Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 53 guests online
 
Advertisement

You are here: Home arrow Resourcesarrow Career Centralarrow So, pentester, what do you do?
EH-Net
May 19, 2013, 03:30:22 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: So, pentester, what do you do?  (Read 6522 times)
0 Members and 1 Guest are viewing this topic.
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« on: January 09, 2007, 05:23:43 AM »

Since I'm looking at this as a career path I wanted to ask "what's an average day at work for a pentester?"

I know the answer will vary from job to job (and skill set), but I'd like to know the range of tasks out there. Do you just run standard tools against an IP? Poke holes in web apps by hand? Social your way into a building and install hardware keyloggers? Spend 80% of your time writing up reports? Is your life more "office space" than "war games"?

Obviously I'm after generals rather than NDA-breaking specifics Smiley

Thanks,
plik
Logged
shawn
Newbie
*
Offline Offline

Posts: 15



View Profile
« Reply #1 on: January 09, 2007, 07:46:39 AM »

For me alot of time is spent in the upfront work of the sale as well as the actual testing.  We have the sales staff to do it but the actual testers are always involved in the sales process from the beginning.  We do everything from the proposal, billing, testing, report writing, and presentation, our sales staff only gets the leads.  In some of the larger organisations they have staff dedicated to some of this stuff as well as dedicated people to write or help review their reports so I am assuming that if you get into a larger consulting firm you would get more face time testing.  On the other side if you ever want to go out on your own you will need the other skills as well.  I would say that I spend on an average week 30% testing, 20% selling, 25% report writing/presentation and reviewing others reports, and 25% work in lab environment testing tools and methodologies and reviewing information similar to this forum and others.  On average  I am doing 2 or 3 internal tests a month at 3 - 4 days each and 4 or 5 external tests from the office coming across the internet at there firewall and public facing DMZ.
Logged

CEH, CCNA, Security+
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #2 on: January 16, 2007, 04:33:14 AM »

Cheers shawn,

I'm glad to see there's a sizable portion of testing new things in there. Too many jobs have "keeping up to day with new technology" in the job description then give you no time to do it in work (I'd be doing it anyway, but it's nice to see it recognised).

Thanks
plik
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.057 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.