My Mission to becoming a pentester

I'm currently working on becoming a pentester and im on here just looking for some extra advice. right now i have the following certifications

Linux +
Network +
Security +
CLA
LPIC-1
LPIC-2

I'm looking at getting the following certs this year

CEH, CHFI, CISSP, RHCSA, RHCE, MCSA 2008 (before july) and OSCP. Now with all of this certs plus 10 years experience i should be ok to get into the pentesting field ? what are your thoughts

Find more posts tagged with

Comments

lsud00d

bsdbandit wrote: »

CEH, CHFI, CISSP, RHCSA, RHCE, MCSA 2008 (before july) and OSCP.

This list is beyond advantageous for a 1 year period IMHO.

Also you noted the MCSA before July...just to clarify, the MCITP is retiring in July but the MCSA 2008 will still be available.

It is a good list to get into security, BUT how good are you with pentesting tools? Can you script in python? Are you fluent in BT? What about Wireshark? etc...

Also, have you messed around with Metasploitable, Ultimate LAMP, or DVL? Do you have a VM lab?

bsdbandit

I'm very fluent in python and C, I also fluent with wireshark as for backtrack i need some more work ive used metasploit. i work lamp right now.

naftalir

would really recommend the eCPPT, really good with web app pen-testing