just caught him on fb actually...
What does he do? Networking or Coding or both?
I've done both networking and coding in the past. In terms of Pentesting, it's mostly network based. Internet and External network audits.
I rarely do program audits or code reviews.
I used to work as a programmer though...
does he recommend the UNSW Comp science, or will any IT related course do. im thinking of Bach Science in IT at UTS.
How was his course at uni? hands on?
I do recommend Comp Sci. It's what I did and I think it's probably the best suited course for someone who wants to do pentesting.
Comp Sci at UNSW yes.
UNSW have a new Pentesting society that might interest you.
Being a Pentester involves knowing a little bit about a lot of different things. The Comp Sci degree is very free in that you can choose from a lot of subjects without much restriction.
My program was pretty good. Not much to do with security. But it's like that everywhere. Most of what I know was self taught.
I think it's a good balance of theory and prac, but it depends a lot on the specific course.
(In regards to B. Science in IT at UTS):
Fuck... It's all the same!
I haven't heard anything about that course, so I can't say.
But choose a program (and a uni) that offers the courses that you want.
No one cares what written on your piece of paper after you've graduated. What matters is your ability to prove that you know what you're talking about.
Don't get me wrong, the actual degree is important. But just make sure UTS offer the courses that you want to do.
If you want to do pentesting, program flexibility is pretty important, I'd say.
what did he do for his work experience and where?
This program [CompSci at UNSW) didn't involve work experience. But I did work at a physical security company called Pacom writing software in C#. This was while I was at uni.
Does he make good money? is he a contractor or a full time salary?
At the moment i'm full time. Fresh out of uni you can expect somewhere between 50k and 60k per year.
This will quickly increase when you can show that you're able to do your job independently.
im a good coder if i say so myself but its not what i like. i want to be a straight Network Security Specialist, do i need to know my programming?
Programming helps. I rarely write full scale applications as a pentester, but I do write scripts in Python and Bash to help with the task.
You should know enough about various languages to be able to understand how vulnerabilities occur.
what languages does he use? Python, perl, C, C++?
I know C, C#, Java, Python, Bash, PHP...
A little Perl.
But surprisingly, not C++... =p
Let me get you some resources that helped me a lot.
My top piece of advice:
http://blog.g0tmi1k.com/
Read every blog post. Watch every video and make sure you understand what's going on. If you don't, research!
And then, do it yourself.
It's a world of difference between reading about it and actually doing it.
Personally, I learn the most when I do it by hand.
Invest in VMWare Workstation (legally or not, no one will care).
It's great for setting up a lab environment and will save you thousands on building physical machines.
OH!
This site features VMs that are "Vulnerable by Design".
http://vulnhub.com/
They are good to play with.
This is THE operating system for hackers/pentesters
http://www.kali.org/
I use it daily.
I wouldn't advise testing your skills on real companies. They don't like it and it could land you in a lot of trouble.
I know a guy facing 10 years jail for simply defacing a government website.