Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 32 guests online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Otherarrow Junior Penetration Tester Interview
EH-Net
May 22, 2013, 12:01:02 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Junior Penetration Tester Interview  (Read 2453 times)
0 Members and 1 Guest are viewing this topic.
T_Bone
Full Member
***
Offline Offline

Posts: 199


View Profile
« on: September 27, 2010, 01:56:41 PM »

Ok, what level of knowledge would you guys says is necessary for a Junior Penetration Tester to have? What type of questions should he be able to answer?
Logged
hayabusa
Hero Member
*****
Offline Offline

Posts: 1632



View Profile
« Reply #1 on: September 27, 2010, 03:45:10 PM »

This is a short list, off the top of my head, and I'm sure others will add, or comment, but...  Remember, assuming Junior, and that others are willing and able to work with the 'Junior' person to mentor them, that this list means to 'at a minimum, understand basics of'.

Personally, I'd expect them to understand concepts and things like :

-OSSTMM
-Privacy and regulatory laws
-Knowledge / acceptance / admission of what they do and don't know (in the event they're working in a team atmosphere) 

They should, at a minimum, understand fundamentals (even if not knowing exactly 'how-to') of:

-What a buffer-overflow is and how the stack works
-What privilege escalation is
-The OSI layer (at least a good overview, at a minimum)
-How network protocols work
-IP addressing fundamentals
-Types of web-based attacks (even if not knowing HOW TO, such as SQL injection, authentication bypass, CGI / PERL exploitation, etc.)
-Understand what types of encryption / obfuscation exist, and their uses (even if not completely understanding their inner workings.)
-Minimum basic understanding of routing and switching

IMHO, they should also be at least somewhat comfortable with some sort of scripting language (whether dos batch scripting, Windows PowerShell, *nix BASH, etc) and not be 'afraid' of a command-line.

Those are starter items, and by all means, not all-inclusive.  I'm sure, as I sit and think, others will come to mind, but since this is a forum, I'm sure other folks will chime in, too.   Grin
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.071 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.