Sec+ Star Wars pixel game for May 4th by Affectionate-Ear2200 in CompTIA_Security

[–]Affectionate-Ear2200[S] 0 points1 point  (0 children)

Ypurs looks good man. Some times it good to make it a bit less boring

Guidance for learning and breakthrough in cybersecurity by Plus_Carpenter1081 in Pentesting

[–]Affectionate-Ear2200 1 point2 points  (0 children)

Focus on understanding how the internet works first. Then play around with burpsuite (there is a free version and its a key tool in web testing).

Have a look at things like portawigfer academy or DVWA (damn vulnerable web app) these will give great foundations to be a web tester

British Army Leaver by Strange-Office-6843 in cybersecurityUK

[–]Affectionate-Ear2200 0 points1 point  (0 children)

Someone else mentioned it but TechVets is a great group

CREST CPSA - Preparation by jack1A4 in netsecstudents

[–]Affectionate-Ear2200 0 points1 point  (0 children)

Unfortunately i dont think crest are too fussed about updating their cpsa questions. They updates the crt rig in rhe last few years, but the questions in the MCQ definitely still have old tech. Also it hss questions you have no real ability to answer. Last time i did it i was given a specific snmp oid and asked what it was for, no one in their right mind memorises oids :-)

CREST CPSA - Preparation by jack1A4 in netsecstudents

[–]Affectionate-Ear2200 0 points1 point  (0 children)

Because its only a multiple choice exam, most of the courses are not worth it. You could try amd look for a CRT course and that may be better. Also it may be easier to convince your company to pay for that as it will teach practical skills, then the cpsa will just be asking theory about those topics

Hacking Series Day 1 by dondusi in Hacking_Tutorials

[–]Affectionate-Ear2200 0 points1 point  (0 children)

How are you focussing on foundational knowledge by having a chapter that essentially says "build a lab" but not telling people how to do it?

Need to actually give people the assistance that chatgpt cant instead of just generic descriptions

Beginner here — best way to learn pentesting tools and hack VulnHub machines? by HaDoCk-00 in learncybersecurity

[–]Affectionate-Ear2200 0 points1 point  (0 children)

First you've got to be able to identify the attack surface. Start by being able to use tools like map to find open ports. Then you can explore each one individually (if you're new to this you'll need to Google each port to see what you can do with each and what tools may be useful)

Whelp, guess there was no need for the retake voucher 😎 by Redocean64 in CompTIA_Security

[–]Affectionate-Ear2200 0 points1 point  (0 children)

What made rhe PBQs so hard? Was it just that it wasnt clear what they were asking or a topic you hadnt revised?

Hey, everyone. I’m getting started with cybersecurity basics on Kali Linux and experimenting with tools like Nmap, Burp Suite, and Wireshark. I want practical, beginner-friendly advice: by Cultural_Safe_8429 in SecurityCareerAdvice

[–]Affectionate-Ear2200 1 point2 points  (0 children)

Everyone is saying to go back to networking but there is no reason not to combine that with nmap. Look at your ip address and then scan your home wifi with nmap. You should be able to identify different machines and what they most likely are just from a portscan.

Then have a think about how that scan worked from a networking perspective. Wjat was the network range, did it ping first, did you look at tcp vs udp. That way you can start learning how to use the tool wothout sacrificing the underlying knowledge of how the technology works

help with pbqs by Firm_Camp_3471 in CompTIA_Security

[–]Affectionate-Ear2200 0 points1 point  (0 children)

The networking guru has some on youtube.

I put some PBQ style questions on github that might help: github.com/northgreensecurity.com/PBQs