Published in Nerd For Tech·Mar 12Are administrative certifications ok if the aim is to become a penetration tester?I see lot of people aiming at getting administrative certifications (e.g., CCNA, CCNP, Microsoft Certification exams, etc.), when they aim to become a penetration tester. I have spent quite some time with penetration testers and have noticed that this approach has its own perils. The problem Strong foundations are important to become…Penetration Testing2 min readPenetration Testing2 min read
Published in Nerd For Tech·May 29, 2022Risks of a cybersecurity careerCybersecurity is one of buzz-words promising the la-la land these days. Everyone is running towards it. However, it will help if one is aware of the 2 big risks. They are, Burn-out, and Not knowing the “why cybersecurity” ? Burn-out is real, more so in cybersecurity. While regulation is driving…Pentesting2 min readPentesting2 min read
Published in Purple Team·May 9, 2021A Day in a Pen-tester’s lifeTLDR-It’s not all pen-testing! My 2 cents on a day in a pentester's life from the vantage point of someone who does it (sometimes) but observes it (a lot). TLDR - it is not all pentesting! Originally published on Quora (https://www.quora.com/How-is-the-day-of-Penetration-tester-will-be) by your truly, as an answer to a question. …Pentest Learnings2 min readPentest Learnings2 min read
Published in Nerd For Tech·Jan 12, 2020Do not kill your pentester for little or no value-addDisclaimer: This would be a long post (culmination of many old posts) with lot of different opinions, thoughts. If weaving is not right, please provide feedback on how it could be corrected. I had the good fortune of reading couple of threads by gentlemen whom I respect for their grounded…Security6 min readSecurity6 min read
Jan 2, 2020External Network VAPT: tools, information sourcesThis is a live post; it will undergo changes, which are captured in change log, provided at the end of this post. Being part of many external VAPT engagements, one thing was clear from outset — methodology is the key, but so are the information sources & tools for conducting…Tech5 min readTech5 min read
Nov 12, 2019How to download Nessus Pro using cURL…assuming you have a valid account with tenable and have paid for your license. Problem Statement You are setting up a cloud server to conduct Nessus scans. You don’t have access to ssh (due to various reasons, let’s not go there). you are using cloud console. How would you download Tenable Nessus Pro on your cloud machine? curl --request GET --url https://www.tenable.com/downloads/api/v2/pages/nessus/files/Nessus-8.7.1-debian6_amd64.deb --header “Authorization: Bearer <auth-code-here>” --output ./fileName.deb1 min read1 min read
Published in Nerd For Tech·Sep 13, 2017How should a CISO deal with XSS?I got many comments (thank you, everyone, as I learnt a lot) for my article that I published some time back. I realized that I need to explain my thoughts in a different way (as many people were of the view that I am championing a person-with-no-technical-knowledge as CISO. …Security4 min readSecurity4 min read
Jul 7, 2017Process Myths, BustedThis article was published by me on LinkedIn earlier. — — — — — — — — — — — — — — — — — — — — — — — — — - Disclaimer:- All of what is written here is my own opinion. ‘nuf said. Raise your…Opinion Piece3 min readOpinion Piece3 min read
Published in Nerd For Tech·Jul 4, 2017Please don’t kill your CISO if he doesn’t know how a virus worksI came across this rant (with the usual don’t-kill-me-am-just-making-a-random-statement-and-fully-intend-to-get-away-with-it disclaimer) on LinkedIn about how CISO’s are clueless about how a virus works, even with CISA/CISM and a decade’s experience under their belt. It got me seething about how this statement is wrong on so many levels, but then I decided…Cybersecurity6 min readCybersecurity6 min read
Jun 27, 2017My PublicationsWell, so far, i have not fared very well as far as content churn is concerned. Mostly because of my self-induced-coma-like-tamasic-laziness. My ancestors would have scoffed at it (maybe they already are. However, if my life is any indication, i think they are benevolent and merciful, like my parents. …Sripati2 min readSripati2 min read
