Tessera
Folgen

Netsec Explained

@gtklondike.bsky.social

Netsec Explained is a passion project; dedicated to the research, learning, and sharing of intermediate and advanced level network security topics. https://www.youtube.com/c/NetsecExplained

91 Posts962 Follower35 Folgt
Daniel Coulbourne@coulb.com · last yr.

Quick poll for a security friend. If you are a dev: Do you know what threat modeling is? Do you do it? Why or why not? If so what does that look like for you?

Netsec Explained@gtklondike.bsky.social · last yr.

I'm curious. How would you define or describe the following? * AI red teaming * AI pentesting * jailbreaks vs prompt injections * AI agents With all the semantic games in the AI+security space, let's settle on some common definitions and descriptions.

Phillip Wylie@phillipwylie.bsky.social · last yr.

Web Application Pentesting and the Importance of Specialization with Tib3rius podcasters.spotify.c...

Web Application Pentesting and the Importance of Specialization with Tib3rius by Phillip Wylie Show

About The Guest:Tib3rius is a penetration tester with over ten years of experience, specializing in web application security. He is the creator of the popular tool Autorecon, which is widely used for enumeration in the OSCP exam and CTF challenges. Tib3rius also offers courses on Udemy and Hackers Academy, focusing on privilege escalation techniques for Windows and Linux. Summary:Tib3rius joins Phillip Wylie on The Phillip Wylie Show to discuss his background in penetration testing and his specialization in web application security. He shares insights into the development of his tool Autorecon, which was initially created for the OSCP exam but gained popularity in the community. Tib3rius also talks about the importance of specialization in offensive security and offers advice for those looking to start a career in penetration testing. He highlights the value of bug bounty hunting as a way to gain practical experience and shares his thoughts on the OWASP Top Ten and the future of web application security tools. Key Takeaways: Autorecon, a tool created by Tib3rius, is widely used for enumeration in the OSCP exam and CTF challenges. Specializing in a specific area of penetration testing, such as web application security, can lead to becoming a subject matter expert and increase value to a company. Bug bounty hunting can provide practical experience and count as valuable experience in the field of penetration testing. The OWASP Top Ten has evolved from a list of the top ten vulnerabilities to a list of categories, covering a wide range of web application security issues. The future of web application security tools, such as Kaido, remains to be seen, but competition in the field can lead to improvements and alternatives to existing tools. Quotes: "I think specialize in something and learn that thing well, and you'll be fine." - Tib3rius "Bug bounty hunting is a great thing to go into because you'll get some experience actually testing real applications." - Tib3rius "The OWASP Top Ten has become a catch-all category that covers almost every vulnerability." - Tib3rius Socials and Resources: https://twitter.com/0xTib3rius http://youtube.com/Tib3rius https://tib3rius.com/ https://courses.tib3rius.com/ https://linktr.ee/tib3rius

podcasters.spotify.com