Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 26 guests online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Resourcesarrow Career Centralarrow So, pentester, what do you do?
Ethical Hacker Community Forums
November 22, 2008, 07:24:54 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: So, pentester, what do you do?  (Read 3702 times)
0 Members and 1 Guest are viewing this topic.
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« on: January 09, 2007, 05:23:43 AM »

Since I'm looking at this as a career path I wanted to ask "what's an average day at work for a pentester?"

I know the answer will vary from job to job (and skill set), but I'd like to know the range of tasks out there. Do you just run standard tools against an IP? Poke holes in web apps by hand? Social your way into a building and install hardware keyloggers? Spend 80% of your time writing up reports? Is your life more "office space" than "war games"?

Obviously I'm after generals rather than NDA-breaking specifics Smiley

Thanks,
plik
Logged
shawn
Newbie
*
Offline Offline

Posts: 15



View Profile
« Reply #1 on: January 09, 2007, 07:46:39 AM »

For me alot of time is spent in the upfront work of the sale as well as the actual testing.  We have the sales staff to do it but the actual testers are always involved in the sales process from the beginning.  We do everything from the proposal, billing, testing, report writing, and presentation, our sales staff only gets the leads.  In some of the larger organisations they have staff dedicated to some of this stuff as well as dedicated people to write or help review their reports so I am assuming that if you get into a larger consulting firm you would get more face time testing.  On the other side if you ever want to go out on your own you will need the other skills as well.  I would say that I spend on an average week 30% testing, 20% selling, 25% report writing/presentation and reviewing others reports, and 25% work in lab environment testing tools and methodologies and reviewing information similar to this forum and others.  On average  I am doing 2 or 3 internal tests a month at 3 - 4 days each and 4 or 5 external tests from the office coming across the internet at there firewall and public facing DMZ.
Logged

CEH, CCNA, Security+
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #2 on: January 16, 2007, 04:33:14 AM »

Cheers shawn,

I'm glad to see there's a sizable portion of testing new things in there. Too many jobs have "keeping up to day with new technology" in the job description then give you no time to do it in work (I'd be doing it anyway, but it's nice to see it recognised).

Thanks
plik
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.042 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.