We think we know

We think we know

By Pentest-Tools.comScienceTechnologyEducation
Download on the App Store

We think we know episodes

  • We think we know how to give pentest clients what they really need

    It’s not just penetration testing, just like today’s guest is not just an offensive security pro. 

    If you’re the ambitious type who’s always up for new challenges, then you’re most likely going to resonate with today’s guest and his approach.  

    Experienced penetration tester and Volkis co-founder, Alexei Doudkine joins us in the second episode of the podcast to debunk pentesting misconceptions. 

    With 10+ years of offensive security experience under his belt and his learnings as a business owner, Alexei challenges the status quo to get other hackers to walk a mile in their clients' shoes. 

    You’ll also hear Alexei unpack the skills and mindset it takes to deliver quality in penetration testing and become a better ethical hacker. Some of these ideas may make you uncomfortable - and that’s why we believe they’re worth listening to. 

    Whether it’s about absorbing technical complexities like a sponge or developing an intuitive perception of vulnerabilities, this conversation highlights the aspects of penetration testing that make it a true craft. 

    So, come along with us on We think we know, as we unpack the layers and narratives shaping offensive security work.

    In this episode, you’ll learn:

    • Why it’s not about data, but how you use it and the human impact behind it. [12:24]
    • What it takes to develop your hacker intuition that tells you there’s something there - even before you have proof [15:25]
    • Why automation is not the problem, but using it as a standard checkbox in your engagements is [19:00]
    • How to use learning to also stay humble, rooted in the here and now [27:30]
    • Why it’s worth prioritizing people over security testing during tougher economic times [44:45]
    • The perks of being uncomfortable, hungry for learning, and doing your best work [49:20]

    By the end of this episode, you'll look at your work - and the infosec community - with fresh eyes.  

    Resources from this episode:
    • Alexei on Linkedin
    • Alexei’s hacker origin story on the Volkis blog
    • Alexei on the Cyber Empathy podcast - Ep. 5, Season 1
    • The Volkis Independence Policy
    Listen to this episode on:
    • Spotify
    • Apple Podcasts
    • Amazon Podcasts
    • Google Podcasts
    53 min
  • We think we know how to explain the value of a penetration test

    Welcome to the kick-off episode of the We think we know podcast! 

    Whether you’re looking for a fresh perspective, to learn about and from our guest, or just to see if this podcast is worth your time, thanks for choosing to spend some time with us! We don’t take it for granted.

    Today, we've got the fantastic Alethe Denis with us. Wearer of many hats and a generous contributor to the cybersecurity community, Alethe’s work covers a broad range of offensive security, from pentesting to social engineering, and red teaming, including tabletop exercises. 

    In 2019, Alethe took home the top prize at the prestigious DEF CON Social Engineering CTF. She later snagged a DEF CON Black Badge, becoming a go-to social engineering expert and cybersecurity ally for companies around the world.

    Sharing examples from her real-world experience, Alethe helps us break down a stubborn misconception: that penetration testing is merely a commodity, another box to tick off for compliance. 

    By all means, this is not a new issue in offensive security. But it is a persistent one.

    When seen as a commodity, pentesting undervalues expertise, it lowers pay, leads to superficial testing scopes, and reduces the satisfaction penetration testers get from their work.

    That’s why we’re talking about it.

    Alethe offers very practical tips and language you can use to highlight the value of your work and the nuances it involves. 

    You’re in for a treat! 

     

    Hacker's toolbox from this episode:

    • Alethe on Twitter
    • Alethe’s website
    • Alethe on the Darknet Diaries - EP. 107
    • Social engineering adds depth to red team exercises
    55 min
  • Welcome to We *think* we know!

    🤩 We’re launching a podcast!

    On Nov. 7, the first episode of We Think We Know will be in your headphones! 

    Here's the low-down:

    🤔 What is it about?
    Learning how to be better hackers by challenging assumptions and digging deeper into the why, how, and what of offensive security. In the 1st season, we're unpacking why #penetrationtesting is a craft and *not* a commodity.

    🎤 Who’s gonna be on? 
    Some of the best #offensivesecurity professionals, who joined us to reveal their unique skills, traits, and real-world experiences in a way that directly fuels your growth.

    😎 What’s in it for me? 
    Thought-provoking ideas, practical advice you can use straight away, battle-tested advice on how to present your work and develop your career. 

    👉 Why are *we* doing this? 
    Because we care deeply about the people in this community and the work they do. 
    Because we believe that learning from each other is what made #ethicalhacking what it is today - and what it keeps it evolving. 
    Because there are a lot of hackers whose stories can educate and inspire others, both new to this field and already committed to it.

    📌 If you want to find out the moment We *Think* We Know comes out, subscribe to our Youtube channel: https://www.youtube.com/@PentestToolscom/podcasts

    1 min

About We think we know

From the publisher's feed

We think we know how computer systems work, but how come they keep surprising us?