QnA Friday 8 - What is Penetration Testing | Introduction to Penetration Testing | Pen Test Tools

I will meet you every Friday and answer your questions
Send your queries at:
[e-mail]
mention your name and place
_____________________________________________________________
Today's Question:
Dear Raghav,
Can you please let us know about Penetration Testing?
Ritesh
_____________________________________________________________
What is Penetration Testing or Pen Testing
Why to do Penetration Testing
What if i am a Penetration Tester
Types of Penetration Testing
Methods of Penetration Testing
Penetration Testing Tools
_____________________________________________________________
Like on Facebook :
/ automationstepbystep
Follow on Twitter:
/ automationsbs
Subscribe on TH-cam :
/ automationstepbystep
_______ ONLINE COURSES TO LEARN _______
Visit - automationstepbystep.com/

[@swatiinje1731]

Your video was very helpful. The example made it really clear to understand about the penetration testing.

[@RaghavPal]

Glad to know this Swati

[@Ari-118]

Wonderful! U r very calm when u talk, some creators talk so fast.

[@RaghavPal]

thanks for your message

[@Ari-118]

Automation Step by Step - Raghav Pal have u made video on Types Of Pen Test Tools yet? If not then please make it.

[@RaghavPal]

Not yet Arpit, will plan soon

[@fazlulhoque1081]

Thanks, very well described.

[@RaghavPal]

Glad it was helpful Fazlul

[@DorothyGaleRoofingGroup]

Great work. Simple and to the point, what a relief.

[@RaghavPal]

Thanks a lot

[@ify.a7437]

Thanks for the Video.. Good explanations. Thanks.

[@RaghavPal]

Glad it was helpful

[@mohammaditoday]

very nice information,,,, good,,,,dear

[@RaghavPal]

Thanks for watching Tariq

[@PC-ky3qo]

Hello sir! I loved this video. can you make a video on different browsers used in the security field and how they function and more information about that? Thank you.

[@RaghavPal]

I will do Prithvi, thanks for watching

[@sankarpsr]

very lucid explanation...

[@RaghavPal]

Thanks

[@prakaranverma3278]

Sir make a whole playlist of security testing

[@RaghavPal]

I will do Prakaran

[@anantheswar7954]

@@RaghavPal Sir - have you made the playlist? am eagerly waiting for that.

[@bishalkarmakar4323]

Sir thanks for your kind information...

[@RaghavPal]

You're welcome Bishal

[@kakmca]

Crystal clear explanation. Great, thank you.

[@RaghavPal]

Glad it was helpful Ashok

[@Samradh_24]

Nice video sir 👍🏻

[@rajanrangwal8895]

Wow man very nicely explained every thing in one video

[@RaghavPal]

Glad it helped Rajan

[@ophebeeoriginal2399]

Awesome 👏

[@RaghavPal]

Thanks 🤗

[@smittrivedi4016]

I watched your Jmeter master class video and I have surpurbb experience. Thank you for making wonderful series of testing.

[@RaghavPal]

Glad you like them

[@mutasimhasanmuhi3607]

Short and to the point. What everyone likes. Keep it up.

[@RaghavPal]

Thanks

[@user-il6iz4sh3z]

Thanks a lot!

[@RaghavPal]

Most welcome

[@aimanjavid8441]

thankU

[@RaghavPal]

you're welcome Aiman

[@amirmahboob3363]

what a beautiful way of explanation

[@RaghavPal]

Thanks Amir

[@saivenkatkaveti4210]

Very informative.

[@RaghavPal]

Thanks Sai

[@ramcharanteja5718]

Got it sir

[@RaghavPal]

Great to know Ramcharan

[@shuhamchaudhary4238]

Good 👍

[@RaghavPal]

Thanks Shubham

[@abhishek.bansal05]

Amazing content Raghav Sir!

[@RaghavPal]

Most welcome Abhishek

[@aswath7]

Clear explanation..

[@RaghavPal]

Happy to know Mohammed

[@knoxx1747]

Thanks now I'm clear

[@RaghavPal]

Great to know this

[@swapnilingole9313]

Hello raghav , hope u r doing well. Thanks for your wonderful series of learning. I wanted to learn penetration testing. Could u please make a separate playlist for penetration testing? That will ne very helpful for us to learn it.

[@RaghavPal]

I will plan on this Swapnil

[@sumitshriwastwa6037]

Explain a lot in simple wordings. Great!!

[@RaghavPal]

Thanks for watching Sumit

[@prashantsinghbanafer8755]

great video sir

[@RaghavPal]

Thanks Prashant

[@shahzaibhussaini1027]

Thank u Raghav

[@RaghavPal]

You're welcome Shahzaib

[@sagarjadhav9184]

Thanks for the information ✨✨

[@RaghavPal]

Most welcome Sagar

[@IamNani]

Can you say what are the tools use in automation and manually

[@RaghavPal]

this is a good list www.softwaretestinghelp.com/penetration-testing-tools/

[@poojav4477]

Nice info. Can u please update wat are static and dynamics types of tools in pen testing. Also can u tell me prerequisite to start with pen testing

[@RaghavPal]

I will plan to create a series on this in some time Mandya

[@shefeerv8250]

nice presentation brother....

[@RaghavPal]

Thanks for the visit

[@DeepakGupta-uf1kj]

Really that is helpful to know about penetration testing.
Could you please tell us about Big Data and what is the scope of testing in it.

[@RaghavPal]

sure Deepak, will take that up for coming sessions on QnA Friday.

[@fatimachowdhury1660]

Thanks for the video .I would like to know about Capture the flag method in pen testing.It will be great if you can provide me with some information.Thanks.

[@RaghavPal]

Hi Fatima, You're welcome. It will take some time for me to start practical sessions on Pen testing. Request you to take some online help meanwhile

[@mcstan5962]

Hlo can u help me in start with cyber security plz

[@prasenjitsarkar5978]

Hi... can I use a virtual machine for Penetration testing ? is it safe or it can crush the host system too..?

[@RaghavPal]

Virtual machine should be fine. It should not be in use for other things. In simple words you should not have any dependency on that machine. Do check with your network team as well.

[@kidsoni7829]

sir what happened if I do pen test on any website.
is it leagle to find vernibility in any website.
how they come to know that a person do pen test on their website. pls tell us sir

[@RaghavPal]

Hi, a general rule, never try to do any pen test on any system you are not authorized to do, Even your personal email, facebook, etc.
Pen testing is done when the owner needs to find security risks in his application and he legally allows and hires a person to do so. Also it is done in a separate env, so that if anything wrong happens the live (prod) application is not compromised

[@sukalyaniojha836]

Sir am learning about it... but sir if I'll download kali for it, will it harm to my lapi???

[@RaghavPal]

I will suggest getting some more information online before doing it on your personal laptop

[@sahilmahajan6778]

Hi Raghav, Have you created a series of pen testing tutorials?

[@RaghavPal]

Not yet Sahil

[@santoshsahu6999]

Hi,
What is the prerequisite knowledge required to learn pen testing.

[@RaghavPal]

Hi Santosh, in general anyone with a basic on computers can start and learn from scratch. Linux knowledge will be advantage

[@vivekmenon3822]

How to move from a functional tester role to a pentester role. Thanks ?

[@RaghavPal]

Hi Vivek, in case you can get an opportunity to work in the organisation and start small, that will be great, Else you can start learning on your own. There are a lot of online tutorials. And then you can apply for relevant jobs.

[@vivekmenon3822]

@@RaghavPal Thank you so much

[@sahaljamaica]

Can you please let us know about Kali Linux :)

[@RaghavPal]

I will do a session Sahal

[@TheHungryChef171]

good video for awareness. I am looking to learn cyber security could you please teach me

[@RaghavPal]

Hi Eva, will plan to add more videos on this

[@himatheresdominic690]

Too good.sir,what is the role of kali Linux in pen testing?

[@RaghavPal]

Hi Hima, Kali linux is a distribution on Linux, that has pre-installed programs for penetration testing. en.wikipedia.org/wiki/Kali_Linux

[@yatindrasharma5023]

can you share the link of security testing video?

[@RaghavPal]

Hi Yatindra, I am yet to create complete session on Security Testing tools, Can check this th-cam.com/video/B9niXyCkCGU/w-d-xo.html

[@bgmindia9883]

nice bro could you teach pentest with practical vedios

[@RaghavPal]

I will take that up soon Sai

[@atoztechchennal8784]

Sir...I want to know about firewall and how to break it...plss

[@RaghavPal]

Hi Murugan, you should not just try to do it without proper authorization and approvals. As of now I do not have any sessions on that

[@mcstan5962]

Sir ,can u explain how to start as a beginner...in cyber security....what steps we need to do

[@RaghavPal]

Hi, I will need to work on this to answer you better, will plan

[@amit6559]

Hi,
Do you have any course created for Security testing and Penetration testing?
I am interested in this course.

[@RaghavPal]

Not yet Amit, All my courses are listed here - automationstepbystep.com/

[@amit6559]

@@RaghavPal ok sir, I have purchased many courses from you..thanks and plz create this course also..

[@ashishsarad1026]

You should have given atleast one example of Actual test case

[@RaghavPal]

I will plan a session for this Ashish

[@rajeshnaidu3280]

Hi sir how to swipe mobile screen in katalon studio. I tried but not working plz help me

[@RaghavPal]

Hi Rajesh, there are keywords for that. Pls check the same. You can also see documentation

[@rajeshnaidu3280]

Yeah sir but how to I get x and coordinates

[@RaghavPal]

Check there Rajesh - forum.katalon.com/t/how-to-identify-x-and-y-coordinates-for-swipe-pinch-to-zoom-in-at-position-pinch-to-zoom-out-at-position-actions-in-mobile/6494

[@anantheswar7954]

Raghav ji.. I love all your videos.. they are awesome and simple. I am eagerly awaiting for a pen testing playlist from you :)

[@RaghavPal]

Anantheswar, so happy and humbled to see your message, I will plan for Pen testing. Have a couple of topics to complete before that

[@ayushpardeshi727]

Pen test is as similar as ethical hacking to check whether the web application is secured or have any vulnerability?

[@RaghavPal]

yes Ayush

[@ayushpardeshi727]

@@RaghavPal thanks for answering, one more doubt I have that is pen testing is done for every web application which our company makes ? I am a fresher so I don’t know much about it

[@RaghavPal]

Ideally we should check all applications for security, but in general it depends on client and requirements

[@KVe0504]

Do you have specific course for penetration testing . Is cybersecurity also called penetration testing.

[@RaghavPal]

Not yet, Pen testing is a part of Cyber Security

[@girishm6335]

sir plz recommend mentor or trainer who can train people like me on web and mobile application security testing

[@RaghavPal]

will need to check online Girish

[@ayushpardeshi727]

Sir does pen testing done by QA or developer ??

[@RaghavPal]

Anyone who understands the process and have knowledge of tools can do it Ayush

[@untoldawaz6580]

Which type of weakness are talking about ?

[@RaghavPal]

Hi Shubham, this is about Security and here we are talking of any vulnerability that may expose the application to risk

[@AjithlalK]

Bro please upload tutorial of popular penetration tool

[@RaghavPal]

I will do in some time Ajithlal

[@alexgaming3867]

What is network security

[@RaghavPal]

I will do a detailed session

[@abhishekdas8022]

Sir can u explain ,how to start a career in ethical hacking

[@RaghavPal]

Hi Abhishek, I will suggest to check some online courses. Also pls ensure do not use any of your primary devices for doing it.

[@prakruthinagaraj5999]

Getting a job as a fresher in penetration testing is handy?

[@RaghavPal]

It will help

[@pradeepmohan907]

Hi. I hav 5 yrs of exp in Manual testing. Shall I do any tool in security testing? What ll be salary and future hope in security testing in marketing ? Can u give me guidance please?

[@RaghavPal]

Security Testing is good, if you can become expert in some common used tools of security testing, getting jobs should not be an issue

[@pradeepmohan907]

@@RaghavPalSure . Thank you so much for your reply.

[@ranjitmahato7039]

It's simplly language you say

[@RaghavPal]

Thanks Ranjit

[@ArunSNair-kk9rb]

Can you explain what is
Tour

[@RaghavPal]

Hi Arun, what exactly is Tour here. Pls provide some link.

[@ArunSNair-kk9rb]

@@RaghavPal the tour over here is chainging IP address

[@RaghavPal]

I am not sure on this. Will have to check online Arun

[@stefanosmiltsoudis6440]

Is a Pen tester a ethical Hacker?

[@RaghavPal]

Yes we can say that

[@carstenbjrnpedersen3316]

TH-cam u ære the funnest, sad'est the peaple ther work to make Thes side TH-cam !: thank's to make the Best side. In the World For me tvangs so motch form me. Carsten Bjørn. Denmark

[@RaghavPal]

Thanks for the message Carsten

[@dineshKumar-st5gy]

can automation tester become a pen tester?

[@RaghavPal]

Yes, it is possible for an automation tester to become a pen tester (ethical hacker)
A pen tester is a security professional who tests an organization's computer systems, networks, and applications to identify vulnerabilities that an attacker could exploit
To become a pen tester, an automation tester would need to gain additional knowledge and skills in the following areas:
1. Networking: A good understanding of networking concepts and protocols is essential for a pen tester
2. Security: A pen tester needs to be familiar with various security technologies, tools and practices, including encryption, authentication, and access controls
They should also have a good understanding of common security vulnerabilities and how to exploit them
3. Tools: Pen testers use a variety of tools to assess and exploit vulnerabilities. These can include network scanners, vulnerability scanners, and specialized hacking tools
Familiarity with these tools is essential for a pen tester.

4. Legal and ethical issues: Pen testing can be a legally and ethically sensitive area
It is important for a pen tester to understand the laws and regulations that apply to their work and to act ethically at all times.

[@dineshKumar-st5gy]

@@RaghavPal Thanks for explaining me😊

[@adolfhitler7011]

Teach Linux.

[@RaghavPal]

I will.

[@elizashrestha1223]

please upload zap videos

[@RaghavPal]

I will try on that Eliza

[@Arun-us8wm]

English language me video bna kr kya proof krna chahte ho yrr

[@RaghavPal]

Hi Arun, this channel is watched in multiple countries, so I hope that helps everyone

[@akhilaccchannel]

Please remove Pen Test Tools from the title.. it's misleading.. Thanks!

[@RaghavPal]

Ok