How to Get Pentesting Experience

Try GlassWire and start shedding light on your network traffic today, for free!
www.tcm.rocks/glasswire-tcm
00:00 Side projects for cybersecurity
00:28 Sponsor message
01:40 Project 1: The Honeypot
03:09 Project 2: BugBounty Dashboard
04:45 Project 3: Report Generator/Automator
06:13 Project 4: CTF
07:31 Project 5: Open Source Contributions
08:15 Outro
Sponsor a Video: www.tcm.rocks/Sponsors
Pentests & Security Consulting: tcm-sec.com
Get Trained: academy.tcm-sec.com
Get Certified: certifications.tcm-sec.com
Merch: merch.tcm-sec.com
📱Social Media📱
___________________________________________
Twitter: / thecybermentor
Twitch: / thecybermentor
Instagram: / thecybermentor
LinkedIn: / heathadams
TikTok: / thecybermentor
Discord: / discord
💸Donate💸
___________________________________________
Like the channel? Please consider supporting me on Patreon:
/ thecybermentor
Support the stream (one-time): streamlabs.com/thecybermentor
Hacker Books:
Penetration Testing: A Hands-On Introduction to Hacking: amzn.to/31GN7iX
The Hacker Playbook 3: amzn.to/34XkIY2
Hacking: The Art of Exploitation: amzn.to/2VchDyL
The Web Application Hacker's Handbook: amzn.to/30Fj21S
Real-World Bug Hunting: A Field Guide to Web Hacking: amzn.to/2V9srOe
Social Engineering: The Science of Human Hacking: amzn.to/31HAmVx
Linux Basics for Hackers: amzn.to/34WvcXP
Python Crash Course, 2nd Edition: amzn.to/30gINu0
Violent Python: amzn.to/2QoGoJn
Black Hat Python: amzn.to/2V9GpQk
My Build:
lg 32gk850g-b 32" Gaming Monitor:amzn.to/30C0qzV
darkFlash Phantom Black ATX Mid-Tower Case: amzn.to/30d1UW1
EVGA 2080TI: amzn.to/30d2lj7
MSI Z390 MotherBoard: amzn.to/30eu5TL
Intel 9700K: amzn.to/2M7hM2p
G.SKILL 32GB DDR4 RAM: amzn.to/2M638Zb
Razer Nommo Chroma Speakers: amzn.to/30bWjiK
Razer BlackWidow Chroma Keyboard: amzn.to/2V7A0or
CORSAIR Pro RBG Gaming Mouse: amzn.to/30hvg4P
Sennheiser RS 175 RF Wireless Headphones: amzn.to/31MOgpu
My Recording Equipment:
Panasonic G85 4K Camera: amzn.to/2Mk9vsf
Logitech C922x Pro Webcam: amzn.to/2LIRxAp
Aston Origin Microphone: amzn.to/2LFtNNE
Rode VideoMicro: amzn.to/309yLKH
Mackie PROFX8V2 Mixer: amzn.to/31HKOMB
Elgato Cam Link 4K: amzn.to/2QlicYx
Elgate Stream Deck: amzn.to/2OlchA5
*We are a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for us to earn fees by linking to Amazon.com and affiliated sites.

[@cauxxx2454]

PROT TIP: I got m first job lying that I had 3 months of experience... 5 years after, still no regrets

[@dmanptrona]

I think this the push I needed to actually do this! I've been thinking about doing it. Sucks when you know you can do the work but the fact that you don't have experience means you're nothing in the job market.

[@luszczi]

People like you get ahead of honest applicants, who chose not to lie. The fact that you have no regrets shows that you're lacking in sense or conscience.

[@greatwhiteswag]

NO REGERTS

[@UnionRing]

Sadly that's what we all have to do to get started. I have been rejected many times for being honest and only when I decided that I am gonna lie about my experience I managed to get a job. Nobody cares about giving you the chance if you have no expereince.

[@Thiccolo]

Every single one of my friends in tech have gotten their first job by lying. Except for one person who is given a chance by pwc

[@OriginalGumshoe]

Really great advice! This type of self-initiated planning for any job is a must for young and/or inexperienced people in today’s world arena. You show some great examples of how to do this and I am sure there are people who will become happy, successful, employed or self-employed workers due to your advice! Thank you!

[@TheDarkPoopVadeee]

Thank you so much.

[@lastbenchers3647]

Thank you 😊👏

[@Arken_666]

Nice content! The funny thing is: Building a Honeypot is quite similar from creating a CTF.

[@AgueybaCyber]

Love it, what about projects for SOC analyst since this is great for an entry level jobs in cybersecurity

[@scorit-zq4yx]

You could use the first project as a SOC analyst project. Install the Elastic Stack. Configure Logstash to Process Honeypot Logs. Configure Kibana to Visualize the Data.

[@TCMSecurityAcademy]

We outline a few ideas in this livestream recording with Andrew Prince aka our Blue Team Content Creator! kzbin.infoEECmpBBbn5Y

[@mr.atomictitan9938]

This is a great video but I want to know where to start. I understand this video is general but say I don’t know how to setup/make a web app. Where would I look to start? What sources would be good to look into or repos to clone?

[@CyberDavid2413]

Any projects that would help one who is trying to break in a SOC environment?

[@TCMSecurityAcademy]

Some good ones would be setting up a virtual lab environment to simulate a SOC. And in that lab, deploy a SIEM (Splunk or the ELK Stack / Elasticsearch, Logstash, Kibana). Another option is Security Onion or Wazuh. There is a good series by HackerSploit on setting up Wazuh as a SIEM (kzbin.info/www/bejne/fqKYaZKvfK-qfs0).A SIEM project like that would go a long way. Another project idea would be to deploy a PFSense firewall (www.pfsense.org/download) to learn how they work and how to create firewall rules. It also has built-in integrations with the Snort IDS/IPS. Also on the network side, even just deploying Snort or Suricata can be really beneficial in learning how an IPS or IDS works, and we actually cover this in the upcoming SOC 101 course. Other project ideas: To get EDR experience - look into LimaCharlie For event logging and log analysis, look into installing and configuring Sysmon or using DeepBlueCLI The best advice for doing any of these projects, is to document it somewhere. Even if it's just a blog post, or a README on GitHub. Something to document the steps you took, what your objective/goal was, any issues you ran into along the way (and how you solved them), and what you learned by completing the project.

[@abadiallo709]

interesting content I like!!! and for ethical hacker projects??? THANKS

[@CL-tl3ez]

Hi Sir can you suggest some good companies on where to apply for pentesting jobs around new york? Thank you very much would greatly appreciate it

[@TCMSecurityAcademy]

Are you in our Discord server? Sometimes people share jobs there - would recommend checking it out! Here's a link to the server: discord.com/invite/tcm

[@VenkiVerse]

Hello sir, I'm interested and want to switch to cybersecurity field.. can you please explain the roadmap in your next video?

[@TCMSecurityAcademy]

Hey! We're going to update this video for 2024, but this still has some solid pointers. kzbin.info/www/bejne/anu9m52VfZmYn5Y

[@ragnarok55]

Make ctf videos

[@LoneStarBassPursuit]

Pretty sure they did. Edit they did check like 3 months back in videos.

[@TCMSecurityAcademy]

Here's a recent one we did: kzbin.info/www/bejne/boKmiJqDp9alfM0

[@LoneStarBassPursuit]

@TCMSecurityAcademy yep there it is. Thanks big bro.

[@d3layd]

1.25x is good, but you could listen to this at 1.5x pretty easily if you wanted

[@GodlyTank]

Second

[@ZUNAYEDNAHIYAN-10M]

Who is become a ethical hacker..? First me 🖐️

[@saksham1283]

Fourth comment

[@wandering-jew]

First comment

[@abdirahmanmohamedsaid6201]

Third comment

[@krishjha2913]

Fifth comment