What's It Like As A Red Team Operator? (w/ Chris M.)

[@skipinkoreaable]

That handwriting is the writing of a true pen tester.

[@JortsDead]

omg..

[@SagRising19]

Red Team sounds like the route for me..I love solving puzzles, detective work and using my analytical skills. Awesome interview.

[@basbak6105]

Even in mid 2022, this interview is refreshingly relevant and thoughtful - Awesome content, keep it up :)

[@irshadtarsoo7734]

This channel is highly under-rated. It deserves way more subs. Your content is very insightful and helpful❤️💯

[@Cyberspatial]

Appreciate the kind words!

[@sulley58]

Focused for all the 47 minutes of the video, I have to rewind several times to soak myself with the information. 3 years ago but still relevant in 2024, Good content is timeless.

[@germinchan]

theoretically FBI! theoretically OPEN UP!

[@Cyberspatial]

😂

[@OMER3-1-3]

😂😂😂

[@suhailahmed2610]

The way you ask questions is very much appreciated, Your question really clarify all the doubts I never found anyone asking this type of questions in any channel or podcast. Well done.

[@Cyberspatial]

Really appreciate the kind words. Comments like this inspire us to continue what we're doing :)

[@Ka-tiar]

This is soooooooooo good :) Highly value and appreciate your content.

[@Cyberspatial]

thanks!!

[@goranskoc4152]

wtf u talkin about, this is elementary school stuff

[@chocolatedippedroach]

@@goranskoc4152 it's perfect for people who don't know isn't it?

[@forbiddena7915]

Also I would love a video about common cyber security / technical terminology explained and stuff

[@Cyberspatial]

Forbidden A good idea, we’ll take a look at that! Also we are considering using discord, but in the meantime you can always contact us at [e-mail]

[@forbiddena7915]

Thank you 😅

[@markaj_]

focused for all 47 minutes of the video thanks for this!

[@Cyberspatial]

Wow, what a champ! Appreciate it. Thank you :)

[@chrisflyvr]

thank you both. I'm not even a scriptkiddie yet, but learned a truckload of amazing stuff

[@dopple420]

Great 1:1 on being a red team operator. Chris needs to watch Mr. Robot.

[@Cyberspatial]

Thank you!

[@o.b.9781]

This video is theoretically very informational.

[@YoungEli9]

Informal *

[@bluebadgersec]

This is really good. Best "day-in-the-life" type video I've seen.

[@Cyberspatial]

Glad you enjoyed it!

[@scaleonkhan183]

This was a fantastic video, amazing editing

[@lout9231]

incredible interview and great content. Just discovering the world of offsec as a total noob and already into THM and learning python and its all great fun so far

[@Cyberspatial]

Thanks and good luck!

[@Gelimarr]

Currently working as an accountant. I'm working towards my first red team cert eJPT then it's OSCP

[@nerdmommy7114]

Love the food analogy! Awesome dialogue. Hoping for more of these!

[@Cyberspatial]

More to come!

[@jstnlpz8733]

This content is gold. Learned alot.

[@Cyberspatial]

Thank you :)

[@FaLkraydz]

I'm in Blue Team now as incident responder. But I want to move to Red team someday. Question I have is: Do Red Team Operators travel a lot for engagements or is it possible to find remote opportunities or even only local opportunities. I'm asking because I'm a more of a family guy but I really want to become a Red Teamer someday.

[@HM-os6wy]

Thanks for another great video! Career changing from accounting to cybersecurity. Typical reactions I always get is "you're crazy for doing that.." lol. Excited for myself and where I will be in a year.

[@Cyberspatial]

Awesome to hear! Wish you well on your transition :)

[@HM-os6wy]

@@Cyberspatialwow, thanks for replying! This might be a long shot but I'll ask anyways. Can/do you interview women in cybersecurity as well? I just love listening to people's journey especially into this field.

[@Cyberspatial]

@@HM-os6wy I'm doing a quick chat with Heather Mahalik tomorrow.

[@anonymosranger4759]

When did you start programming? I started with C at the age of 7 And python at the age of 7 or 8

[@Cyberspatial]

Awesome to hear!

[@NagarajCruze]

i started at the age of 19 So now, what's your profession/career, right now?

[@ihsan9407]

Bro now what's your job

[@Cyberspatial]

@@ihsan9407 building a start-up :)

[@TheEasternCoder]

Loved your interview and content ❤️❤️. Great content for people who want's to join cybersecurity career path and people who have lack of knowledge about cybersecurity and cybercrime.

[@Cyberspatial]

Thanks for the kind words, Rajat! Make sure to subscribe to our channel for more content like this. 😊

[@SilverCraft15987]

this channel is a life saver!

[@Cyberspatial]

Thank you :)

[@lowlightevangelist9431]

Dude, you have good interviewing skillz!

[@Cyberspatial]

Thanks!

[@j.d.14]

It definitely is more fun to break things! Very insightful!

[@megcos-official]

Love the content!!!

[@Cyberspatial]

Thanks!

[@Fahodinho]

i appreciate the subtitle!

[@Cyberspatial]

Glad you find them helpful!

[@simplified_101]

thats what i call.. " exceptional communication skills "

[@Cyberspatial]

Thank you!

[@koaoi9172]

i need to work on mine

[@matteocapo]

Bro this was very helpful, you've got a new sub!

[@Cyberspatial]

Thanks! Welcome aboard!

[@lowlightevangelist9431]

Love the sewing machine in the background! There is a phenomenal sewing machine museum in Tulsa, Oklahoma on Peoria Ave.

[@Cyberspatial]

Thanks! Symbolizes hard work and attention to detail. Will check it out :)

[@alexanderjimenez1698]

great interview!!

[@lalalostyou6858]

Thank you so much for these videos!

[@Cyberspatial]

bubbly asmr thanks for the support!

[@IntricateMoon]

OMG thank you for this!!

[@andreystepovoy]

Dude, you'r awesome! Keep it up! Quality content!

[@Cyberspatial]

Will do! Thanks :)

[@TheMeltzz]

Very good interview with informaiton, been wanting to transit to cyber securities field but totally clueless.

[@Cyberspatial]

Thank you! Hope this video helps :)

[@iainbatchelar3470]

23:29 The way that Wi-fi works is that it connects to the strongest signal. That's fine, but do you not need the password for the original Wi-Fi to conduct the Man-in-the-middle attack? the man-in-the-middle usually would mean that you would connect to they're wi-fi so that you can forward the traffic through it? but would the device connecting already send the key and you would effectively get the password that way also???

[@Cyberspatial]

You're spoofing a fake access point. Don't need to access the original to MiTM a victim going through your AP.

[@imuser007]

Im love ur channel bcz of video quality and content 😻

[@Cyberspatial]

We appreciate it. Thank you.

[@GirishVenkatachalam]

Great interview.

[@moussambmohamedoussein4934]

So we who have master's degree are doomed if we don't have cert?

[@reynaldo7371]

38:32 that's a motivation right there, thank you for this great content!

[@Cyberspatial]

Level Up!

[@NagarajCruze]

hey, for eg. he worked for a month and reported there aren't any vulnerabilities and he got paid his salary. but if somehow someone is hacked into the company and stole data. now won't the company question him like why didn't you reported about this vulnerability and what you tested last month, like?

[@Cyberspatial]

In that scenario, the burden of fault isn't fully on the red teamer. There's a lot more people that would be on the chopping block first. More often than not, the company doesn't do anything about the vulnerabilities that do get reported. That's why they get hacked. Companies that are very proactive with a good red team tend to be quite successful.

[@NagarajCruze]

@@Cyberspatial Gottcha!!!

[@moussambmohamedoussein4934]

Can someone state the certifications he mentionner ?

[@Smashhackisma]

Good interview

[@spirit.canada]

The real challenge for new people to get in to the industry is that there is a huge lack of hands on training and way too much focus on theory and certs. I am trying to break thorough that and I am finding it very difficult . I feel the certs I gain are a true waste of time especially when we need to renew them as well.

[@moe42937]

getting into bug bounty will help a lot keep in your mind RT focusing on attacking the system and exploiting the vulnerability and bug bounty is best a way to get your hand dirty on real world attack I know many people who become pentester , red teamer etc.. with only bug bounty background , good luck with your journey

[@cirtey29]

God job; good questions and interesting answers.

[@Cyberspatial]

Thank you for watching!

[@helloqasim]

How do you become one or get an interview for this

[@Cyberspatial]

We invite guests to share their experiences.

[@FaLkraydz]

Awesome, Awesome, Awesome content! Simple and deep at the same time. I thought C|EH was an advanced cert, but now I know it's not as advanced as I thought.

[@Cyberspatial]

Shoot for your OSCE!

[@FaLkraydz]

@@Cyberspatial Still a little bit far. I'm only a support technician, but I have a Sec+ scheduled for next week. I'll take eJPT and PNPT next year, not sure if I should try to pivot to Network admin or sysadmin before trying to become a pentester. But I'll shoot for OSCP after having my eJPT and PNPT.

[@bennyespinal3747]

How do you feel about Project Ares ??? Do you think its worth it

[@Cyberspatial]

It's flashy. Might be worth a shot but there's cheaper alternatives like HackTheBox or TryHackMe.

[@Nadzinator]

Very informative, well done!

[@Cyberspatial]

Thank you!

[@HandTheFull]

Thank you

[@_mythospheric7684]

Absolutely amazing content 👍

[@Cyberspatial]

Thank you 🙌

[@izzy3155]

exceptional content

[@Cyberspatial]

Thank you :)

[@koaoi9172]

nice man enjoyed myself also learned some stuff

[@Cyberspatial]

Glad to hear!

[@burhanxd5659]

Awesome talk!

[@Cyberspatial]

Appreciate your time and attention!

[@pankajbhadane]

Very helpful

[@Cyberspatial]

Glad you think so!

[@riastr0]

Awesome interview! Is it possible for someone to enter cybersecurity through the self taught route? A brick and mortar school isn't my thing.

[@Cyberspatial]

For sure! Self-taught is normally the best way to become skilled in this field

[@shhs1227]

9 months down the line. But if you didn't know some employers hire directly from hackthebox

[@riastr0]

@@shhs1227 Not too late! Thanks for the info!

[@NeoCrypt01]

Thanks very helpful 👍

[@Cyberspatial]

Glad it helped :)

[@ilikeadventures629]

good job 👍 keep up the good work

[@Cyberspatial]

Thanks, will do!

[@NightCityHalo]

Red Team sounds fun.

[@peaceamb.odokune.harunaaka2381]

Wow great session

[@Cyberspatial]

Thank you!

[@superpowerforhire]

Is he a Filipino-American?

[@Cyberspatial]

No, he's not.

[@bamboozle6359]

This was amazing, many thanks! 1st programming I learned was Basic back in the 80's on a Radio Shack TRS80 or trash80 as we called it LULZ!

[@Cyberspatial]

You're welcome! I think BASIC was a lot of people's first language! Is Radio Shack still in business nowadays?

[@Vamp7814]

Good info.

[@Cyberspatial]

Glad you think so!

[@david004alpha]

Just beautiful

[@Real-Name..Maqavoy]

Great vid - But some of the comments... -.-

[@morphman86]

I am going to press X to doubt on that bank story. No major bank would have that vulnerability, without there being some serious legal issues. Even in the earliest days of browsers, there were ways to secure against that type of things, and banks have always used archaic infrastructure for the sole reason that those are easier to lock down. We're talking languages that are so old, that only a handful of people in the world still knows how to use them. And considering that I cannot find any articles about a flaw that massive, I am assuming Chris is talking about the old breakroom myth that is shared among hackers, that back in the 90's. You know, one of those "industry secrets" that some inspirational speaker or older coworker talks about from their own life story, but turns out to be something they had picked up from someone else, who picked it up from someone else, who just plainly lied about it because it sounded plausible. And because of that, I can't take anything else he talks about here seriously. It all just sounds like he's padding his own reputation, because nobody will be able to verify it anyway. So a pro tip is that if you're going to lie about your resume, make sure there's no verifiable information there.

[@dopple420]

As a dude who worked for the government. Major flaws are often covered up. As time goes on we become sophisticated, so don't be a victim to hindsight bias. Unless you believe a virgin can have child without penetration.

[@morphman86]

@@dopple420 Oh, yes, I know that. But as a developer myself, I also know these systems. I am very familiar with the systems that have been used as far back as the 70's. And I can tell you right now that no bank in America, EU or Australia has ever used a system with that kind of insecurity. It just wouldn't happen. You may get many websites with that insecurity, especially back in the day, but no banking system. Which is why most banking systems still run software from the 70's and 80's.

[@b3twiise853]

@@morphman86 Lol why do we need pentesters? Not questioning your experience or views but there are silly bugs out there.

[@morphman86]

@@b3twiise853 pentesters are the forefront of security, the guardians of your personal information. They collect all those silly bugs and make sure the business' server hasn't been affected by them.

[@Cyberspatial]

Truth is stranger than fiction. Even trillion-dollar companies in the 21st century still make mistakes. arstechnica.com/information-technology/2017/11/macos-bug-lets-you-log-in-as-admin-with-no-password-required/

[@InvalidPersistentName]

Beautiful

[@Cyberspatial]

Thanks!

[@jeevansi9332]

I'm took B. Sc (forensic science)(cyber security and data analytics), I have one doubt, eitherforensic science means cyber forensic or actual forensic,

[@Cyberspatial]

Learning cyber forensics can probably fund your hobbies better. No reason why you can't learn actual forensics in your free time.

[@unholy7324]

Sorry I'm late! Thanks for waiting for me! Ps you started off awkward af but finished strong. +1 sub +1 ding

[@Cyberspatial]

Haha very first interview always awkward.

[@alphac0d3r3d3]

"type thing" -Chris M.

[@ludokerfluffle6232]

Who is blue team?

[@Cyberspatial]

People who defend. Check out the SOC Lead interview! 👉 kzbin.info/www/bejne/a6CqgoGraah9gpo

[@TomCrockett-bl1gp]

Theoretically anyone watching this video is now on a FBI hacker list.😂

[@arzoo_singh]

Do you need to be great with you're handwriting to become master Red Team. Well I have handwriting which needs it's own analysis like Malware analysis,if you really want to understand it .

[@Cyberspatial]

No, it's definitely not required to be a master. ☺️

[@musclekitchen3705]

Just watched this was absolutely inspiring has that guy got any content out you could learn from or follow him his a mystery lol

[@Cyberspatial]

Chris had requested the title redaction shortly after uploading. Quiet professionals like to keep low profiles.

[@moneymac1114]

I see that sacred geometry in the back 👀 tryna decode the universe ?

[@CosmicGiggleMusic]

Someone please tell this guy about the word “hypothetical”

[@Cyberspatial]

I'm sure he knows what it means. Humor comes in different forms.

[@73dines]

This man is the real Eliot Alderson.

[@Cyberspatial]

There's many out there.

[@Vintoriez]

Do not cheat with the Secretary!

[@MrOddHell]

I hacked modems...

[@myrusEW]

So...this vulnerability exists...and you don't report it. So...potentially you're finding out that this is a horrible security vulnerability and others could be stealing information same as you, while you do nothing about it until you've done as much damage as possible(which other attackers could be doing)? Nice! Love keeping an insecure system insecure as long as possible.

[@Cyberspatial]

You report after you dig deeper to find the extent of its impact. This intel is valuable to find more potential vulnerabilities that you wouldn't have found otherwise.

[@TerryJulianLive]

You would have waaay more subs if you created content regarding career changers. So much of your content is geared toward "pc lover since i was 9" type of crowd. Well thats all fun and dandy but thats now where all views are.

[@Cyberspatial]

Thanks for the input. At some point, the career changers want to get insights from the "pc lover" crowd too!

[@tammygreen9273]

Is this an IA or is it just meee

[@myname-mz3lo]

"im a white hat right now..." emmmm what about later???

[@steveclouds]

Is this guy the not so Civil Engineer?

[@GenerallyGoodMusic]

Nice! I finally got the 1000th like on a video. The downside is the total of comments is 69, and I'm going to ruin it.

[@Cyberspatial]

Legend!

[@shreerammallick5434]

wow

[@Cyberspatial]

Thanks!

[@MrXenon-hn7ju]

interviewer needs to write these questions down before hand. He is a bit awkward.

[@MrOddHell]

What the fuck kind of bank did this? What country?

[@bjaMoke]

PS that's called calligraphy- intentionally stylized handwriting.

[@recon0x7f16]

SOF

[@Z3TA-eo2mh]

I am certain this is AI... a quick Google search and a bit of OSINT shows this guy as an absolute ghost, lol his image doesn't even show up... 😂

[@An-fi8is]

I'm evil and I love it!

[@Cyberspatial]

Evil in a good way.

[@Papercut625]

That into was jarring as fuck. The video just opens on a random sequence sentences. I almost didn't watch the video.

[@Cyberspatial]

Glad you did though :)

[@root3434]

This guy is paranoid. Always has to insert a “theoretically” somewhere in what he says. No one cares dude. Just fucking say you’re a HACKER! it’s a common job.

[@badboy1028]

What’s a red team operator?? Lol

[@stewiepid4385]

Too much of your face.

[@hmain6753]

Wtf. Your own digital security? How about dont use gmail. Lmfao 42:00

[@Cyberspatial]

Gmail has great security. Don't know what you're laughing at.

[@hmain6753]

@@Cyberspatial gmail has zero security from google.

[@Dannyd2134]

@@hmain6753 Are you sure? So what do you suggest as a better provider for email?

[@quietpillsdispensedondeman5189]

"operator"? Lmfao , woohoo buckle up here comes the cringe. I'm guessing "the life" is all about bitches wanting him, dudes wanting to be him, and how he thinks everyone sees him as some kinda james bond computer hacker agent..... Theoretically ..

[@quietpillsdispensedondeman5189]

@O B wring, red team ops is the term and its for operations not operator like theyre special forces soldiers, lol. the certification youre talking about is not well respected, its entry level ( quick google will tell you ) and buzz word cert for noobs that think its cool

[@quietpillsdispensedondeman5189]

@O B your reading comprehension is poor.