Ethical Hacking Job Interview

[@TCMSecurityAcademy]

I hope you enjoyed this video! If so, please consider dropping a like and subscribing.

[@ilikemyself2319]

J p we

[@HappyG1lm0re]

Extremely helpful video. I'm a pentester interviewing for a senior role after not having to interview for like 5 years and have incredible interview anxiety. This guys talking cadence, way of explaining his methodology and overall knowledge are incredibly helpful. Thanks for uploading this and sharing it with everyone in the same boat. Rock on.

[@DaneAaron]

People/soft skills are so key for 'going further' for sure...I'm a programmer by day and CyberSec student by night but my boss said I'll go very far because I'm so well spoken and can break stuff down easily to non-techies. Best of luck to all of you :)

[@pamelaarmstrong3612]

Fabulous video. I am a person who sucks at interviewing. This gives me a baseline as to what a good interview sounds like. When I'm asked questions, I tend to make the answers as short and un-detailed because I am nervous and not sure what things to include. I think this sells my knowledge short. The answers here aren't too long but they are detailed enough to show the interviewee's knowledge. CM thanks again for another stellar video and thanks to Matt for sharing his knowledge. BTW: Derek Rook rocks too!

[@gpppp910]

This is awesome. Hearing someone else’s methodology is always super interesting

[@HQinternet]

Great interview and a good insight into the field. Ive been selling myself short lol. Done basically all he talks about both in labs and IRL engagements, but always considerd myself a rookie n00b. Thanks for the morale boost! for me its confirming Im more senior than I thought.

[@monnombre6547]

what is an IRL engagement?

[@CrackedEmblem]

@@monnombre6547 im guessing "in real life"

[@monnombre6547]

@@CrackedEmblem could be. good guess, didn't even think of that! thnx for the input!

[@s1ked_416]

Definitely means an "in-person" engagement @@monnombre6547 rather than doing them through a lab or something. This could also mean an external pentest, which doesn't necessarily mean you have to be in-person but the fact that you're doing something for someone under contract or some form of agreement that gives consent.

[@s1ked_416]

I'm so glad I looked into this video for a 2nd time, thinking that at one point I wasn't good enough to even pass an interview or anything like this. I just got a scheduled interview for Jr. Pentester with a resume that doesn't even begin to cover what I already know from the PNPT nor the OSCP material, because all it contained was knowledge from back then that was just when I graduated from a cybersecurity bootcamp, and just like another comment I saw through here, I've definitely been selling myself short. Even if I don't get the job, it proves to me that I've been doing something right. Thanks for the content, knowledge, and wisdom on how to become successful in this field. I'm very close to becoming part of a Red Team, considering I've been achieving my career milestones in half the time other ppl have tried to do it along the years. Some ppl take about 6-10 years on avg, from the all the feedback I've been getting through networking, I should be able to achieve in 3-5 years. Thanks again. Cheers!

[@TRAVESIAA]

WOW. I needed this. Great, detailed. Thank you. I can watch this 5 or more times with no problems. Thank you both.

[@monst3rs26]

Great video, I have an interview on Monday and this is absolutely amazing, Taking notes and starting to see the difference between senior and junior, Im hopeing to impress them with some of what was said in this video! keep it up! And thanks Joe for smashing the interview!

[@zabuiz7336]

how was it?

[@monst3rs26]

@@zabuiz7336 well that one flopped, but got a job as a security analyst shortly after, and now I will be starting A new position in an International bank as a pentester, so all worked out! :D

[@surmaiadhikari7249]

@@monst3rs26 that's kinda awesome!

[@Dammmguddd023]

Dude you deserve a million subs man. Great questions. Great content. Thank you.

[@lampmanjosh]

I was finally able to watch this video. Well done, and really enjoyed the insight. I'll definitely be watching again, and taking notes!

[@TCMSecurityAcademy]

Thank you!

[@WatsonInfosec]

TCM thanks, this is very helpful bro!🙏 I am learning a lot just by watching your videos.

[@vincebastier9815]

This interview was great and full of truth, thanks for making it happen

[@BuddyJesus]

You know, another awesome video.

[@karthibalaji3817]

You are doing a great job man!.

[@CarolinaGSH]

Great job Matt!

[@wistechke7249]

men i admire your work and skills am working harder to be greater!

[@sithlord7264]

Im getting ready for my Security + exam. But not sure what book i should read.

[@thomasknudsen6647]

@24:41 is the "sleep" method they are talking about for blind SQL injection in burpsuite the same as time based sql injection that waits a certain amount of time before showing a response? I was wondering if someone could explain a little bit further for someone currently learning the material? i tried google searching such as blind sql injection using sleep, but i wasnt having very clear results. Thanks! im guessing the way to know if the sleep method works is if you send the sql injection, (lets say for 5 minutes), and 5 minutes later a '0' shows up, then that means it is vulnerable to it? am i understanding correctly? what is displayed back to us as a receiving response to know that its working... because i thought blind SQLi means that you are "blind" to see the output responses? how do you know that it actually goes to "sleep" if you arent able to see any feedback?

[@gr4vedigg3r]

Great vids.... Lv them👍🏻

[@bernardphlaxisk6454]

Thank You so much for uploading this. Appreciate it.

[@stgadmin]

I like the Shalom, Shalom at the beginning

[@MarkAkram]

30 is late. What are you talking about ma?!! I am 32 and I have CCNP, CCNA, ITIL, AWS, Azure, PMP & MSC Engineering Management & I don't think I started my IT field yet LOOL

[@matthewbeauregard5057]

You mentioned some called Man in the Middle 6, is that a program or did I just misunderstand? If not, where do I find info on this app, I tried googling it and got nothing?

[@TCMSecurityAcademy]

Mitm6 is what you need to Google:)

[@E_N_K_I]

Can you post that "Matt" guy's info? Like if he has a twitter/youtube/etc, I'd greatly appreciate it! Wouldn't mind following him on social media :)

[@laronlumpkin726]

Thank you for another awesome video! Learned a ton!!

[@thinkingonyx847]

For the sql injection fix question he should have mentioned prepared statements

[@AlexLucard]

Really good video thank you for the information the only concern I have is the guy keeps repeating "you know" I was told by my recruiter not to say that some employers find it incredibly annoying

[@TCMSecurityAcademy]

Likely just a nervous habit. Not only was he interviewing with me, but also in front of 100+ people live. I'd be saying "you know" as well

[@E_N_K_I]

Yes I noticed that as well. I found it somewhat annoying after a while, but considering how HQ, detailed, etc, all his answers were, I didn't/wouldn't mind at all. A lot of people have these kind of habits with the way they talk.

[@karyazin85]

Thank you! Very motivating.

[@shubhamm745]

I have a request, plz make a video to build step by step red team infrastructure lab.. Rastalab has written a blog for it. If you can create using that knowledge, nobody has created this setup video. It will be very helpfull..

[@WtfAnupam]

This level of content ❤️🙏👍

[@midvayner7411]

shalom bratan , when you add Pyhton for hacking on udemy 😭😂

[@TCMSecurityAcademy]

Shalom. Some day! :)

[@mercedesl.3192]

Thank you!

[@theprogrammentor6704]

Hi, I'm following your videos it is really good. Will you do a videos on WiFi testing.

[@TCMSecurityAcademy]

KZbin is iffy about wireless testing. I have those videos in the Udemy course if you're interested. Otherwise, a blog post is a good place to start. It's pretty straight forward.

[@nosietankz8859]

learned a great deal watching this video thanks for this video

[@imsethtwo]

3:14 yeah not anymore. we have people with masters in the field taking entry level jobs thanks to the market

[@gr1zzlymack]

Thank you for this video

[@NimbleSF]

Thanks for this!

[@TCMSecurityAcademy]

My pleasure!

[@robertfling6173]

This video was fantastic.

[@Michal025]

Thanks, very helpful... you know ;)

[@hardwork3196]

thank you for the video, but i would like more ethical educational videos from you, please :)

[@D3rMesaa]

5 days til my first interview 😬

[@Chris-lx2pt]

How'd it go?

[@sithlord7264]

Did you get the job?

[@senaperdiana6434]

How'd go dude

[@soreelements]

You know very informative video, you know

[@notawolf494]

Are there any ethical hacking/similar tech jobs that allow/require global travel?

[@TCMSecurityAcademy]

Yes. Likely easier to land these jobs as not many people want to travel that much. You'll have to look at specific job descriptions to identify them.

[@ShabazDraee]

What does the sleep do exactly ?

[@TCMSecurityAcademy]

The sleep command tells SQL to wait x amount of seconds before executing. You can set a specific amount of time and see how the site responds. Set another time and see if it changes. Good way to confirm injection when blind.

[@Cossaw]

Common ways of bypassing DMZ?

[@ITTamiloffl]

Who is winner of elearnsecurity course

[@johnmcfree6150]

you

[@ITTamiloffl]

@@johnmcfree6150 lol🤪

[@TCMSecurityAcademy]

This was announced like 2 weeks ago on Twitter.....lol

[@ITTamiloffl]

@@TCMSecurityAcademy 😅😅😅

[@andyscott7332]

What is the guests name??

[@hannanjamil1060]

❤

[@souhaiboudiouf3732]

Wich tool was mentioned at 34:41 for MITM attack?

[@omar63945]

mitm6

[@ghisskartadchoo3618]

Salom salom

[@alexsykes4509]

Zack bagans

[@kaorrosi]

6:30,

[@omarsec3178]

Did you say **Shalom***? means Peace be Upon You?

[@masondrip42]

i just wanna get rich

[@Bennymisc]

When you try to jargon talk with an expert. I wouldn't hire him.