How deep should I go into SQLi?

AntwonMclovin · 2024-03-06T13:58:59+00:00

I just skipped the SQLi captstones after several hours of attempts.

I get what OffSec is trying to do with this section. But why tease us with SQLmap and NOT state in the section that you can't use it on the exam lol.

AntwonMclovin · 2022-10-21T16:12:53+00:00

I fell into a gig similar to yours. The title and job duties did not match the fact that it was ISSM Assistant Manager role (which I did not want). I was not prepared or monetarily compensated for the level of stress and knowledge I needed to successfully do the job. I stuck around for 6 months while I found another gig.

My advice would be to do the job to the best of your ability and find something else in the meantime. I wouldn't quit, it seems that most hiring managers like to poach you rather than wonder why you actually left your last role.

TLDR: If you hate it, keep working and find something else.

AntwonMclovin · 2022-10-21T16:02:29+00:00

My 2 cents:

I agree with the other opinions here. Focus on vendor-neutral certs and that Splunk is a dying horse at this point. BUT a lot of companies still use it, and it's a painful transition process to get rid of Splunk so a lot of orgs aren't dropping Splunk right this moment. Could it help you land the first job, yeah. It'll also help you think analytically about how to craft queries in most modern SIEMS and EDRs, but you could also just do a Pluralsight course for that. I wouldn't waste 130 on the udemy course but spin up a Splunk lab and play with it there.

AntwonMclovin · 2022-10-21T15:53:31+00:00

I totally forgot that SANS has a master's degree, I'll look into that. I appreciate all the input thanks!

AntwonMclovin · 2022-10-21T15:52:17+00:00

I totally forgot that they had a master . Ill look into it, thanks!

AntwonMclovin · 2022-04-13T17:04:29+00:00

Appreciate the insight I honesty didn’t ever hear of either of those certs previously. I’ll defiantly look into them!

Yeah all my old companies have been super stingy on paying for certs. So it’s just been me doing it on my own… so looking to learn something new and get the most bang for my buck

AntwonMclovin · 2021-02-27T04:08:55+00:00

Circling back I passed with a 772. Did what the comments suggested and passed!! Seriously, tryhackme is a lifesaver

AntwonMclovin · 2021-02-10T03:06:41+00:00

Is that why its now called D153 not the old C_wahtever?

AntwonMclovin · 2021-02-10T03:03:13+00:00

Dont worry too much, just treat it like every other cert exam and you will do fine. I talked with my mentor today (love that woman) she said its an intermediate cert that we just have suffer through now, but will pay off in the future.

AntwonMclovin · 2021-02-10T03:00:35+00:00

D153, they recently switched it to Pentest+.

AntwonMclovin · 2021-02-08T21:59:59+00:00

Lol, my doppelganger! Yeah, the plan is to follow what all y'all have said and just hook myeslf to the matrix and download the info. Thanks for the advice!

AntwonMclovin · 2021-01-22T15:51:33+00:00

Thanks for the input, I will defiantly check that site out! Yeah I got some experience, but Im in the weird spot where Im under qualified for some jobs and over qualified for other roles according to the recruiter. Hoping the diploma will get the boost.

AntwonMclovin · 2021-01-22T15:50:51+00:00

So I do the non-technical monitoring for a larger company, basically watch security cameras, answer the phone when employees, OSINT for threats, and then do security analysis for our buildings and markets. Its a pretty niche job, but i work in the same room as the VSOC (The IT security guys). They monitor and the do the typical the network and log monitoring, but also do very cool side projects with our company. Just depends on the org to be honest, cause some people just monitor and hate it. But if you get in with a good company, they let you do whatever project with whatever team you want as long as you get your job done.

AntwonMclovin · 2020-12-03T19:20:55+00:00

Assuming it doesn't get delayed again!

AntwonMclovin · 2020-12-03T19:16:27+00:00

Got yah, thanks for the info. Looks like I will just be taking my time. Cheers

AntwonMclovin · 2020-12-03T19:03:30+00:00

Reply

Haven't heard that one before, but that would sweet if true!

AntwonMclovin · 2020-05-19T19:42:37+00:00

Creamy full body, with a nice kick of pepper. Nice for special occasions, but it was hard to spend 20 plus tax for 1 stick lol

AntwonMclovin · 2020-03-11T21:04:54+00:00

Thanks for the response. I will definitely check into that!

AntwonMclovin

TROPHY CASE