What are the benefits of gaining skills that are a little more broad to the niche that you do?

In this episode, we have a discussion around certifications, training, and upskilling. We also provide a brief overview of our penetration testing training courses, which are a great resource for businesses that are looking to upskill their security and IT teams, as well as for tech savvy individuals that want to break into pentesting.

0:50 Holly's own experience with recent exams
4:45 Reasons to upskill
8:30 Breaking into the cybersecurity industry
9:40 Our Hacking & Defending training courses

Listening time: 16 minutes
Host: Holly Grace Williams, MD at Secarma

Sign up for our upcoming Hacking & Defending Networks training course, a full day's hands on pentesting experience, hosted by our experts: https://bit.ly/3txOMoF

Our website: www.secarma.com
Our Security Training page: www.secarma.com/cybersecurity-services/security-training/
Find out more here: www.secarma.com/introducing-our-new-security-training-courses/

Hacked Off Podcast

085. Certifications and Training

In this episode, Holly sits down with Shauni - our Marketing Manager - to discuss how she promotes technical services to a non-technical audience. 

Marketers in the security industry have a pretty big task on their hands; as technical people - cybersecurity is our passion (hence last week's 55 minute rant about security policies), but how do you create content that appeals to CEOs and other non-technical decision makers?

Over the course of the conversation, we discuss Shauni's journey from fashion marketing to cybersecurity, what she has in common with a lot of penetration testers, and how much marketing fluff is too much.

1:30 How did you get into cybersecurity?
4:30 What's the goal of a marketer?
6:00 Do you consider yourself to be technical?
12:15 Is cybersecurity an intimidating industry?
14:30 Sharing knowledge
18:45 Are InfoSec marketers and penetration testers that different?
25:50 Making content accessible
30:40 You've gotta start somewhere

Listening time: 32 minutes
Host: Holly Grace Williams, MD at Secarma
Guest: Shauni Adekoya, Marketing Manager at Secarma

Tweet us: www.twitter.com/Secarma
Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455
Blogs: www.secarma.com/blog
News: www.secarma.com/news

088. Shauni Adekoya: Marketing Cybersecurity Services

Workplace security training can be hit or miss; to keep your business safe, your awareness training needs to be memorable, but a conventional annual security presentation on passwords and phishing scams can be tedious and forgettable.

In this episode, we talk to Ian Murphy – founder and content creator at CyberOff, and co-founder of LMNTRIX – about how we can utilise engaging, out-of-the-box content to revamp security training and get the general population excited about security practices.

00:50 Creating engaging content
06:48 The need for a new approach
15:00 Context, content and culture
19:45 Attracting an audience
21:40 What’s going wrong?
24:15 The need for good communication
30:53 Building content
37:20 Valuing time and skills

Listening time: 45 minutes
Host: Holly Grace Williams, MD at Secarma
Guest: Ian Murphy, Founder of CyberOff and Co-Founder of LMNTRIX

CyberOff: www.cyberoff.co.uk
LMNTRIX: www.lmntrix.com 
Connect with Ian: www.linkedin.com/in/ianmurphy 

Our website: www.secarma.com
Tweet us: www.twitter.com/Secarma
Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

Hacked Off

099. Ian Murphy: Against Apathy

A cautionary tale: An Ethical hacker jailed for reporting a serious vulnerability. It is very unfortunate how being ethical can still result in jail time. This is one of those stories. Be very cautious and careful with your skills.

Darknet Dairies: https://darknetdiaries.com/episode/25/

// MENU //
00:00 - Hacking is Not a Crime
00:43 - Introduction//Alberto Hill
01:04 - 12 Years Old & Hacking Games
03:18 - University & Computer Forensics
05:05 - Bug Bounty Before Bug Bounties Were a Thing
06:31 - Uruguay//No Bug Bounty
07:50 - 2014//Where It All Began
12:22 - 2015//No Systems Hardening
15:07 - Was It Ethical? 
18:41 - 2017//Raided & Arrested
21:07 - Bitcoin Ransom
22:41 - Why Did They Arrest Alberto?
25:12 - Did They Prosecute the Other Person? 
26:40 - Confiscated//Hacking Equipment
27:44 - Why So Many Credit Cards?
29:58 - How Much Crypto Did Alberto Lose?
31:00 - Why Did They Release Alberto?
34:34 - Are the Charges Ongoing?
35:08 - The Real Cost
37:19 - Universities Don't Teach You How to Handle This
41:47 - Follow Your Dreams//Why Alberto Shares His Story
44:13 - Hacking is Part of Alberto
46:16 - Community Work As an Alternative
48:03 - Thank You & Final Thoughts

Card video mentioned: https://youtu.be/eyd24FlJCFg

// Alberto BOOKS //
Login to Hell: https://amzn.to/3Qm4y2d
Operatin Bitcoins: https://amzn.to/39EwBcq

// Alberto SOCIAL //
Twitter: https://twitter.com/adanielhill
LinkedIn: https://www.linkedin.com/in/nofear75/
Linktree: https://linktr.ee/adanielhill
Hacking is not a crime: https://twitter.com/hacknotcrime

// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal
YouTube Main Channel: https://www.youtube.com/davidbombal 
YouTube Tech Channel: https://youtube.com/channel/UCZTIRrEN...
YouTube Clips Channel: https://www.youtube.com/channel/UCbY5...
YouTube Shorts Channel: https://www.youtube.com/channel/UCEyC...
Apple Podcast: https://davidbombal.wiki/applepodcast
Spotify Podcast: https://open.spotify.com/show/3f6k6gE...


// MY STUFF //
https://www.amazon.com/shop/davidbombal

// BUY HAK5 Goodness //
Hak5: https://davidbombal.wiki/gethak5

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

hack
hacks
hacker
darknet diaries
cyber
infosec
hacker movie
hacker vs scammer
hacker video
bug bounty
hacking
hak5
hak5 rubber ducky
hak5 wifi pineapple
cyber crime
bitcoin
cryptocurrency
crypto
ethereum
pentest
pentesting
darknet
ethical hacker
how to hack
ethical hacking
ethical hacking course
cyber security
ethical hacking career
kali linux
white hat hacker
ethical hacker course
ethical hacking for beginners
hacker stories
hacker story
alberto hill uruguay
uruguay

Disclaimer: This video is for educational purposes only. 

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 


#hack #hak5 #kalilinux

#388: If you Hack, You go to Jail?

How to get experience with no experience? Have a look at bug bounty programs. Vickie Li demos Insecure Direct Object References (IDOR) and tells us how to get into bug bounty. We also discuss why her book Bug Bounty Bootcamp is a fantastic book to buy if you want to get into bug bounty. Get real world experience today.

// MENU //
00:00 - In plain text!
00:24 - Introducing//Vickie Li
00:58 - Part 1//The Interview
01:01 - Origin//Bug Bounty Bootcamp
03:37 - What are Bug Bounty Programmes?
05:26 - Part Time Bug Hunting?
05:44 - Easy Way to Get Experience
07:45 - Which Bug Bounty Programmes for Beginners?
10:51 - Beginners//Don't Compete with Pros
13:15 - Duplicates as Valid Experience
14:23 - What You Need to Start
14:59 - Linux//Do You Need It?
15:55 - Automate!//Which Programming Language?
18:03 - Beginner Friendly Vulnerabilities
21:17 - Part 2//Exploiting IDOR Vulnerability Demo
21:24 - What is IDOR?
22:51 - PortSwigger IDOR Lab
24:05 - Live Chat IDOR
24:48 - View transcript
25:12 - Burp Suite Intercept
26:05 - What to Look For//IDs Aren't Always Obvious
26:56 - Burp Suite//Looking Through Headers
27:56 - Burp Suite//Repeater
28:30 - Testing View Transcript Again
29:18 - GET Request//Identifying Exploitable Endpoint
30:26 - Modifying GET Request
31:35 - Finding the right headers to modify
33:47 - Why the first attempt didn't work
34:09 - IRL//What You Would Do
34:23 - Password in Live Chat Transcript
35:40 - How to Prevent IDORs
36:01 - IDORs//Worth Pursuing?
39:57 - Bug Bounties//How to Start
41:21 - Learn More!//Vickie's Blog
41:38 - Follow Vickie's Twitter!
41:52 - Thank You & Closing

// Books //
Bug Bounty Bootcamp: https://amzn.to/3K2YDeJ
The Web Application Hacker's Handbook: https://amzn.to/3IZ2RTr
Hacking API’s by Corey J Ball: https://amzn.to/3JOJG0E 
Alice and Bob learn application security by Tanya Janca: https://amzn.to/3oMyMij
Automate the boring stuff with Python: https://amzn.to/3N2QuYu

// Videos mentioned //
Nahamsec: https://youtu.be/9vaEwycet90
Corey Ball: https://youtu.be/CkVvB5woQRM
Tanya Janca: https://youtu.be/nyhytT2tRN0
Al Sweigart: https://youtu.be/7iBqoc-DzTQ

// Vickie's social media //
Twitter: https://twitter.com/vickieli7
Website: https://vickieli.dev/
YouTube: https://www.youtube.com/channel/UCjQH...
Medium: https://vickieli.medium.com/

// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal 

// Platforms mentioned //
HackerOne: https://www.hackerone.com/
bugcrowd: https://www.bugcrowd.com/
Intigriti: https://www.intigriti.com/
Huntr: https://huntr.dev/

// Connect with Nahamsec //
Twitter: https://twitter.com/nahamsec
YouTube: https://www.youtube.com/c/nahamsec
Github: https://github.com/nahamsec/Resources...
Discord: https://discord.com/invite/ysndAm8
Instagram: https://www.instagram.com/nahamsec/
LinkedIn: https://www.linkedin.com/in/nahamsec/
Twitch: https://www.twitch.tv/nahamsec
Website: https://nahamsec.com/

// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.

#python #hack #xss

#401: Bug Bounty bootcamp // Get paid to hack websites like Uber, PayPal, TikTok and more

Neun Länder, über 4.000 Filialen: Bei ROSSMANN verstärkst du als Experte eine der führenden Drogeriemarktketten. 
Ob in der Logistik, in unseren Filialen, in der Zentrale oder im eCommerce-Bereich: Wir schaffen echten Mehrwert. Und das gelingt uns vor allem deshalb so gut, weil wir mit Spaß ans Werk gehen und unseren Spielraum für eigene Gestaltungsideen voll ausnutzen. Bewirb dich jetzt unter jobs.rossmann.de

kurz informiert liefert täglich die wichtigsten Nachrichten zu IT, Mobilem, Gadgets, Netzpolitik & Wissenschaft.            
                                    
1.	Wikimedia https://heise.de/-7349741				
2.	Pentesting-Tool https://heise.de/-7349813				
3.	ARD Audiothek https://heise.de/-7350015				
4.	James-Webb-Teleskop https://heise.de/-7349712

heise online News

kurz informiert

kurz informiert 23.11.2022: Wikimedia, Pentesting-Tool, ARD Audiothek, James-Webb-Teleskop

PHP The Anthem

Are you intrigued by the idea of Google Red Teaming and the prospect of becoming a certified cyber security analyst? In today’s digitally driven world, where data breaches and cyber threats are rampant, the need for skilled professionals in the field of cyber security has never been greater. If you’re passionate about protecting digital assets and ensuring the safety of online environments, this blog is for you.

Visit: https://cyberwarfare.live/product/google-cloud-red-team-specialist-cgrts/

Web 2.0: https://cyber-security-labs-online.mystrikingly.com/blog/unveiling-the-power-of-google-red-teaming

Unveiling The Power Of Google Red Teaming  Your Path To Becoming A Certified Cyber Security Analyst

In this episode, Mark and Diana discuss the latest wave of cybersecurity developments, from the emergence of HybridPetya ransomware that bypasses Secure Boot to Akira’s exploitation of a SonicWall flaw. They cover the critical Cursor editor vulnerability, CISA’s warning about active attacks on Dassault’s manufacturing software, and new patches from Cisco and Samsung. The conversation also explores Microsoft’s fresh security challenges—including political scrutiny and new Teams protections—alongside a major UK train operator breach, the appearance of a mysterious Chinese AI pentesting tool, and the growing cyber risks facing the pharmaceutical industry.

Ransomware Evolves, Zero-Days Exploited, and Microsoft Under Fire

On August 25, Jek Hyde presented her talk "Defending Against the Grifter" to the DFW branch of ICS2. Listen in on the lively discussion, and feel free to reach out with thoughts, questions, concerns, or feedback!

ICS2 Defenders Talk

Learn about the role of Purple Team Training in combining offensive and defensive strategies to provide a comprehensive approach to cybersecurity.
Call: +918061770967
Email: info@cyberwarfare.live

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Bei heise online gibts News rund um IT und darüber hinaus.

Hacked Off demystifies the world of cybersecurity. Hosted by Secarma's Managing Director, Holly Grace Williams, it features weekly interviews delving beneath the headlines of the latest hacks, breaches and vulnerabilities, providing expert advice on how to stay safe online. This podcast is brought to you by global cybersecurity and penetration testing company, Secarma.

Want to learn about IT? Want to get ahead in your career?  Well, this is the right place! 

On this channel, I discuss Python, Ethical Hacking, Networking, Network Automation, CCNA, Virtualization and other IT related topics.
   
This YouTube channel has new videos every week! Subscribe for technical, detailed, no fluff content.

David’s details:
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
Website: http://www.davidbombal.com  
YouTube: https://www.youtube.com/davidbombal 

All the best!
David

Popular tracks tagged #pentesting