Conduct a Penetration Test Like a Pro in 6 Phases [Tutorial]

[@MapMavericks]

Ooo. A blinker! This is new

[@duckypl8144]

@Paul Lombard wdym no one blinks

[@killabite620]

Paul Lombard it’s a J O K E

[@AssassinIronMan]

@Paul Lombard YOU SIR, DESERVEEEEEEEE r/wooooosh ( ͡° ͜ʖ ͡°)

[@adelanaofficial]

beats me

[@AntZombie]

What’s worse than people who reply seriously to jokes are people who delete their reply when they get humiliated.

[@eyelessclowned]

Can we just appreciate how he puts himself on FBI watchlist just give us good content!

[@RETRO-DEV]

Lemme just *checks list*, yup.. you're on my list too

[@eyelessclowned]

@@RETRO-DEV wait what😶 😂😂😂😂

[@RETRO-DEV]

@@eyelessclowned oops.. that was public? :/

[@zyan983]

Someone's in trouble xD Don't worry about me....

[@RETRO-DEV]

@@zyan983 I'm watching you too buddy

[@DBonacich]

Awesome video. Quick and easy overview of the process and tools. My only criticism is that you should include steps to cover your tracks (clear logs, command history, etc on the target machine)

[@0x2d2]

Do not clear logs on a pentest. Clear them on a red team engagement if you have confirmed it with the client.

[@donaldlove4039]

If you study the CEH certification you will learn this more in-depth. Very informative content as always.

[@khairulazahar5958]

Which website do you use to study the CEH certification?

[@Themusicbiz]

@@khairulazahar5958 I have a course from 2017 that I have lifetime access to. It cost $4500, if you rly want to learn, I’ll hook u up

[@sheaspin3239]

@@Themusicbiz I would love that!

[@csmeby]

@@Themusicbiz slide that shit yo

[@Themusicbiz]

@@csmeby I will say though, it won’t qualify you for the cert. you need to take an updated one. Mine for example covers CEH 9 and they are on 10 now. All knowledge no cert.

[@wendy_113]

You seem to have a gift for explaining difficult topics very well ty

[@backinyourcommentsectionag3191]

I think the quality of content has gone down tbh, there was way too many times he blinked. it's just unnecessary

[@sum_andres31]

U got me lol

[@NullByteWHT]

I too hate wasted blinks

[@Z8BLK]

Its Morse code...

[@PB-eg2je]

I think its his (unsuccessful) way to convince us he’s human.

[@olamijiakeemodeyemi9320]

@@PB-eg2je People complaint he hardly blink and now he blinks and they complain again. Human being can never be satisfied

[@MrTheRextoby]

Man this is the kind of videos we want xD, awesome. More like this but with more dificult vulnerabilities.

[@donaldlove4039]

Allow me to remind you of the first and most important step, legal documentation. This includes a Business Impact Analysis (BIA), Rules of Engagement (ROE), and so on.

[@JakeTheMDog]

Exactly. As a pentester myself, I do not start without any of these documents. Good addition.

[@JakeTheMDog]

@Da Boss There are a lot of companies looking for pentesters and technical security people. However most companies tend to hire people who studied. OSCP is nice to have, but you must have luck to find a company willing to give them a chance. Best thing to do is to do an IT bachelor (or master, even better) and then get the OSCP certificate.

[@forestriver437]

Yeah I'm sure a blackhat would get all of this first. Thanks for giving out that advice.

[@JakeTheMDog]

Forest River Yeah I’m sure you should be a black hat hacker and parade it around. Luckily there are real specialized people who are taking care of their work, instead of internet heroes.

[@tinagray9605]

@@JakeTheMDog Please im new on this, how dp i set up my lab?

[@Phaser1980]

Video on hacking is 13:37 long... I see what you did there. 🧐

[@alhurra3236]

what??

[@staceixan]

man of culture

[@Hamza-gn2cg]

1337 LOL

[@fourofour9569]

@@Hamza-gn2cg If no one gets this, I'm done. XD

[@Hamza-gn2cg]

@@fourofour9569 I know RIGHT?

[@spamlite]

Heh video time is 13:37 guess that makes you leet :D

[@trishwhite8452]

I'm studying Cyber Security, at a government run College in Australia and I missed my Pen Testing class today due to illness, so I am just curious as to what I have missed, and how it works.

[@RakeshSingh-zo3zw]

His blogs are awesome!!

[@RaffaeleSellittoNiInF]

I don't understand why you say that SSH is usually associated with port 80. The SSH default port is 22, while 80 is Http default port. Anyhow, I enjoyed your video, really interesting.

[@mathsocraft7816]

SSL* Its a TL Encryption.

[@schwingedeshaehers]

@@mathsocraft7816 SSL should be on port 443

[@darklawtivity6831]

@@mathsocraft7816 👎

[@zer0k4ge]

Great video. I’m new and don’t understand a lot but I’m getting there! Just set up a raspberry pi with kali to do some experimenting.

[@robinhood8302]

Maaann this guy is the real G.O.A.T

[@soroushsafarzade5770]

3:46 what does Galaxy-S10 do in your nmap scan???

[@quintinwaterhouse5804]

Anyone notice the video length is 13:37

[@johndanielcepeda5393]

Thank you for explaining this thoroughly!

[@addaboi]

A lot of these videos I see are already on the network, let's say you're not on the local network already how would you begin? Reason I ask is my manager has asked me to run a pentest as "someone who parked outside our office on a Saturday with a laptop and mobile hotspot. Appreciate the help!

[@Adriana-em9dx]

I tried to run nmap -sV -p 80 on my terminal but it shows error says the term 'nmap' is not recognised as the name of cmdlet, .... someone tell me why?

[@Nino-xe3oj]

How do I download the correct Nessus? My wont work for some reason

[@lalaineagsam2115]

Thank you nullbyte

[@birdperson180]

i love it when my like makes something even i was the 500th like

[@mrhappysmiley2968]

I like to use linPEAS or winPEAS for to find anything we can use for privilege escalation

[@NashHazzard]

Null Noob question i need to set up a system on my network running Apache to pentest correct?

[@martin_oconnor]

How do you find out if someone is using these methods or similar against you? Thanks in advance!

[@pianochannel100]

In theory, you don't.

[@ala_b2017]

By monitoring you network To detect scans and weird trafic coming from someone. Also check your website and server logs every time.

[@blender_wiki]

You have monitor tools that detect some kind of behavior that can be associated to different hack technique. You can monitor your .log server file or directly the network traffic inside a network especially if you search for inside attack.

[@NaRToTiK2]

Thanks for the great videos! good content and explanation. btw can you make a video on how to set a undetectable VM?

[@fahid3342]

And what about enumeration and establish foothold

[@amwin7]

How can you tell that your being hacked, is there a live view software you can use?

[@dEExm702]

Bro im currently in the process of making a program out of cmd (cuz thats currently my only coding tool i know how to use). Currently with it you can track ips, ping ips, and manually shutdown computers on the same router as you. What do you suggest i add to it next?

[@m1lkweed]

SƎNTIИƎL 髪 traceroute is handy, and don't worry if you can only write command scripts, a lot of simple tools are written like that.

[@dEExm702]

@@m1lkweed hmm ok thx :)

[@nero2k619]

What you mean manually shutdown computers on the same network ? Do you just send command to the router and it shutdowns another pc or what ?

[@inxnite4071]

Hey if you’re still interested, search up how to get kali Linux in a virtual machine I suggest virtual box and it gives you many tools to hack and such but you can use some of them for creating a program

[@noorzaman474]

So pen tests also have vulnerability scans already on them?

[@Marcothemillionaire]

where can I get Nessus from I don't t have 3k???

[@k.eshwanth7752]

Hi bro. I am using kali in vmware in my laptop with contains Intel chip in it . When I try to run apache2 server in kali, it's not working. I have tried to restart it by uninstalling & installing it again. Can you help ee with this bro.

[@gautamhacks5098]

where is orginal null byte??!

[@timetraveller4336]

It's really strange to watch a null byte video with someone who blinks

[@alimonbanda6983]

Link is down

[@Ghost-by5zt]

I want to click there website for full tutorial but then again they are hackers

[@farhanazamchohan6924]

I read their 8 courses details and they are convincing. but, buying and giving bank details to hacker mentor is not convincing.

[@zellers5423]

You can do this on any version of Ubuntu, right?

[@NullByteWHT]

Yes, but you may have to install some required programs.

[@MrGFYne1337357]

dig, host, rdns, nmap, metasploit

[@rickyray2794]

Yes those are tools we use

[@shreesharda7508]

700k soon❤️

[@bernardphlaxisk6454]

I'm here just because EC-Council says it is a 5 step process, the same way they say C|EH is practical n all.

[@naturalsoundlab4307]

Hey!! Where is cody?

[@henrykissinger-ot5sx]

Really good

[@digitalvillage2333]

Ffs can’t get the damn nessus scanner cause I need to pay for a friggin business email 🤦‍♂️

[@MathaGoram]

Thx. Not your cup of tea but need Nessus on ARM hardware too.

[@tienatnguyen3412]

Can you crack the online ID ransomware pls ?

[@sahilbasia4571]

Bro please can you make a video on installing gvm (openvas) vulnerability scanner fir Kali Linux 2020.3

[@Blackdiamond.001]

Great

[@shaikhemad3556]

Thanks you sir

[@andrewa7952]

Step 6?

[@pcislocked]

yeah i know how to do this except step 6

[@hnachtv6555]

how did kody k evolve into this !!??

[@MidnightPixies]

My Man

[@laragonzalezcastilla2771]

2 years passed damn

[@moonmaan]

Just casually using software that has a license that costs several thousand dollars, okay.

[@riley530]

These comments are golden.

[@mauliddifirmansyah252]

hi null byte can you help me to learn me from indonesia

[@justrickacoustic]

can we appreciate that the time of this video is 13:37? 1337

[@nicroxio681]

SUP BOIS

[@laszlob3683]

the only problem with this video is that nessus is not free

[@omegapsiphi1911]

Wait a minute Where is Cody? What did you guys do with Cody!?!?!?!?!? lol

[@xAlbanianHackerx]

You skipped reporting!

[@xAlbanianHackerx]

Hah, being in the field I was looking forward to that section 😬

[@cybercat1531]

Step 6. No matter how 1337 a hacker you are takes the longest ;)

[@cybercat1531]

At least it always feels that way

[@rectify2003]

Where has Codi gone? The other Guy?

[@kabobz]

Hi, 2 things to help your skin, eat beats (sometimes skin problems mean something is wrong inside body) and mix yogurt with honey for outside on skin. Nice video, too advanced for me.

[@nitra01]

Wow

[@narcisakaparapet]

Blinking was never an option

[@bharatmadho3742]

underrated comment

[@minibit0103]

Like a Boss

[@adamodonoghue4812]

what happened to the guy that doesnt blink

[@NullByteWHT]

I'm here talking shit in the comments

[@adamodonoghue4812]

Null Byte hahah

[@bharatmadho3742]

@@NullByteWHT 😂😂😂😂

[@GuNoZidE]

Damn the video is exactly 1337 long 🤣

[@testuser83ab7e90]

Vid is exactly 13:37 long

[@uaman11]

this is brilliant and i aint even a brit

[@rafaelnacha1788]

4:20

[@enos5192]

Where is Cody the Soul Ripper 😌

[@NullByteWHT]

That's a badass nickname

[@enos5192]

@@NullByteWHT He really is

[@RETRO-DEV]

I'm watching you...

[@user-es2pd6he7l]

I’m watching you to...

[@RETRO-DEV]

@@user-es2pd6he7l too* and no... No you're not...

[@RETRO-DEV]

@@user-es2pd6he7l also wtf is your username supposed to be

[@harambe2185]

@@RETRO-DEV longest name in Africa

[@RETRO-DEV]

@@harambe2185 fair enough I suppose

[@mattnsac]

The video is 13:37 long. Im sure it was a coincidence lol

[@abhikdutta2848]

Bro r u ok????

[@NullByteWHT]

yes

[@abhikdutta2848]

@@NullByteWHT Then what r those red stuff on ur face???

[@NullByteWHT]

​@@abhikdutta2848 Are you an idiot?

[@abhikdutta2848]

@@NullByteWHT why?

[@mayhem1994]

@@NullByteWHT lol he must be lol

[@josephjefferson2617]

P.S.: SSL is usually associated with port 443.

[@redsol3629]

Get those daemons uploaded.

[@realhomy]

Ahh yes I remember 2 years ago when he used to stare straight into your soul without blinking

[@MarcoMazziniYT]

Not the same guy.

[@realhomy]

@@MarcoMazziniYT no im talking about the guy that was here 2 years ago

[@realhomy]

hope u understand

[@MarcoMazziniYT]

@@realhomy I misinterpreted your "he used to stare". You have to admit that it's a bit confusing.

[@realhomy]

oh ok

[@lesiostasio2542]

Mmm, yes. I do feel like using this information for educational purposes ONLY. And I'm gonna do the sixth part for sure.

[@AhmedFarouk-i2w]

WANTED. Alive or Dead :) Amazing

[@basudhasworld5539]

Evil or maybe a good copy of micheal reeves

[@forestriver437]

well if it aint nick...haha ha haha

[@LofilabLofiHipHop]

Thank you for this amazing video. Please bring more content about hacking using android divese =)

[@x0rc4t]

Pls add indonesian sub

[@0xSN1PE]

print("Quality Content")

[@lavishjaat]

cout

[@BloodmansCrypt]

java System.out.println("Quality Content"); C printf("Quality Content"); C# Console.WriteLine("Quality Content");

[@nero2k619]

Assembly: section .text global _start _start: mov edx, len mov ecx, msg mov ebx, 1 mov eax, 4 int 0x80 mov eax, 1 int 0x80 section .data msg db 'Quality Content',0xa len equ $ - msg BrainFuck: ++++++++++[>+>+++>+++++++>+++++++++++++++++++++++++++.---------.---.+++++++++++.+++++.----------.-.++++++.---------------.+++++++++.++++++.

[@PeopleHighlights]

nice timeframe xddd

[@xanthusxiaobo6307]

Can you make a video on how to hack pubg

[@bharatmadho3742]

what the actual fuck. pubG is a game.

[@dydarjadmin]

Круто, довай жги пакрышки🤣🤣🤣

[@OzoneX4]

way too basic, can we get something more advanced?

[@edward7935]

:)

[@dEExm702]

OoOoooOOOOOOOoooOoooh 0 dislikes. ;)

[@romangrace2507]

i love not having a life and doing shit like this lol

[@boristodorov779]

Well u can have a life and still do it

[@romangrace2507]

@@boristodorov779 true true, but i write so many scripts that i do not have time for anything else....

[@haiterxiaohai]

=没有来自中国的评论=

[@tubeDude48]

*LOOSE* *THE* *CRAPPY* *MUSIC!!!!!!!!!!!!!!!!!!!!!!!!!!!*

[@salemsalem3968]

you move too fast. we are not all like you bro. Please take time and try using relatable language

[@renganathanofficial]

please don't talk about his face :(

[@boristodorov779]

What about his face?

[@renganathanofficial]

@@boristodorov779 dotted face :/

[@aaroojali2085]

@nullbyte bann this fucker from this community

[@wickedwolf8438]

bro nice skin.. haha just kidding.. nice vid

[@NullByteWHT]

I didn't come on the internet to take shit from people who believe in Q-anon.

[@wickedwolf8438]

@@NullByteWHT oh my god, no need to be toxic, it was a joke :) ...also no need to critize other people beliefs since i dont critize yours :)

[@aaroojali2085]

@@NullByteWHT bann this fucker

[@NullByteWHT]

@@wickedwolf8438 Toxic? I don't make asshole comments about the physical appearance of college students bringing you content in their free time during a pandemic and then act like a victim when I get called out for it. When I started this channel, it was people making comments like yours that made me doubt if creating content was worth it. Keep this shit on Reddit.

[@BloodmansCrypt]

@@wickedwolf8438 oh god just stfu

[@IFASTBRAKE]

To be sincerely speaking in my humble opinion without being sentimental and judgmental and of course without offending anyone who thinks differently from my opinion, but the name above recovered it all for me in no time! I've vowed to always preach about ifastbrake! 👈🏼