If you want to become a Pentester in 2023, then you should get your OSCP - this is what a lot of experts I interview recommend. The Official OSCP course (PEN-200: Penetration Testing with Kali Linux) recently got updated. I interview Jeremy Miller from OffSec about the changes.

Disclaimer: I was NOT paid for this interview. I wanted to make this video because it affects many of you watching and I would have done it without receiving anything from OffSec. However, they did give me access to Learn One for one year so I could see the course content. This has helped me prepare for the interview. Hopefully I'll be able to make more content covering what is in the PEN 200 course in future :)

// Documentation //
Changes: https://www.offsec.com/offsec/pen-200...
Course: https://www.offsec.com/courses/pen-200/

// Offsec //
Twitter: https://twitter.com/offsectraining
Website: https://www.offsec.com/
LinkedIn: https://www.linkedin.com/company/offs...

// Jeremy's SOCIAL //
Twitter: https://twitter.com/JeremyHarbinger
LinkedIn: https://www.linkedin.com/in/jeremy-mi...
Website: https://jeremyharbinger.com/

// David's SOCIAL //
Discord: https://discord.gg/davidbombal
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
00:00 - Coming up
00:28 - Intro
00:31 - Updated OffSec PEN-200 course for 2023 // What's changing?
05:22 - Hacking is not easy as it seems
07:46 - Preparing for the real world
10:19 - Pre-requisites for the course
14:15 - Jeremy's background // Journey to pentesting
21:13 - Approach with an open mind
22:41 - Learning models & challenges
28:10 - Feedback loop
30:16 - Buffer overflow explained 
32:34 - What has been removed & added // PEN-200 updated
37:30 - What is "pedagogy"? // Changing ways to teach and learn
40:38 - The PEN-200 course and the OSCP exam
44:11 - Old and new OS available in PEN-200 course
46:04 - Things are changing but not everything
48:24 - OffSec subscriptions and contents
49:43 - Pros vs. Cons // Helping students understand
52:14 - Final words & conclusion

oscp
pen-200
offsec
offensive sercurity
pentest
pentester
hack
hacker
hacking
ethical hacking
ethical hacker course
ethical hacker

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only. 

#hacker #pentester #oscp

#421: The best Hacking Cert just got updated (OSCP PEN-200)

He made $100K in 2 months from Bug Bounty! Learn from one of the best!
Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: https://brilliant.org/DavidBombal 

Ben (Nahamsec)  hacks platforms legally and with their permission! He gives us his top 3 Bug Bounty tips for 2023.

// Websites recommended by Ben //
* https://hackerone.com
* https://www.bugcrowd.com/
* https://picoctf.org/
* https://portswigger.net/web-security
* https://www.intigriti.com/
* https://www.hacker101.com/
* https://www.synack.com/

// Ben’s Social //
Twitch:  https://www.twitch.tv/nahamsec
YouTube:    

 / nahamsec  
Github:  https://github.com/nahamsec
Instagram:  https://www.instagram.com/nahamsec
Twitter:  https://twitter.com/NahamSec
Website:  https://nahamsec.com/

// Videos mentioned //
Ben's $100K video:   

 • I MADE $100,000 I...  
Kali Linux Nethunter Android Install in 5 minutes (Rootless):    

 • Kali Linux NetHun...  

// Youtube channels recommended by Ben//  
@InsiderPHD:    

 / @insiderphd  
@FarahHawa:    

 / @farahhawa  
@STOKFredrik:    

 / @stokfredrik  
@phd_security:    

 / @phd_security  
@_JohnHammond:    

 / @_johnhammond  
@IamJakoby:    

 / @iamjakoby  
@HackerSploit:    

 / @hackersploit  
@BugBountyReportsExplained:    

 / @bugbountyreports...  

// Recommended Books //
Atomic Habits by James Clear: https://amzn.to/46D8yDE
Hacking API’s by Corey J. Ball: https://amzn.to/3NRTafh
Bug Bounty Bootcamp by Vickie Li: https://amzn.to/3JAPZWS
The Web Application Hacker’s Handbook 2 by Daffyd Stuttard and Marcus Pinto: https://amzn.to/3XvNmLp

// MENU //
00:00 - Coming up
01:00 - Brilliant sponsored segment
02:31 - Making $100K in 2 months with bug bounty
04:43 - Top 3 tips for starting with bug bounty
06:15 - Top 3 technical tips for bug bounty
08:10 - "Don't learn to hack, hack to learn" // Consistency is key
11:32 - Top 3 free learning platforms for bug bounty
12:47 - Top 3 bug bounty platforms
15:08 - Vulnerability Disclosure Programs // How VDPs can open doors to opportunities
19:55 - Top 3 recommended YouTube channels
21:27 - Top 3 recommended books
22:17 - Top 3 technologies to understand
23:45 - Helping others // Twitch, YouTube & Twitter
25:35 - Conclusion

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

xss
cross site scripting
portswigger
ajax
jscript
javascript
xss attack
penetration testing
ethical hacking
bug bounty

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

 #xss #hack #javascript

#434: 2023 Top 3 Tips (Bug Bounty)

A big shoutout to TCM Security for sponsoring this video. Register now to receive a 50% discount on your first month at the TCM Security Academy, potentially making your most significant step toward a career in ethical hacking.  Go here: https://davidbombal.wiki/3vQsqWm

Farah works at Meta and shares her amazing story of going from studying mass media, to hacking and now working at Meta. Did you know that Facebook and Meta have a bug bounty program that allows you to legally hack them and get paid? Go here:  

 / whitehat  

// Farah Hawa’s SOCIAL//
YouTube:    

 / @farahhawa  
LinkedIn:   

 / farah-hawa-a012b8162  
X:  https://x.com/farah_hawaa
Instagram:   

 / farah_hawaa  

// Resources REFERENCE //
YouTube videos:  
2023 Path to Hacking Success:    

 • 2023 Path to Hacking Success: Top 3 B...  
Bug Bounty:  Get paid to hack PayPal and TikTok // Featuring Nahamsec:    

 • Bug Bounty: Get paid to hack PayPal a...  
My updated bug bounty resources:    

 • my updated bug bounty resources  

YouTube channels:  thenewboston:    

 / @thenewboston  

Websites:
hackerone:  https://www.hackerone.com/
hacker101:  https://www.hacker101.com/
Burp Suite on PortSwigger:  https://portswigger.net/support/burp-...
PortSwigger Web Security Academy:  https://portswigger.net/web-security
Firefox Source Docs: https://developer.mozilla.org/en-US/
Pentester Land:  https://pentester.land/
Infosec:  https://infosec-conferences.com/
Vickie Li Blog:  https://vickieli.dev/
Subfinder:  https://github.com/projectdiscovery/s...
Sublist3r: https://github.com/aboul3la/Sublist3r
Frida:  https://frida.re/
Meta Bug Bounty Program:   

 / whitehat  

Books:
Real World Bug Hunting by Peter Yaworski
USA:  https://amzn.to/3JmRven
UK:  https://amzn.to/4d3S5M0

Bug Bounty Bootcamp by Vickie Li
USA:  https://amzn.to/3xGa4rz
UK:  https://amzn.to/49PwPa0

// David's SOCIAL //

Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal

// MY STUFF //
 https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com


Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.

#facebook #hack #hacking

#465: Next Gen Hackers protecting our world

Want to learn about IT? Want to get ahead in your career?  Well, this is the right place! 

On this channel, I discuss Python, Ethical Hacking, Networking, Network Automation, CCNA, Virtualization and other IT related topics.
   
This YouTube channel has new videos every week! Subscribe for technical, detailed, no fluff content.

David’s details:
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
Website: http://www.davidbombal.com  
YouTube: https://www.youtube.com/davidbombal 

All the best!
David

New tracks tagged #xss_attack