The best Hacking Courses & Certs? Your 2024 roadmap to Pentester success.

[@davidbombal]

Big thank you to Proton for sponsoring this video. Get Proton VPN using my link: davidbombal.wiki/protonvpn5 // Phillip’s SOCIAL // X / Twitter: twitter.com/PhillipWylie Website: www.thehackermaker.com/ Linktree: linktr.ee/phillipwylie LinkedIn: www.linkedin.com/in/phillipwylie KZbin: kzbin.info // Books MENTIONED // The Pentester Blueprint by Phillip Wiley and Kim Crawley amzn.to/41N5CBl The Hacker Playbook by Peter Kim amzn.to/40LvInc The Hacker Playbook 2 by Peter Kim amzn.to/3oVemqr The Hacker Playbook 3 by Peter Kim amzn.to/40SjokN The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws by Dafydd Stuttard amzn.to/3oLN5Xv Hacking API’s by Cori Ball amzn.to/3Hi5amj Penetration Testing A Hands-On Introduction to Hacking by Georgia Weidman amzn.to/3Hi5zF RTFM (Read Team Field Manual) by Ben Clark and Nick Downer amzn.to/3Vf0XWs Operator Handbook Red Team + OSINT + Blue Team by Joshua Picolet amzn.to/41JTQYH Black Hat GraphQL by Nick Aleks and Dolev Farhi: amzn.to/47I8zpT // Videos MENTIONED // Pentester Blueprint: Your road to success: kzbin.info/www/bejne/Y3fNfWuvaKdjbs0 Free Hacking API course!: kzbin.info/www/bejne/eZy5p3VrrNSEiK8 // KZbinrs mentioned // Rana Khalil: www.youtube.com/@RanaKhalil101 Profesor Messer: www.youtube.com/@professormesser She Networks: www.youtube.com/@shenetworks Tib3rius: kzbin.info // David's SOCIAL // Discord: discord.com/invite/usKSyzb X / Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: www.youtube.com/@davidbombal // Menu // 00:00 - Coming Up 01:51 - Sponsored segment 03:35 - Intro 04:11 - Blackhat 06:43 - Try Hack Me / Hack The Box 08:35 - Roadmap in 2024 14:30 - Do You Need Certifications? 18:07 - Problems Getting a Job 20:16 - CCNA or Network+? 23:34 - Certifications & Degrees 27:43 - Roadmap for Developers 30:33 - Using BugBounty for Experience 32:40 - What Should you Focus on in 2024? 36:12 - A.I in 2024 41:12 - Modern Day Opportunities 42:02 - Books For 2024 44:58 - Last Advice 50:03 - You're Never Too Old 52:14 - Different Roles 54:00 - Phillip's regrets 57:33 - Outro // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] pentest pentester hack hacker hacking ethical hacking ethical hacker course ethical hacker Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #hacker #pentester #hack

[@belhamadiawalidd]

I love your videos because of you i had my first pen-testing contract thanks for the help .

[@scentilatingone2148]

Love proton

[@PhillipWylie]

I use both Proton VPN and Proton Mail.

[@PAFBEAST]

Bro what are your comments on the job market nowadays? It seems so much saturated and people can't get even entry level jobs, how to bypass this ​@@belhamadiawalidd

[@Jayohkay]

I work with Phillip on our security team. What a great guy. Love learning from and working with him. Been following this channel for a long while and its always cool to see you two interact. Lots of great knowledge in the same room.

[@davidbombal]

Very cool! Phillip is amazing!

[@Shadow_Warrior1]

@@davidbombal can you plz make any video for (hacking,security) books etc...?

[@vizionthing]

Management rolls are the passion killer for any IT professional - don't let them rail road you to a boring desk job!

[@Yzx-s7k]

Then what job role to follow

[@Youonlyloseyourself]

Maaaan it pays a lot but I’m starting to see that some non management roles pay pretty good as well

[@skootz24]

As someone switching careers in my 30s this interview really spoke to me. Phillip's insights, particularly as an older gentleman, were exactly what I needed to hear to stay motivated. Thank you both so much!

[@TheMrTombee]

30s! Calling yourself an older gentleman is the wrong mindframe! I’m in my 30s and I’m learning more than I ever did in me teens/early 20s this is when we realise life isn’t about age but about what we want to do as a passion. Limiting yourself by age is giving you an excuse to limit yourself when things get tough

[@latishaprioleau6324]

01/14/2002

[@latishaprioleau6324]

Mr.hhr

[@Josh-uf7ws]

@@TheMrTombee Well said. In my late 30's and making a transition myself, it's never too late!

[@alm6241]

Weird question but I'm taking courses on information security but I'm getting push notifications for pen testing program 😅

[@williamyonce7163]

@davidbombal Is there a path into cybersecurity for a 50 yr old Truck Driver with a 24 yr old felony conviction that has an AS degree in computer science and Networking. (From 1998) currently working through HTB Academy Fundamentals.

[@QaesARTS]

Hi, I'm from Kenya and I love this weekly classes by David. I wish I had such information back in 2015 after finishing high school....But now that I am here I'll take what I can as fast I can. Visit Kenya someday David.

[@michi.m]

From KE as well, always following David n consuming his grt content

[@moneymac1114]

Also from KE 🇰🇪 glad to see my fellow Kenyans paying attention to the cybersecurity sector

[@nicholaskaburu5928]

From ke bro

[@rizingsun4033]

Attended Phillip’s Web Application Pentesting Workshop last weekend! Amazing Workshop!!!

[@davidbombal]

Fantastic! Phillip is great!

[@krishnagoku8002]

Hello, looking for someone's guidance to start hacking and security whom will help me with and also one who is starting to learn so we can learn together. I've ZERO knowledge in hacking. Hope I've meet like minded friends.

[@rationalbushcraft]

Phillip why do you have a P51 Mustang on your wall? My dad flew those in China. He was with the Flying Tigers during WWII. I'm just always curious when I see one. That growl that the Rolls Royce Merlin engine with the four blade propeller was pretty unique. Anyway just interested to see that.

[@PhillipWylie]

I was recording at a friend's house due to my niece and nephew at my house. They can get loud.

[@josemariolladomarti4935]

It was a good video, thanks for the advices Philip. But i still have something to say: i have my OSCP since months mow and i've applied for pentester jobs here in France and i have 0 jobs interviews so far. Everybody keeps telling that OSCP is the way and somehow it does not work for me yet :(

[@PhillipWylie]

Not having experience will make it difficult. Networking on LinkedIn and in person are good ways to improve your job hunting efforts.

[@abed-6174]

Hey David, your interviews are incredibly informative! I've watched most of them and gained valuable insights. Could you explore the topic of the value of pursuing a master's or PhD in one of your future discussions? I'd love to hear your perspective on whether it's worth it.

[@gamereditor59ner22]

Wow!! Thanks David!! I wonder if you can help or others of how to execute Oracle VM on Kali Linux.

[@SevenHeavenlyig]

David sir, releasing video's back to back. Respect 📈

[@davidbombal]

Thank you! So many amazing people to talk to 😀

[@sohamdatta1640]

Wow a new video !!Thanks David for helping us grow and sharing so much important knowledge with us .❤️❤️

[@davidbombal]

You're welcome! I hope you enjoy the video!

[@AbdulMalik-i7v]

Hi David, I understand most of the people you invite on your channel are usually from the IT world, I would be very interested to see someone from the OT or ICS (Industrial Control System) world. I am looking to get into OT Penetration Testing, while currently working as an OT Cyber Security Engineer, and would love to get introduction to the Controller (or PLC) pen-tests, a path for OT Security Enthusiasts and in general security in the industrial world.

[@mr.c2003]

Bro look like "Willson Fisk"😅.(Only Marvel Fans can Understand)

[@themobilemage2137]

Does it help getting into cyber security/pen testing if you look like a Marvel villain? 🤔😊✨

[@mr.c2003]

@@themobilemage2137 Obviously...... Don't Know 😅

[@V4mpirella]

That was a very smooth, very informative video. David david, you're great at this. I really do appreciate your videos even though I'm still struggling in myself. Trying to really discipline myself into the morning. But you do a great job. Excellent, thank you so much.

[@davidbombal]

I appreciate that! Just try to improve 1% every day and you'll be amazed how much you can accomplish in a year. And don't worry if you stumble. The important thing is to get up and try again.

[@EnlightenedSavage]

Just like any industry the shortage of help is a lie, companies do not want to pay.

[@Ynerson9003]

Great video!! I’m going to follow this road maps this is what I want to do, as a 30 year old in need of a career change. (I have been doing physical labor and body is feeling it). Thanks for the great guests, and even more so the inspiration you bring that a 30 year old man can make the changes into this field. This will be no easy feat but I’m very dedicated to make a change. I truly believe finding your videos has been the blessing I needed.

[@sadasow2670]

I was in the same boat bro, years of physical labor in the warehouse. I studied for about 8 months and in that time got my security + and CC , applied to some security analyst positions, had like 10 rejections and 3 interviews and finally got an offer just last week. I promise you if you put your all into it you will achieve your goal. Good luck

[@Ynerson9003]

@sadasow2670 that’s awesome to hear!! Congrats on getting the job. I am still working but trying to put in the time at night and on the weekends. I’ve made mistakes the last decade but willing to work hard to get into something I enjoy. Thanks for the response that gives me inspiration

[@PAFBEAST]

​@sabutdasow2670 but nowadays literally every field is flooded with candidates and so much saturation! Everyone is saying they aren't getting jobs, its just depressing lol, feels like the world is ending for our generation

[@M1N3RDOM]

Could I get a 5 month update on your progress on career change? Im looking to change as well but im not too sure if ill be able to do it.

[@dalefernandez19]

I started watching your videos recently and I find they are valuable resources to get into cybersecurity as a newbie ❤ Looking forward to more amazing content.

[@davidbombal]

Glad you like them!

[@sheldonsmall6942]

hi from trinidad and tobago i just wanna thank you for your videos you get me into writing python programs i don't miss a video that you put out i write a software to find bug in web site i will love to know what you think about it

[@SnowDaemon]

Great per usual. Love the interview, David. Good stuff from Phillip

[@ruslanbedoev9264]

Hello everyone😁 I am from Canada and i would to find any hackers groups in Toronto, Canada? which i am have very hard time to find. I am complete beginner and i m working on Google cert and than Sec+. And i am really interested in network Security and i am lost with all the different certs. Any advise would be greatly appreciated.

[@Abduselam.m]

Thanks so much David I'm very excited for this topic and very important

[@davidbombal]

Thank you! I hope that the video helps you!

[@hurricanepr7102]

Here always attending to the classes! thank you David for bring us great content and good source of info for our knowledge! much love!

[@davidbombal]

Thank you! Glad you like them!

[@AlexanderJunior-op8uf]

So we can actually study for the CompTIA net+ and not the CCNA when going for cybersecurity?

[@miss_nainuu]

I would love to see young hackers on your channel. We can relate better😊

[@davidbombal]

Did you watch this video with Gavin (18 years old): kzbin.info/www/bejne/bJvUe2p9lpp2pac

[@InMoneroWeTrust]

@ayesha_0x1 You got a tongue ring?

[@darkerberry8223]

David sir, can you do a video and consider people for 3rd world countries? Security jobs are open in good countries but in some countries you'll see people with PNPT, OSCP, eJPTv2, CPTs all together or individually either in Uni or just finishing uni and this people are jobless or being exploited by some companies, what's your advice sir

[@robertobarragan42]

thanks for that info, I'm 30 years old and i really want to learn Cyber security and become a hacker. This road map is my new destination 😊 Gracias

[@abefromen1]

I am getting my 1at ever certification. It will be Offsec's new one OSCC. I'm hoping it will get me a cyber security job

[@fazalhayat7848]

Mr. David you are always inspiration for me. Learning a lto from your channel. Good Work. Be always happy and healthy in your life.

[@davidbombal]

Thank you!

[@myname-mz3lo]

i dissagree with the apprenticeships . the people securing our countries ifrastructure and businesses should be the top of the top . the ones that had the motivation to do bug bounties and create a portfolio etc.. not someone who needs their hand held . we are in a cyber world war right not it is not the time to lower the barrier of entry . thats like saying that everyone doing the navy seal admissions test should get a personal trainer . nope make sure only the most motivated people are staying and weed out the people doing it just for the money .

[@Noc___]

Thank you so much David! Philips awesome. 2 of the most helpful people in this industry.

[@tehbarbour]

Thank you both. This helps so much! Very appreciated.

[@dispozablehero9829]

Currently working on my Sec+, PJPT, and CBBH all at the same time

[@TheBoggledMind]

this is a holy grail of information for people just starting out.

[@rumuna]

Thank you. Very transparent and open about experience and very good advice . 👃

[@jfkst1]

At least in the US market, the entry level is FLOODED with candidates. Without recent IT work experience you're probably starting in a help desk or field tech. role at best.

[@PAFBEAST]

Bro its just so demotivating lol literally every field nowadays is so much saturated, entry or intermediate every level is full of candidates, I'm just thinking of how we gonna end up in this situation.... The world is ending for our generation lol

[@osmanisiktas]

Hi David another great video again! I moved into cybersecurity from a completely different industry and passed my ccna exam last week. Now the question in my mind is which certificate should I focus on, because the majority of such videos say "Which certificate should I get, CEH, OSCP or eJPT?" and the content of the videos contains information about how the exam is. However, I don't know what kind of job I should apply for after receiving one of these certificates. I think it would be helpful if there was a video about all job areas that could work in the field of cyber security.

[@abdibaqihassan1331]

Get CompTIA Security+ exam first. This certification validates your baseline skills in cybersecurity. To get career into cybersecurity, this is the recommendation.

[@LuisMiguelVelilla]

It’s an amazing topic, David! Thank you!

[@mlsandreas]

maybe i am wrong but i think that Philip is the first one who talks about learning assembly language if you want to get into pentesting. Really interesting skill!!

[@MariaCastro-me5sk]

I hate assembly language. Lol

[@MariaCastro-me5sk]

And machine language

[@PAFBEAST]

​@@MariaCastro-me5skwhat language do you practice?

[@MariaCastro-me5sk]

I don't now. I went to school for programming back in the day when you were lucky if you got 2 disk drives to do the floppy shuffle. Machine and assembler languages were tough back then. I can only imagine what it's like now. I was way better at C++. Still, if you don't use it, you loose it. And we had compilers. Ugh. No "environments". You wrote the code then you had to compile the program. You had to debug it yourself and hope "trace" or "debug" helped you.

[@MariaCastro-me5sk]

With C++ you had to search through all of the brackets to find the one you messed up on. Good thing the programs we wrote weren't horrendously huge.

[@attuquayetetteh6129]

I'm a front end developer is it advisable to focus on web pen testing

[@Jasmine-cn4wc]

Thank you for the invaluable tips and advice David👍A must-see for anyone interested in learning more about cybersecurity and pentesting

[@InMoneroWeTrust]

You got a tongue ring?

[@taiquangong9912]

Phillip, is an awesome human being and is very genuine.

[@rickywatt7599]

Phenomenal video. Thank you David.

[@terrencebanks8862]

This is a powerful session. I appreciate the encouragement and guidance.

[@OiiBruv.o7]

I'm 28, had a nack for tech for almost a decade now, never tried putting any of what i know to use and never truly tried to learn more, until now but i feel so far behind, like i'm too old to start now because by the time i get 10+ years on my belt, i'd already be nearing 40 lmao but watching this video today really changed my mindset and perspective so i appreciate the time you put into this and for sharing.

[@DzintarsDev]

Could you make an episode about the bad and the ugly side of security jobs. Like... all that boring stuff, Incident responses, routine, bureaucracy, personal danger, risks, etc, etc.. All that ugly stuff you usually don't talk about.

[@t-technews]

So the PenTest is about remembering a structured way of hacking and known vulnerabilities, but it is really a joke because old school hackers don't use any of those methods except Nmap. My experience is looking for the unknown and taking everything apart piece by piece to find a way through it. Yeah, the methods do work that they teach, but that is exactly why I would never use them and look elsewhere. A lot of time and money for a test and badge that is worthless to an old school ethical hacker.

[@hectorMcaudillo]

thank, looking forward for a roadmap and im such a lucky guy to find out about ur utube channel, greetings from Mexico-USA border TEXAS

[@TheDigitalPatriot]

David! You keep cranking out content like this and I don't know how you do it, once you upload, I'm watching! Thanks for what you do.

[@davidbombal]

Thank you! I appreciate that!

[@gauravshukla7090]

Hello,should i learn html,css javascript and php mysql before learning web security

[@oleggorenkov]

You can't live without social skills. My network didn’t help me find a job.

[@mohammednour619]

Hello David, I recently started following your content, and I'm really enjoying what you're providing. Your teaching style, explanations, and words always keep me enthusiastic about learning. Thank you. I would like to ask you a question. After completing the CCNA course available on your KZbin channel, does it qualify me to move on to the CCNP course that you also offer on your channel?

[@scentilatingone2148]

I have absolutely 0 experience. GpT has accelerated my learning 10x. Started python and all I do is carry on a dialog with it asking questions as I work through the material it tailored for me to learn it.

[@vumast3r]

@davidbombal can you do a roadmap for someone who's interested in blue teaming as well or anything SOC related?

[@paulchibamba]

Hi David. This may sound weird. But can you make a video of different price points to invest in educational material and certs.. so let's say best training(courses, books, certs) under $1000 and maybe under $2500 or more) as a beginner how can get the best value from those price points assuming I only hand that to spare. Ofcourse this will then depend on your area of focus, that is offensive vs defensive but I think could help

[@alizolfaghari3951]

Do we need to pass LPIC1, LPIC2 and LPIC3 for linux? Do we need to get the cert?

[@alexencinas8975]

I would've liked to have asked him how he would navigate being in managent roles without a plethora of technical skills.

[@trap10gt99]

I started learning cyber securiry and I really enjoy your videos, high quality content

[@ilikeanimals7328]

Thank you for all you do, David!!!

[@davidbombal]

You're welcome!

[@darklittlepeople]

amazing video, full of fresh ideas to explore - thank you, gentlemen !

[@vagl0k]

I see whole video. Perfect!

[@muhammadtaha2578]

Dear Sir, Big fan here! I've watched all your amazing videos. Could you please consider making a video on MITMA and HTTP snifing? Your insights would be greatly appreciated. Thank you!

[@bloodline39]

How is cybrary? Their courses seems very informative and afdordable

[@WaytosuccessOfficial100]

Sir plz give me a course Link

[@myname-mz3lo]

i dont wanna be harsh but before you even think of doing this job you need to learn how to do research because research is 80% of the job

[@zenmoto369]

Who else is spending more time watching videos like this on how to, instead of actually learning?

[@Swede_4_DJT]

Greetings from Sweden! Thanks for the upload. Love these longer formats.

[@davidbombal]

Glad you like them!

[@Swede_4_DJT]

@davidbombal Sir, yes i do, Sir. Keep up the great work with this channel

[@rabbleader]

❤

[@miyuruh]

Bast way to stay focus ❤

[@kevinmills9805]

This was an excellent interview.

[@ademamri5804]

How to use jhon the ripper to cracke Facebook password please😊

[@DinnerIsDelayed]

Everything you guys mentioned is what I’m doing. Glad to know I have an expert mindset!

[@luciferofazaroth]

Awesome!

[@davidbombal]

Glad you think so!

[@yobanicruz9351]

You are doing God's work! Much love!!! ❤

[@Happy_hacker_vlog]

Sir all.ethical Book name please video of books name

[@abdullahniazi6320]

thank you @David, I was checking and got supprised with new video

[@ahamedebrahim6077]

I learn so much from your video, you're doing great job man.

[@DannyMexen9]

Thank you. Very insightful.

[@Quintren]

Perfect for me

[@davidbombal]

Very happy to heart that!

[@Godmil]

OMG I'm so glad you mentioned that age isn't an issue!

[@dwxmxyz]

so, now you don't only need certs, a degree and experience to get a job in cyber, you also need a blog, a youtube channel, present your research or what you do at conferences ... that's why i quit cyber, fuck it, i rather spend my time putting a business and at least make money and do other things that i want.

[@PAFBEAST]

Bro that's not how it is, who told you that?

[@Abduselam.m]

Thanks so much David I'm very excited for this topic and very important

[@davidbombal]

Glad you liked it!

[@Nivek389]

David, that was a really good video. Thanks! Phillip seems like a genuinely good guy who's passionate about what he does. I learned a lot, and the last part really hit home for me.

[@cybercashz]

I love your content and over the years you are just getting better the quality of content is super ❤. Thanks David

[@TheItalianGentleman2394]

Back in school for IT working on comptia certs want to go from betwork administrator to netwrok security penttesting has always been interesting

[@salemsalemX15]

Thanks David❤

[@davidbombal]

You're welcome!

[@yoonusjawfar8286]

Hi sir I am yoonus a student.I study at Cisco network academy skills for all cyber security career path.sir, this course is Worth or not please explain it

[@michi.m]

The path is usually: network foundations+linux and OS foundations+security foundations, then proceed to advance stuff. The course yu have mentioned in cisco netacad and skills for all will help build the fundamentals. They are introductory/fundamental knowledge that yu will build on. My take.

[@ratnapalshende3052]

if i have knowledge of a course but don't have certificate can i mention that course as a skill in my resume and will it help me to get job ? i can ask interviewer to check my skills instead of certificate.

[@tyx168]

No

[@ariasm8911]

Such a down to earth guy, really respect him

[@PoRchop121509]

🤑

[@jakubjakub5538]

Thank you!

[@mohandalliouache7456]

One of the best KZbin channel Thank you for all your jobs 🙏

[@FredKZ123]

😂

[@Black-Belt-Developers]

Great Video, lots of useful info

[@lynwoodjones]

🤘

[@davidbombal]

😀

[@LoneStarBassPursuit]

Woot Phillip get it!

[@davidbombal]

Phillip is amazing 😀

[@LoneStarBassPursuit]

Right funny dude.

[@PhillipWylie]

Thank you@@davidbombal !

[@k_usuan]

This is so educational and great content . Well done

[@davidbombal]

Phillip is amazing. We can all learn so much from him!

[@michi.m]

Good stuff