Ethical Hacking Job Interview

Поделиться
HTML-код
  • Опубликовано: 19 ноя 2019
  • Get my:
    25 hour Practical Ethical Hacking Course: www.udemy.com/course/practica...
    Windows Privilege Escalation for Beginners Course: www.udemy.com/course/windows-...
    ❓Info❓
    ___________________________________________
    Need a Pentest?: tcm-sec.com
    Learn to Hack: academy.tcm-sec.com
    🔹The Cyber Mentor Merch🔹
    ___________________________________________
    teespring.com/stores/the-cybe...
    📱Social Media📱
    ___________________________________________
    Website: thecybermentor.com
    Twitter: / thecybermentor
    Twitch: / thecybermentor
    Discord: tcm-sec.com/discord
    LinkedIn: / heathadams
    💸Donate💸
    ___
    Like the channel? Please consider supporting me on Patreon:
    / thecybermentor
    Support the stream (one-time): streamlabs.com/thecybermentor
    Hacker Books:
    Penetration Testing: A Hands-On Introduction to Hacking: amzn.to/31GN7iX
    The Hacker Playbook 3: amzn.to/34XkIY2
    Hacking: The Art of Exploitation: amzn.to/2VchDyL
    The Web Application Hacker's Handbook: amzn.to/30Fj21S
    Real-World Bug Hunting: A Field Guide to Web Hacking: amzn.to/2V9srOe
    Social Engineering: The Science of Human Hacking: amzn.to/31HAmVx
    Linux Basics for Hackers: amzn.to/34WvcXP
    Python Crash Course, 2nd Edition: amzn.to/30gINu0
    Violent Python: amzn.to/2QoGoJn
    Black Hat Python: amzn.to/2V9GpQk
    My Build:
    lg 32gk850g-b 32" Gaming Monitor:amzn.to/30C0qzV
    darkFlash Phantom Black ATX Mid-Tower Case: amzn.to/30d1UW1
    EVGA 2080TI: amzn.to/30d2lj7
    MSI Z390 MotherBoard: amzn.to/30eu5TL
    Intel 9700K: amzn.to/2M7hM2p
    G.SKILL 32GB DDR4 RAM: amzn.to/2M638Zb
    Razer Nommo Chroma Speakers: amzn.to/30bWjiK
    Razer BlackWidow Chroma Keyboard: amzn.to/2V7A0or
    CORSAIR Pro RBG Gaming Mouse: amzn.to/30hvg4P
    Sennheiser RS 175 RF Wireless Headphones: amzn.to/31MOgpu
    My Recording Equipment:
    Panasonic G85 4K Camera: amzn.to/2Mk9vsf
    Logitech C922x Pro Webcam: amzn.to/2LIRxAp
    Aston Origin Microphone: amzn.to/2LFtNNE
    Rode VideoMicro: amzn.to/309yLKH
    Mackie PROFX8V2 Mixer: amzn.to/31HKOMB
    Elgato Cam Link 4K: amzn.to/2QlicYx
    Elgate Stream Deck: amzn.to/2OlchA5
    *We are a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for us to earn fees by linking to Amazon.com and affiliated sites.
  • НаукаНаука

Комментарии • 80

  • @TCMSecurityAcademy
    @TCMSecurityAcademy  3 года назад +9

    I hope you enjoyed this video! If so, please consider dropping a like and subscribing.

  • @DaneAaron
    @DaneAaron 4 года назад +9

    People/soft skills are so key for 'going further' for sure...I'm a programmer by day and CyberSec student by night but my boss said I'll go very far because I'm so well spoken and can break stuff down easily to non-techies. Best of luck to all of you :)

  • @gpppp910
    @gpppp910 4 года назад +20

    This is awesome. Hearing someone else’s methodology is always super interesting

  • @TRAVESIAA
    @TRAVESIAA 4 года назад +4

    WOW. I needed this. Great, detailed. Thank you. I can watch this 5 or more times with no problems. Thank you both.

  • @pamelaarmstrong3612
    @pamelaarmstrong3612 4 года назад +11

    Fabulous video. I am a person who sucks at interviewing. This gives me a baseline as to what a good interview sounds like. When I'm asked questions, I tend to make the answers as short and un-detailed because I am nervous and not sure what things to include. I think this sells my knowledge short. The answers here aren't too long but they are detailed enough to show the interviewee's knowledge. CM thanks again for another stellar video and thanks to Matt for sharing his knowledge. BTW: Derek Rook rocks too!

  • @s1ked_416
    @s1ked_416 5 месяцев назад

    I'm so glad I looked into this video for a 2nd time, thinking that at one point I wasn't good enough to even pass an interview or anything like this. I just got a scheduled interview for Jr. Pentester with a resume that doesn't even begin to cover what I already know from the PNPT nor the OSCP material, because all it contained was knowledge from back then that was just when I graduated from a cybersecurity bootcamp, and just like another comment I saw through here, I've definitely been selling myself short. Even if I don't get the job, it proves to me that I've been doing something right. Thanks for the content, knowledge, and wisdom on how to become successful in this field. I'm very close to becoming part of a Red Team, considering I've been achieving my career milestones in half the time other ppl have tried to do it along the years. Some ppl take about 6-10 years on avg, from the all the feedback I've been getting through networking, I should be able to achieve in 3-5 years. Thanks again. Cheers!

  • @lampmanjosh
    @lampmanjosh 4 года назад +5

    I was finally able to watch this video. Well done, and really enjoyed the insight. I'll definitely be watching again, and taking notes!

  • @HQinternet
    @HQinternet 4 года назад +14

    Great interview and a good insight into the field. Ive been selling myself short lol. Done basically all he talks about both in labs and IRL engagements, but always considerd myself a rookie n00b. Thanks for the morale boost! for me its confirming Im more senior than I thought.

    • @monnombre6547
      @monnombre6547 4 года назад +1

      what is an IRL engagement?

    • @CrackedEmblem
      @CrackedEmblem 4 года назад +1

      @@monnombre6547 im guessing "in real life"

    • @monnombre6547
      @monnombre6547 4 года назад +1

      @@CrackedEmblem could be. good guess, didn't even think of that! thnx for the input!

    • @s1ked_416
      @s1ked_416 5 месяцев назад

      Definitely means an "in-person" engagement @@monnombre6547 rather than doing them through a lab or something. This could also mean an external pentest, which doesn't necessarily mean you have to be in-person but the fact that you're doing something for someone under contract or some form of agreement that gives consent.

  • @WatsonInfosec
    @WatsonInfosec 4 года назад +6

    TCM thanks, this is very helpful bro!🙏 I am learning a lot just by watching your videos.

  • @Learnitall001
    @Learnitall001 4 года назад +6

    Dude you deserve a million subs man. Great questions. Great content. Thank you.

  • @karthibalaji3817
    @karthibalaji3817 4 года назад +2

    You are doing a great job man!.

  • @CarolinaGSH
    @CarolinaGSH 4 года назад +3

    Great job Matt!

  • @monst3rs26
    @monst3rs26 3 года назад +3

    Great video, I have an interview on Monday and this is absolutely amazing, Taking notes and starting to see the difference between senior and junior, Im hopeing to impress them with some of what was said in this video! keep it up! And thanks Joe for smashing the interview!

    • @zabuiz7336
      @zabuiz7336 2 года назад

      how was it?

    • @monst3rs26
      @monst3rs26 2 года назад +7

      @@zabuiz7336 well that one flopped, but got a job as a security analyst shortly after, and now I will be starting A new position in an International bank as a pentester, so all worked out! :D

    • @surmaiadhikari7249
      @surmaiadhikari7249 Год назад

      @@monst3rs26 that's kinda awesome!

  • @BuddyJesus
    @BuddyJesus 4 года назад +4

    You know, another awesome video.

  • @vincebastier9815
    @vincebastier9815 3 года назад +1

    This interview was great and full of truth, thanks for making it happen

  • @wistechke7249
    @wistechke7249 4 года назад +1

    men i admire your work and skills
    am working harder to be greater!

  • @bernardphlaxisk6454
    @bernardphlaxisk6454 3 года назад

    Thank You so much for uploading this. Appreciate it.

  • @laronlumpkin726
    @laronlumpkin726 4 года назад

    Thank you for another awesome video! Learned a ton!!

  • @thomasknudsen6647
    @thomasknudsen6647 4 года назад +1

    @24:41 is the "sleep" method they are talking about for blind SQL injection in burpsuite the same as time based sql injection that waits a certain amount of time before showing a response? I was wondering if someone could explain a little bit further for someone currently learning the material? i tried google searching such as blind sql injection using sleep, but i wasnt having very clear results. Thanks!
    im guessing the way to know if the sleep method works is if you send the sql injection, (lets say for 5 minutes), and 5 minutes later a '0' shows up, then that means it is vulnerable to it? am i understanding correctly? what is displayed back to us as a receiving response to know that its working... because i thought blind SQLi means that you are "blind" to see the output responses? how do you know that it actually goes to "sleep" if you arent able to see any feedback?

  • @gr4vedigg3r
    @gr4vedigg3r 4 года назад +2

    Great vids.... Lv them👍🏻

  • @mercedesl.3192
    @mercedesl.3192 4 года назад +3

    Thank you!

  • @karyazin85
    @karyazin85 4 года назад

    Thank you! Very motivating.

  • @sithlord7264
    @sithlord7264 4 года назад +2

    Im getting ready for my Security + exam. But not sure what book i should read.

  • @stgadmin
    @stgadmin 3 года назад

    I like the Shalom, Shalom at the beginning

  • @Intuitronix
    @Intuitronix 4 года назад +2

    Thank you for this video

  • @thinkingonyx847
    @thinkingonyx847 8 месяцев назад

    For the sql injection fix question he should have mentioned prepared statements

  • @matthewbeauregard5057
    @matthewbeauregard5057 4 года назад +3

    You mentioned some called Man in the Middle 6, is that a program or did I just misunderstand? If not, where do I find info on this app, I tried googling it and got nothing?

  • @himansh0715
    @himansh0715 3 года назад

    This level of content ❤️🙏👍

  • @shubhamm745
    @shubhamm745 4 года назад

    I have a request, plz make a video to build step by step red team infrastructure lab..
    Rastalab has written a blog for it.
    If you can create using that knowledge, nobody has created this setup video.
    It will be very helpfull..

  • @nosietankz8859
    @nosietankz8859 3 года назад

    learned a great deal watching this video thanks for this video

  • @E_N_K_I
    @E_N_K_I 4 года назад +2

    Can you post that "Matt" guy's info? Like if he has a twitter/youtube/etc, I'd greatly appreciate it! Wouldn't mind following him on social media :)

  • @soreelements
    @soreelements 4 года назад

    You know very informative video, you know

  • @Michal025
    @Michal025 4 года назад

    Thanks, very helpful... you know ;)

  • @NimbleSF
    @NimbleSF Год назад +1

    Thanks for this!

  • @theprogrammentor6704
    @theprogrammentor6704 4 года назад

    Hi,
    I'm following your videos it is really good.
    Will you do a videos on WiFi testing.

    • @TCMSecurityAcademy
      @TCMSecurityAcademy  4 года назад

      RUclips is iffy about wireless testing. I have those videos in the Udemy course if you're interested. Otherwise, a blog post is a good place to start. It's pretty straight forward.

  • @AlexLucard
    @AlexLucard 4 года назад

    Really good video thank you for the information the only concern I have is the guy keeps repeating "you know" I was told by my recruiter not to say that some employers find it incredibly annoying

    • @TCMSecurityAcademy
      @TCMSecurityAcademy  4 года назад +4

      Likely just a nervous habit. Not only was he interviewing with me, but also in front of 100+ people live. I'd be saying "you know" as well

    • @E_N_K_I
      @E_N_K_I 4 года назад

      Yes I noticed that as well. I found it somewhat annoying after a while, but considering how HQ, detailed, etc, all his answers were, I didn't/wouldn't mind at all. A lot of people have these kind of habits with the way they talk.

  • @robertfling6173
    @robertfling6173 3 года назад

    This video was fantastic.

  • @ShabazDraee
    @ShabazDraee 4 года назад +2

    What does the sleep do exactly ?

    • @TCMSecurityAcademy
      @TCMSecurityAcademy  4 года назад +7

      The sleep command tells SQL to wait x amount of seconds before executing. You can set a specific amount of time and see how the site responds. Set another time and see if it changes. Good way to confirm injection when blind.

  • @notawolf494
    @notawolf494 4 года назад +1

    Are there any ethical hacking/similar tech jobs that allow/require global travel?

    • @TCMSecurityAcademy
      @TCMSecurityAcademy  4 года назад +1

      Yes. Likely easier to land these jobs as not many people want to travel that much. You'll have to look at specific job descriptions to identify them.

  • @midvayner7411
    @midvayner7411 4 года назад +2

    shalom bratan , when you add Pyhton for hacking on udemy 😭😂

  • @Cossaw
    @Cossaw 2 года назад

    Common ways of bypassing DMZ?

  • @hannanjamil1060
    @hannanjamil1060 4 года назад +3

  • @andyscott7332
    @andyscott7332 3 года назад

    What is the guests name??

  • @imsethtwo
    @imsethtwo 3 месяца назад

    3:14 yeah not anymore. we have people with masters in the field taking entry level jobs thanks to the market

  • @souhaiboudiouf3732
    @souhaiboudiouf3732 4 года назад

    Wich tool was mentioned at 34:41 for MITM attack?

  • @hardwork3196
    @hardwork3196 4 года назад +1

    thank you for the video, but i would like more ethical educational videos from you, please :)

  • @D3rMesaa
    @D3rMesaa 4 года назад +4

    5 days til my first interview 😬

  • @MarkAkram
    @MarkAkram 3 года назад

    30 is late. What are you talking about ma?!! I am 32 and I have CCNP, CCNA, ITIL, AWS, Azure, PMP & MSC Engineering Management & I don't think I started my IT field yet LOOL

  • @ITTamiloffl
    @ITTamiloffl 4 года назад

    Who is winner of elearnsecurity course

  • @kaorrosi
    @kaorrosi 2 года назад

    6:30,

  • @alexsykes4509
    @alexsykes4509 3 года назад

    Zack bagans

  • @ghisskartadchoo3618
    @ghisskartadchoo3618 Год назад

    Salom salom

  • @omarsec3178
    @omarsec3178 4 года назад

    Did you say **Shalom***?
    means Peace be Upon You?

  • @masondrip42
    @masondrip42 3 года назад +2

    i just wanna get rich

  • @Bennymisc
    @Bennymisc 4 года назад

    When you try to jargon talk with an expert. I wouldn't hire him.