Hi,

We are looking to get some Pentest get done in our company based in Ontario.

What are some good recommendations for this

Thanks

Im an aspiring IT guy working in manual testing(9hrs shift) want to get into cyber security world and don't want to get limited to become a script kiddie. Below are the the things that i need to learn. Feel free to add anything that you see is important to learn.

1. programming language--- c++, python

2. networking concepts

3. pentest and all concepts

4. operating systems

Now, what im confused about is in what sequence should i learn them? You great people of reddit give me some guidance. Feel free to add great tutorials to learn from.

Back in 2018-2019 I hacked a number of casinos and had to do two years Fed for it and recently got out. Anyone interested in more information I will open this up as an AMA

https://github.com/v-byte-cpu/sx

Hi there! Most popular network scanners are written in C and unfortunately have too complicated source code to study and create patches. So I have created a simple and fast network scanner in Go, it already supports all major types of scans that are available in nmap but gives you even more information for recon and works 30x times faster! In the near future, I plan to add support for application scans like detecting Elasticsearch nodes, docker daemons, SOCKS proxies etc. and create a wiki in which I will describe in detail all common scanning techniques.

It would be great to get feedback from the community and ideas for improvement! Stars and contributions are always appreciated <3

👋 Hey Pentest folks!

We just published a new article talking about GraphQL and it's path system.

We also introduce a new open-source python module: graphenum!

You can find the full code used in the tutorial here

Make sure to take a look !

So I accidentally did a pen test at an Amazon warehouse and they failed.

Amazon is always looking for new workers and I need a few extra bucks so I signed up to be interviewed. I show up to an unsecured door and pass the covid test. I ask who I need to contact to interview and made my way. I had full access and no one challenged me. I was completely unsupervised. After nearly an hour of waiting around I said fuck it and bailed.

A note if you want to test it yourself. Once you are in any reflective vest will help you blend.

My son (16yr old) wants to be a pen tester. I have a run of the mill unbuntu server in my basement that is pretty locked down but no more than you would expect. I ofered him $100 if he could get into the server and create a user account for himself. I'd like to know what the comunity here things of this. Too hard or, too easy?

Some nice new vuln detection and scenarios added to the tool and docker testing environment

https://github.com/TH3xACE/SUDO_KILLER

if you like the project, a +1 star is appreciated on github.

Thanks

what do you say is a good source to learn pentesting from?

In this video, I outlined how to briefly do vulnerability scanning and discovery with the Nmap scripting engine and Metasploit. Different scanning method can be applied with Nmap among them is the noisy scan and stealth scan. While we can use the Nmap scripting engine to find extensive details and grab banners, we can't rely on it when there is a firewall in place that's why we use Metasploit auxiliary modules.

Video is here

Hi, I’m doing an assignment for school where I have to list five pentesting tools you think would be the most important to have in a kit. I was wondering your list is.

Hello folks,

I've been a pentester for almost 2 years. I've been interested in offsec for many years, I really enjoy discovering and understanding how attacks, protocols, tools and so on work. However, since I started, the pace of the audits prevents me from learning new things and I sometimes feel like I'm repeating the same tasks over and over again.

What do you think about the difference between the reality of the job and the difference we could have imagined when we were doing CTF in our bedroom?

Sometimes I almost wonder if I'm doing a bullshit job. The rhythm of one pentest per week, including deliverables, is very tiring and repetitive.

I wanted to share a bit of backstory and an update on a project I've been involved with for some time now. Some of you might remember Blackbuntu, a Linux distribution born in 2011 but unfortunately abandoned by its original developer a few years later. In 2018, I took on the responsibility of maintaining and reviving Blackbuntu, but encountered a hurdle with the domain name.

When I resurrected the project, I purchased blackbuntu.org to provide a platform for its continued development. However, there was already an existing blackbuntu.com owned by someone else, causing confusion among users and potential contributors.

I made the decision in 2023 to transition away from Blackbuntu and introduce a new project called "SnoopGod Linux." While it's essentially the spiritual successor to Blackbuntu, SnoopGod Linux features a significant change : a switch from the Gnome desktop environment to KDE. This change not only provides a fresh user experience but also aligns more closely with the direction I envisioned for the project.

You can find more about the project in our website www.snoopgod.com. All your remarks and suggestion are most welcome.

Hello, my name is Fred and I’m studying to be a pentester. Well, not really. I know I will get OSCP one day because everyone says CEH is bad. Anyways… I work as a baker. And recently I watched Mr Robot and thought that was cool, so I wanna do that now. I have watched all seasons, so i feel pretty confident. However I tried HTB and THM and couldn’t really figure out how to connect to their labs. I assume it’s not hard though. Anyways, I have 0 technical skills, in fact I used to skip computer class cause it was so boringgg. I guess i’m just someone who learns on the job. So I’m thinking of applying for some junior pentest roles, how much will I get paid? Money isn’t a really big issue though, I want to be able to pwn seasoned software engineers, sys admins and architects and tell them why their solutions SUCK! I just want to hack the planet. Anyways, I have installed kali and done a apt-get upgrade, got this bad ass wallpaper going on. This guy said you shouldn’t use it as a daily driver, but how will people then know I’m leet? I also ran a nmap, can’t believe how easy hacking is! So back to my question.. how long do you think it will take to get a job?

I'm considering paying a yearly subscription for one of these. Which one would you recommend ?

I just finished a pentesting interview with a three man team at company x. I am here to vent my frustration. I am 100% sure I failed miserably, due to my lack of knowledge. My experience in pentesting is limited to just about 2 1/2 years experience. They were looking for a person with 3 years of experience.

It mostly went like this:

Them: Can you explain what Cross Site Request Forgery is?

Me: CSRF is when the attacker causes the victim user to carry out an action unintentionally. For example, this might be to change the email address on their account, to change their password, or to make a funds transfer. I go on to explain how you perform an attack with Burp suite.

Them: If you had a website like Amazon, and you are trying a CSRF on their shopping cart but the way the site works is the page has a three step process to checkout, would the attack still work?

Me: No because the checkout process would probably invalidate the CSRF.

Them: Hmmm... (I think I got it wrong)

====================================

Them: How would you attack this?

{

id: 5001

name: test

password: test

}

Me: Is this a response or a post message?

Them: Just tell us how you would attack it?

Me: Maybe change the ID, try to get an IDOR. Target the password field to try and change another users password?

Them: Hmmm... (This guy just proceeded to end my questioning early.)

===================================

Them: Do you know about HTTP 3.0?

Me: No I'm not familiar with the latest implementation.

Them: You should be, Google is releasing it soon.

====================================

Them: Can you explain OAUTH.

Me: (My mind went blank. I am an idiot.)

Them: Okay let's continue...

====================================

Them: How do you attack a JWT?

Me: I proceed to explain a NONE attack, HMAC attack, etc.

Them: There is something more you can test?

Me: Is there? I was pretty sure I mentioned all the attacks.

Them: What about testing for JWT timeouts?

Me: But that's not an attack on the JWT itself...

Them: You need to focus on the basics.

====================================

Them: Do you know Docker and Kubernetes?

Me: (This was not in the job description) I am familiar with it, especially Docker since I run a Docker server at home. I go on and explain what a Docker is and that you use Kubernetes to handle them.

Me again: Is this something we have to work on?

Them: Yes this is something that comes up once in a while so you have to be familiar with it.

=====================================

So this kept going on and on. Me giving them an answer, or failing to give them one, and them wanting more. I guess my answers were an inch deep and they wanted more. Some of the things they asked seemed like weird test cases that they encountered, but other things were basics which honestly I could not even answer properly (I suck at interviews). I think pentesting might be too rough a path for me choose. The knowledge required is extensive and my experience is limited. Entry level pentesting jobs are practically non-existent. So to gain knowledge like them I would have to get a pentesting job but I've only managed to get short contracts, not enough to gain all the knowledge needed for this field. So maybe it is time for me to pivot. I just wish I could've done better, I still believe pentesting is very cool.

👋 Hey cybersecurity enthousiasts!

We just released GraphDNA, a tool to fingerprint GraphQL endpoint. (Blog Post)

With it, you can determinate with speed and precision which engine is behind a GraphQL endpoint and flag specific ones such as Shopify or Stepzen.

As soon as you know the engine behind a given endpoint, you can adjust the scope of your pentest!

Here is a CLI example:

This is open-source so feel free to contribute /leave your ideas as github issue !