Penetration Testing: Re: Skill set ?

[Pete Herzog <lists () isecom org>]

> What would be the skill set required to start off as a penetration
> tester?

Check out the Jack of All Trades project which helps the mindset, one of
the harder things to develop, as Tom suggested.  See
http://www.isecom.org/projects/jack.shtml.  It's used in all OPST and
OPSA projects to demand more than just seeing tools run or some
memorization techniques out of ISECOM students.  Then again the
OPST/OPSA trainings or even the OSSTMM for that matter are really about
pen-testing any more than being a combat jet pilot is about flying. 
Just give the Jack lessons a try- you'll like the exercises.

Technical skills, well, you can't get enough.  It's like speaking
different languages, the more you know, the better you understand
foreign tongues.

Sincerely,
-pete.

-- 
Pete Herzog - Managing Director - pete () isecom org 
ISECOM - Institute for Security and Open Methodologies
www.isecom.org - www.osstmm.org
www.hackerhighschool.org - www.isestorm.org
-------------------------------------------------------------------
ISECOM is the OSSTMM Professional Security Tester (OPST),
OSSTMM Professional Security Analyst (OPSA), and Hacker Highschool 
Teacher certification authority. 




Thomas Springer wrote:

> focus on your MINDSET rather than your skillset.
> be curios. you'll find whatever special-knowledge you need around the
> net, but you won't find anything if you lack curiosity.
>
> tom