4 ms·
I think these days security testing is just glorified QA. The secret sauce is developing your own methodology, which at the end of the days is a mega comprehens
by doopy1 5y ago
I think these days security testing is just glorified QA. The secret sauce is developing your own methodology, which at the end of the days is a mega comprehensive checklist.
- ozim 5y agoWell yes and no. Being a football player is also applying comprehensive checklist, question is who does it faster and is able to execute it. Like I do understand all the exploits but executing them and executing them quickly or iterating over possible solution space is taking me 4 days on HTB easy boxes. There are people who break really hard boxes in matter of hours or even minutes. So for me it is comparison like I am playing soccer with my neighborhood friends and playing premier league. Like I do know the moves that should be done but I do not have reflexes built for that and building those reflexes takes years of focusing on playing football. Having reflexes on which exploit to choose or which tool you should pick up to go through with hack is something like that and you need years to build it up.