@HackingLZ I use the Offsec material as the basis for a college course I teach on pentesting. I always liked using the exploit writing as a general knowledge section on how some exploits work but always prefaced it with the fact that you do very little exploit dev during most pentests.
@nickvangilder Totally agree with these points. Technical testing is only one part of penetration testing and the part most likely to get automated away, with or without AI. Automated pentesting solutions have been around for years now. Showing real value is more important than ever.
If you want to be a better hacker, be a developer. Be an admin. Set up infra. Build coding projects. Make an app that writes to a db. Or stores cookies. Or performs auth. You will find it easier to spot the cracks and failure points in systems once you have set them up yourself.
@sibusisosishi@DebugPrivilege Weโve also done it like this before. Client requested the data not leave their environment. The domain was a legacy environment that had no password complexity requirements. The client wanted to see how much of a risk it was before deciding how to handle the legacy environment.
BsidesOK 2021
@bsidesok. https://t.co/naCGcNtpnA
April 30 - Conference. April 28-29 training. Registration is OPEN! Note on registrationโ Pay if you can! If you can chip in 10 bucks to help out, then great. If not we have a discount code on the order page
Alright everyone, let's have a quick conversation about Red Teaming. Because honestly, some of you (actually a lot of you) who want to be a part of a Red Team and are taking courses or are actually a part of a Red Team actually don't fully understand its main purpose. (1/n)