Website Hacking / Penetration Testing & Bug Bounty Hunting

eJPT 18/20 in 2weeks!

Prev Exp: Security+ by Comptia, 1-2 Udemy courses on Penetration Testing by Zaid( highly recommend this one here ).

Preparation: Week 1, speed ran the entirety of eJPT. 90% of my time was used on labs. Personally, the slides and videos were boring and labs are where you're really going to learn. Week 2, review modules 1,3 especially 3. Go through the labs again and redo them without looking at the solutions.

Conclusion/tips Overall, the test was very similar to the labs. Took me about 10hours. If you already have experience in networking or website hacking, you should just go straight to the eCPPTv2. For 2 weeks I studied on avg 4-5h every day. I would say the 3 must-know labs are Secret Server, Metasploit, and Dirbbuster.

My next certs are prob gonna be eCPPT and eWPTX. GL!

Complete beginner for OSCP

I'm not completely new to Information Security and have the high level understanding within the multiple domains of Information Security however I want to start focusing in pen testing. I am a complete beginner in this area and wanted to check if the following would be the most suited steps to get to a level of taking the OSCP challenge. My technical skillset = 1/10...I don't code and I am fairly weak in networking terminologies. Would the following be the best to become prepared? Is it too much prep / overkill in Python/Bash/Powershell learning for what is actually required for OSCP? Should i shift my learning somewhere else? Have I skipped some fundamental topics to learn? Any suggestions at all would be great for me - I'm all ears here.

​

1. Learn Python - Go through the whole book: Automate the Boring Stuff with Python
2. Learn Bash - Go through this Udemy course: https://www.udemy.com/bash-shell-scripting-crash-course-for-beginners/?couponCode=BASH-SHELL-Q1
3. Learn Powershell - Go through this Udemy course: https://www.udemy.com/advanced-scripting-tool-making-using-windows-powershell/?couponCode=QUORA11
4. Learn Linux / Kali Linux - Go through Udemy course: https://www.udemy.com/course/learn-website-hacking-penetration-testing-from-scratch/
5. Cybrary Georgia Weldman - Go through the training provided by Georgia on Cybrary
6. Once completed the above - move onto Hack the Box or PWK?

​

Also, I am not very keen in reading books and prefer actual videos (udemy / youtube etc) as I believe I learn much better than reading books. - Is this the wrong way of learning for this field?

https://www.udemy.com/course/learn-website-hacking-penetration-testing-from-scratch/ currently. Enjoying it so far but admittedly not very far in.

Passed the OSCP with extra Help with 3 Udemy Course: Privilege Escalation is vital, and these 2 Udemy Courses are highly recommened for anybody pursing OSCP or other similar penetration testing endeavors: Windows Privilege Escalation for OSCP & Beyond! https://www.udemy.com/course/windows-privilege-escalation/

Linux Privilege Escalation for OSCP & Beyond! https://www.udemy.com/course/linux-privilege-escalation/

For Layer 7/Application Layer attacks check out: Website Hacking / Penetration Testing & Bug Bounty Hunting https://www.udemy.com/course/learn-website-hacking-penetration-testing-from-scratch/

Lots of courses for next to nothing on many websites. I feel like the little bit of time I've spent on a CEH course we had covered almost all of those questions. I've geared my focus more on the network infrastructure side of IT since then. Found this with a quick search: https://www.udemy.com/course/learn-website-hacking-penetration-testing-from-scratch/

Also - I myself found it enjoyable, but check out: https://www.nationalcyberleague.org/fall-season

They have some really easy stuff and some more intermediate level labs. I enjoyed it because it forced me to research things I had never been exposed to and actually apply the conceptual shit I no longer remember from Net+/Sec+.

Oh for sure, prepare for a long ass list:

- Kali Linux for Noobs

- Anonymity and Security

- Web Hacking and Pen Testing

- Ethical Hacking for Noobs

- Python and Ethical Hacking for Noobs

The last four are from the same guy, all of his courses are cool here they are.

I am now working on these two:

- Security+

- Network+

I've also done a few web dev courses (all from this guy) and some other stuff like Wireshark and GitHub that aren't specifically security related but are good to know.

I hope this is useful!

Edit - The Network+ and Security+ need companions, these alone won't cut it but I have the books form this company for both certs to work through too. Not yet looked at test exams though.