3 ms·
> I know, but most of these "hacks" are identified by internal scans already. The pentest doesn't add much value then. As I said above in to another comment: p
by movedx 6y ago
> I know, but most of these "hacks" are identified by internal scans already. The pentest doesn't add much value then.
As I said above in to another comment: pentesting isn't the job in the field and the article wasn't specifically aimed at pentesters.
> Which is exactly what a serious adversary would be doing in a targeted hack!
Sure, and that's when you bring in someone who can do the same for you but ahead of time before the bad guys get there. But to say someone who can't do that isn't in a cybersecurity position or has no value is wrong :)
- GekkePrutser 6y agoI didn't say that! If you see my first post, I agree with you that in many 'cyber'security jobs other skills (like politics/influencing) are much more important and unfortunately often lacking in key people. I actually don't like the strong focus on the CEH/OCSP certs as most HR depts seem to apply them to all areas of security. Not just pentesting and auditing. And especially for pentesters, I'd want them to have more initiative than just running through some standard textbook operations. At least that's what I've seen. But as another poster mentioned, what they do at this company is more like an audit, just under the flag of a pentest which sounds cooler.