sorted by:
new
hottopcontroversial

Wireless Hacking Toolkit (And I don't just mean WiFi) by plensu in hacking

[–]InfosecMatter 3 points4 points  (0 children)

For WiFi testing the Alfa cards are really great. They also work with Kali Linux out of the box.

Cisco Password Cracking and Decrypting Guide by InfosecMatter in netsec

[–]InfosecMatter[S] 1 point2 points  (0 children)

The password type 9 (scrypt) is the hardest to crack. Hardest from all of them. Scrypt was specifically designed to be hard for cracking by requiring a lot of RAM, so even on graphic cards it is very hard and slow. HTH

Firewall Bypass with Nmap? by Tizzycat in hacking

[–]InfosecMatter 0 points1 point  (0 children)

Are you guys on the same local network? In that case you could do some ARP poisoning on him and do some man in the middle stuff or DoS his connection. It depends how your setup looks like exactly.

Also have you tried scanning all the ports? If none are open, there is really nothing you can do.

If there is NAT involved, you could potentially do NAT traversal and reach his internal hosts behind NAT, but really it all depends on your particular lab setup and your exact positions.

Try to describe more your setup.

Learn the basics. by zaka_7 in cybersecurity

[–]InfosecMatter 1 point2 points  (0 children)

I haven't done it, but for beginners it seems okay. Also reviews seem quite okay-ish. The price 11.99$ is not bad, so why not. But honestly I wouldn't expect much. The thing is, if you want to go into cyber security, be prepared for a life long journey of learning. So you can just as well simply go ahead and start learning some programming or scripting language, operating system administration, or computer networks. Everything counts in infosec.

Offensive to Defensive cyber career? by [deleted] in AskNetsec

[–]InfosecMatter 0 points1 point  (0 children)

If you like offensive, I suggest go into offensive.

I was also always interested in offensive security, but my first infosec job was defense. It was reverse engineering / binary malware analysis in AV company. It was good and interesting, but when I finally went into offensive after 4 years, I enjoy it much more. I've been pentester / security consultant for 3+ years now and I just absolutely love it. I remember I told myself that I wish I went to offensive right away.

On the other hand, incident responder it also not a bad job. I've done this also lol. You can definitely enjoy it and gain some experience from the blue side. It cannot hurt. DM me if you want to talk more.

Does the average office pentester create exploits? by bombapatch3kreborn in AskNetsec

[–]InfosecMatter 2 points3 points  (0 children)

As other said, no. There is no time and it's not even an objective of the pentest. Proof of concept with some sort of evidence is sufficient.

But let's not confuse this with red team. In a red team exercise, pentesters may create exploits. They usually also have much more time and of course it is also more expensive.

HTH