The best Hacking Courses & Certs (not all these)? Your roadmap to Pentester success.

Sdílet
Vložit
  • čas přidán 11. 06. 2024
  • This is your path to becoming a Pentester in 2023. The best courses and best cert. Big thanks to Rana for answering so many of your questions!
    Thanks for the cool Solar Generator Jackery!
    Official Jackery website:
    USA: jackery.com/products/solar-ge...
    UK: uk.jackery.com/products/solar...
    Amazon:
    Amazon USA: amzn.to/3zEw5EN
    Amazon UK: amzn.to/438Dt9b
    // Menu //
    00:00 - Coming up
    00:38 - Sponsored segment
    01:48 - Get for Free (or 50% off) Rana Khalil's Academy courses
    03:43 - Rana Khalil's background
    04:53 - Preparing for the OSCP
    07:04 - Best Pentesting courses - roadmap to success
    10:54 - Prerequisite knowledge needed to become a pentester
    12:00 - 3 Skills you'll need
    14:57 - Is basic scripting enough to become a pentester?
    15:56 - Do I need a degree or certifications?
    18:15 - Is the OSCP required to become a pentester?
    22:27 - How to get pentesting experience and landing a job
    28:25 - Balancing social life // Take your time
    32:14 - Path to OSCP // Recommendations
    33:48 - Bug bounty // Portswigger Web Security Academy
    35:51 - How to get into the right mentality
    38:29 - Conclusion
    // Rana's courses //
    Free Web Hacking Course: / ranakhalil101
    50% OFF Web Security Academy Course Code: DavidBombal500FF
    Academy: academy.ranakhalil.com/
    8 hour SQL Injection playlist: • SQL Injection | Comple...
    // Previous video //
    Broken Access Control: • Free Web Hacking Course
    // Rana's OSCP journey //
    rana-khalil.gitbook.io/hack-t...
    // Book Rana Recommended //
    Web Application’s Hacker’s handbook 2nd Ed by Dafydd Stuttard:
    US Link: amzn.to/3J90wZa
    UK Link: amzn.to/3J7H2UT
    // TCM-Security Course Discounts and Affiliate Links //
    Get 25% off courses and 10% off PNPT with coupon code: BOMBAL2023
    Practical Ethical Hacking: davidbombal.wiki/tcmpeh
    Windows Privilege Escalation for Beginners: davidbombal.wiki/tcmwpe
    Linux Privilege Escalation for Beginners: davidbombal.wiki/tcmlpe
    Open-Source Intelligence (OSINT) Fundamentals: davidbombal.wiki/tcmosint
    The External Pentest Playbook: davidbombal.wiki/tcmepp
    Movement, Pivoting, and Persistence: davidbombal.wiki/tcmmpp
    Python 101 for Hackers: davidbombal.wiki/tcmpython
    Linux 101: davidbombal.wiki/tcmlinux
    Practical Malware Analysis & Triage: davidbombal.wiki/tcmmalware
    Mobile Application Penetration Testing: davidbombal.wiki/tcmmobile
    Python 201 for Hackers: davidbombal.wiki/tcmpython201
    Practical Web Application Security & Testing: davidbombal.wiki/tcmweb
    Practical Windows Forensics: davidbombal.wiki/tcmwinforensics
    GRC Analyst Master Class: davidbombal.wiki/tcmgrc
    // TCM-Security Certifications //
    certifications.tcm-sec.com/?r...
    If you are current/former military, students, teachers, and first line responders (doctors, nurses, EMTs, etc.) you can get 20% off TCM certifications. Email support@tcm-sec.com for that discount if you qualify.
    // Tib3rius courses //
    - Windows Privilege Escalation: www.udemy.com/course/windows-...
    - Linux Privilege Escalation (Tib3rius): www.udemy.com/course/linux-pr...
    // IPsec //
    Recommended CZcams channel: / @ippsec
    // Rana's SOCIAL //
    Twitter: / rana__khalil
    Academy: academy.ranakhalil.com/
    CZcams Channel: / ranakhalil101
    Medium Blog: / ranakhalil101
    Rana Intigriti Interview: • Hacker Heroes #5 - @ra...
    // David's SOCIAL //
    Discord: / discord
    Twitter: / davidbombal
    Instagram: / davidbombal
    LinkedIn: / davidbombal
    Facebook: / davidbombal.co
    TikTok: / davidbombal
    // MY STUFF //
    www.amazon.com/shop/davidbombal
    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
    pentest
    pentester
    hack
    hacker
    hacking
    ethical hacking
    ethical hacker course
    ethical hacker
    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
    Disclaimer: This video is for educational purposes only.
    #hacker #pentester #hack

Komentáře • 436

  • @MFoster392
    @MFoster392 Před rokem +104

    I'm disabled and teaching myself bug bounty and web security so in a year or two i can make some extra money from home. I've got so much help from both of you., David especially from you and the pros you have on your channel ;-)

    • @davidbombal
      @davidbombal  Před rokem +16

      Very happy to that Mike! Thank you so much for sharing!

    • @ethanfarnsworth4420
      @ethanfarnsworth4420 Před 11 měsíci +3

      Bro that’s awesome! Are you going for any certs out of curiosity?

    • @MFoster392
      @MFoster392 Před 11 měsíci +2

      @@ethanfarnsworth4420 Thanks for asking Not yet, i had to start from 0 i didn't even know the terminal or Linux so as of now I'm concentrating on BB so i can get started on that and then I'll keep going on the security side of things since it's more targeted learning :-)

    • @CyDETECT
      @CyDETECT Před 11 měsíci +2

      Good luck! I believe in you.

    • @MFoster392
      @MFoster392 Před 11 měsíci

      @@CyDETECT Thank you

  • @michaelpierre9738
    @michaelpierre9738 Před rokem +99

    Rana's course is great. The basics are taught well and the best part of each lesson is automating the exploitation using Python

    • @davidbombal
      @davidbombal  Před rokem +9

      Agreed. Rana does an amazing job!

    • @olrook6652
      @olrook6652 Před rokem +4

      Yes, Python is made to work on universal OS types

  • @vardhangoud8851
    @vardhangoud8851 Před rokem +221

    This is what we want(Pentesting Roadmap)🔥
    Thank you David sir

    • @davidbombal
      @davidbombal  Před rokem +18

      Very happy to hear that Vardhan!

    • @RafiGish
      @RafiGish Před rokem +5

      Who's we? Are you suffering from multiple personalities?

    • @akshatsingh4937
      @akshatsingh4937 Před rokem +3

      @@RafiGish 😂

    • @elgobert
      @elgobert Před rokem +1

      @@RafiGish bruh 😆

    • @nishantdalvi9470
      @nishantdalvi9470 Před 9 měsíci

      ​@@akshatsingh4937hey bro, Ap konse stage pr ho abhi apke learning phase ke ?

  • @myname-mz3lo
    @myname-mz3lo Před rokem +47

    thank you rana for being the only guest on this show to have the courrage to give us a real roadmap. all the others were scared to say anything but you actually gave us what we needed to know . best roadmap ive ever seen .

    • @sanka814
      @sanka814 Před rokem +1

      Fully agree with you !!. Very helpful. She gives me a lot of inspiration !!
      Thank you both, David an Rana

  • @k_usuan
    @k_usuan Před rokem +5

    Your unwavering commitment to help people on their cyber security/penetration tester career path is undeniably the best have ever seen . Thank you and with your contents , I am proud to say I have found a good path and road map the best routes to my cyber security journey . Thank u!

  • @TKollaKid
    @TKollaKid Před rokem +13

    I worked with Rana at my current job before she went off on her own. She was really great. Was really surprised and pleased to see her on your channel.

  • @jjones391
    @jjones391 Před 10 měsíci

    Hey David, I love your description of the generator. I could not stop smiling listening to your description. As a Liberian, I can relate to that generator feeling. Thanks for all the information. I'm new to cyber security. Therefore, hope to learn as much as I can . Thanks be bless !

  • @goodnightmr5892
    @goodnightmr5892 Před rokem +16

    This is outstanding. I really appreciate the fact that many of us have organically had to fight to learn this information and you have streamline this. I will absolutely be paying this forward. ❤❤❤❤ Thanks to the both you. Hopefully in the future I can contribute further.

    • @davidbombal
      @davidbombal  Před rokem +6

      Thank you! Sharing is caring and helping one another is so important 😀

    • @goodnightmr5892
      @goodnightmr5892 Před rokem +2

      PS CYBER is our social life.

  • @lfcbpro
    @lfcbpro Před rokem +3

    Great video from both of you and SUPER helpful, it's nice to get extra perspectives from different people and lifestyles.

  • @nijatrzayev9962
    @nijatrzayev9962 Před rokem

    Thanks a lot, David for making this video and introducing Rana Khalil to us, It was a pleasure to know her. I took notes for all suggestions and web pages we can benefit from. Thanks to her as well. I am new to this field and want to nail it in the upcoming years!

  • @osielramirez7274
    @osielramirez7274 Před rokem +3

    Thank you for having Rana on your video. I was on the fence on whether to start studying for the OSCP. Thanks to your specific questions and Rana's exquisite info and insight from her relatable experience, I'll be making a game plan to tackle this certification 😊

  • @juliusrowe9374
    @juliusrowe9374 Před rokem +3

    David, Rana was awesome! Very insightful and knowledgeable too! Please have her back on the channel again.

  • @michazborowski2637
    @michazborowski2637 Před rokem +4

    It's great that a person like Rana shows that you don't have to be a cyborg starting at the age of five to be in cyber security.
    Rana thank you very much for the material!

  • @MustafaGains
    @MustafaGains Před rokem +1

    David thank you a lot for lettin me know about Rana and her youtube channle and website. i feel like even thanks word not enough to you for how you let me know about more ppl that i need to learn from.

  • @gokublack4832
    @gokublack4832 Před rokem +24

    Very helpful. Short, sweet, and straight to the point with lots of cool resources. 10/10

    • @davidbombal
      @davidbombal  Před rokem +2

      Thank you! Glad you found the useful!

  • @MentalMarathon_
    @MentalMarathon_ Před 8 měsíci

    Thank you for this content again. Appreciate the transparency and straightforwardness with how constant improvement is a REQUIREMENT

  • @gr8wei
    @gr8wei Před rokem +1

    Thank you David and Rana! Her interview was very insightful. Nice to know about Rana's background and the resources she used. Great interview!

  • @lucimoise
    @lucimoise Před rokem +2

    This a really great tutorial with awesome content. I had already a list of resources to crush the OSCP exam but like Rhana says : is better to absorb all the knowledge and develop your own methodoly in learning to pentest and not only passing the exam. Thank you @David for the tremendous work you do. Much appreciated.

  • @khalidelgazzar
    @khalidelgazzar Před rokem +3

    Proud of you, Rana. Great role model.
    ما شاء الله لا قوة الا بالله

  • @iLLFX
    @iLLFX Před 5 měsíci

    Great questions were asked in this interview! At times I felt like you were reading my mind in terms of what I would ask her if I was conducting the interview. Thank you so much for making this!

  • @doug2bitemore
    @doug2bitemore Před rokem +1

    Not even in CS but couldn't help but to listen to this excellent drop. Very informative interview, good pick!

  • @markfuentes3666
    @markfuentes3666 Před rokem

    Just purchased Rana's Web Security Academy Course. I have been watching the course on you tube, but now I have access to all the material in one spot and no adds. Thanks for the discount code. and thank both of you for all you have and will do.

  • @youngsouljava2107
    @youngsouljava2107 Před rokem +1

    Such a valuable information by sharing rich experiences and deep knowledge from Rana. Rana, you are such a great teacher. Thanks a lot David, I am a big fan of your video series!

  • @donint9871
    @donint9871 Před rokem +2

    Great video !thanks Rana & David for providing so many information.

  • @grorobrindo4731
    @grorobrindo4731 Před rokem

    Thank you CZcams for recommending this video, definitely subscribing to David and Rana channel 💯👍

  • @olrook6652
    @olrook6652 Před rokem

    I totally agree with Rana Khan and are thankful for her kind of confirmation, great video as always David.

  • @colud_5446
    @colud_5446 Před rokem

    Wow! This is amazing! Thank you, David and Rana! :)

  • @ommarelo
    @ommarelo Před rokem +1

    Thank you David you always bring the best content for us and Rana still one of the best in this community✌, thanks for her to sharing this informations very very helpful😍. Thanks again and wait my comment after a year to celebrate the success together 🙏

  • @captaincottonsocks
    @captaincottonsocks Před rokem +3

    What an awesome interview. Thank you David, thank you Rana.

  • @jonatanrachovsky152
    @jonatanrachovsky152 Před rokem +3

    Great video, David! I was wondering if you could consider making a video on terminal-based chatting like we see in Mr. Robot. It would be really interesting to see how to use tools like Netcat and SSH for secure communication over the internet. Thanks for all the amazing work you do!

  • @walidlamri1783
    @walidlamri1783 Před rokem

    You can literally tell that she has the sweetest heart ever, thank you both of you guys, this is really an awesome video

  • @agapemiteu
    @agapemiteu Před 3 měsíci

    Rana is a good listener.
    She listens and waits for david to finish his questions then answers clearly on what was asked
    Thank you for this interview David and Rana

  • @rsouza_bass
    @rsouza_bass Před rokem +1

    Rana and David what a beautiful roadmap. Im more confident now.

  • @adelnadheer1940
    @adelnadheer1940 Před rokem +1

    thank you for sharing with us Rana !

  • @dimuthdeja7859
    @dimuthdeja7859 Před rokem +1

    Amazing. Love to hear her interview. I like it very much. Thank you. You inspired me. ❤

  • @ibrahimabdeltawab6418

    Thanks so much David and Rana, amazing interview!

  • @1hardkase
    @1hardkase Před rokem

    Such as a smart and articulate young woman. She is an example of what many should be no matter what field they are in. She is a great role model to men and women alike.

  • @itsgamerallin1689
    @itsgamerallin1689 Před 2 měsíci

    really great efforts to give to the community. Cannot thank you enough for your contributions

  • @amanyanni
    @amanyanni Před 6 měsíci

    Great explanations with great examples ,webs ..Thank you David and Rana

  • @joelortiz6528
    @joelortiz6528 Před rokem

    Excellent interview. Thank you for putting all this together

  • @AliefHamdani
    @AliefHamdani Před rokem +3

    Whoah!
    A Practicing Muslimah who is also a Pentester. I'm mind blown!
    Thank you, David, for putting together a good range of people from all walks of life who is doing Cybersecurity. I'm stoked!

  • @planetdrinker5385
    @planetdrinker5385 Před rokem

    This is fantastic! Thank you both :)

  • @ismanovernest
    @ismanovernest Před rokem +1

    This is amazing ! Thank you guys

  • @Z0nd4
    @Z0nd4 Před rokem +1

    Thank you very much David, as allways, great video!

  • @volodymyrsukhorutchenko8582

    Thanks David for the interview. Great video!!!

  • @dilandodangoda109
    @dilandodangoda109 Před rokem

    You always come up with valuable content. Thank you both

  • @frametrails
    @frametrails Před rokem +2

    Quite informative video. I like it. It’s made me even more confident that I am on the right track towards OSCP by starting from the PNPT. Thanks David Bombal. Thumbs up 👍🏻

  • @montassirben8560
    @montassirben8560 Před rokem +6

    Thank you David and Rana

  • @DavidLawyer
    @DavidLawyer Před rokem

    Great information shared as always. Thanks David and Rana

  • @ZeCatable
    @ZeCatable Před 6 měsíci

    Thank you so much Rana and David, for the inspiring, insightful roadmap!

  • @_v0id309
    @_v0id309 Před rokem +35

    Hey David ;
    You are the best teacher I've ever learnt from please consider making and showing us something related to exploit development!!!
    Lot's and lot's of love from India ! ❤️💗❤️

    • @davidbombal
      @davidbombal  Před rokem +6

      Thank you Anoop! Great suggestion.

    • @_v0id309
      @_v0id309 Před rokem +5

      @@davidbombal we'll be waiting for exploit development videos! 💗❤️💗

  • @smzaman111
    @smzaman111 Před rokem

    Thank you David for creating another insightful video. Pls create one with Heath Adams on PNPT cert.

  • @Suzumes527
    @Suzumes527 Před 8 měsíci

    Thank you for reminding ppl to stay humble. This is not the case with many in this field

  • @edwardlichtner1747
    @edwardlichtner1747 Před rokem +1

    Inspiring discussion. Thanks Rana and David. 👍

  • @user-pj3cz7uj5s
    @user-pj3cz7uj5s Před rokem

    Thank you. That was a very informative video.
    Rana sounds very realistic and relatable.

  • @dave_di
    @dave_di Před rokem +4

    Super helpful video as always, Mr. Bombal!

  • @sirkali
    @sirkali Před rokem

    Amazing info for those who is considering to follow OSCP path.

  • @TheWhaleon
    @TheWhaleon Před rokem

    This is pure inspiration. I need to step up my game!

  • @mario33067
    @mario33067 Před 4 měsíci

    So many good tips in one video to be prepared to be a pro infosec. Thks a lot.

  • @MacEwanRobert
    @MacEwanRobert Před rokem

    Thanks for the Jackery suggestion.

  • @abadvibesguy2232
    @abadvibesguy2232 Před rokem

    Always a pleasure watching your videos and your guests are always very knowledgeable and informative,the one person I'd like to see colab with you would be Chris Hadnagy ,and I hope that in the future I will be able to click on that link ,it all starts with a good osint and social engineering :D
    Thanks for everything David !

  • @cyberxcash
    @cyberxcash Před rokem +13

    David you bring the best content on CZcams about cybersecurity been following you since years and every content is amazing

  • @Drbora98
    @Drbora98 Před rokem +1

    One of the best ever road map from beginner perspective

  • @Alex-nq5nz
    @Alex-nq5nz Před rokem

    Great video ! as always @Rana and @David

  • @ArindamKashyap-qk1ps
    @ArindamKashyap-qk1ps Před rokem +1

    So much invaluable information. Thanks a lot for sharing David and Rana.
    David, can you please tell us the path to CEH Master?

  • @annesolo1087
    @annesolo1087 Před rokem

    This video is excellent, thank you !

  • @Rubalix
    @Rubalix Před rokem +1

    Nice to see this women back.

  • @2012mrmoh
    @2012mrmoh Před 7 měsíci

    What an interview.Thank you David and thank you Rana.

  • @albertcorzo
    @albertcorzo Před 9 měsíci +1

    Rana it's incredible person super smart and humble Totally inspirational person.

  • @MrSanafana
    @MrSanafana Před rokem +1

    I love her, she's so knowledgeable and a great teacher.

  • @Jickoy-Gaming
    @Jickoy-Gaming Před rokem

    Thank you Sir David, Maam Rana.. I love this segment.

  • @sv6191
    @sv6191 Před rokem

    Another great insightful video from you David!

  • @YCSSharif
    @YCSSharif Před 4 měsíci

    That's a great to share the path 🚶 . That we help us.
    Thank you David Sir ❤ ! For approaching different persons and sharing their methodology with us...!

  • @hernandopaez4731
    @hernandopaez4731 Před rokem +1

    Thanks a lot David great interview

  • @yevgeniyamaskayeva7320

    Great conversation, lots of useful information and materials ❤

  • @user-nm7ju5ph6u
    @user-nm7ju5ph6u Před 6 měsíci

    That's useful, I have a very similar type of learning and outlook as she does so I'll definitely have a look at the resources.

  • @jhovannicastillo3711
    @jhovannicastillo3711 Před rokem

    Wow amazing video!! Regards for both from Mexico

  • @karmabet7394
    @karmabet7394 Před rokem

    Another great interview... Chapeau David, Thank you. 👏👏👏👏

  • @mohamedmourad321
    @mohamedmourad321 Před rokem

    thank you David and Rana for the roadmap

  • @romasanz999
    @romasanz999 Před rokem

    Thank you for this video mister, really appriciate it.

  • @M_A_A_B
    @M_A_A_B Před rokem

    exactly the video we needed ❤.

  • @tesfahiwettruneh7593
    @tesfahiwettruneh7593 Před rokem +8

    Sir,
    You are my best teacher i have ever seen in my life...
    keep updating us 😘

  • @JacquesvanWyk
    @JacquesvanWyk Před měsícem

    I have seen few of your videos and always wondered if this is South African accent. Great to see fellow Saffa doing great things. This was great interview and also at older age and being developer now for 10 years I want to get into cyber security and also get the youth around me into this. The lady was great resource and so greateful to get knowlegde from someone you can see is passionate about what she does. Keep up the good work both of you and thank you

  • @ahmedabdi860
    @ahmedabdi860 Před rokem +1

    Great video this is what we want as we are biginer on pentester thanks allot David and Rana keep updating 👍

    • @davidbombal
      @davidbombal  Před rokem +2

      Thank you Ahmed! All the best for your journey!

  • @3aiban
    @3aiban Před 11 měsíci

    Mr David, your content is priceless Thank you for everything, Best regards from Kuwait 🇰🇼 ❤

    • @davidbombal
      @davidbombal  Před 11 měsíci

      Thank you! I'm very happy to hear that!

  • @serenevalor
    @serenevalor Před rokem +5

    Love the precise questions. A full roadmap on how to become a pen tester is great!
    Could you please do some videos centered around Cybersecurity and AI. I think AI and ML are playing a huge role everywhere, including in cyber. How can folks get into AI via cyber? And if you have AI/ML, then we also have to think about cloud and cloud security, how does that fit in to the equation? What sort of roadmap would you suggest?
    As always, thank you for your awesome videos!

  • @pruxi8662
    @pruxi8662 Před rokem

    Rana is a Hard Worker, I can notice it from her eyes, thanks a lot guys really helpful conversation

  • @Gr33n37
    @Gr33n37 Před rokem +1

    Grate video Mr.David, am in uganda i don't have money to buy most good courses but having access to free good content like these have put me fur in my journey , now am good in linux and more IT fields, is joined many labs to practice and i believe soon i will be good in pentest, now am on privilege Escalation. #HTB posted this on twitter, "having certs don't make you a pentester but your curiosity will do"

  • @harrylumsdon6773
    @harrylumsdon6773 Před rokem

    Props for TCM. Another great channel.

  • @Netharino
    @Netharino Před rokem

    definitely what i looking for. the roadmap for oscp

  • @offensiveredteam
    @offensiveredteam Před rokem +2

    This is a very beautiful interesting topic.Thanks

    • @davidbombal
      @davidbombal  Před rokem

      Glad you think so! Hope you enjoy the video!

  • @leJ226
    @leJ226 Před rokem

    thanks david thanks rana it was a great video !! i was lost in my mind (cyber security career) today and this video give lot of inspiration motivation and of course precious informations
    AND YEAH THE CYBER MENTOR'S COURSES ARE AMAZING

  • @galloe
    @galloe Před rokem

    Interesting, I had watched her first video with you but I did not record her name in my memory. Recently I started listening to a bunch of cybersecurity/hacking/infosec podcast, one of them being Getting Into Infosec. I started with the last episode, which is episode 43, with none other than Rana Khalil as a guest!
    I'm beginning my journey into transitioning from being a warehouse worker into IT, and eventually want to work in infosec. I love all your content, and these video are very helpful! Thank you and all your guests for your contribution!

  • @jamilshekinski
    @jamilshekinski Před rokem

    Great color of the polo shirt, Mr. Bombal!)

  • @beneveche
    @beneveche Před rokem +1

    Thank you David and Renna

  • @abdirizakab8280
    @abdirizakab8280 Před rokem +1

    Well done 👍 Rana Proud of you 👏 ❤🎉

  • @phillydee3592
    @phillydee3592 Před rokem

    Good to know I started on the right direction,I have signed up to the ethical hacking course from TCM security 👍🏼 👍🏼

  • @Tib3rius
    @Tib3rius Před rokem

    Thanks for recommending my courses Rana. :) Great interview!

    • @davidbombal
      @davidbombal  Před rokem +1

      Glad you liked it! Great to see you here 😀

  • @Cypherx444
    @Cypherx444 Před rokem +1

    One of the best teacher in Cybersecurity Community David Bombal ❤️❤️🤩🤩

  • @TheHangman1995
    @TheHangman1995 Před rokem +5

    I got my eCPPTv2, my eWPT, and a handful of other certs, but no one even looked at my resume until I got my OSCP. The training from INE was way better than the training from OffSec by a long shot, but if you are trying to get hired to get hands on pentesting experience, OSCP is almost an industry requirement. Also the HTB CPTS is amazing as far as training goes. And if you put in some effort on HTB there are actually job boards that you can apply to once you reach a certain ranking in HTB.