my termination is classified as "No fault" .. nobody has asked for that either)

languid hearth Nov 15, 2020, 6:29 PM

#

that's pretty normal tbh

median rune Nov 15, 2020, 6:29 PM

#

So they just take your word for it nowadays?

languid hearth Nov 15, 2020, 6:29 PM

#

there's a lot of trust for whatever reason

#

honestly

#

they care more if you can answer their questions to a sufficient factor

median rune Nov 15, 2020, 6:29 PM

#

DAmn.. I've intereviewed twice in 21 yrs, and both times they ref + employer + cavity checked

languid hearth Nov 15, 2020, 6:30 PM

#

have you been applying to smaller or larger companies?

median rune Nov 15, 2020, 6:30 PM

#

Umm. Employer #1 in that list was a scientific nonprofit .. employer #2 was a small marketing/media agency

languid hearth Nov 15, 2020, 6:30 PM

#

gotcha

median rune Nov 15, 2020, 6:30 PM

#

they got bought up, merged with company 2a, who got merged with 2b, who got merged with 2c, who canned me on account of covid

languid hearth Nov 15, 2020, 6:30 PM

#

neither of the big fortune 500 companies I applied for checked

median rune Nov 15, 2020, 6:31 PM

#

Don't be sad

#

The risk management strategy they are primarily employing now is "ignorance" lmao

languid hearth Nov 15, 2020, 6:32 PM

#

yikes

median rune Nov 15, 2020, 6:33 PM

#

OTOH they did have me sign an independant consulting agreement for an exceedingly equitable rate.. But it doesn't matter if they are paying you $1M /hr for your work, if they hire you for 0 hrs a yr

ancient prairie Nov 15, 2020, 7:48 PM

#

DAmn.. I've intereviewed twice in 21 yrs, and both times they ref + employer + cavity checked
@median rune wait cavity checking in an interview?? I hope you're kidding lol

median rune Nov 15, 2020, 7:48 PM

#

Umm. Only mildly

#

Though the really invasive interviews were for the entry level stuff oh so long ago.

ancient prairie Nov 15, 2020, 7:49 PM

#

federal?

median rune Nov 15, 2020, 7:49 PM

#

DoD Contractors,

#

there was this one time i volunteered for a company that made sat-phones for military application. They had a crappy web page, and I volunteered to do some webdesign and IS type work to get notch on my resume. It was cheaper for them to hire me @ 6$/hr (min wage was umm.. 4.15 or 4.35 then)

#

That place used arcnet.. to give you an idea how long ago it was

#

at 6$/hr i was still pulling 900 a paycheck...

ancient prairie Nov 15, 2020, 7:54 PM

#

sheesh, sounds intense but fun regardless

median rune Nov 15, 2020, 7:54 PM

#

It was fun... a good learning experience

ancient prairie Nov 15, 2020, 7:54 PM

#

arcnet has an interesting topology

median rune Nov 15, 2020, 7:54 PM

#

YEssir

cosmic ingot Nov 15, 2020, 10:19 PM

#

sheesh, sounds intense but fun regardless
@ancient prairie you're not talking about the cavity search anymore, right?

stone cedar Nov 15, 2020, 10:34 PM

#

kekw

ancient prairie Nov 15, 2020, 10:36 PM

#

👀

loud marsh Nov 16, 2020, 3:25 PM

#

INE black friday sale kekw

languid hearth Nov 16, 2020, 3:35 PM

#

40% off and I'm still nopeing kekw

cosmic ingot Nov 16, 2020, 4:50 PM

#

40% off and I'm still nopeing kekw
@languid hearth there's still an even bigger sale with coupon els-cyber iirc

languid hearth Nov 16, 2020, 4:53 PM

#

NotLikeNico

ancient prairie Nov 16, 2020, 4:55 PM

#

yeah I used the els-cyber coupon and gotta say I'm loving it

#

finally feel like im understanding assembly and binary exploitation a lot better due to some courses there

elder grove Nov 16, 2020, 6:01 PM

#

Good to see people seeing the value in eLearn.

static tide Nov 16, 2020, 6:14 PM

#

els-cyber coupon has the same discount

#

but is a 2 year sub

polar rock Nov 16, 2020, 6:19 PM

#

bashzoom

#

makes sense

loud marsh Nov 16, 2020, 9:10 PM

#

🤥

warm hinge Nov 16, 2020, 9:53 PM

#

Sounds expensive. How much is it?

loud marsh Nov 16, 2020, 10:05 PM

#

@warm hinge $1k1

#

Cybrary vs Ine 🤔 😱

polar rock Nov 16, 2020, 10:10 PM

#

INE all the way

#

they’re the learning platform for eLearnSecurity, the ELS certs are beginning to get more recognition it just makes sense

#

INE also comes with amazing lab environments

half chasm Nov 16, 2020, 10:31 PM

#

40% is really good deal tho. But you have to pay extra to each cert right? I just check and it is like 400 for each cert...

elder grove Nov 16, 2020, 10:33 PM

#

Correct.

half chasm Nov 16, 2020, 10:34 PM

#

so if you need to choose INE yearly with 40% vs OSCP 90 day lab + exam fee. Which one would you guys choose?

#

Im a broke ass student and can only invest in one path lol

elder grove Nov 16, 2020, 10:35 PM

#

The previous arrangement was per course with an exam attempt. For instance, PTP was like $1,499 for the elite version and voucher. It included 120 hours of labs and the additional lesson categories.

Now you pay for a year, and then the voucher. You get all lessons rather than pay for access to extras, plus unlimited lab time. Currently, there's a 40% off coupon. So it brings it down to around $1,200 a year. Add $400 for the exam. So $1,600.

It makes a whole hell of a lot of sense if your intentions are to complete multiple courses/exams in that 12 month period.

#

KuroHat, I guess it depends on what your goal is. An OSCP isn't a guaranteed job. Just a guaranteed resume bullet. And results from that course vary significantly from didn't get anything from it to some feeling rocket-science level benefit.

I've done eCPPT and OSCP. OSCP got me a resume bullet. eCPPT proved my ability to pentest. Two completely different courses with two completely different assessments.

#

In my opinion the ONLY reason to do PWK/OSCP is for an expensive resume bullet. And as more people earn eLearn certificates and enter the industry, the more those certifications will increase, and the OSCP's value will continue decreasing.

half chasm Nov 16, 2020, 10:44 PM

#

Thank you for you opinion Mayor. Also thank you for all the good content you bring to the community. Pls keep doing it! I'm almost done with my uni and start looking for a cyber sec jobs. From what I have seen on LinkedIn, They expected me to have 2-3y+ experience for a junior job.... Yes I want to have that bullet on my resume but at the same time I want to invested on the one that I will get most benefit off. It is not a small money we are talking about. Also, I'm open for any feedback/discussion 😄

elder grove Nov 16, 2020, 10:48 PM

#

Thank you so much. :)

I think the greatest challenge is trying to quantify your experience without the arbitrary time requirement. Which is why networking is so important in this field. If you can find an "in" from the inside I think chances increase exponentially. You'll almost certainly receive an interview, which I have personal and direct experience with. And after 50+ no-contacts and no luck direct applying, bypassing the traditional HR process landed me two offers from three employers.

#

So in my opinion your best efforts would be to build your knowledge base first, in a way that you can sell to a decision maker directly. And second, network like it's your only purpose in life.

elder grove Nov 16, 2020, 11:14 PM

#

KuroHat, they also have the option of paying monthly. You would need to contact customer service directly for that option.

static tide Nov 16, 2020, 11:20 PM

#

you know how much that is /m?

elder grove Nov 16, 2020, 11:25 PM

#

$199

cosmic ingot Nov 16, 2020, 11:29 PM

#

boiiii. if I choose to go for the ecppt now it will be cheaper than it used to be. yay.

elder grove Nov 16, 2020, 11:30 PM

#

Definitely could be. It took me about 6 weeks to get through the materials and be ready for the exam.

cosmic ingot Nov 16, 2020, 11:32 PM

#

@elder grove how many hours/day did you study, very roughly speaking?

polar rock Nov 16, 2020, 11:32 PM

#

Honestly the one above ecppt, eptx I think it is looked like it had a really cool syllabus

cosmic ingot Nov 16, 2020, 11:33 PM

#

oh yeah, it looks amazing

elder grove Nov 16, 2020, 11:34 PM

#

Five to seven days a week. Sometimes 10-12 hours a day, sometimes far less. Just whatever my brain could handle that day.

#

The PTX course is a massive undertaking.

cosmic ingot Nov 16, 2020, 11:35 PM

#

so you went full on. I was hoping you could say less, because I'm thinking of getting just a 1 month sub and study my ass off. but not all days are the same, and this way isn't necessarily productive always

polar rock Nov 16, 2020, 11:35 PM

#

After eTHP is done and my sektor7 training is done I’m looking into either that course or the Red Team Operator by zero point security training

elder grove Nov 16, 2020, 11:36 PM

#

I haven't looked at zero point much, but my guess is it doesn't compare to the coverage in PTX. My brain hurt after looking at that.

languid hearth Nov 17, 2020, 1:48 AM

#

https://github.com/ryan412/ADLabsReview

GitHub

ryan412/ADLabsReview

Active Directory Labs/exams Review. Contribute to ryan412/ADLabsReview development by creating an account on GitHub.

#

Neat little lab+exam review I found on Github

willow gate Nov 17, 2020, 9:53 AM

#

there's still an even bigger sale with coupon els-cyber iirc
@cosmic ingot what's that? 👀

cosmic ingot Nov 17, 2020, 9:59 AM

#

@cosmic ingot what's that? 👀
@willow gate https://checkout.ine.com/, coupon els-cyber

willow gate Nov 17, 2020, 10:00 AM

#

How much off? 👀

#

I'm planning to buy it 🤔

cosmic ingot Nov 17, 2020, 10:01 AM

#

it's the same discount as bf40 as far as I can see

#

I just think it will be valid for longer

#

it's 40% off

willow gate Nov 17, 2020, 10:03 AM

#

Okay

📎 Screenshot_2020-11-17-15-03-07-44.jpg

cosmic ingot Nov 17, 2020, 10:05 AM

#

jeal

#

work hard 😄

willow gate Nov 17, 2020, 10:06 AM

#

Oh no, not buying yet. Was just checking the voucher 😂

unkempt nova Nov 17, 2020, 12:31 PM

#

@elder grove $199 for what?

elder grove Nov 17, 2020, 12:32 PM

#

Please no need to @ me. If you read up a bit more you’ll see me talking about INE paid monthly.

merry hound Nov 17, 2020, 12:33 PM

#

Any advise for freshers on getting a job in Cyber security field? I have been researching and applying but majority of the companies require at least couple of years of experience.

quick forum Nov 17, 2020, 1:10 PM

#

It varies from country to country, but here it tends to be (degree || exp) + certs

#

The certs are not optional, but you can have a degree or you can have experience

undone shore Nov 17, 2020, 1:49 PM

#

That said, I was speaking to a couple of Abertay grads last week, both of whom got jobs with F-Secure down in London straight out of uni with no certs

#

Apparently it's fairly common to hire based on a degree -- the company then pays for the certs

quick forum Nov 17, 2020, 1:50 PM

#

There are graduate programs etc that are good for it

#

F-Secure do summer internships too

elder grove Nov 17, 2020, 1:51 PM

#

The power of networking shouldn't be overlooked either.

merry hound Nov 17, 2020, 2:18 PM

#

Noted

elder grove Nov 17, 2020, 2:21 PM

#

Honestly from experience, it had a far greater impact than certifications did.

meager hazel Nov 17, 2020, 2:45 PM

#

+1. I lucked out on my first infosec role but before then most of my opportunities were through networking and avoiding the HR filter (go straight to the person signing the cheque)

#

So one piece of advice would be to reach out to conference speakers after their talk and ask genuine questions about their presentation and work. Many of these people are in positions to hire or at least refer you to someone if you make a good impression.

half chasm Nov 17, 2020, 3:32 PM

#

Thank for the tips Mayor!! 😄

cosmic ingot Nov 17, 2020, 4:48 PM

#

Guys I have a question. Let's say I have experience only in red team stuff, and I'm only looking for red team positions. If I'm in a job interview and I'm describing an attack (my methodology etc), I should expect them to follow up with a question about how I would advise the client to remediate the vulnerabilities I have exploited, right? So my question is, to what extend? A lot of vulnerabilities could be remediated by common good practices like regularly patching your stuff, changing default credentials, closing down ports of unneeded services etc. Should I be able to go into much more depth than this?

polar rock Nov 17, 2020, 4:51 PM

#

I haven’t had any interviews ask a lot of mitigation questions but typically it’s real quick and brief I believe TCM goes over how he gives mitigation strategies in his course

cosmic ingot Nov 17, 2020, 4:52 PM

#

which one? peh? and which chapter (if you can recall)?

distant pier Nov 17, 2020, 4:54 PM

#

You could answer in a general sense, that remediation suggestions would be provided in your report, and that you would work with the client (in the case of internal pentesting, the division that implements it) to ensure proper remediation of the defect/finding.

cosmic ingot Nov 17, 2020, 4:55 PM

#

Yeah I would expect that's a given, however I'm asking mainly if there are any things that would be unacceptable for me not to know in that scenario

polar rock Nov 17, 2020, 4:58 PM

#

Yeah PEH for each attack in the later sections he went over mitigations as well

distant pier Nov 17, 2020, 5:02 PM

#

I'd say, in an interview it would be unacceptable to provide suggestions that are bad, in case they posit a use case that you're not sure about. Saying "I don't know yet, but will research it" is the safe way to go.

#

Remediation room would be nice to have. Soon ™️

polar rock Nov 17, 2020, 5:13 PM

#

I mean we have a hardening room coming soon as well as bees secure coding

dense shell Nov 17, 2020, 5:17 PM

#

Hey guys, I am looking for advice. I do CTF with THM and HTB since like 10 months and enjoy it a lot. Recently the company where I work as software developer posted a job position looking for a "IT Security Representative" in order to implement a ISMS and get the ISO 27001 Certificate. I would really enjoy to work in security the likes of THM, but I am afraid this ISMS/ISO stuff brings too much burocracy sht with it. What do you guys think?

languid hearth Nov 17, 2020, 5:21 PM

#

you can avoid compliance and stuff like that if you try hard enough

dense shell Nov 17, 2020, 5:22 PM

#

what do you mean? I have the feeling that my bosses only care about compliance

polar rock Nov 17, 2020, 5:22 PM

#

Compliance ew

languid hearth Nov 17, 2020, 5:22 PM

#

it sounds like you should pass on the role tbh

#

IT Security Representative (to me) will likely be a role that deals mostly with compliance and working with your government which is little technical work

frigid niche Nov 17, 2020, 8:00 PM

#

@cosmic ingot Look at mitre attack for general recommendations and you really need to have concrete suggestions for how to remediate the things you exploited. That is the point to give them guidance on how to prevent an actual attack using your methods. I'm not a security professional (yet), but I do know if you can't help the blue team remediate the vulnerabilities you found you are not giving the client the value they deserve. Having said that, if you know what exploits you used you should be able to look up the details on them, and be able to have remediation suggestions. I think that is the secret for the interview, as it does not matter what the exploit is, you should be able to search for the remediation. Mind you, you should not have to lay out each and every step, it should be similar to follow the steps from mitre attack for this, and/or update this software, or this detection rule/rule set. This is why I'm trying to learn both sides of security well enough to understand the thought process behind attack and defense, as in my mind you are not going to be a high performer in one without understanding the other.

Ohh a paragraph!

warm hinge Nov 17, 2020, 8:19 PM

#

I work in a forensic lab that has ISO accreditation. It's horrible....

cosmic ingot Nov 17, 2020, 8:36 PM

#

@frigid niche thanks for your answer. And yes, it definitely benefits both blue teams and red teams if they cross train

frigid niche Nov 17, 2020, 8:40 PM

#

Learning this stuff is definitely a team sport.

remote mauve Nov 18, 2020, 12:43 AM

#

Hey guys, I am looking for advice. I do CTF with THM and HTB since like 10 months and enjoy it a lot. Recently the company where I work as software developer posted a job position looking for a "IT Security Representative" in order to implement a ISMS and get the ISO 27001 Certificate. I would really enjoy to work in security the likes of THM, but I am afraid this ISMS/ISO stuff brings too much burocracy sht with it. What do you guys think?
@dense shell if you need help with implementing ISMS and stuff feel free to @ me . I see it as a good opportunity to develop some skills and have knowledge of the business as a whole

#

i took the opportunity and helped maintaining the ISO27001 accreditation for the company i work for, but i can tell you i learned a good deal of things that will help me in the future

#

That's my opinion, people look for a bit of compliance the more senior role you apply for

#

Those are my 2 cents on the subject

gleaming basin Nov 18, 2020, 7:22 AM

#

I have a SOC Technician interview on Thursday (entry level). Does anyone have any tips or what to expect?

static tide Nov 18, 2020, 7:37 AM

#

i’m gonna assume you’ll get some network questions

#

so make sure you know common protocols/ports

wanton chasm Nov 18, 2020, 8:04 AM

#

Odd question but I’m studying for Cyber Security and wondering just some motivational things people do? when the scripting gets dull and primary the networking

cobalt escarp Nov 18, 2020, 8:20 AM

#

I feel like this is more of an #infosec-general or #general question

wanton chasm Nov 18, 2020, 8:41 AM

#

OH

#

Eh

gleaming basin Nov 18, 2020, 11:44 AM

#

Thanks for the tip. Totally did not think of the obvious

cosmic ingot Nov 19, 2020, 10:31 AM

#

do you think a profile picture on linkedin is really very important?

turbid cypress Nov 19, 2020, 12:08 PM

#

if you're using it to actively connect with potential employers, yes

#

I'd make sure it's a decent picture of yourself in case it is something someone could search

#

but if it's not a major part of your job hunt, I wouldn't put a huge amount of effort into it

meager hazel Nov 19, 2020, 12:21 PM

#

Not sure about now but it was very useful when I could network in-person, makes it easy to recognize people at meetups, coffee meets, etc.

turbid cypress Nov 19, 2020, 1:21 PM

#

oh definitely in that sense

#

someone should be able to recognise you from the photo

#

but I've seen advice that tells people to go ALL OUT on their linkedin stuff and it's just like. no. you don't gotta.

gilded sapphire Nov 19, 2020, 2:56 PM

#

I would be interested to hear any experiences from folks who've achieved the CompTIA CySA+ certification.
If you already worked as a blue teamer, did you have to review/learn much additional info to pass?
If you didn't already hold a position performing these functions, did you find yourself having to invest a significant amount of time in preparation?
(acknowledging that everyone's experiences vary)

languid hearth Nov 19, 2020, 3:01 PM

#

I took it as part of their beta with no study no blue team experience, there was clearly a heavy focus on certain topics and it was challenging, but not difficult

cosmic ingot Nov 19, 2020, 3:04 PM

#

but I've seen advice that tells people to go ALL OUT on their linkedin stuff and it's just like. no. you don't gotta.
@turbid cypress I don't know what you mean by "all out" but I got some similar advice from the program I'm currently going through, always with the aim of achieving maximum visibility. Thanks for your feedback. I'm not planning to 😛

turbid cypress Nov 19, 2020, 3:06 PM

#

yeah, a lot of people go for maximum visibility on linkedin as the best possible way to network, and honestly you really don't need to at all

gleaming basin Nov 19, 2020, 3:52 PM

#

Just had my SOC Analyst interview

#

pepehands

unreal arrow Nov 19, 2020, 3:52 PM

#

How did it go?

languid hearth Nov 19, 2020, 3:53 PM

#

i always hate the certain situational questions

#

i feel like "follow whatever the company policy states" is a bad answer

gleaming basin Nov 19, 2020, 3:54 PM

#

My response was firs to make sure it isnt a false positive and to quarantee the file until further notice. Which was actually the preferred answer :)

languid hearth Nov 19, 2020, 3:55 PM

#

noice.

polar rock Nov 19, 2020, 3:55 PM

#

I hate technical questions

languid hearth Nov 19, 2020, 3:55 PM

#

did they throw any wrenches in there?

polar rock Nov 19, 2020, 3:55 PM

#

I hate behavioral questions

#

I hate all questions

gleaming basin Nov 19, 2020, 3:56 PM

#

pepehands

#

Would be super cool if I do get the job

#

Anyone here works in SOC?

#

Im glad one of the guys knew about this platform tho :)

#

That was cool

polar rock Nov 19, 2020, 4:07 PM

#

Spooky does a bit of everything he’s not directly a SOC analyst though

gleaming basin Nov 19, 2020, 4:08 PM

#

Cool. Never know, i might need some pointers in the future

pseudo creek Nov 19, 2020, 6:42 PM

#

I thought someone else said they got a SOC job recently

unreal arrow Nov 19, 2020, 6:44 PM

#

I think it was Droogy

pseudo creek Nov 19, 2020, 6:45 PM

#

yeah

quick forum Nov 19, 2020, 9:03 PM

#

https://www.comptia.org/blog/comptia-pentest-dod-approval

Default

CompTIA PenTest+ Is Now DoD Approved: Why It Matters

CompTIA PenTest+ is now approved by the U.S. Department of Defense (DoD) 8570 for three cybersecurity job categories.

#

CEH is now redundant

vast kelp Nov 19, 2020, 9:06 PM

#

ayo

static tide Nov 19, 2020, 9:11 PM

#

i also work in da soc actuaL

ancient prairie Nov 19, 2020, 9:12 PM

#

holy crap thats awesome!

#

i was hesitant on pentest+ because it didn't seem technical/practical seemed to focus on the management of a pentest, but def will be nabbing that after sec+

#

I think it was Droogy
@unreal arrow just a lowly jr. sysadmin, I have some overlap with SOC roles but that's something I would like to transition to full-time

keen forge Nov 19, 2020, 9:18 PM

#

im trying to get myself a lowly jr sys admin gig right now

#

it's a process. got yrs in help desk and just got my security+

ancient prairie Nov 19, 2020, 9:23 PM

#

you'll get there, in my case certifications got me over the hump plus being rejected 100+ times

gleaming basin Nov 19, 2020, 9:25 PM

#

Noice

keen forge Nov 19, 2020, 9:33 PM

#

haha yah, just had my first interview since passing my exam. im hoping for the best rn

undone shore Nov 19, 2020, 9:48 PM

#

@keen forge Which exam? 🙂

keen forge Nov 19, 2020, 9:50 PM

#

passed security+ oct 21

#

i was gona go for my vcp but kinda got bored studying for it

undone shore Nov 19, 2020, 10:02 PM

#

Have a role 🙂

keen forge Nov 19, 2020, 10:48 PM

#

haha thx

rugged sable Nov 19, 2020, 11:47 PM

#

Weekly careers thread https://www.reddit.com/r/tryhackme/comments/jxcau1/careers_questions_weekly_thread/

r/tryhackme - Careers Questions Weekly Thread

0 votes and 2 comments so far on Reddit

pseudo creek Nov 20, 2020, 12:11 AM

#

Why hello there

rugged sable Nov 20, 2020, 1:23 AM

#

General Kenobi.....

gleaming basin Nov 20, 2020, 2:02 AM

#

The wait is killing me...

#

@ancient prairie i interviewed for a soc gig

ancient prairie Nov 20, 2020, 2:06 AM

#

nice! how did it go

gleaming basin Nov 20, 2020, 2:12 AM

#

Moved forward....

#

Will know for sure soon, I hope

ancient prairie Nov 20, 2020, 2:14 AM

#

make sure you send a follow-up e-mail thanking them for the interview tomorrow, little things will set you apart if they're stuck on a choice

#

did they ask any scenario questions?

#

like 'if x happened, what would you do'

gleaming basin Nov 20, 2020, 2:24 AM

#

Good idea. Thanks for the reminder.

#

It was a good experience, nonetheless

ancient prairie Nov 20, 2020, 2:28 AM

#

best of luck, just be prepared for a second round of interviews, not sure if they specified they will make a final decision before they speak to you next - 2nd round is usually more technical too

gleaming basin Nov 20, 2020, 2:38 AM

#

pepehands

keen forge Nov 20, 2020, 2:44 AM

#

praying for you. im in the same boat. just waiting for the answer onw

#

5 interviews they put me through smh

distant pier Nov 20, 2020, 2:44 AM

#

Five? That is crazy.

keen forge Nov 20, 2020, 2:45 AM

#

yah, they were all relatively short but still. 2 with hr. 1 technical with sr and director. then last 2 were with ceo and with a guy who would be under me

gleaming basin Nov 20, 2020, 2:51 AM

#

Quite a lot.

warm coral Nov 20, 2020, 2:53 AM

#

What would you guys say is the easiest/most baseline certification I could get in CyberSec? I’d love to be able to have something official to put in and give me a step up in my college applications

keen forge Nov 20, 2020, 2:55 AM

#

yah i agree. kinda made me not want to be apart of the company anymore lmao

#

but im still praying i get the job as it will be big boost to get out of help desk finally

#

@warm coral i think security+ is a good start

warm coral Nov 20, 2020, 2:59 AM

#

alright, ill look into it

#

thanks:)

distant pier Nov 20, 2020, 3:01 AM

#

CompTIA Security+ is good.

warm coral Nov 20, 2020, 3:06 AM

#

What should I study for it?

#

Looking at this: https://www.comptia.org/training/certmaster-learn/security

Default

CompTIA CertMaster Learn for Security+ Training | CompTIA IT Certif...

CertMaster Learn is an intuitive training tool to help users prepare for the Security+ exam.

#

Worth $500?

keen forge Nov 20, 2020, 3:09 AM

#

I used the Darril Gibson book

#

That's all you truly need with some supplemental stuff

ancient prairie Nov 20, 2020, 3:10 AM

#

wait I just realized they just launched SYO-601 like a week ago

keen forge Nov 20, 2020, 3:10 AM

#

I just passed mine oct 21

#

the 501 doesn't expire until summer of 21

ancient prairie Nov 20, 2020, 3:10 AM

#

i've been using testout for all of my CompTIA stuff, would highly recommend that platform

keen forge Nov 20, 2020, 3:10 AM

#

501 also has more materials to study so that's what I'd do

ancient prairie Nov 20, 2020, 3:14 AM

#

@warm coral also if you are a student (have a .edu e-mail) use the academic store, it saves you a boatload of money https://academic-store.comptia.org

Index - CompTIA Marketplace Academic

warm coral Nov 20, 2020, 3:15 AM

#

My high school doesn’t have a .edu email but my sister has one

#

Thanks

#

Oh jeez

#

TestOut is doing a black friday deal

#

$5 for the first month

ancient prairie Nov 20, 2020, 3:18 AM

#

i would buy the year license if you can as opposed to their subscription model, unless you are focused enough to bang out the course and the exam in a short period of time, but thats a good deal try it out and see if you like it

#

talk to support at comptia I'm sure they could be accommodating if you show them some sort of proof that you're a student, plus pentest+ just got DoD accredited which is pretty big news, means CEH and some other certs might get phased out in favor of pentest+

warm coral Nov 20, 2020, 3:24 AM

#

looks like i dont need .edu

📎 image0.png

#

so should i go for security+ or pentest+?

ancient prairie Nov 20, 2020, 3:25 AM

#

both, but security+ first, that has foundational knowledge and is a building block for pretty much anything infosec-related

polar rock Nov 20, 2020, 3:26 AM

#

depends on how deep you are in the field

ancient prairie Nov 20, 2020, 3:26 AM

#

good to know for the .edu tho

polar rock Nov 20, 2020, 3:26 AM

#

I have no certs and am going straight for OSCP 🤷‍♂️

keen forge Nov 20, 2020, 3:26 AM

#

yah, im tryna decide what route i should go now that i got my security+

polar rock Nov 20, 2020, 3:26 AM

#

sec+ and pentest+ are very different certs however I would almost go straight for pentest+

keen forge Nov 20, 2020, 3:26 AM

#

ccna, pentest, or cissp

ancient prairie Nov 20, 2020, 3:27 AM

#

depends if you wanna do federal contracting

warm coral Nov 20, 2020, 3:27 AM

#

would thm be any good for sec+

#

any rooms yall recommend

ancient prairie Nov 20, 2020, 3:28 AM

#

sec+ is more theoretical, you learn about attacks but you certainly won't have to know how to execute them

#

theres really not a whole lot i could recommend on THM for this, probably Easy Challenge rooms would have some good learning stuff

#

@keen forge depends if you want to do federal contracting

keen forge Nov 20, 2020, 3:30 AM

#

yah idk, i just want to learn something to get out of help desk lmao

static tide Nov 20, 2020, 3:30 AM

#

i’d say sec+ is better than pentest+

ancient prairie Nov 20, 2020, 3:31 AM

#

DoD approval is a game-changer for pentest+ tho

#

if you already have help desk exp & sec+ you should start hunting for jobs now, and look at all the internships that have moved to summer 2021

#

you have enough on paper for an entry-level job, just have to play numbers

keen forge Nov 20, 2020, 3:35 AM

#

idk, it'll be weird to going full time help desk to internship

#

but I am. just finished interview with jr sys admin gig. waiting for response

pearl carbon Nov 20, 2020, 6:37 AM

#

Hey. If any of you guys are Australian, sectalks Canberra is doing a give away that might help you put down more quals in your resume: https://twitter.com/SecTalksCbr/status/1329630285399425024?s=19

SecTalks Canberra (@SecTalksCbr)

We're giving away 2 x PWK courses and a 6-month HTB VIP sub to deserving folks thanks to Team lowkey, @TraceLabs @AustCyber and @NMPHackathon! If this is you or someone you know, see below for more details. We're also provided some loot to the awesome @0xCC_sh and @KidsSecuriDay.

languid hearth Nov 20, 2020, 6:46 AM

#

@tribal flicker ^

warm atlas Nov 20, 2020, 12:05 PM

#

https://www.indeed.com/career-advice/finding-a-job/highest-paying-it-certifications

Indeed Career Guide

The Top Highest-Paying IT Certifications

Find the top 10 highest-paying IT certifications available, what they entail and how they relate to profitable IT careers.

south nest Nov 20, 2020, 2:20 PM

#

if you already have help desk exp & sec+ you should start hunting for jobs now, and look at all the internships that have moved to summer 2021
@ancient prairie This is my game plan haha I was thinking of taking my CCNA over Pentest+ but not so sure now but i have been applying to a bunch of security analyst positions

keen forge Nov 20, 2020, 2:22 PM

#

^ same exact spot as you rn haha

ancient prairie Nov 20, 2020, 2:24 PM

#

good luck if you decide to go with CCNA but keep in mind it is really difficult, it has something like a 95% fail rate and involves months of studying and labbing

#

not trying to discourage but just know what you're getting into, but you pass and you'll basically always have a networking job!

south nest Nov 20, 2020, 2:29 PM

#

oh i did not know about the 95% fail rate LMFAO

#

but figured it is really heavy on content

keen forge Nov 20, 2020, 2:36 PM

#

only fear trhat number if u plan on failin

#

im apart of da 5 percent

#

or will be 😄

quasi stream Nov 20, 2020, 2:37 PM

#

I can attest to the amount of time you need for studying and labbing

#

I had two modules that ran across the uni year for two years on it

#

For CCNA

#

the independant study and assignment work. Granted those modules were also 20% general networking. But nontheless, a lotta time spent on CCNA

lofty apex Nov 20, 2020, 3:41 PM

#

CCNA v7 has like 17 sections and it's difficult to manage it with university xD

stoic lotus Nov 20, 2020, 4:14 PM

#

what vulnerability scanners do yall recommend?

quick forum Nov 20, 2020, 4:16 PM

#

Nessus

elder grove Nov 20, 2020, 7:28 PM

#

If you're not working somewhere OpenVAS is ok.

static tide Nov 20, 2020, 7:37 PM

#

i find that 95% fail rate to be a bit 🤔

languid hearth Nov 20, 2020, 8:29 PM

#

the fail rate on CCNA R&S was pretty high, but not 95% high lol. Maybe 75%?

upper basalt Nov 20, 2020, 8:36 PM

#

CCNA v7 has like 17 sections and it's difficult to manage it with university xD
@lofty apex I only get 6 months at university to learn both the CCNAv7 and the CCNA Security, alongside with everything else throughout the year

pseudo creek Nov 20, 2020, 8:55 PM

#

20 years later and I'm still salty my CCNA had ISDN on it... multiple questions, but I digress. I think it really depends on you, I don't think a 95% rate seems right, my company puts all network people through CCNA and I never hear of anyone failing

ancient prairie Nov 20, 2020, 8:56 PM

#

yeah the 95% is definitely a bit gimmicky, but they say that it's the case for 1st-timers to the exam but I'm betting there's some other metric they aren't mentioning that accounts for the 95%

#

either way, not an exam to take lightly tho

pseudo creek Nov 20, 2020, 8:58 PM

#

nah lots of memorization

languid hearth Nov 20, 2020, 9:21 PM

#

im still salty mine talked about SDN

#

CCNA was one of my most proud passes tho

pseudo creek Nov 20, 2020, 9:57 PM

#

why salty about SDN?

upper vector Nov 21, 2020, 2:58 AM

#

Hey a quick question I'm looking to get a networking cert as my first cert which one should I go for CCNA or net+ or some other....Also I see CCNA has R&S cyberops and some others too so which one should I prefer being a beginner as well as good valuable cert to my CV?
Thanks:)

#

I think I don't wanna begin with eJPT I want to have a networking cert first if that's wrong approach please point out(I want to be penetration tester networking cert is just for a good solid base)

gleaming basin Nov 21, 2020, 3:22 AM

#

From the talks about CCNA at the top. Net+ is your better starting point.

#

But then again, IDK your knowledge

upper vector Nov 21, 2020, 5:43 AM

#

ok thanks which course in CCNA would be better?

lofty apex Nov 21, 2020, 8:14 AM

#

What do you mean by which course in CCNA ?

upper vector Nov 21, 2020, 8:18 AM

#

Routing n switching/cyberops/security

lofty apex Nov 21, 2020, 8:22 AM

#

CCNA has replaced Routing and Switching , cloud , secuirty and all with only CCNA v7

#

https://www.cisco.com/c/en/us/training-events/training-certifications/certifications/associate/ccna.html

Cisco

CCNA - Training & Certifications

The CCNA certification validates your skills and knowledge in network fundamentals, network access, IP connectivity, IP services, security fundamentals, and automation and programmability.

primal shale Nov 21, 2020, 8:50 AM

#

The new ccna test has no labs tho