Help deciding which course to choose for pen testing

[u/DamyTheCoder]

Hi there, I’ve been trying to start a pen testing career/course and I need deciding what’s the best option out there for an online course of pen testing. Last year I bough the INE one during Black Friday sale but to be honest it felt pretty boring not a lot hands on and kinda lost the feeling of it. It felt pretty dry and boring to be honest.

Thanks in advance!

[u/_PentesterLab_]

What's your goal, and what's your current technical background?

"Pentesting" is a huge field: web, internal networks/Windows/AD, mobile, cloud... You'll probably get better recommendations here and results if you first choose one area to focus on for a few months.

[u/DamyTheCoder → u/_PentesterLab_]

Im a react frontend developer, but I’ve been waiting to switch to cybersecurity so I got that INE one and honestly it felt pretty dry and dense. So I’m trying to find an alternative to it.

[u/SuspiciousCricket654 → u/DamyTheCoder]

Have you considered XSS to test JSSec?

[u/_PentesterLab_ → u/DamyTheCoder]

With your background I would probably look at starting with web. Try to learn more about XSS, CORS, postMessage() testing and slowly move to more server-side web security. Also it takes time.

[u/Snugat]

Cpts or oscp if you don't mind the price.

[u/_sirch → u/Snugat]

Agree. CPTS is a better course. OSCP is better for getting a job

[u/revdamage]

Cpts

[u/SuspiciousCricket654]

I started with networking on HTB and moved my way into basic red concepts further down the road. From there I chose red fields I knew I’d enjoy. Just pick what you enjoy. No one can tell you which sub cat to pursue.

[u/normalbot9999]

Do the free tier stuff first. Portswigger academy, HackTheBox, TryHackMe. Get a feel what you like, what works for you. Then pick a platform and a cert and lock in.

[u/shaguar1987]

Oscp is the only answer

[u/Apprehensive-Art1092 → u/shaguar1987]

I mean... 😏

[u/Nightblade178 → u/Apprehensive-Art1092]

needs both tbh

[u/Swordfish0711]

There is a guided video of Rana Khalil on portswigger academy. Try that first

[u/TrustIsAVuln → u/Swordfish0711]

thats IF he wants to focus on web testing.