The best Hacking Cert just got updated (OSCP PEN-200)
Вставка
- Опубліковано 16 чер 2024
- If you want to become a Pentester in 2023, then you should get your OSCP - this is what a lot of experts I interview recommend. The Official OSCP course (PEN-200: Penetration Testing with Kali Linux) recently got updated. I interview Jeremy Miller from OffSec about the changes.
Disclaimer: I was NOT paid for this interview. I wanted to make this video because it affects many of you watching and I would have done it without receiving anything from OffSec. However, they did give me access to Learn One for one year so I could see the course content. This has helped me prepare for the interview. Hopefully I'll be able to make more content covering what is in the PEN 200 course in future :)
// Documentation //
Changes: www.offsec.com/offsec/pen-200...
Course: www.offsec.com/courses/pen-200/
// Offsec //
Twitter: / offsectraining
Website: www.offsec.com/
LinkedIn: / offsec-training
// Jeremy's SOCIAL //
Twitter: / jeremyharbinger
LinkedIn: / jeremy-miller-b6816987
Website: jeremyharbinger.com/
// David's SOCIAL //
Discord: / discord
Twitter: / davidbombal
Instagram: / davidbombal
LinkedIn: / davidbombal
Facebook: / davidbombal.co
TikTok: / davidbombal
// MY STUFF //
www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
// MENU //
00:00 - Coming up
00:28 - Intro
00:31 - Updated OffSec PEN-200 course for 2023 // What's changing?
05:22 - Hacking is not easy as it seems
07:46 - Preparing for the real world
10:19 - Pre-requisites for the course
14:15 - Jeremy's background // Journey to pentesting
21:13 - Approach with an open mind
22:41 - Learning models & challenges
28:10 - Feedback loop
30:16 - Buffer overflow explained
32:34 - What has been removed & added // PEN-200 updated
37:30 - What is "pedagogy"? // Changing ways to teach and learn
40:38 - The PEN-200 course and the OSCP exam
44:11 - Old and new OS available in PEN-200 course
46:04 - Things are changing but not everything
48:24 - OffSec subscriptions and contents
49:43 - Pros vs. Cons // Helping students understand
52:14 - Final words & conclusion
oscp
pen-200
offsec
offensive sercurity
pentest
pentester
hack
hacker
hacking
ethical hacking
ethical hacker course
ethical hacker
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
#hacker #pentester #oscp
If you want to become a Pentester in 2023, then you should get your OSCP - this is what a lot of experts I interview recommend. The Official OSCP course (PEN-200: Penetration Testing with Kali Linux) recently got updated. I interview Jeremy Miller from OffSec about the changes.
Disclaimer: I was NOT paid for this interview. I wanted to make this video because it affects many of you watching and I would have done it without receiving anything from OffSec. However, they did give me access to Learn One for one year so I could see the course content. This has helped me prepare for the interview. Hopefully I'll be able to make more content covering what is in the PEN 200 course in future :)
// Documentation //
Changes: www.offsec.com/offsec/pen-200-2023/
Course: www.offsec.com/courses/pen-200/
// Offsec //
Twitter: twitter.com/offsectraining
Website: www.offsec.com/
LinkedIn: www.linkedin.com/company/offsec-training/
// Jeremy's SOCIAL //
Twitter: twitter.com/JeremyHarbinger
LinkedIn: www.linkedin.com/in/jeremy-miller-b6816987/
Website: jeremyharbinger.com/
// David's SOCIAL //
Discord: discord.gg/davidbombal
Twitter: twitter.com/davidbombal
Instagram: instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
// MY STUFF //
www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
// MENU //
00:00 - Coming up
00:28 - Intro
00:31 - Updated OffSec PEN-200 course for 2023 // What's changing?
05:22 - Hacking is not easy as it seems
07:46 - Preparing for the real world
10:19 - Pre-requisites for the course
14:15 - Jeremy's background // Journey to pentesting
21:13 - Approach with an open mind
22:41 - Learning models & challenges
28:10 - Feedback loop
30:16 - Buffer overflow explained
32:34 - What has been removed & added // PEN-200 updated
37:30 - What is "pedagogy"? // Changing ways to teach and learn
40:38 - The PEN-200 course and the OSCP exam
44:11 - Old and new OS available in PEN-200 course
46:04 - Things are changing but not everything
48:24 - OffSec subscriptions and contents
49:43 - Pros vs. Cons // Helping students understand
52:14 - Final words & conclusion
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
#hacker #pentester #oscp
Hey David can you make a video on how to install Kali Nethunter rooted on a unsupported device
A few months ago, I sat in on a webinar with Jeremy and David Hunt from Prelude Security. It's really great to see him here. He's exceptionally bright and clearly very knowledgeable on the subject but is always sure to approach his audience, who may be significantly less well-versed, in a genuine and down-to-earth way.
Thanks David, as allways! The best channel.
Thanks David, very grateful with you for the quality of your content, really helpful with the IT communnity
Thank you Alex. You're welcome! We need to help each other :)
David is great. I started in IT in 1992 with Electric Data Systems. AS400 admin and Networking. Unix of course. I do Pentesting and Bug Bounty. Great fun. I am 70 years old 🎉
Thank you for all the amazing info you give the community
There were so many inspiring thoughts in the interview for me as a teacher, the gist of which boils down to the last comment, "there are so many people who WANT to learn". If you don't want to learn, if you're not passionate about what you're doing, no pedagogy can compensate for a successful learning path. Unfortunately, this insight is daunting for a teacher passionate about his or her subjects.
one of the best explanations I have ever heard!!!! thank you David SIr and Jeremy Sir appreciate it a lot !!!!!
Really really interesting inquiry and life story and how easily you can deviate/go elsewhere from your current position to another in your life if you are open-minded. The toxicity is not toxicity but a test of the person, that is on the receiving end, if they are willing to follow through and really be knowledgeable and competent about what they do! Loved the video!
Really excited topic David. I have started studying for this cert 2 weeks ago and hope you continue interviewing people from this field 😊. Really appreciate what you’re doing for the community. #ThankyouDaivdBombal
Thank you Muhanned. Lots of interviews on my channel and lots more coming :)
I actually just got the Learn One from my employer, so i will jump on this very soon. mu background is that i have CEH cert and a bunch of Microsoft Azure stuff and SOC Analyst knowledge. in my work i am a security consultant. But i want to see this interview is one of the most inspirational i have seen in a long time! great work David & Jeremy 👏
I can't appreciate you enough for what you're doing David. For new comers like us this is a great help.
Despite our hardwork, the most important thing one needs is Guidance. I can proudly say that I came a long way with the help of your video. I've cleared CEH exam and now getting prepared for OSCP.
A big THANKS for the stuffs I've already learnt and for the stuffs I'll learn in future.
Thank you so much David and Jeremy for this wonderful interview. I learned a lot from YOU GUYS! I absolutely loved this interview, and it helped me to find a path to prepare for the OSCP.
Again, Thank you all❤
Thanks for updating us David sir❤
You're welcome!
I'm taking my cpts right now !! Wish me luck it's been going great so far !🎉
Glad for the information David sir.
You're welcome Vardhan!
I appreciate that, Mr. David. Thank you very much. You are truly a national treasure. Thanks again for the effort💫💎💫
Thank you very much Galeb!
*international
Helpful video sir ❤❤❤ lot's and lot's of love & support
Thank you Anoop!
great video really learnt a lot. thanks for doing it
Onya Dave! Thanks for the video 👍👍
This is one of the most important educational channels in existence, thank you David!
The past days has been tough for me, trying to figure things out . Thank you Jeremy, opened my eyes ! Thank you David, God bless ♥️
Absolutely worth knowing and understanding "older stuff". In the real world, as was explained, there is A LOT of outdated firmware/software out there. I work as a wireless network engineer/sysadmin (working on pivoting into to infosec) at an ISP/WISP. I can say there is absolutely old and vulnerable hardware/firmware on our open network. I fear this constantly, and have IDS setup (among other sec measures). But the vulns are still there. Knowing how to exploit these older systems is absolutely valuable
Your vedios are so cool and informative following you since 1.5 years with out missing a single vedios
Thank you so much!
I love your work sir pls start a work on honeypots with micro controls like esp32
I really appreciate the incremental approach for upgrading their exams. That is very real world and also very conscientious of those studying for the exam.
Thanks David !!
I purchased HTB's CPTS and BBH courses, but I'm going to take OSCP after I complete them. OSCP has always been my Mount Everest as a professional, and it seems the course is improving.
OSCP certainly feels like Mt Everest, but in reality you pass it and find yourself in the middle of a crater of professional pentesting/red teaming and that feeling is even better.
Thanks so much David
Excellent interview
You can see ' try harder' in 2 different ways. If you are up to the challenge, then try harder, if you are not, you walk away or you criticise. The more good people try hard, the more the bad people try harder, so yes, if you want to be better, you have to try harder. This is how i see it. Thank you david for always pushing things for the better of the community
Very informative, considering OSCP course. Testing Wifite2 on a Pi4 that waters my plants. No Kali yet.
Thanks professor!
You're welcome Luka!
Excellent work.
Great content 🎉🎉🎉
Thank you so much sir
You're welcome Ali!
Currently learning pen100 and hope to get OSCP by mid of 2024!
Outstanding vid as usual. Just a technical point : the bottom part of the white frame around the video juste overlaps with time code which are also written in white, so quite difficult to read them.
This is not an exaggeration, but my right, because you are a reason to educate people so that there is a better house and guest and a better life. You, Mr. David Abbar, are a scientific university in the pockets .thank you sir🎉❤
Th
Thank you! It's important that we help each other :)
i enjoy your vedeos bro keep it up!
I ❤ the practical nature of OSCP.... It's the best
I really appreciate Mr. David.
Thank you Iamak!
@@davidbombal your welcome sir. I just started learning Cyber security last month. I love your mentorship to learned and Excel in cyberspace sir🙏
Hi David,
I have waiting to see a video on your channel on PNPT certification. 🎉
he's completely right its hard and can't find the answers but am happy for doing that because you feel good after finding the flag or the answer!
I love the explanation at the end about the whole "try harder" mindset. Its so true. IRL you arent going to have a pre determined path on an intentionally vulnerable machine/network. Developing that mentality if "embracing the struggle" is one thing that brought me from having to look at the write-ups on CTF boxes, to being able to go through boxes eithout it. Its an invaluable mindset. If you look at things (even in life in general) that you only fail if you give up and didnt learn anything. If you learned something, gain ANYTHING from the experience, IT IS NOT A FAILURE. You have to embrace thet failure and look at: "ok. What do i need to do now to NOT fail next time." Learn from those mistakes, and improve. Great video as always, David.
Yeah, but you still have to start with some assistance. You cant just get thrown in with absolutely nothing. There's no way people can learn without being shown at least the basics.
Try raising a child with that mentality. "Oh, you're hungry? Try harder to learn how to hold the bottle!" See what I mean?
Here you are beautiful soul family 👪 keep going and keep shining like a star ✨️ 💛 thank you for sharing and making this amazing types of videos always I am Aman from India. Because of you I start learning myself . You give me lots of encouragement, motivation and inspire me alot . So that's why I am capable to make a pathways to how I prepare for cybersecurity Career myself. Thank you for your kindness and support 🙏 ❤️ Keep going and keep shining like a star ✨️ 💛
I don't even own a PC or have any socials, but I love this stuff, I've rooted my android and can run tor but this stuff here is like magic or alchemy to me it's freaking amazing
I’m happy that the course is updated few months before me starting it
It's good timing :)
Thanks for the great content David :)
Genuinely can't wait to be able to afford this. Busting through the HR gates while simultaneously learning more.
All the best for your journey! Never give up on your dreams!
Me too, thinking about getting a loan.
Professional as usual.
Thank you for everything you do boss , can you make a video on a project on kali linux from tools needed and idea you provide to follow with you onit and learn ? thank you again
Thank you
If you ever take a ctf challenge against other youtubers I'll be here to join you sir. Love your content and would love to play games on your side.
david that is good info
I'm glad to hear that :)
Only 6 month! 😮 wow amazing. Give us the study schedule. I think make that schedule and know you are understanding is the hardest part
I like their new website design... 😍
Agreed. Much better :)
So great and serious content and also realistic thanks for that Mr Bombal
Hi David I watch your Channel for a while, and u are great in what u are doing and u ever ask for the Kids how can you get a Pentester or anything similar, and Nobody can explain what it needs to be. For my self it was never a Option, but how can u tell People the need for that Knowledge? And I have a Idea now! Make a Serie with the Date of end of the Challenge"Hang your Device in a Network and "HACK!" And the best results and show. Vote for the Action with the Slogan: The low hanging Fruits ;)
I have been doing the PNPT, Pen-100 and now the OSCP + TCM's programming for hackers. It is doable but be prepared to struggle beyond belief and most importantly, try harder.
OSCP is expensive, but now I believe it to be worth it. Going to crack TCM's exam first and then get this one, gives me enough time to save up!!!
It's expensive yeah, but you will learn a lot in useful topics. Now imagine how much are some of these fancy PM or business certs.
🙌🏻
I am already invested in the PNPT, which is amazing. I'm not sure if I should get this as well since they are similar. But I am interested in the Pen-201 particularly so.
Your questions are answered by Rana in this video: ua-cam.com/video/Zfz3ZN2dTDM/v-deo.html
@@davidbombal 🙏🏾 thanks!
Quality content 😀😀 from Mr David bombal
Thank you! And you're welcome!
If only they'd come down on the price for these courses and exams. Price is the driving factor for me going for PNPT & PCRP
I'm sure that is a good course+certification, but for an individual, like me, it's just too expensive.
Thank you very inspirational video...thanks for sharing....I might have accidentally replied to one of the comments instead of adding a comment... But I agree with both points ....need to take a balance of give and take... Cost of living at present and time vs good investment and time
Yeah it is, however, the pay for a pen tester is massive so you could see it as an investment
@@WarrenKirkpatrick OSCP won't prepare you to be a pentester. The methodologies taught in that course are at least 10-15 years behind the curve, not to mention its missing tons of techniques. If you are only learning from certs, you'd need an additional 3-4 pentesting certs to feel 'ok' in the real world. Just stating this so people don't get tricked into thinking that OSCP will guarantee them a job or anything. OSCP is a good start, that's all it really is.
@@hooligan1629I’m not sure if I agree, I mean, they basically said that they upgraded the system in the video. from any videos I’ve seen and on Reddit, it’s a good cert to have. Sure there might be better but it’s down to the individual to apply what they have lost. It’s ok to disagree with me. No hate mate.
They do financing now too in the US
YES, INTERESTING TOPICS,👔👔🎈🎈😁😎
Hi David, have you already talked about the linux Samurai STFU on your channel? Is it still in use?
Hello, did they also already updated the exam along with the course ? I have to book my OSCP attempt exam before summer
With a sec + and network+ cert should I jump into the 200 level OPCP COURSE?
👏🏻👏🏻👏🏻
Thank you!
Help David, what be a good book to study for CEH and pen test ?
Hi David, please perform a video about how installing snort in Kali Linux
Great suggestion!
What level of knowledge i should have to start OSCP course and pass the exam? If i am starting into cybersecurity, not moving from other IT field?
Same, got a philo background. But man - I can't afford the OSCP course. Really want to get into cybersecurity.
Learn IT and networking first, cybersecurity isn't entry level...
@@lulz4lulz I can put together a box, was networking PCs in the 90s using coax, later on RJ45s, was installing games on floppies and troubleshooting CRC errors for games with cracks, can c++ and python
The material itself is very good . But if you get stuck on some exercise- no help will be provided. You really need to “try harder”. Also with new update they have constant vpn issues. VPN keeps breaking down and disconnects you from VM. Pretty frustrating for a such an expensive course!
I did the comptia pentest+ a week ago simply because that is i can afford. If pen 200 had a discount code at somepoint in time, that will be the time i will attempt this. Its too much for me.😢
Hello david I am a student who works on parrot os you can help me how to install on the partitions because I have done several methods but does not work
There is a question you did not ask your gust about!
Why is your exam as same as CTF and does not related to real scenario case ?
Sup David!
Thank you Areesh!
Brother, I would like you to explain to us how to activate alfa wifi model: awus036h kali linux on the virtual box program💔
I really struggle with learning penetration testing and have been feeling that maybe hacking isn't for me regardless how much I want it. Could it be it's not for me? Yet, it take it to a saying, where it states whether you think you can or can't, you are right.
Bro whats the stage whereu r stuck and u thought that u can't do it? Can u plz elaborate
@@PAFBEAST well, when trying to find an exploit for a box. And my learning process is going a bit slow for me.
@taiquangong9912 I have nearly a decade experience in penetration testing and some of the boxes are difficult for me. Sometimes you have to take a step back and think outside the box and know how to spot rabbit holes. Enumerate more.
@@lulz4lulz hey, thanks for replying. Will keep plugging.
So if I can’t build a website, do I need to learn before I can do my oscp ?
So, if I have no experience, even not as beginer , where do I start from?
How do I get training from this administrator?
Hi
"To taste my cup of tea, one must empty their own"
13:55 what's the difference between coding, programming, and scripting? Thanks!
Scripting doesn't need the intense knowledge that you need for programming. Programming you are solving very complex often low-level problems in a systems programming language. Whilst scripting you're creating small programs to solve very specific problems. The scope is the main difference.
@@dawidvanstraaten thanks, but you left out CODING?
@@savagepro9060 coding refers to both
Is there any way to overclock android device make a videos thanks
I am kind of sad that the buffer overflow is not part of the exam now...
why
@@saadhabashneh5587 once you figure out how to do them they are kind of easy points
@@JMe-ov5ib oh
What’s the difference between INE subscriptions and OffSec subscriptions for a beginner in cybersecurity?
The difference is INE is cheap and you get what you pay for. I ran about half way thru the INE course and couldn’t stand one the the instructors who mumbled and whispered through half of his videos. OFFSec is hard. I would go with the PNJPT. The OSCP is a gatekeeper cert and will make you work for it way more than INE
@@DarkSeas117 thanks for the advice. I was not sure where to start. I guess I might try OffSec for now.
The function of A.I. has been centred and has been built in the function of history and the convergent trades of which built some people's lives. And then as a chat function it iterates on the basis of it's centred forms of feelings to of which are tied to the rendered historic proponents of the Canadian transcribed of building up their society. While some people establish a overthrow from a governance scale on something to do with poo. And desirability of food supply (non meat) and over throw is transgressing in theft, kidnapping, and predatorially hunting civilians and psychiatric ward construct them and they can't find any standing evidence on some of us but have abused us. It's terrifying and annoying.
i can pass the oscp exam but problem is money.because it is too costly for me. 1450 dollar is equal to 4.5 Lacs rupess
Cannot use ChatGPT?
i need to sell my live to buy it
14:28 its not to late
Hi, my name is Isaac and I am a current student at Amity University, India. I am in my final semester studying for a Bachelor of Computer Applications. I am doing project work in the field of cybersecurity. My topic is on SIEM, SOAR, EDR, and XDR I am required to have a mentor to overlook my progress. The qualification must be a Post Graduate with a minimum of 10 years
of experience. Please if you know if someone can assist me.
First🎉
Very close!
Man soo high cost so high
Always OFFsec, why not talking about other companies, with equal Certification, maybe more effortable, like INE, Ecounsil, CEH, or THM ??? The others are worthless??? And the price is high, and 90% fails in first try and have to pay more money for second try! All these are just USA based, useless in EUROPE? But the interview is good and I liked the guy! Very open person!
الله الكبير 🌹🤲
way to expensive. Does it really worth it?
Sar mein Android mobile mein hiking kar sakta hun
Yeah bro you can to do that