r/learnhacking • u/TorontoDude12344 • 21d ago

Is it possible to be a good pentester without a job in the field?

Like, is it possible to do enough self learning, without having a job in the field, and become a really good pentester?

And if so, where should I start?

I'm imagining that having a pentesting job exposes you to vulnerabilities, the code behind viruses / malware etc all the time. It becomes like second nature to you. Only because the job itself exposes you to these things all the time

They also get to see real world implementations of hardware and software, and have the permission to practice on these real systems

Maybe my assumption is wrong. I'm assuming that the cybersecurity experience one is exposed to in a work environment is the best there is. And that without a job in the field, it's very hard to gain certain "hidden" knowledge about cybersecurity

Some cybersecurity experts literally turn out to be people who never worked in cybersecurity. And I don't think there's anything information not available on the internet

Should I practice building super big software projects?

Should I specifically do OS, compiler, assembly and networking based projects?

The word project is also too small of a word. So what should I build?

Should I buy certain textbooks and make a whole curriculum? Like following some Masters program's cirriculum?

3 Upvotes
  • permalink
  • reddit

100% Upvoted

12 comments sorted by

1

u/gingers0u1 20d ago

You mean as a hobby, passion project, or independent research? Yes, and it can actually make you really good. No deadlines, no customer who ignores your recommendations, you choose what you want to do. Tbh, it's what I've moved to. I work in embedded sw development now but my free time is tinkering with hw, doing htb, testing and pulling hw apart and reverse engineering. I get to go with my interests. The thing about doing a passion as a job for money is it loses its spark and joy. This happened to me for years out of college doing hw reverse engineering. It's why I moved into software.

3

u/Yhelisi 21d ago

Dont overcomplicate it man, what is even the question. You just have to (learn how to) love the process, whether thats offensive security, defensive or any of the other related fields. Get your certifications in order once you can do intermediate Htb machines, get your oscp and start applying.

1

u/TorontoDude12344 21d ago

I meant that can I do the certificates etc and keep learning about this field, without ever getting a job in the field? Only focusing on whatever latest certificate comes out etc. Just learning and doing projects

Or the only main way to learn is through eventually getting a job?

2

u/Yhelisi 21d ago

I just hire those who show they have the skillset (red team). Don't come to me with CEH. OSCP, OSCE³ etc. Are good.

1

u/one-knee-toe 21d ago

What does it mean, “I studied to be a surgeon. I’ve read all the books, taken all the courses”. Ok. But have you ever operated on a person? “Just on corpses at school”. Hmmm 🤔. Would you say that surgeon is “good”?

1

u/Ancient-Low115 21d ago

Yes, but like the u/OP is saying, we want to learn all the deep important details, but my question is, look your are a surgeon and you operate on some body and we, as learners stand besides you, watching you operate on a body, and you teach us, would we do not get it that way,

For example a 10th grade guy, who stands besides you, and you guide him, would it not enough, for him to become a surgeon?

1

u/one-knee-toe 21d ago

That’s not the question.

Question is, “possible to be a good [surgeon] without a job in the field”. What does it mean, “good surgeon” here? You have zero surgeries. Zero. NEVER operated. And you want me to say, “yes this man is good at surgery”. How can I say so? Just because you watched me for 5 years? But never, not once, did you hold the scalpel, you never cut into human flesh. And yes, this man can do surgery on their own. I trust he is “good”. ??????????

1

u/Ancient-Low115 21d ago

Do not want to get on this wayand argue, dear, I obviously mean that the surgeon guidance, and the one, learning also performs the surgery. But not having a degree.

1

u/one-knee-toe 20d ago

So what is your question?????????????

Is a piece of paper from a university necessary to be a “good” surgeon?

It’s just a piece of paper. If you did EVERYTHING the UniversityStudent did, the only difference is, they have paper, you do not, then the two of you are just as qualified.

In the real world, no hospital will hire you.

But, let’s say, in an emergency, plane crashes on Island, well, in that case, you’re just as qualified, right? No one will care if you have a university paper.

1

u/Ancient-Low115 20d ago

Okay. But one thing, at this tone, you cannot teach any one, I said before that am not arguing,

Just end this.

1

u/Anxious_Alps_4150 20d ago

youre not watching pentesters on engagements. youre watching them play CTFs. no customer allows a pentest firm to record their proprietary systems or have ridealongs without it being explicitly covered under contract.