All right, so welcome back, everyone.
This address and of course, we have discuss about both the career options.
Well, I will start focusing on how the penetration tester really looks like.
And, you know, how how what are the skills required?
What is most what is plus and all the stuff.
Let's get started.
As I told you already, Penetration Tester is the guy who works in the organization for sure.
You can be you can't get the job directly for sure just by going through the schools.
But you might be able to show your your you know, your vote that you have learned and can opt for junior
penetration testers.
But yes, there is a junior penetration tester job profile as well.
And of course, having some experience as an I.T. or developer, really.
But I'll tell you how exactly what skills are really required.
And as of now, have we completed most of them online?
So you start as a junior penetration tester.
That's what we have discussed as well.
Let's understand how exactly the work life really looks like.
So the work is pretty straightforward in this that you would need to work as a network testing.
You might have to network testing and map.
We have covered my test flight program.
We have covered it and cobalt.
Right.
I mean, this is something which is a pretty specific tools we can possibly cover in any specific course,
which is pretty vast, open, vast.
We have covered that already.
So you might have got the idea right.
This is the way the real world profile would really looks like.
Then we have Manuell Web application testing using Bob Bubp Suite and zap that proxy's.
But remember those we have you have already learned about Bob so Bob Sweet, but being a pen person
does this is this is the cool thing to have.
Either you shouldn't Master Bob suit or zap proxy reverb above.
So it is pretty widely adopted.
So if you even be master of the above suit, you at least know how this entire web application works.
And having Musavian on the for about application, you can you can perform any sort of security testing
including, Oh, Compton and many other unknown and API security testing as well, an audit data.
And then we have the application scanning, scanning using the Nessus, which we have discussed.
I remember.
What is the difference between, you know, the upside and the the Web application scanning LOPSA?
It is considered to be more into manually testing.
OK, I'm with Bob, so you need a lot of attention.
There's a lot of human intuition required where you have to spend a lot of time in identifying the vulnerability.
That's what the job of Benediktsson Tester is all about.
Right.
But replication, scanning, that's where, you know, skills of penetration tests are not really much
needed.
This could even be done by any you know, it can even be automated.
It can be even beaten by any IP person as well.
It's just that you have just click users to select the IP assets, IP addresses, domain name or host
as well.
Yeah, you're going to scan the indictment.
You might have seen the why were you scanning the necessary scanning with the Nexus two?
So Nessus is the one tool IBM app scan is the one Atlantics, HP, Ravensbrück.
This is something which has been used in the industry, so you should be available to students.
I'll be covering those tools in a specific course as well, which you will learn about those two especially.
And then a report on security vulnerabilities will once you get the get all those you're testing and
penetration testing is done, you can then prepare to board and share with all the stakeholders and
tell them, OK, these are the application which are vulnerable.
These are the priority.
One of these these are just security.
One vulnerability things are seventy two on abilities.
And then accordingly, the console team start fixing up this one in the next.
What are the skills required.
You must have experience on Linux.
We have learned about it for sure.
If you remember in the beginning itself, we learn about the Linux pretty well.
But of course in order to get the job, you have to allow yourself even further.
So you should know much more about Linux commands subscript.
What happen if the script feels you have to really work on, you know, different modules with Linux
as well?
Network modules, filesystem, many, many stuff.
Right.
And there are different.
There are different packages as well, which is really much too much to remember as well, and then
experience with tools like my display program and Map and Bob, it is also very, very important.
And one thing which is very, very important to have is the experience on tools which interpretive tool,
which could be Python or Ruby entries.
That's why I was saying if you have any earlier experience with programming, it's going to be a plus
for you.
If you have logged on any scripting language like programming, integrated programming, language like
Python or Ruby and Rails is going to really help you.
Why that so is because some time by making use of Python script, you can automate a lot of tasks and
the save save time at the same time.
You can you know, you can you can perform activities which are pretty much manual and you can save
a lot of time in some cases that also help you to understand some goals which, you know, in order
to ordered some security, some some courses.
And right.
Then your active participation on CDV challenges is also very important challenges.
CDV is cost of challenges which happen to have, you know, the box or, you know, I can even try Hackney
as well.
So these are the platform where you can you can crawl and fry hacking or try exploiting all the machines
which are available.
These are all virtual machine.
You can start exploiting them similar to what you have doing in the lab.
You can just do it in the cloud and you don't have to manage everything.
And the best part is it's it's you.
It's all done in the browser so you can do all the activity yourself and it's a even better way to learn
faster.
And it's that shows that to the interviewer.
It shows that you are really enthusiastic about hacking machines.
And this gives you a plus.
This gives you a huge plus for your career as well.
Active blog is really important.
And that's something which which is which is if you have some active blog you keep on writing that is
going, this is going to be a plus for you.
I talked about having medium account.
You know, you you must write on the LinkedIn as well.
You might you it's better if you have your own blog site on the WordPress and, you know, sort of you
don't know me and that's going to be really good and that's what it is.
So this is all the three points experience on Python and your active participation on CDV challenges
and your blog as well.
It is considered to be plus OK, it is considered to be plus.
But remember this, if you have the skills from the beginning itself, it is definitely be taking you
out of the crowd.
So definitely give you a whole lot of fun.
There are still some points which is, you know, still have I mean, it's not really much, but it
is good that if you have it, I personally recommend if you have a good repository, this is where if
you if you are into programming, if you are going to bite on scripting, if you have learned python
scripting somewhere and you know, you have made a couple of scripts, Python script and just make sure
you upload those codes on GitHub dotcom.
Right.
So you make your account on GitHub, upload those source code over there.
So and share with keep it public so that whenever somebody asks you, in spite of sharing, you know,
in spite of writing everything on your resume and just share the link of your GitHub account so that
it gives them an idea.
OK, yeah, of course you have to get to you do write something on Python interpreter giving them an
idea.
OK, I know Python, I know Ruby on rails and all this stuff.
I know the scripting language.
Just write the coding coding stuff and write some codes.
Just just make those repository on the get him back on the repository and nothing but the source code
packages Sapelo that make it public.
Whenever you share with anybody you know, share your rewards, they sort of get the idea what exactly
you have done so far.
That's the best way to present your skills.
OK, so what exactly about bing, bing, bing, bing, bing, bing, principled conservative?
And I hire many of them.
I mostly look at it whenever I hire anybody.
Interpenetration, Testor, Benediktsson, Distin profile.
I see if the guy is enthusiastic enough about the hacking or not, if he's hacking every day, if his
hacking occasionally, how do I get to know about it.
I get to know about it based on this.
If he's active on CD of challenges, if he is, you know, if he's the he has any GitHub account and
all those type.
For this, this gives me an idea at the same time, if I see if it's right on the medium as well, the
same thing for me, I remember people ask me, OK, why would you ask for any certification and all
that stuff?
But I personally feel there are certifications are sometimes expensive.
Sometimes people don't really you know, people hesitate to afford that.
But I personally love to see if somebody have done always a CPA certification.
That's something which is I personally love that.
And if you if somebody have done a recipe, that would be relevant as well, it's not really always
a debate.
But if you're going for the senior penetration industry, you must to have you must have the OCP certification
auricular maybe from, you know, jacket or any other Azrael.
Elon's security is to providing the same.
And accordingly, we get the idea, OK, where exactly you stand.
So for senior bent on destroying, you must have for junior penetration tester.
It's it's good race really plans that you have certification.
But if you're not, then you should have this on your own.
But you, you should have good haberkorn with some python scrub.
You should have, you should be active and you give challenges.
I hope you got the idea.
We'll get you in the next session.
Thank you.