Re:Ask HN: Examples of high-value specialised consulting?
by dc-programmer on Wednesday September 28, 2022 @07:33PM
(#33014559)
How does one market themself as a high end pentester? Are companies looking for a certain pedigree?
Re:Ask HN: Examples of high-value specialised consulting?
by bubblehack3r on Wednesday September 28, 2022 @07:47PM
(#33014641)
Most clients are word to mouth, some I meet at conferences and meetups.
Re:Ask HN: Examples of high-value specialised consulting?
by labarilem on Thursday September 29, 2022 @08:57AM
(#33019928)
How did you learn this skill set besides practicing? Any books/courses you'd recommend?
Re:Ask HN: Examples of high-value specialised consulting?
by jmconfuzeus on Thursday September 29, 2022 @02:43PM
(#33025282)
Search for zwink university on youtube.
Re:Ask HN: Examples of high-value specialised consulting?
by lifeofpi331144 on Wednesday September 28, 2022 @06:04PM
(#33013861)
Is this your primary, or is this additional to what you make
Re:Ask HN: Examples of high-value specialised consulting?
by bubblehack3r on Wednesday September 28, 2022 @06:05PM
(#33013872)
This is in addition to other consultancy projects, but does make up about 60% of my yearly income.
Re:Ask HN: Examples of high-value specialised consulting?
by moralestapia on Wednesday September 28, 2022 @05:56PM
(#33013782)
Do you automate your pentesting? If not, let's talk.
Re:Ask HN: Examples of high-value specialised consulting?
by bubblehack3r on Wednesday September 28, 2022 @06:04PM
(#33013864)
Almost no automation, I use automation when it helps the manual process like searching for open ports or discovering directories and files.
I am usually brought in when a competitor gets hacked and the company gets scared or as part of a high quality penetration test.
My experience is mixed between cyber security and fullstack development. This led to me having a very deep knowledge of how to properly consult companies regarding potential vulnerabilities.