3 ms·
OSCP kinda sucks because the pentesting industry kinda sucks (I have OSCP). Things are different now since there's a ton of guides and videos specifically for i
by vsareto 6y ago
OSCP kinda sucks because the pentesting industry kinda sucks (I have OSCP). Things are different now since there's a ton of guides and videos specifically for it.
Long term, you're better off being a developer and getting into security that way. Plus you're going to learn to program as a pentester anyway. The job market and day-to-day and salary is also much better. It is hilarious how necessary/important security is but pentesters seem to get low salaries and have high barriers to entry.
- tptacek 6y agoI think this is true of netpen work, which is heavily commoditized, but much less true of vuln research and appsec, which are the fields you're shooting for by learning to code. I generally agree that developer -> security is the right way to go.