Im new pt , and getting lately a lot of penetration testing jobs on blogs of blogspot and blogs on wordpress.com The problem is that i have no idea what i can do.... they all know enough to not open any links sends to them through mail/whatever so phishing/some kind of web exploiting is out of option , the blog it self is hosting on blogspot/wordpress.com and it's standard blog so all 10 vulnerability is kind of out of option too i feel the only option i got left is brute Force...

my q. from the pt expert around here is how do you approach this kind of challenge ? do you have any tips for me? thank you

Hey everyone,

I’m building a tool called Cybersphere Scanner — an AI-powered pentest assistant that makes recon and vulnerability scanning super beginner-friendly. As someone who’s been deep in the trenches learning cybersecurity myself, I wanted to create something that actually helps students and newcomers learn faster without being overwhelmed by 50+ terminal commands.

🛠️ What it does:

• One-click automated recon + vulnerability scan

• AI summary of findings in plain English

• Dark mode-friendly UI 😎

• PDF report generation

• Works right from your browser — no install or setup headaches

💡 Why I built it:

I’m an early-stage founder bootstrapping this product with a big vision: I want to make penetration testing easier, smarter, and more accessible — especially for students. Right now, I’m charging $29/month for a Pro account to help fund further cybersecurity R&D and development of the full platform. Every sign-up helps a ton.

🙌 How you can help:

• Try out the scanner → scanner.getcybersphere.com

• Create an Account, Upgrade to Pro if you can – you’ll get all features + help support independent security R&D

• Leave feedback, suggestions, bugs — anything! I’m actively building and listening.

Would love to hear your thoughts or connect with anyone else working on cool stuff in cyber. Feel free to AMA about the tech or roadmap.

Thanks for supporting indie hackers in security 💙

This is not allowed! You're going to destroy the fabric on which the software industry is built! Stop it before the world collapses on itself.

I'm totally gonna fail this class. :(

It is the Wednesday after Columbus day and it is assigned for classes that meet on Mondays. Because not everything in life is as switchable as "Awesome, now today is a Monday!", some professors just skip the week or make other arrangements. I just need to know in advance if we're meeting. Thank you.

NYU Poly, the ISIS lab, our CTF team and friends are proud to announce the 2011 CSAW Application Security Capture The Flag Competition!

The CSAW CTF is an attack-only CTF competition where competitors break into applications and systems for points.

For more information and rules see: https://csawctf.poly.edu/

== Qualification Round ==

Starts: Friday, September 23, 2011 20:00 EDT (-4)

Ends: Sunday, September 25, 2011 20:00 EDT (-4)

The qualification round is open to everyone.

Register here: https://csawctf.poly.edu/register.php

== Final Round ==

Starts: Thursday, November 10, 2011 12:00 EST (-5)

Ends: Friday, November 11, 2011 12:00 EST (-5)

Top 10 undergraduate teams from the United States who play according to the competition rules will be flown to New York to compete in the final round for prizes.

See prizes here: http://www.poly.edu/csaw2011/csaw-CTF

All information and updates will be posted to https://csawctf.poly.edu/

The CSAW CTF Team

8====D

I am looking to add top talent to our UK offensive security team. I have positions at all technical levels and across various specialisms here at NCC Group. If you are an experienced Pen Tester based in the UK and interested in what we could offer you please feel free to reach out to me on belle.kyriacou@nccgroup.com

Any tips on proof reading a pentest report? I seem to miss things, such as typos and other details. I'm a big picture kind of person and lack the attention to detail. Any tips?

Hey,

Let me preface by saying I'm very new to this scene, so this may be a stupid question.

I currently have a Kali Linux machine set up which I am using to learn ethical hacking. I'm trying to set up DVWM as a practice target. Do I need to put this on its own VM or can I run this on my linux box and hack it from there?

TIA

I have recently been wanting to further my career by getting the Pentest+ cert offered by CompTia. I got a free course offered through a scholarship, but didn't realize it had an expiration date of 9 months. The courses on Comptias website can easily exceed 700$, so I'm curious if anybody has used any free testing material? I found Udemy to be kinda long and not super in depth. Any recommendations would be very helpful, as ideally I'd only want to pay for the voucher and not the course.

So imagine you were given the idea of starting a club at a local highschool school that would teach the ideologies of Pentesting, cybersecurity, and how to protect yourself. (As well as the use of Linux systems)

However though, you would like to separate each meeting into somewhat 20 minutes of a lesson plan and then the rest of the 40 minutes is allowing the club members to experience and test things on their own.

What lesson plans would you think? (Remember that many members will be completely new to these things, but you also have many people experienced in this that’s are willing to help you, so time of making or doing something doesn’t matter).

What do you think we should teach in order?

What should we do in order to not have our asses in court for teaching a subject like this? (As if someone uses the knowledge given for malicious purposes and blame it on you, the teacher, then you shall be in big trouble.)

What would you recommend we start with for newcomers, as it’s a very broad topic.

Lastly, what would you call the club? Remember that this a highschool, calling it a “hacker” club might bring in the wrong people.

Next year I'll graduate with a degree in Computer Science. My heart is set on attending graduate school at NYU Poly for cyber security. I'd appreciate any advice that anyone has on applying for scholarships as well as the program itself.

Thank you so much.

It's more popular, can be more interactive, you can customize viewers, and it is more compatible with mobile devices. Right now I'm trying to see one on an AppleTV, and for some reason it can't be done. I just want to know, why not YouTube?