Скачать с ютуб WebPentestingOctober2022WiCySMAA в хорошем качестве

WebPentestingOctober2022WiCySMAA

This is a workshop from Gabrielle Botbol shared with WiCyS Mid-Atlantic Affiliate. Create a free Web Security Academy account: https://portswigger.net/web-security https://csbygb.github.io/blog/2022/10/02/how-to-get-started use for more info for the workshop Breaking into cybersecurity can be quite overwhelming. In this workshop, I will present how I created an open learning program to become a pentester. Based on a science education concept called “Apprenance,” this program allowed me to be hired as a pentester. Cybersecurity is not only about technical skills. It is also about soft skills. During the talk, the following questions will be addressed: What is a hacker? What is pentesting? What are the different types of pentest? What are the must-have skills to be a pentester (including soft skills)? How do you pentest a target from A to Z? After establishing a basic foundation, a deeper dive into web pentesting with SQL injection, Cross-Site Scripting, Directory Traversal, and how to exploit them, including a video demo, will occur. To go further, we will have a look at remote code execution. Some tips on how to report these vulnerabilities will be shared. Participants will also learn about the reality of the life of a pentester through anonymized examples from my personal experiences seen in real contexts. A Kahoot quiz will happen to have a little fun, and we will dive into practice with some exercises. Links: Blog: https://csbygb.github.io/ Gitbook: https://csbygb.gitbook.io/pentips/cs-... Linkedin:   / gabriellebotbol   Twitter:   / gabrielle_bgb   Connect with WiCyS MAA: Twitter:   / wicysmaa   LinkedIn:   / wicys-mid-atlantic-affiliate   Website: https://www.wicysmidatlantic.org/