SlideShare a Scribd company logo
1 of 70
CYBERSECURITY
INTRO
Understanding the basic concept & useful links/resources & setup
virtual environment & networking
START
My name is Maryna Kamienieva and I’m a
second year student in PJATK on Computer
Science
I’m interested in cybersecurity, especially in Red
Teaming and in engineering.
About me
MY GOAL
● To show cybersecurity life
● Help you to start and understand which path
you prefer more
● Share my knowledge and expand
AGENDA
● What is cybersecurity?
● Platforms to practise/useful articles!
● What is Virtualbox & VMware?
● What is ISO/OVA files?
● Installation
● Homework
● Practise
RED TEAM & BLUE TEAM & PURPLE TEAM
SOFT SKILLS
● Productivity
● Training abilities
● Work attitudes
● Independence
● Teamwork
● Analytical skills
● Communication & Presentation
● Decision making
● Initiative
● Language
WEB PENTEST & INFRA PENTEST
Web pentesting focuses on web applications and services, while
infrastructure pentesting covers a broader range of network devices and
systems.
HARD SKILLS - Web Pentest
EXPERIENCE LEVEL SKILLS CERTIFICATIONS
Up to year Trainee
● OWASP Top 10
● Kali Linux
● Windows
● Bash scripting
● Burp Suite
Pentest+
HARD SKILLS - Web Pentest
EXPERIENCE LEVEL SKILLS CERTIFICATIONS
~ 1 year Junior
● Programming skills
● Network pentest
● MetaSploit & CVE's
● Wi-Fi attacks
● SIEM & SOC
eJPT, CEH
HARD SKILLS - Web Pentest
EXPERIENCE LEVEL SKILLS CERTIFICATIONS
2-4 years Middle
● WAF
● Privilege Escalation
● DLL hijacking
● Python
● Web fundamentals
OSCP, eWPTX
HARD SKILLS - Web Pentest
EXPERIENCE LEVEL SKILLS CERTIFICATIONS
5-6 years Senior
● DevSecOps,
Black/Grey/White Box
● Blue team
OSWE, OSCE, CEPT,
CCPT, CRTOP
HARD SKILLS - Infra Pentest
EXPERIENCE LEVEL SKILLS CERTIFICATIONS
Up to year Trainee
● Kali Linux
● Metasploit
● OpenVAS
● OSINT
● Windows
CEH
HARD SKILLS - Infra Pentest
EXPERIENCE LEVEL SKILLS CERTIFICATIONS
~ 1 year Junior
● MSF DB
● Responder
● Mimikatz
● Psexec
● OWASP Top 10
eJPT, CEH Practical
HARD SKILLS - Infra Pentest
EXPERIENCE LEVEL SKILLS CERTIFICATIONS
2-4 years Middle
● AWS
● Google Cloud
● Kubernetes
● Docker
● DevOps
● SIEM/IPS/EDR
OSCP, CCNA, OSCE,
eCCPTv2
HARD SKILLS - Infra Pentest
EXPERIENCE LEVEL SKILLS CERTIFICATIONS
5-6 years Senior
● MITRE ATT&CK Kill
Chain
● Red teaming
● hardware hacking
● RFID
eCPPTXv2 CCNP
Security
THE CERTIFICATE
DOESN’T AFFECT
EMPLOYMENT
PLATFORMS TO PRACTISE
PLATFORMS TO PRACTISE
PLATFORMS TO PRACTISE
VirtualBox is open-source software for virtualizing the x86 computing
architecture. It acts as a hypervisor, creating a VM (virtual machine) where
the user can run another Operating System.
VIRTUALBOX
VMware is virtualization and cloud computing software and services. It's
best known for its VMware vSphere product, which is a leading server
virtualization platform used in data centers to run multiple virtual machines
on a single physical server.
VMWARE
● VirtualBox is a free and open-source software program
● The free version of VMware for personal and educational use offers
limited functionality.
DIFFERENCE BETWEEN 2 ENVIRONMENTS
● Clones and snapshots, for example, are not supported. VMware also
does not provide software virtualization, although VirtualBox does.
● VirtualBox supports a variety of virtual disc types, integration tools, but
VMware doesn’t support a large number of different disc formats.
DIFFERENCE BETWEEN 2 ENVIRONMENTS
UTM is a full featured system emulator and virtual machine host for iOS
and macOS, based on QEMU. It is an alternative variant for Mac Silicone.
ALTERNATIVE FOR MAC SILICONE - UTM
ISO files are disk image files that contain the contents of a CD or DVD. They
are often used to install operating systems or software on virtual machines.
ISO FILE
Open Virtualization Application/Appliance
Is an OVF(Open Virtualization Format) directory saved as an archive of a
virtual machine (VM) appliance.
OVA FILE
INSTALLATION
UTM -
INSTALLATION
PRACTISE
HOMEWORK
● Register at least on one of a practical platforms
● Get started to do the tasks on a platform
● Additional tasks for preparation to Kali Linux
Social Media
Linkedin
DISCORD SERVER
THANK YOU FOR ATTENTION!
❤️

More Related Content

Similar to Cybersecurity Workshop #1.pptx

OISC 2019 - The OWASP Top 10 & AppSec Primer
OISC 2019 - The OWASP Top 10 & AppSec PrimerOISC 2019 - The OWASP Top 10 & AppSec Primer
OISC 2019 - The OWASP Top 10 & AppSec PrimerThreatReel Podcast
 
Machine learning in cybersecutiry
Machine learning in cybersecutiryMachine learning in cybersecutiry
Machine learning in cybersecutiryVishwas N
 
OpenStack for EDGE computing
OpenStack for EDGE computingOpenStack for EDGE computing
OpenStack for EDGE computingHazzim Anaya
 
Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...
Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...
Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...PranavPatil822557
 
Cumulus Networks & Puppet Labs webinar
Cumulus Networks & Puppet Labs webinarCumulus Networks & Puppet Labs webinar
Cumulus Networks & Puppet Labs webinarCumulus Networks
 
1. introduction to communication networks subject introduction
1. introduction to communication networks   subject introduction1. introduction to communication networks   subject introduction
1. introduction to communication networks subject introductionJAIGANESH SEKAR
 
Introduction to Virtualization.pptx
Introduction to Virtualization.pptxIntroduction to Virtualization.pptx
Introduction to Virtualization.pptxlatifdhalait
 
SDN NFV NV OpenNetwork @ VMUG.IT 20150529
SDN NFV NV OpenNetwork @ VMUG.IT 20150529SDN NFV NV OpenNetwork @ VMUG.IT 20150529
SDN NFV NV OpenNetwork @ VMUG.IT 20150529VMUG IT
 
What Is OpenStack | OpenStack Tutorial For Beginners | OpenStack Training | E...
What Is OpenStack | OpenStack Tutorial For Beginners | OpenStack Training | E...What Is OpenStack | OpenStack Tutorial For Beginners | OpenStack Training | E...
What Is OpenStack | OpenStack Tutorial For Beginners | OpenStack Training | E...Edureka!
 
Quantum - Virtual networks for Openstack
Quantum - Virtual networks for OpenstackQuantum - Virtual networks for Openstack
Quantum - Virtual networks for Openstacksalv_orlando
 
Présentation openstackinaction v1.2
Présentation openstackinaction v1.2Présentation openstackinaction v1.2
Présentation openstackinaction v1.2Regis Allegre
 
Learn OpenStack from trystack.cn
Learn OpenStack from trystack.cnLearn OpenStack from trystack.cn
Learn OpenStack from trystack.cnOpenCity Community
 
OpenNebula Interoperability and Portability DMTF 2011
OpenNebula Interoperability and Portability  DMTF 2011OpenNebula Interoperability and Portability  DMTF 2011
OpenNebula Interoperability and Portability DMTF 2011Ignacio M. Llorente
 
A Decentralized Cloud Firewall Framework with Resources Provisioning Cost Opt...
A Decentralized Cloud FirewallFramework with Resources ProvisioningCost Opt...A Decentralized Cloud FirewallFramework with Resources ProvisioningCost Opt...
A Decentralized Cloud Firewall Framework with Resources Provisioning Cost Opt...Pranav Gontalwar
 

Similar to Cybersecurity Workshop #1.pptx (20)

Shree_Duth_Awasthi_Resume
Shree_Duth_Awasthi_ResumeShree_Duth_Awasthi_Resume
Shree_Duth_Awasthi_Resume
 
OISC 2019 - The OWASP Top 10 & AppSec Primer
OISC 2019 - The OWASP Top 10 & AppSec PrimerOISC 2019 - The OWASP Top 10 & AppSec Primer
OISC 2019 - The OWASP Top 10 & AppSec Primer
 
PEDDINTI TARAKESAM
PEDDINTI TARAKESAMPEDDINTI TARAKESAM
PEDDINTI TARAKESAM
 
Machine learning in cybersecutiry
Machine learning in cybersecutiryMachine learning in cybersecutiry
Machine learning in cybersecutiry
 
eduhub360
eduhub360eduhub360
eduhub360
 
LinuxTag 2013
LinuxTag 2013LinuxTag 2013
LinuxTag 2013
 
OpenStack for EDGE computing
OpenStack for EDGE computingOpenStack for EDGE computing
OpenStack for EDGE computing
 
Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...
Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...
Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...
 
Cumulus Networks & Puppet Labs webinar
Cumulus Networks & Puppet Labs webinarCumulus Networks & Puppet Labs webinar
Cumulus Networks & Puppet Labs webinar
 
1. introduction to communication networks subject introduction
1. introduction to communication networks   subject introduction1. introduction to communication networks   subject introduction
1. introduction to communication networks subject introduction
 
Introduction to Virtualization.pptx
Introduction to Virtualization.pptxIntroduction to Virtualization.pptx
Introduction to Virtualization.pptx
 
Mohammad-Darweesh_CV
Mohammad-Darweesh_CVMohammad-Darweesh_CV
Mohammad-Darweesh_CV
 
SDN NFV NV OpenNetwork @ VMUG.IT 20150529
SDN NFV NV OpenNetwork @ VMUG.IT 20150529SDN NFV NV OpenNetwork @ VMUG.IT 20150529
SDN NFV NV OpenNetwork @ VMUG.IT 20150529
 
What Is OpenStack | OpenStack Tutorial For Beginners | OpenStack Training | E...
What Is OpenStack | OpenStack Tutorial For Beginners | OpenStack Training | E...What Is OpenStack | OpenStack Tutorial For Beginners | OpenStack Training | E...
What Is OpenStack | OpenStack Tutorial For Beginners | OpenStack Training | E...
 
Quantum - Virtual networks for Openstack
Quantum - Virtual networks for OpenstackQuantum - Virtual networks for Openstack
Quantum - Virtual networks for Openstack
 
AppSec & OWASP Top 10 Primer
AppSec & OWASP Top 10 PrimerAppSec & OWASP Top 10 Primer
AppSec & OWASP Top 10 Primer
 
Présentation openstackinaction v1.2
Présentation openstackinaction v1.2Présentation openstackinaction v1.2
Présentation openstackinaction v1.2
 
Learn OpenStack from trystack.cn
Learn OpenStack from trystack.cnLearn OpenStack from trystack.cn
Learn OpenStack from trystack.cn
 
OpenNebula Interoperability and Portability DMTF 2011
OpenNebula Interoperability and Portability  DMTF 2011OpenNebula Interoperability and Portability  DMTF 2011
OpenNebula Interoperability and Portability DMTF 2011
 
A Decentralized Cloud Firewall Framework with Resources Provisioning Cost Opt...
A Decentralized Cloud FirewallFramework with Resources ProvisioningCost Opt...A Decentralized Cloud FirewallFramework with Resources ProvisioningCost Opt...
A Decentralized Cloud Firewall Framework with Resources Provisioning Cost Opt...
 

More from GDSC PJATK

Introduction to Quantum Computing
Introduction to Quantum ComputingIntroduction to Quantum Computing
Introduction to Quantum ComputingGDSC PJATK
 
Bit N Build Poland
Bit N Build PolandBit N Build Poland
Bit N Build PolandGDSC PJATK
 
DevFest Warsaw
DevFest WarsawDevFest Warsaw
DevFest WarsawGDSC PJATK
 
Solution Challenge
Solution ChallengeSolution Challenge
Solution ChallengeGDSC PJATK
 
Christmas Coding
Christmas CodingChristmas Coding
Christmas CodingGDSC PJATK
 
Journey to Google
Journey to GoogleJourney to Google
Journey to GoogleGDSC PJATK
 

More from GDSC PJATK (8)

Introduction to Quantum Computing
Introduction to Quantum ComputingIntroduction to Quantum Computing
Introduction to Quantum Computing
 
SheDev 2024
SheDev 2024SheDev 2024
SheDev 2024
 
Bit N Build Poland
Bit N Build PolandBit N Build Poland
Bit N Build Poland
 
DevFest Warsaw
DevFest WarsawDevFest Warsaw
DevFest Warsaw
 
Info Session
Info SessionInfo Session
Info Session
 
Solution Challenge
Solution ChallengeSolution Challenge
Solution Challenge
 
Christmas Coding
Christmas CodingChristmas Coding
Christmas Coding
 
Journey to Google
Journey to GoogleJourney to Google
Journey to Google
 

Recently uploaded

presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century educationjfdjdjcjdnsjd
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesrafiqahmad00786416
 
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...Orbitshub
 
CNIC Information System with Pakdata Cf In Pakistan
CNIC Information System with Pakdata Cf In PakistanCNIC Information System with Pakdata Cf In Pakistan
CNIC Information System with Pakdata Cf In Pakistandanishmna97
 
Artificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyArtificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyKhushali Kathiriya
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherRemote DBA Services
 
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...apidays
 
JohnPollard-hybrid-app-RailsConf2024.pptx
JohnPollard-hybrid-app-RailsConf2024.pptxJohnPollard-hybrid-app-RailsConf2024.pptx
JohnPollard-hybrid-app-RailsConf2024.pptxJohnPollard37
 
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWEREMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWERMadyBayot
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes
 
Vector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptxVector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptxRemote DBA Services
 
MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MIND CTI
 
FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024The Digital Insurer
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...apidays
 
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)Samir Dash
 
AI in Action: Real World Use Cases by Anitaraj
AI in Action: Real World Use Cases by AnitarajAI in Action: Real World Use Cases by Anitaraj
AI in Action: Real World Use Cases by AnitarajAnitaRaj43
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobeapidays
 
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...apidays
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAndrey Devyatkin
 

Recently uploaded (20)

presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challenges
 
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...
 
CNIC Information System with Pakdata Cf In Pakistan
CNIC Information System with Pakdata Cf In PakistanCNIC Information System with Pakdata Cf In Pakistan
CNIC Information System with Pakdata Cf In Pakistan
 
Artificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyArtificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : Uncertainty
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
 
JohnPollard-hybrid-app-RailsConf2024.pptx
JohnPollard-hybrid-app-RailsConf2024.pptxJohnPollard-hybrid-app-RailsConf2024.pptx
JohnPollard-hybrid-app-RailsConf2024.pptx
 
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWEREMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Vector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptxVector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptx
 
MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024
 
FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
 
AI in Action: Real World Use Cases by Anitaraj
AI in Action: Real World Use Cases by AnitarajAI in Action: Real World Use Cases by Anitaraj
AI in Action: Real World Use Cases by Anitaraj
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
 
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
 
Understanding the FAA Part 107 License ..
Understanding the FAA Part 107 License ..Understanding the FAA Part 107 License ..
Understanding the FAA Part 107 License ..
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 

Cybersecurity Workshop #1.pptx

  • 1. CYBERSECURITY INTRO Understanding the basic concept & useful links/resources & setup virtual environment & networking START
  • 2. My name is Maryna Kamienieva and I’m a second year student in PJATK on Computer Science I’m interested in cybersecurity, especially in Red Teaming and in engineering. About me
  • 3. MY GOAL ● To show cybersecurity life ● Help you to start and understand which path you prefer more ● Share my knowledge and expand
  • 4. AGENDA ● What is cybersecurity? ● Platforms to practise/useful articles! ● What is Virtualbox & VMware? ● What is ISO/OVA files? ● Installation ● Homework ● Practise
  • 5.
  • 6. RED TEAM & BLUE TEAM & PURPLE TEAM
  • 7.
  • 8.
  • 9. SOFT SKILLS ● Productivity ● Training abilities ● Work attitudes ● Independence ● Teamwork ● Analytical skills ● Communication & Presentation ● Decision making ● Initiative ● Language
  • 10. WEB PENTEST & INFRA PENTEST Web pentesting focuses on web applications and services, while infrastructure pentesting covers a broader range of network devices and systems.
  • 11. HARD SKILLS - Web Pentest EXPERIENCE LEVEL SKILLS CERTIFICATIONS Up to year Trainee ● OWASP Top 10 ● Kali Linux ● Windows ● Bash scripting ● Burp Suite Pentest+
  • 12. HARD SKILLS - Web Pentest EXPERIENCE LEVEL SKILLS CERTIFICATIONS ~ 1 year Junior ● Programming skills ● Network pentest ● MetaSploit & CVE's ● Wi-Fi attacks ● SIEM & SOC eJPT, CEH
  • 13. HARD SKILLS - Web Pentest EXPERIENCE LEVEL SKILLS CERTIFICATIONS 2-4 years Middle ● WAF ● Privilege Escalation ● DLL hijacking ● Python ● Web fundamentals OSCP, eWPTX
  • 14. HARD SKILLS - Web Pentest EXPERIENCE LEVEL SKILLS CERTIFICATIONS 5-6 years Senior ● DevSecOps, Black/Grey/White Box ● Blue team OSWE, OSCE, CEPT, CCPT, CRTOP
  • 15. HARD SKILLS - Infra Pentest EXPERIENCE LEVEL SKILLS CERTIFICATIONS Up to year Trainee ● Kali Linux ● Metasploit ● OpenVAS ● OSINT ● Windows CEH
  • 16. HARD SKILLS - Infra Pentest EXPERIENCE LEVEL SKILLS CERTIFICATIONS ~ 1 year Junior ● MSF DB ● Responder ● Mimikatz ● Psexec ● OWASP Top 10 eJPT, CEH Practical
  • 17. HARD SKILLS - Infra Pentest EXPERIENCE LEVEL SKILLS CERTIFICATIONS 2-4 years Middle ● AWS ● Google Cloud ● Kubernetes ● Docker ● DevOps ● SIEM/IPS/EDR OSCP, CCNA, OSCE, eCCPTv2
  • 18. HARD SKILLS - Infra Pentest EXPERIENCE LEVEL SKILLS CERTIFICATIONS 5-6 years Senior ● MITRE ATT&CK Kill Chain ● Red teaming ● hardware hacking ● RFID eCPPTXv2 CCNP Security
  • 23. VirtualBox is open-source software for virtualizing the x86 computing architecture. It acts as a hypervisor, creating a VM (virtual machine) where the user can run another Operating System. VIRTUALBOX
  • 24. VMware is virtualization and cloud computing software and services. It's best known for its VMware vSphere product, which is a leading server virtualization platform used in data centers to run multiple virtual machines on a single physical server. VMWARE
  • 25. ● VirtualBox is a free and open-source software program ● The free version of VMware for personal and educational use offers limited functionality. DIFFERENCE BETWEEN 2 ENVIRONMENTS
  • 26. ● Clones and snapshots, for example, are not supported. VMware also does not provide software virtualization, although VirtualBox does. ● VirtualBox supports a variety of virtual disc types, integration tools, but VMware doesn’t support a large number of different disc formats. DIFFERENCE BETWEEN 2 ENVIRONMENTS
  • 27. UTM is a full featured system emulator and virtual machine host for iOS and macOS, based on QEMU. It is an alternative variant for Mac Silicone. ALTERNATIVE FOR MAC SILICONE - UTM
  • 28. ISO files are disk image files that contain the contents of a CD or DVD. They are often used to install operating systems or software on virtual machines. ISO FILE
  • 29. Open Virtualization Application/Appliance Is an OVF(Open Virtualization Format) directory saved as an archive of a virtual machine (VM) appliance. OVA FILE
  • 32.
  • 33.
  • 34.
  • 35.
  • 36.
  • 37.
  • 38.
  • 39.
  • 40.
  • 41.
  • 42.
  • 43.
  • 44.
  • 45.
  • 46.
  • 47.
  • 48.
  • 49.
  • 50.
  • 51.
  • 52.
  • 53.
  • 54.
  • 55.
  • 56.
  • 57.
  • 58.
  • 59.
  • 60.
  • 61.
  • 62.
  • 63.
  • 64.
  • 65.
  • 67. HOMEWORK ● Register at least on one of a practical platforms ● Get started to do the tasks on a platform ● Additional tasks for preparation to Kali Linux
  • 70. THANK YOU FOR ATTENTION! ❤️