#Pentesting

tl;dr sec 57* @emil_no 1 year with a private #bugbounty program* @DanielMiessler Content Value Hierarchy* @lancinimarco CloudSecDocs* @signalapp New Group features* @Doyensec Training course for building @Burp_Suite extensions * and

The hardest targets I faced while pentesting/red teaming all had one thing in common: mature, funded, and empowered vuln/patch management programs.The hardest of all combined vuln/patch management with least privilege

Brian in Pittsburgh

A random thought: Offensive security testing has a genuinely important role. But right now pentesting & red teaming are typically being (mis)used by organizations, and the way they're being misused

#OSWE tip 1If you are spending a money opting a certification it is to learn new things out of it, OSWE was focused on Web app Source Code Review, I

insecurity princess 🔥💖🌸

Patching vulnerabilities is for servers not for peopleIt's okay to feel and express vulnerability Threat detection is for malicious attackers not for colleaguesIt's okay to feel that your core

John "Mr. Hacking" Jackson 桜の侍

*New people that have never worked in infosec*"I want to be a Penetration Tester, I've applied to 4 job postings in the last month and haven't gotten a job! The

The Cyber Mentor

Miss the stream today? Let me post the insane list of content creators (just on YouTube) that the chat put together. Here we go:Networking:https://www.youtube.com/c/networkchuck - @NetworkChuck https://www.youtube.com/user/ConfigTerm - @d

mRr3b00t (@hacknotcrime Advocate)

I’m going to write something or record a video on the importance of enumeration and why speed isn’t always your friend. Your task is to answer some questions about the

Black Friday Deals Thread!The next few days I will be posting any sales I come across on infosec or tech-related stuff that I find interesting. Feel free to contribute!All deals

mRr3b00t (@hacknotcrime Advocate)

there's so many cool SaaS tools you can use to check security configurations... so if ur not into running nix command line tools and custom scripts you can see go

Whitney Merrill

OK, new evening project. I'm going to attempt to exercise my rights under CCPA from @joinClubhouse. I am not a user, but they harvest contact information and I believe that

Is there a skill shortage in infosec? Are we failing to bring new people in? It may sound contradictory but I think the answers are "no" and "yes" in that

Tay 🤘🏾🕊

THREAD ON HOW I GOT INTO THE CYBER/TECH INDUSTRY!!! First, I'm going to start off by saying I don't have an engineering or BCIS degree. I'll make another thread on