Hack the Box – Pentesting Labs for Free
Asking the Hive Mind who might play with HTB, vulnhub and other labs (OSCP paid one):<p>1. Aside from: linux cmds, nmap, metasploit, sqlmap, mimikatz, kali&#x27;s well known tools - what other tools are often used by pen testers ?<p>2. How is MFA beaten in today&#x27;s enterprises ?<p>3. Do most engagements assume one is already in the network ? If not, how does one scan (basic OSINT towards their externally facing website, but let&#x27;s assume that is very secure)<p>4. How well do pen testers know the defense side and amalgamation of so many defensive tools - how do they learn what to beat ? Is it really as simple as try to fingerprint and then look for known vulnerabilities on msf ? Or do pen testers not care if xyz enterprise is using this version of Palo Alto or a carbon black EDR etc.<p>e.g. Alphabet soup of products in a large enterprise for defensive solutions - NGAV, EDR, SIEM, honeypots etc. etc.<p>5. How do you keep up ? aside from Reddit<p>6. any advice to future job seekers working their way into learning more infosec ?