Pentester Diaries

Welcome back to Pentester Diaries. In this episode, Cobalt’s Grahame Turner interviews Core pentester Stefan Nicula on customer communications. Exploring the importance of transparency, alignment, and empathy. 

Guests:
https://twitter.com/TheInstaGrahame
https://twitter.com/stefan_nicula

Resources:
Slack
Microsoft Teams

Welcome back to Pentester Diaries In this episode, longtime Core member and Cobalt Research Manager, Robert Kugler talks with Grahame Turner, an experienced security technical writer, about report writing, why it’s important, and tips on how to improve your writing as a pentester. 

Guests:
https://twitter.com/robertchrk
https://twitter.com/TheInstaGrahame

Resources:
https://portswigger.net/burp
https://cheatsheetseries.owasp.org/
https://developers.google.com/style/voice
https://communicatehealth.com/wehearthealthliteracy/use-zombies-to-fight-the-passive-voice/
https://www.mindmeister.com/
http://textfiles.com/

Welcome back to Pentester Diaries, a podcast series that aims to take off the hacker hoodie and have a real conversation about this growing profession. 

In this episode, Jon Helmus talks with Joan Bono, a long-time Cobalt Core pentester. They will take a look at understanding pentest severity ratings.

Guests:
https://twitter.com/Moos1e_Moose
https://twitter.com/joan_bono

Resources:
https://cobalt.io/blog/understanding-the-cvss-base-score-an-essential-guide
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
https://portswigger.net/web-security/cross-site-scripting/reflected
https://jquery.com/

In this episode, Jon Helmus talks with Shashank Dixit, a long-time cybersecurity professional with a love for the offensive side of security. Jon and Shashank will talk about Beyond Security Hygiene, diving into the fundamentals, and more.

Guests:
https://twitter.com/shashankdixits
https://twitter.com/Moos1e_Moose

Resources:
https://inservice.sumeru.com/cyber-security/
https://www.virtualbox.org/
https://www.iso.org/isoiec-27001-information-security.html
https://owasp.org/www-project-top-ten/

In this episode, Jon Helmus talks with Matt Buzanowski, a longtime offensive security professional who has done everything from Red Teaming, mobile, physical pentesting, social engineering, and more. Jon and Matt talk about two important concepts related to pentesting: time management and pentest organization.

Guests:
https://twitter.com/mateusz_jozef
https://twitter.com/Moos1e_Moose

Resources:
https://www.defcon.org/
https://www.blackhat.com/
https://grayhat.co/
https://owasp.org/www-project-web-security-testing-guide/
https://trello.com/en
https://www.securityinfowatch.com/cybersecurity/information-security/article/21211106/how-to-set-yourself-up-for-cyber-success

For our first episode,  Jon Helmus talks with Dan Beavin. A pentester with a passion for applying his architect background to security. In this episode, they will dig into business logic. Exploring the importance of understanding every aspect of an application before pentesting.

Guests:
https://twitter.com/danbeavin
https://twitter.com/Moos1e_Moose
Resources mentioned:
https://portswigger.net/burp
https://portswigger.net/burp/documentation/desktop/tools/intruder/using
https://portswigger.net/bappstore/f9bbac8c4acf4aefa4d7dc92a991af2f