What's It Like As A Red Team Operator? (w/ Chris M.)

[@skipinkoreaable]

That handwriting is the writing of a true pen tester.

[@JortsDead]

omg..

[@SagRising19]

Red Team sounds like the route for me..I love solving puzzles, detective work and using my analytical skills. Awesome interview.

[@basbak6105]

Even in mid 2022, this interview is refreshingly relevant and thoughtful - Awesome content, keep it up :)

[@Ka-tiar]

This is soooooooooo good :) Highly value and appreciate your content.

[@Cyberspatial]

thanks!!

[@goranskoc4152]

wtf u talkin about, this is elementary school stuff

[@chocolatedippedroach]

@@goranskoc4152 it's perfect for people who don't know isn't it?

[@irshadtarsoo7734]

This channel is highly under-rated. It deserves way more subs. Your content is very insightful and helpful❤️💯

[@Cyberspatial]

Appreciate the kind words!

[@suhailahmed2610]

The way you ask questions is very much appreciated, Your question really clarify all the doubts I never found anyone asking this type of questions in any channel or podcast. Well done.

[@Cyberspatial]

Really appreciate the kind words. Comments like this inspire us to continue what we're doing :)

[@germinchan]

theoretically FBI! theoretically OPEN UP!

[@Cyberspatial]

😂

[@OMER3-1-3]

😂😂😂

[@sulley58]

Focused for all the 47 minutes of the video, I have to rewind several times to soak myself with the information. 3 years ago but still relevant in 2024, Good content is timeless.

[@chrisflyvr]

thank you both. I'm not even a scriptkiddie yet, but learned a truckload of amazing stuff

[@forbiddena7915]

Also I would love a video about common cyber security / technical terminology explained and stuff

[@Cyberspatial]

Forbidden A good idea, we’ll take a look at that! Also we are considering using discord, but in the meantime you can always contact us at [e-mail]

[@forbiddena7915]

Thank you 😅

[@markaj_]

focused for all 47 minutes of the video thanks for this!

[@Cyberspatial]

Wow, what a champ! Appreciate it. Thank you :)

[@scaleonkhan183]

This was a fantastic video, amazing editing

[@jstnlpz8733]

This content is gold. Learned alot.

[@Cyberspatial]

Thank you :)

[@dopple420]

Great 1:1 on being a red team operator. Chris needs to watch Mr. Robot.

[@Cyberspatial]

Thank you!

[@o.b.9781]

This video is theoretically very informational.

[@YoungEli9]

Informal *

[@johnthomas2970]

28:05 - thanks to our sponsor , Brilliant!

[@HM-os6wy]

Thanks for another great video! Career changing from accounting to cybersecurity. Typical reactions I always get is "you're crazy for doing that.." lol. Excited for myself and where I will be in a year.

[@Cyberspatial]

Awesome to hear! Wish you well on your transition :)

[@HM-os6wy]

@@Cyberspatialwow, thanks for replying! This might be a long shot but I'll ask anyways. Can/do you interview women in cybersecurity as well? I just love listening to people's journey especially into this field.

[@Cyberspatial]

@@HM-os6wy I'm doing a quick chat with Heather Mahalik tomorrow.

[@lout9231]

incredible interview and great content. Just discovering the world of offsec as a total noob and already into THM and learning python and its all great fun so far

[@Cyberspatial]

Thanks and good luck!

[@megcos-official]

Love the content!!!

[@Cyberspatial]

Thanks!

[@bluebadgersec]

This is really good. Best "day-in-the-life" type video I've seen.

[@Cyberspatial]

Glad you enjoyed it!

[@lalalostyou6858]

Thank you so much for these videos!

[@Cyberspatial]

bubbly asmr thanks for the support!

[@SilverCraft15987]

this channel is a life saver!

[@Cyberspatial]

Thank you :)

[@TheEasternCoder]

Loved your interview and content ❤️❤️. Great content for people who want's to join cybersecurity career path and people who have lack of knowledge about cybersecurity and cybercrime.

[@Cyberspatial]

Thanks for the kind words, Rajat! Make sure to subscribe to our channel for more content like this. 😊

[@nerdmommy7114]

Love the food analogy! Awesome dialogue. Hoping for more of these!

[@Cyberspatial]

More to come!

[@anonymosranger4759]

When did you start programming? I started with C at the age of 7 And python at the age of 7 or 8

[@Cyberspatial]

Awesome to hear!

[@NagarajCruze]

i started at the age of 19 So now, what's your profession/career, right now?

[@ihsan9407]

Bro now what's your job

[@Cyberspatial]

@@ihsan9407 building a start-up :)

[@IntricateMoon]

OMG thank you for this!!

[@j.d.14]

It definitely is more fun to break things! Very insightful!

[@imuser007]

Im love ur channel bcz of video quality and content 😻

[@Cyberspatial]

We appreciate it. Thank you.

[@matteocapo]

Bro this was very helpful, you've got a new sub!

[@Cyberspatial]

Thanks! Welcome aboard!

[@alexanderjimenez1698]

great interview!!

[@Gelimarr]

Currently working as an accountant. I'm working towards my first red team cert eJPT then it's OSCP

[@reynaldo7371]

38:32 that's a motivation right there, thank you for this great content!

[@Cyberspatial]

Level Up!

[@Fahodinho]

i appreciate the subtitle!

[@Cyberspatial]

Glad you find them helpful!

[@GirishVenkatachalam]

Great interview.

[@lowlightevangelist9431]

Dude, you have good interviewing skillz!

[@Cyberspatial]

Thanks!

[@andreystepovoy]

Dude, you'r awesome! Keep it up! Quality content!

[@Cyberspatial]

Will do! Thanks :)

[@HandTheFull]

Thank you

[@_mythospheric7684]

Absolutely amazing content 👍

[@Cyberspatial]

Thank you 🙌

[@NeoCrypt01]

Thanks very helpful 👍

[@Cyberspatial]

Glad it helped :)

[@iainbatchelar3470]

23:29 The way that Wi-fi works is that it connects to the strongest signal. That's fine, but do you not need the password for the original Wi-Fi to conduct the Man-in-the-middle attack? the man-in-the-middle usually would mean that you would connect to they're wi-fi so that you can forward the traffic through it? but would the device connecting already send the key and you would effectively get the password that way also???

[@Cyberspatial]

You're spoofing a fake access point. Don't need to access the original to MiTM a victim going through your AP.

[@FaLkraydz]

I'm in Blue Team now as incident responder. But I want to move to Red team someday. Question I have is: Do Red Team Operators travel a lot for engagements or is it possible to find remote opportunities or even only local opportunities. I'm asking because I'm a more of a family guy but I really want to become a Red Teamer someday.

[@cirtey29]

God job; good questions and interesting answers.

[@Cyberspatial]

Thank you for watching!

[@simplified_101]

thats what i call.. " exceptional communication skills "

[@Cyberspatial]

Thank you!

[@koaoi9172]

i need to work on mine

[@Nadzinator]

Very informative, well done!

[@Cyberspatial]

Thank you!

[@pankajbhadane]

Very helpful

[@Cyberspatial]

Glad you think so!

[@Smashhackisma]

Good interview

[@lowlightevangelist9431]

Love the sewing machine in the background! There is a phenomenal sewing machine museum in Tulsa, Oklahoma on Peoria Ave.

[@Cyberspatial]

Thanks! Symbolizes hard work and attention to detail. Will check it out :)

[@izzy3155]

exceptional content

[@Cyberspatial]

Thank you :)

[@ilikeadventures629]

good job 👍 keep up the good work

[@Cyberspatial]

Thanks, will do!

[@TheMeltzz]

Very good interview with informaiton, been wanting to transit to cyber securities field but totally clueless.

[@Cyberspatial]

Thank you! Hope this video helps :)

[@burhanxd5659]

Awesome talk!

[@Cyberspatial]

Appreciate your time and attention!

[@peaceamb.odokune.harunaaka2381]

Wow great session

[@Cyberspatial]

Thank you!

[@Vamp7814]

Good info.

[@Cyberspatial]

Glad you think so!

[@koaoi9172]

nice man enjoyed myself also learned some stuff

[@Cyberspatial]

Glad to hear!

[@helloqasim]

How do you become one or get an interview for this

[@Cyberspatial]

We invite guests to share their experiences.

[@InvalidPersistentName]

Beautiful

[@Cyberspatial]

Thanks!

[@david004alpha]

Just beautiful

[@FaLkraydz]

Awesome, Awesome, Awesome content! Simple and deep at the same time. I thought C|EH was an advanced cert, but now I know it's not as advanced as I thought.

[@Cyberspatial]

Shoot for your OSCE!

[@FaLkraydz]

@@Cyberspatial Still a little bit far. I'm only a support technician, but I have a Sec+ scheduled for next week. I'll take eJPT and PNPT next year, not sure if I should try to pivot to Network admin or sysadmin before trying to become a pentester. But I'll shoot for OSCP after having my eJPT and PNPT.

[@bennyespinal3747]

How do you feel about Project Ares ??? Do you think its worth it

[@Cyberspatial]

It's flashy. Might be worth a shot but there's cheaper alternatives like HackTheBox or TryHackMe.

[@bamboozle6359]

This was amazing, many thanks! 1st programming I learned was Basic back in the 80's on a Radio Shack TRS80 or trash80 as we called it LULZ!

[@Cyberspatial]

You're welcome! I think BASIC was a lot of people's first language! Is Radio Shack still in business nowadays?

[@moussambmohamedoussein4934]

So we who have master's degree are doomed if we don't have cert?

[@spirit.canada]

The real challenge for new people to get in to the industry is that there is a huge lack of hands on training and way too much focus on theory and certs. I am trying to break thorough that and I am finding it very difficult . I feel the certs I gain are a true waste of time especially when we need to renew them as well.

[@moe42937]

getting into bug bounty will help a lot keep in your mind RT focusing on attacking the system and exploiting the vulnerability and bug bounty is best a way to get your hand dirty on real world attack I know many people who become pentester , red teamer etc.. with only bug bounty background , good luck with your journey

[@moussambmohamedoussein4934]

Can someone state the certifications he mentionner ?

[@NagarajCruze]

hey, for eg. he worked for a month and reported there aren't any vulnerabilities and he got paid his salary. but if somehow someone is hacked into the company and stole data. now won't the company question him like why didn't you reported about this vulnerability and what you tested last month, like?

[@Cyberspatial]

In that scenario, the burden of fault isn't fully on the red teamer. There's a lot more people that would be on the chopping block first. More often than not, the company doesn't do anything about the vulnerabilities that do get reported. That's why they get hacked. Companies that are very proactive with a good red team tend to be quite successful.

[@NagarajCruze]

@@Cyberspatial Gottcha!!!

[@riastr0]

Awesome interview! Is it possible for someone to enter cybersecurity through the self taught route? A brick and mortar school isn't my thing.

[@Cyberspatial]

For sure! Self-taught is normally the best way to become skilled in this field

[@shhs1227]

9 months down the line. But if you didn't know some employers hire directly from hackthebox

[@riastr0]

@@shhs1227 Not too late! Thanks for the info!

[@unholy7324]

Sorry I'm late! Thanks for waiting for me! Ps you started off awkward af but finished strong. +1 sub +1 ding

[@Cyberspatial]

Haha very first interview always awkward.

[@superpowerforhire]

Is he a Filipino-American?

[@Cyberspatial]

No, he's not.

[@NightCityHalo]

Red Team sounds fun.

[@TomCrockett-bl1gp]

Theoretically anyone watching this video is now on a FBI hacker list.😂

[@Real-Name..Maqavoy]

Great vid - But some of the comments... -.-

[@morphman86]

I am going to press X to doubt on that bank story. No major bank would have that vulnerability, without there being some serious legal issues. Even in the earliest days of browsers, there were ways to secure against that type of things, and banks have always used archaic infrastructure for the sole reason that those are easier to lock down. We're talking languages that are so old, that only a handful of people in the world still knows how to use them. And considering that I cannot find any articles about a flaw that massive, I am assuming Chris is talking about the old breakroom myth that is shared among hackers, that back in the 90's. You know, one of those "industry secrets" that some inspirational speaker or older coworker talks about from their own life story, but turns out to be something they had picked up from someone else, who picked it up from someone else, who just plainly lied about it because it sounded plausible. And because of that, I can't take anything else he talks about here seriously. It all just sounds like he's padding his own reputation, because nobody will be able to verify it anyway. So a pro tip is that if you're going to lie about your resume, make sure there's no verifiable information there.

[@dopple420]

As a dude who worked for the government. Major flaws are often covered up. As time goes on we become sophisticated, so don't be a victim to hindsight bias. Unless you believe a virgin can have child without penetration.

[@morphman86]

@@dopple420 Oh, yes, I know that. But as a developer myself, I also know these systems. I am very familiar with the systems that have been used as far back as the 70's. And I can tell you right now that no bank in America, EU or Australia has ever used a system with that kind of insecurity. It just wouldn't happen. You may get many websites with that insecurity, especially back in the day, but no banking system. Which is why most banking systems still run software from the 70's and 80's.

[@b3twiise853]

@@morphman86 Lol why do we need pentesters? Not questioning your experience or views but there are silly bugs out there.

[@morphman86]

@@b3twiise853 pentesters are the forefront of security, the guardians of your personal information. They collect all those silly bugs and make sure the business' server hasn't been affected by them.

[@Cyberspatial]

Truth is stranger than fiction. Even trillion-dollar companies in the 21st century still make mistakes. arstechnica.com/information-technology/2017/11/macos-bug-lets-you-log-in-as-admin-with-no-password-required/

[@i_ibadhabib]

❤❤❤❤

[@alphac0d3r3d3]

"type thing" -Chris M.

[@ludokerfluffle6232]

Who is blue team?

[@Cyberspatial]

People who defend. Check out the SOC Lead interview! 👉 kzbin.info/www/bejne/a6CqgoGraah9gpo

[@moneymac1114]

I see that sacred geometry in the back 👀 tryna decode the universe ?

[@musclekitchen3705]

Just watched this was absolutely inspiring has that guy got any content out you could learn from or follow him his a mystery lol

[@Cyberspatial]

Chris had requested the title redaction shortly after uploading. Quiet professionals like to keep low profiles.

[@jeevansi9332]

I'm took B. Sc (forensic science)(cyber security and data analytics), I have one doubt, eitherforensic science means cyber forensic or actual forensic,

[@Cyberspatial]

Learning cyber forensics can probably fund your hobbies better. No reason why you can't learn actual forensics in your free time.

[@arzoo_singh]

Do you need to be great with you're handwriting to become master Red Team. Well I have handwriting which needs it's own analysis like Malware analysis,if you really want to understand it .

[@Cyberspatial]

No, it's definitely not required to be a master. ☺️

[@shreerammallick5434]

wow

[@Cyberspatial]

Thanks!

[@73dines]

This man is the real Eliot Alderson.

[@Cyberspatial]

There's many out there.

[@TerryJulianLive]

You would have waaay more subs if you created content regarding career changers. So much of your content is geared toward "pc lover since i was 9" type of crowd. Well thats all fun and dandy but thats now where all views are.

[@Cyberspatial]

Thanks for the input. At some point, the career changers want to get insights from the "pc lover" crowd too!

[@GenerallyGoodMusic]

Nice! I finally got the 1000th like on a video. The downside is the total of comments is 69, and I'm going to ruin it.

[@Cyberspatial]

Legend!

[@tammygreen9273]

Is this an IA or is it just meee

[@CosmicGiggleMusic]

Someone please tell this guy about the word “hypothetical”

[@Cyberspatial]

I'm sure he knows what it means. Humor comes in different forms.

[@MrOddHell]

I hacked modems...

[@Vintoriez]

Do not cheat with the Secretary!

[@myrusEW]

So...this vulnerability exists...and you don't report it. So...potentially you're finding out that this is a horrible security vulnerability and others could be stealing information same as you, while you do nothing about it until you've done as much damage as possible(which other attackers could be doing)? Nice! Love keeping an insecure system insecure as long as possible.

[@Cyberspatial]

You report after you dig deeper to find the extent of its impact. This intel is valuable to find more potential vulnerabilities that you wouldn't have found otherwise.

[@myname-mz3lo]

"im a white hat right now..." emmmm what about later???

[@MrOddHell]

What the fuck kind of bank did this? What country?

[@steveclouds]

Is this guy the not so Civil Engineer?

[@MrXenon-hn7ju]

interviewer needs to write these questions down before hand. He is a bit awkward.

[@recon0x7f16]

SOF

[@Z3TA-eo2mh]

I am certain this is AI... a quick Google search and a bit of OSINT shows this guy as an absolute ghost, lol his image doesn't even show up... 😂

[@bjaMoke]

PS that's called calligraphy- intentionally stylized handwriting.

[@Papercut625]

That into was jarring as fuck. The video just opens on a random sequence sentences. I almost didn't watch the video.

[@Cyberspatial]

Glad you did though :)

[@badboy1028]

What’s a red team operator?? Lol

[@An-fi8is]

I'm evil and I love it!

[@Cyberspatial]

Evil in a good way.

[@hmain6753]

Wtf. Your own digital security? How about dont use gmail. Lmfao 42:00

[@Cyberspatial]

Gmail has great security. Don't know what you're laughing at.

[@hmain6753]

@@Cyberspatial gmail has zero security from google.

[@Dannyd2134]

@@hmain6753 Are you sure? So what do you suggest as a better provider for email?

[@root3434]

This guy is paranoid. Always has to insert a “theoretically” somewhere in what he says. No one cares dude. Just fucking say you’re a HACKER! it’s a common job.

[@stewiepid4385]

Too much of your face.