Menu: 0:00 ⏩ Do you need your own Cybersecurity lab? 0:33 ⏩ Would you recommend a home lab? 2:00 ⏩ Roasting CCNAs and CCIEs 2:00 ⏩ Roasting CCNAs and CCIEs 3:20 ⏩ Failing step 1 7:05 ⏩ Should I just use hackthebox and other home labs as a service 9:11 ⏩ Just use a cheap computer to access the labs 9:11 ⏩ Just use a cheap computer to access the labs 10:58 ⏩ Rangeforce example - blue team battle paths 14:00 ⏩ I have $100 or $500 - what should I do? 16:51 ⏩ Top 3 red team CTFs ================ Connect with me: ================ Discord: discord.com/invite/usKSyzb Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal TH-cam: th-cam.com/users/davidbombal ================ Connect with Neal: ================ LinkedIn: www.linkedin.com/in/nealbridges/ Twitter: twitter.com/ITJunkie Twitch: www.twitch.tv/cyber_insecurity ================ Links: ================ Hack the box: www.hackthebox.eu/ Try Hack Me: tryhackme.com/ CTF Time: ctftime.org/ctf-wtf/eLearn Security: elearnsecurity.com OSCP: www.offensive-security.com/courses-and-certifications/ INE: bit.ly/inetraining SANS: www.sans.org/ CEH: www.eccouncil.org/programs/certified-ethical-hacker-ceh/ Cyber Blue: securityblue.team/ Cyber Defenders: cyberdefenders.org/ Did I miss something? Please comment. ================ Support me: ================ DavidBombal.com: CCNA ($10): bit.ly/yt999ccna Udemy CCNA Course: bit.ly/ccnafor10dollars GNS3 CCNA Course: CCNA ($10): bit.ly/gns3ccna10 #cybersecurity #hackthebox #tryhackme
I think you make a fair point if your goal is purely cybersecurity however if you're truly a beginner in your just learning infrastructure having a home lab is an important way to understand how a physical hardware works how to connect to it how to configure things and make things actually work. There's a big difference between understanding the concept of something and a virtual environment and actually implementing that to physical things. Everybody learns differently and for somebody to be a dinosaur for wanting to have Hands-On learning I think is a bit off, there's a lot to be learned for a lot of things when it comes to having a home lab. If these things are something that somebody already knows and they're already in the IT world and understands infrastructure then yes there is no need for a home lab but you say multiple times a beginner and a beginner means somebody who has no experience at all somebody who is just coming in for this and those people should build a home Labs that they know what it actually looks like, I can't tell you how many people I know that have degrees in cybersecurity and network infrastructure or administration and they finally get their degree and they get out of college and they try to SSH into a switch or connect via serial to a switch and they literally don't know how to do it or what they're doing at all, it may seem simple but when you're in a virtual environment everything just works and it's not like that in real life.
hell yeah. there is waaaaay to much virtualization and abstraction today. no wonder why these recent hacks are so expansive and damaging. like monocropping to industrialized agriculture... anthropogenic biomes ... Irish Potato Famine... mass fail... i have to stepback and look at things on paper as well physical especially when dealing with ephemeral constructs that require persistence and province directed from afar and olde.... these guys are selling the service that comes with the koolaid or red bull vodka dabs ...lulz
I agree. Hands on learning and being able to physically trace/follow the route of the signal around whatever circuit it is following to complete the processes that you have set in motion on the cli. I think having physical hardware, albeit outdated, is the best home setup to learn on, especially if you are more networking leaning. But Hay I'm a Gas engineer and not an I.T. expert so what do I know. But just logically and going off knowing the best ways that I learn. I do agree with you my friend 😊 (I have been self studying coding, networking and cyber security for the last 7 years also so I know a little bit, just saying I'm not a pro ❤)
See the problem is, if you are at the point where you need to learn the infrastructure, you likely need to take a step back. You can have end goals, those are super valuable. But seeing it all together, to use compTIA as a guideline, is A+ to network + level stuff. You should definitely learn how its all put together before you try these services. But he is right. It is ALLOT of waste. and many people don't have money for this stuff. I think the biggest tragedy is we made IT into a college thing and not a trade with trade schools like it should be. I blame the programmers who aren't elbows deep in machines /j For context on where I'm at in my journey, I'm studying my network+ right now actually, and I personally don't use these services though I have played with vulnhub and VMs in general for my own enjoyment. Namely because capture the flag is like crack to me. But personally, I think in this more modern world VMs are just getting more and more important to learn and understand. Also, you can't troubleshoot what goes wrong, until you know what is supposed to go right impo. They're like training wheels or arm floaties. But he *IS* right that building it on our own doesn't mean it was made right, nor can you show something shiny to the dreaded HR that you're worth something. TL:DR, grumpy InfoSec bois are grumpy because they spend allot of money on home servers when you could and *should* be allowed to just learn this stuff over a month in the job. We need more IT and Networking apprenticeships it would solve so much. Need experience to work, and work to gain experience. It *sucks* that i'm seeing in my area 5 years experience and a degree for minion work.
Actually for the HIGHEST degree of "network security" you really DO rebuild all the infrastructure...... (and it goes NOWHERE Else in the world) or... dos Los Alamos contract-out it's network to MicroSoft? .....not hardly. TRUE Security comes ... from ... independent hardware that NOBODY Else can touch
As a Cisco guy I love having an awesome home lab. I would say for me it has been very helpful getting into new technologies since when I am working on it, it is more of a hobby.
as someone who is getting into the cyber community and work force, I've been lost overwhelmed confused excited and lost all again. This put a lot of things into prospective for me so thank you.
I love my physical homelab. I own it and the data stays with me. The satisfaction of building it out yourself is immense and not comparable to anything else.
Awesome David & Neal! Your vlogs are among my top favorites! Hope you can make comprehensive, step-by-step guides or tutorials with discussions on how to set up a fully virtualized cybersecurity home lab and practice exercises you can run on it to help accelerate, build/hone relevant skillsets. It will be a good project that can benefit many who want or need some hands on experience as supplement to other learning methods. Thanks and more power!
Great video. I've been in IT infrastructure for years, and I'm now pivoting to cybersecurity. I've just started an MSc but it's great to hear these other things to go after to build my skills. I do like having the capability to spin up VMs at will, so I've specced up my Z840 workstation to a couple of E5-2680 v4 CPUs and 224GB RAM. In total it's probably cost me £2k (£1k on the base machine, £240 on the two CPUs and £600 on the RAM - OK, I also have a 3070Ti, but that's for games, so I'm not counting it). But there's a lot of truth in the "you don't know what you don't know" bit, so I mostly use the VMs to get experience in things I already know the basics of. For the rest - well, I'm definitely going to be trying out these online labs...
Thank you for another great video David. I love when you host Neal, you both are great. Can’t wait to see what Neal was about to show us in you next video. I wish you and your family the very best!
Amazing job, very detailed on what to expect if you really trying to build a home lab, which is not a job choice of option. Can't wait for the conclusion part.
Use both... according to your strategy. XaaS: lower capEx & maybe lower/higher OpEx. Can start almost instantly; need Internet connection. Most professional & robust setup. Homelab: whenever not able to connect to internet. Internet slow. When opEx is higher due to ISP or hourly cloud svc charges. I love cloud svc and the way it empower the user; somewhat levelling the playing field for the smaller guys - making enterprise tech available. And all i need is my phone/tablet. What's important is: strategise to pick up the Skills & Knowledge ASAP & have a plan for LifeLongLearning. Continue to learn something new everyday. We Will be there!
Great content David and Neal, this is very informational for both beginners as well as experienced in the field. some of us dinosaurs are so used to building home labs that we often forget that everything is readily available with minor effort, all we need is to shut and Lab! no excuses to better yourself.
Neil and David you are the best..! You are both the' Plato and Aristotle of our modern times, In terms of Network Technology and Infosecurity. Keep it up. 👊
I love how you mentioned Chromebook! Good looking out David!!! I've got a Chromebook book and been wondering if I needed a better machine to learn cyber security and use it to get hands on experience! Thanks 🙏
Thank you David & Neal for this video, I was quite confused & "was" working to set up a lab & at the same checking how do it on TH-cam when I came across this video. I now have clarity on what should be my road ahead. So once again, TY !
Great video ! Full of valuable advice ! But... Dinosaure and proud to be !! 🦎 I fully got your point (Virtu and Cloud are very important). However depending on the target job a very limited hardlab can be usefull (I use small Cisco SG250-08 decomissionned from company). It may help to understand issues, guide user/tech, thoses tasks an engineer may have to monitor remotely when doing NOC/Tech support (Even with cybersec major support may be part of the job). Groar from a good old dinosaure ^^
I'm amazed by how much you can learn from having a home lab. Thank you, David and Neal, for showing us the way 🚀 Your channel is the best investment I've made in my cyber journey.
Wow, I needed to find this video, it covered a lot of intro level questions I had and also is right where I am at in my degree progress. Thank you for all your information!
I had one setup about 10 years ago, when I went to my first high performance PC (5820K) I just spun up VM's on my PC. I setup an entire Windows domain with a couple linux machines thrown in for good measure and I learned networking concepts using a virtualised pfsense in that virtual lab. Now my new 12 core desktop PC which I use for gaming, video/photo editing and work, is way over powered for my lab needs.
Awesome video, thanks so much! You both do such a great job in delivering valuable info to the community, thank you, looking forward to invest some money in 2021 towards my IT Career
Hey David has part 2 been released yet was watching your latest upload and am really interested to know the top 3 blue team suggestions! Thanks for your content it's really great
Lol I was literally planing my home lab( 1 laptop & 12-core server) when this video came up. That makes me a Dino, but I’m also going to run a virtual router and switch, along with a few different types of virtual machines. I’m doing it for networking and CyberSecurity practice. Bang for buck I think the HomeLab-aas is the best approach hands down, especially for proving your experience.
What about people who don't want to just be a siloed (eg) SOC analyst? Yeah building a homelab makes little sense for people who just want tooling experience, but I have friends who became Linux pros from using arch/VPSs/homelabs and got infosec jobs from those skills. For myself, I really enjoy devops so am currently working on a hybrid homelab for hosting projects/services. I've learnt tons about k8s, secret management, high availability, routing/networking etc that I wouldn't have touched otherwise. Not that there's anything wrong with VM-based experience, but I think you're forgetting a large audience with this video.
Good insights from Neal, however I'd go for a bridge scenario of cloud labs and homelab Remember David, not every part of the planet has good internet connectivity nor high disposable income like [mostly] in Western economies Cheers though.
My friend was upgrading his servers at his job and they "recycled" a bare metal server to me for $0. It has 128 gigs and 4 processors on it. For free, it's awesome, but I didn't really intend to get a job with it. It was like an awesome emulator box that could run Linux, Mac and windows. It was just fun to play with. But the dual power supplies on this are 1600 watts! It's not peaking at that because I have no drives or additional cards in it. If i wanted to run stuff online constantly, I'd just use a host. But for playing with homelab stuff, I don't want to pay. I'm spoiled with all this ram and processing power that I don't have to pay for. But for those that do run their homelab and leave it on, I can't imagine what the power bill will be if this is just one bare metal server and it has 1600 watt power supplies. My homelab is basically a part time Plex server
This would’ve been helpful before I set up my home lab with 250 VM’s but hey… Just kidding of course another amazing video full of great information! Thanks David and Neal!
I can't decide if I should take a degree in IT Networking or CS cybersecurity. Can you maybe make a video to touch on the topic that may help in the decision process?
They go hand in hand. I found Networking to be more difficult to learn because of the amount of information but that could be because i was used to terminals when i played with dos in the 90's
Hi David! Thank you for sharing your knowledge. I'm new in cyber sec. and I created a home lab but I don't know what are the limits to use Nmap, or other network scanning tools in terms of legal issues, so I'm kind of nervous when I'm using it. Would you suggest any free target that learners can attack without fearing any legal repercussion?
I respect Neal's opinion..... But you know what I have 3 laptops and one desktop and I use all of them at once........ And honestly there is something more enjoyable on physical equipment and hands on than in cloud ......... It feels more practical and exciting...... And i also have 3 Routers(openwrt) ....so...it really gives that special feel... .... That feeling can't be expressed in words..... ❤️💯........ /// and I also do a lot of testing with pfsense.... And having it dedicated on a separate machine really makes it more extensible . ....
Exactly what I was thinking. The best will be a balance of the two (Home-lab for simple testing and renting a lab for advance things you can't test in your lab).
I have Virtual Box and going to setup Kali linux on it (still need to learn to use it). Can I then use it to "hack" other home labs like was suggested in the video? Or is there something else I would need to do. Thanks
You posted on a hacking channel on TH-cam that you have a pc, then you're surprised when your audio doesn't work? Obviously we hash cracked your eardrums. Yeah, didn't expect that one, did ya?
I'm a proud dinosaur. I have a rack of Cisco gear. There's nothing like it. Full IOS, the blinkies, the fan noise. I'm good with it. I like the portability of the virtualization platforms, but when I'm studying at home, give me my physical gear over anything else.
if Im a complete noob at IT meaning I can turn on my computer and that's it. Should I do something like Try Hack Me or Hack The Box? Or should I try something else first? Thank you for this awesome content David.
I am building a home lab using all old equipment and spare parts that are lying around. I have virtualization but its fun putting things together, its like Lego for geeks.
I don't fully agree with that, I like to have the physical equipment to break stuff and fix them back. That alone helps me understand any problem I may face in these virtual labs and fix them. I kind of need to understand how the physical equipment work for me to be able to troubleshoot problems virtually. But I make sure to stay in my budget and not go overboard with homelab equipment. Also for me personally, building and connecting the physical equipment goes a long way in my understanding and It's just fun to play around and break stuff.
-Just completing: -If you are poor like me and want to study Cyber there are many ways to learn and show that you are learning. -The first two Fortinet Security Certifications NSE Network Security Expert are free and just studying on their platform is free knowledge and are two certifications to post on your Linkedin. -Cisco has the introductory badges for Cyber security that are free for both the net academy course and the badge. -IBM has several courses on their study platform including an introduction to Cyber security, which the course and the badge are free of charge. -And of course the eJPT course for me is at least free, and I can do it and learn everything and then just pay the 200 dollars, but just because they give the course for free I make sure to get certified and go be my first Cyber certification.
A bit evil of you David to end it like that. I’m gonna watch this awesome content regardless, now I have to deal with cliffhangers too? 😅 Still better than Netflix.
hey, i’m going to be starting my first year in university for a cyber security course later this year, any tips at all for a newbie like me just getting into the sector with little-to-no experience at all like budgeting, software/hardware preferences and other inside secrets?
Regarding the home lab. I think that another big point that was missed is the maintenance costs of that curtain home lab, be it financial or time wise. Some software is not supported on older HW. So is you buy some older server from ebay then you might end up wasting money if most software you wanted to use won't work on that poor HW.
I laughed out loud when the video ended after "you can decide whether to include it in your video or not." rofl. Edit: I was listening to it, not watching. I just saw it was continued. That might have been a good place for a voiceover that said, "Continued!" lol
This is just an extended sales pitch. Of course you need to build a home lab so you can understand networking and operating systems properly. This is like telling someone to be a car mechanic by renting someone else's car and then working on repairing only the headlights
I grabbed a Lenovo X1 Extreme and threw 4tb worth of HD and 64gb of ram in it. Even as a network guy there is nothing I can not spin up virtually at this point. And if I really need more horse power I can just spin it up in AWS or Azure. No need for anything physical at this point anymore.
One of the FIRST things that I do, personally, when I get really interested in something new.. be it something to learn about or a sport to take up, whatever.. I buy absolutely everything involved in that topic that I can in any way shape or form.. most of the stuff veterans in the topic would of not even heard of most of this stuff, lol. My point is that maybe that is what people are doing at first. Being eager and bulk buying all things cyber lol 😆 😅 on a real and honest level, though, I think that is most definitely it. Unless the majority of earth's population isn't as impulsive or crazy 🤪 as myself. But yes,'Eager Purchasing' sounds like eager purchasing to me..
"expert understanding of one tool is better than a topical understanding of 200 tools" now if that isnt the best quote for beginers i dont know what is. (start with nmap)
![fellow fellow - PROUD feat. INK WARUNTORN [STRING QUARTET]](http://i.ytimg.com/vi/BQrVkMPTdHE/mqdefault.jpg)
Menu:
0:00 ⏩ Do you need your own Cybersecurity lab?
0:33 ⏩ Would you recommend a home lab?
2:00 ⏩ Roasting CCNAs and CCIEs
2:00 ⏩ Roasting CCNAs and CCIEs
3:20 ⏩ Failing step 1
7:05 ⏩ Should I just use hackthebox and other home labs as a service
9:11 ⏩ Just use a cheap computer to access the labs
9:11 ⏩ Just use a cheap computer to access the labs
10:58 ⏩ Rangeforce example - blue team battle paths
14:00 ⏩ I have $100 or $500 - what should I do?
16:51 ⏩ Top 3 red team CTFs
================
Connect with me:
================
Discord: discord.com/invite/usKSyzb
Twitter: twitter.com/davidbombal
Instagram: instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
TH-cam: th-cam.com/users/davidbombal
================
Connect with Neal:
================
LinkedIn: www.linkedin.com/in/nealbridges/
Twitter: twitter.com/ITJunkie
Twitch: www.twitch.tv/cyber_insecurity
================
Links:
================
Hack the box: www.hackthebox.eu/
Try Hack Me: tryhackme.com/
CTF Time: ctftime.org/ctf-wtf/eLearn Security: elearnsecurity.com
OSCP: www.offensive-security.com/courses-and-certifications/
INE: bit.ly/inetraining
SANS: www.sans.org/
CEH: www.eccouncil.org/programs/certified-ethical-hacker-ceh/
Cyber Blue: securityblue.team/
Cyber Defenders: cyberdefenders.org/
Did I miss something? Please comment.
================
Support me:
================
DavidBombal.com: CCNA ($10): bit.ly/yt999ccna
Udemy CCNA Course: bit.ly/ccnafor10dollars
GNS3 CCNA Course: CCNA ($10): bit.ly/gns3ccna10
#cybersecurity #hackthebox #tryhackme
sa oooo uuuz sts hap
I think you make a fair point if your goal is purely cybersecurity however if you're truly a beginner in your just learning infrastructure having a home lab is an important way to understand how a physical hardware works how to connect to it how to configure things and make things actually work. There's a big difference between understanding the concept of something and a virtual environment and actually implementing that to physical things. Everybody learns differently and for somebody to be a dinosaur for wanting to have Hands-On learning I think is a bit off, there's a lot to be learned for a lot of things when it comes to having a home lab. If these things are something that somebody already knows and they're already in the IT world and understands infrastructure then yes there is no need for a home lab but you say multiple times a beginner and a beginner means somebody who has no experience at all somebody who is just coming in for this and those people should build a home Labs that they know what it actually looks like, I can't tell you how many people I know that have degrees in cybersecurity and network infrastructure or administration and they finally get their degree and they get out of college and they try to SSH into a switch or connect via serial to a switch and they literally don't know how to do it or what they're doing at all, it may seem simple but when you're in a virtual environment everything just works and it's not like that in real life.
hell yeah. there is waaaaay to much virtualization and abstraction today. no wonder why these recent hacks are so expansive and damaging. like monocropping to industrialized agriculture... anthropogenic biomes ... Irish Potato Famine... mass fail...
i have to stepback and look at things on paper as well physical especially when dealing with ephemeral constructs that require persistence and province directed from afar and olde.... these guys are selling the service that comes with the koolaid or red bull vodka dabs ...lulz
If you want to learn more about this on low-level, you should mess with real hardware too at some point.
I agree. Hands on learning and being able to physically trace/follow the route of the signal around whatever circuit it is following to complete the processes that you have set in motion on the cli. I think having physical hardware, albeit outdated, is the best home setup to learn on, especially if you are more networking leaning. But Hay I'm a Gas engineer and not an I.T. expert so what do I know. But just logically and going off knowing the best ways that I learn. I do agree with you my friend 😊 (I have been self studying coding, networking and cyber security for the last 7 years also so I know a little bit, just saying I'm not a pro ❤)
See the problem is, if you are at the point where you need to learn the infrastructure, you likely need to take a step back. You can have end goals, those are super valuable. But seeing it all together, to use compTIA as a guideline, is A+ to network + level stuff. You should definitely learn how its all put together before you try these services. But he is right. It is ALLOT of waste. and many people don't have money for this stuff. I think the biggest tragedy is we made IT into a college thing and not a trade with trade schools like it should be. I blame the programmers who aren't elbows deep in machines /j
For context on where I'm at in my journey, I'm studying my network+ right now actually, and I personally don't use these services though I have played with vulnhub and VMs in general for my own enjoyment. Namely because capture the flag is like crack to me. But personally, I think in this more modern world VMs are just getting more and more important to learn and understand. Also, you can't troubleshoot what goes wrong, until you know what is supposed to go right impo. They're like training wheels or arm floaties. But he *IS* right that building it on our own doesn't mean it was made right, nor can you show something shiny to the dreaded HR that you're worth something.
TL:DR, grumpy InfoSec bois are grumpy because they spend allot of money on home servers when you could and *should* be allowed to just learn this stuff over a month in the job. We need more IT and Networking apprenticeships it would solve so much. Need experience to work, and work to gain experience. It *sucks* that i'm seeing in my area 5 years experience and a degree for minion work.
Actually for the HIGHEST degree of "network security" you really DO rebuild all the infrastructure...... (and it goes NOWHERE Else in the world)
or... dos Los Alamos contract-out it's network to MicroSoft?
.....not hardly. TRUE Security comes ... from ... independent hardware that NOBODY Else can touch
As a Cisco guy I love having an awesome home lab. I would say for me it has been very helpful getting into new technologies since when I am working on it, it is more of a hobby.
100% I totally agree.
you don't "Build" infrastructure purely at the keyboard
Best man on the earth, you motivated me so I got my ccna ccnp and right now am preparing for oscp
Really happy to hear that Ahmad! Go for it!
عاش يا احمد ❤️
plz hep with your e-mail
@@Mohammdragab تعيش وتسلم يا محمد
كفو يا احمد can you please let us know how long it took you to achieve this and what sort of experience did you have before
as someone who is getting into the cyber community and work force, I've been lost overwhelmed confused excited and lost all again. This put a lot of things into prospective for me so thank you.
I love my physical homelab. I own it and the data stays with me. The satisfaction of building it out yourself is immense and not comparable to anything else.
David "but I want to push you now" Bombal. Love it.
lol... that's my new name 😀
I’ve been waiting for this comment. 😄
I was just starting to build out a homelab, this was a really good fresh opinion on what my Goals are. Thanks!
Such fantastic content 🔥 Perfect timing. Thank you both David & Neal for all you do - always showing up! ✊🏼
Awesome David & Neal! Your vlogs are among my top favorites! Hope you can make comprehensive, step-by-step guides or tutorials with discussions on how to set up a fully virtualized cybersecurity home lab and practice exercises you can run on it to help accelerate, build/hone relevant skillsets. It will be a good project that can benefit many who want or need some hands on experience as supplement to other learning methods. Thanks and more power!
Great video. I've been in IT infrastructure for years, and I'm now pivoting to cybersecurity. I've just started an MSc but it's great to hear these other things to go after to build my skills. I do like having the capability to spin up VMs at will, so I've specced up my Z840 workstation to a couple of E5-2680 v4 CPUs and 224GB RAM. In total it's probably cost me £2k (£1k on the base machine, £240 on the two CPUs and £600 on the RAM - OK, I also have a 3070Ti, but that's for games, so I'm not counting it). But there's a lot of truth in the "you don't know what you don't know" bit, so I mostly use the VMs to get experience in things I already know the basics of. For the rest - well, I'm definitely going to be trying out these online labs...
Thank you for another great video David. I love when you host Neal, you both are great. Can’t wait to see what Neal was about to show us in you next video. I wish you and your family the very best!
Amazing job, very detailed on what to expect if you really trying to build a home lab, which is not a job choice of option. Can't wait for the conclusion part.
Thank you. And you're welcome. Neal's put together a great worksheet :)
Use both... according to your strategy.
XaaS: lower capEx & maybe lower/higher OpEx. Can start almost instantly; need Internet connection. Most professional & robust setup.
Homelab: whenever not able to connect to internet. Internet slow. When opEx is higher due to ISP or hourly cloud svc charges.
I love cloud svc and the way it empower the user; somewhat levelling the playing field for the smaller guys - making enterprise tech available. And all i need is my phone/tablet.
What's important is: strategise to pick up the Skills & Knowledge ASAP & have a plan for LifeLongLearning.
Continue to learn something new everyday.
We Will be there!
Great content David and Neal, this is very informational for both beginners as well as experienced in the field. some of us dinosaurs are so used to building home labs that we often forget that everything is readily available with minor effort, all we need is to shut and Lab! no excuses to better yourself.
Great conversation you guys had.. can not believe #3 next episode, the suspense!!
I really like this approach that you have shown as someone that was in the process of building a home server not just for infosec training.
Neil and David you are the best..! You are both the' Plato and Aristotle of our modern times, In terms of Network Technology and Infosecurity. Keep it up. 👊
I love how you mentioned Chromebook! Good looking out David!!! I've got a Chromebook book and been wondering if I needed a better machine to learn cyber security and use it to get hands on experience! Thanks 🙏
You guys are just legends. This sort of information is Gold for the noobs in cybersecurity. Thank you very much. 🙏
Thank you David & Neal for this video, I was quite confused & "was" working to set up a lab & at the same checking how do it on TH-cam when I came across this video. I now have clarity on what should be my road ahead. So once again, TY !
You two are true legends. So inspirational!
Good stuff! Always a pleasure to listen to you guys. Thank you for all your effort you put into this videos. 👌🏻
Thank you!
Great video ! Full of valuable advice !
But... Dinosaure and proud to be !! 🦎
I fully got your point (Virtu and Cloud are very important). However depending on the target job a very limited hardlab can be usefull (I use small Cisco SG250-08 decomissionned from company). It may help to understand issues, guide user/tech, thoses tasks an engineer may have to monitor remotely when doing NOC/Tech support (Even with cybersec major support may be part of the job).
Groar from a good old dinosaure ^^
Really enjoying this videos so far, really inspiring seeing like a real pperspective and tips for this career. TY guys
I'm amazed by how much you can learn from having a home lab. Thank you, David and Neal, for showing us the way 🚀 Your channel is the best investment I've made in my cyber journey.
Wow, I needed to find this video, it covered a lot of intro level questions I had and also is right where I am at in my degree progress. Thank you for all your information!
Awesome work David and Neal 😍 appreciate u both.. Worth video
Perfect Neal : Objective is important, without that it's nothing.
Thank you!
21.20 David, exactly there!!! Respect GGWP! Great informative video as always!
Once again amazing video to encourage ppl not get themselves into financial problems to build your experience when you can go virtual.
Thank you. Agreed - no need to waste money or get into debt. Learn for free or low cost as often as you can.
@@davidbombal always learning from the best, I really appreciate the time you take out for us and keep us going.
The generated the intended suspense. Now i have to watch the sequel.
Always a great source of info!! Thanks for the great job guys!!!!
Thank you for watching!
So glad this came out! Got some Cat3550s at an auction to start my lab! First time I've been roasted in less than 2 minutes 😂😂😂
I had one setup about 10 years ago, when I went to my first high performance PC (5820K) I just spun up VM's on my PC. I setup an entire Windows domain with a couple linux machines thrown in for good measure and I learned networking concepts using a virtualised pfsense in that virtual lab.
Now my new 12 core desktop PC which I use for gaming, video/photo editing and work, is way over powered for my lab needs.
Great information. Thank you David and Neal. Please post more of these.
Awesome video, thanks so much! You both do such a great job in delivering valuable info to the community, thank you, looking forward to invest some money in 2021 towards my IT Career
Hey David has part 2 been released yet was watching your latest upload and am really interested to know the top 3 blue team suggestions! Thanks for your content it's really great
Yea what's the third one?
Thanks David sir, for the great content. And I am waiting for the next video.
This is super helpful for newbies! Thanks for the helpful video!
All your videos are so helpful ,so to the point tysm for this.Great content 👍. I have 4 vms rn kali ,centos ,windows 7 and bwap
Thank you for this! Definitely makes me feel better about using Hacking as a service!
Fantastic guest and content !!
Keep it up !
Thank you
Thank You David Bombal for this valuable knowledge. 👍
Nice video and great tips as always David ! And kudos to Neal too !
Thank you Iron Merc
Thank you, David.
You are wonderful and blessed.
My idea is to create a home lab with proxmox, and a host laptop with Kali Linux or Parrot OS to attack those OSes in Proxmox, what do you think David
Lol I was literally planing my home lab( 1 laptop & 12-core server) when this video came up. That makes me a Dino, but I’m also going to run a virtual router and switch, along with a few different types of virtual machines. I’m doing it for networking and CyberSecurity practice.
Bang for buck I think the HomeLab-aas is the best approach hands down, especially for proving your experience.
this is exactly what I was waiting for, thank you David!!
Started watching the video as soon as I saw the notification, just realized it 3AM in the morning :P
Thanks for the awesome content David.
Wow - you should get some sleep! You can watch the video in the morning!
I had to watch video so that I can sleep peacefully 😁
Thank you. This was useful for someone like me whos skint but is keen
Good session as always . .really helped ! ,Live session would be more appreciated .
Thankyou david sir ✨
Awesome job David! Would like to know the platform you guys use for meetings, the video quality looks awesome!
I like how this guy is an IT expert but he still has the sticker on his computer case warning him to take the foam out before turning it on
You come up exactly with the thing that i want to knw..
Really happy to hear that Peeyush
Do those glasses help with staring at the computer all day? If so, what kind are they?
You're the best🥺🥺🥺🥂
You've really helped me with my cyber security study path🥺
GOD really bless you 🥺🥺🔥🔥🔥🔥🔥🥂🥂
Much love from Ghana 🇬🇭🇬🇭
Thank you Mathias!
This was a wonderful video, David!
Thank you - really happy to hear that!
waiting for the 2nd part😁
Thoughts on qubes os as a security distribution ?
It can also virtualize seamlessly which could be good for creating labs for testing
What about people who don't want to just be a siloed (eg) SOC analyst? Yeah building a homelab makes little sense for people who just want tooling experience, but I have friends who became Linux pros from using arch/VPSs/homelabs and got infosec jobs from those skills.
For myself, I really enjoy devops so am currently working on a hybrid homelab for hosting projects/services. I've learnt tons about k8s, secret management, high availability, routing/networking etc that I wouldn't have touched otherwise. Not that there's anything wrong with VM-based experience, but I think you're forgetting a large audience with this video.
I don’t understand any of this but I kind of want to pursue, what would be the simplest career in cyber security anyways?
It would be cool if you could do a video on setting up our own virtualized vuln labs.
Good insights from Neal, however I'd go for a bridge scenario of cloud labs and homelab
Remember David, not every part of the planet has good internet connectivity nor high disposable income like [mostly] in Western economies
Cheers though.
My friend was upgrading his servers at his job and they "recycled" a bare metal server to me for $0. It has 128 gigs and 4 processors on it. For free, it's awesome, but I didn't really intend to get a job with it. It was like an awesome emulator box that could run Linux, Mac and windows. It was just fun to play with. But the dual power supplies on this are 1600 watts! It's not peaking at that because I have no drives or additional cards in it. If i wanted to run stuff online constantly, I'd just use a host. But for playing with homelab stuff, I don't want to pay. I'm spoiled with all this ram and processing power that I don't have to pay for. But for those that do run their homelab and leave it on, I can't imagine what the power bill will be if this is just one bare metal server and it has 1600 watt power supplies.
My homelab is basically a part time Plex server
Waiting for second part 🔥
This would’ve been helpful before I set up my home lab with 250 VM’s but hey… Just kidding of course another amazing video full of great information! Thanks David and Neal!
I can't decide if I should take a degree in IT Networking or CS cybersecurity.
Can you maybe make a video to touch on the topic that may help in the decision process?
Great suggestion.
I second this motion.
They go hand in hand. I found Networking to be more difficult to learn because of the amount of information but that could be because i was used to terminals when i played with dos in the 90's
To succeed in cybersecurity you definitely need a solid understanding of networking.
Interesting views on home labs Vs cloud labs. Another good video...
Thank you for watching!
Hi David! Thank you for sharing your knowledge. I'm new in cyber sec. and I created a home lab but I don't know what are the limits to use Nmap, or other network scanning tools in terms of legal issues, so I'm kind of nervous when I'm using it. Would you suggest any free target that learners can attack without fearing any legal repercussion?
Great job David Bombal.
I don’t NEED 50 virtual machines, I WANT them. Lol
I respect Neal's opinion..... But you know what I have 3 laptops and one desktop and I use all of them at once........ And honestly there is something more enjoyable on physical equipment and hands on than in cloud ......... It feels more practical and exciting...... And i also have 3 Routers(openwrt) ....so...it really gives that special feel... .... That feeling can't be expressed in words..... ❤️💯........ /// and I also do a lot of testing with pfsense.... And having it dedicated on a separate machine really makes it more extensible
.
....
Exactly what I was thinking. The best will be a balance of the two (Home-lab for simple testing and renting a lab for advance things you can't test in your lab).
Yes we need cybersec course and lab. 👍
I have Virtual Box and going to setup Kali linux on it (still need to learn to use it). Can I then use it to "hack" other home labs like was suggested in the video? Or is there something else I would need to do. Thanks
Hi David, are you gonna show us how to setup a “virtual” home lab to do some ethical hacking ?
Check out Grant Collins
Just wondering what the best option is to build labs involving firewalls and WAF, i'm used to using GNS3 but that requires quite an amount of memory.
Sir I am happy to say that today I bring a pc to my room I am crazy...🥳
Edit: I don't know why my Audio is not working☹️
It's hacking time
That's Lame.
Great ✌️
You posted on a hacking channel on TH-cam that you have a pc, then you're surprised when your audio doesn't work? Obviously we hash cracked your eardrums. Yeah, didn't expect that one, did ya?
@@theeffectoflogic3 For sure I know the way to fix it but I was just trying to share my happiness with you.
Don't know what I don't know, the opening line got me.
I'm a proud dinosaur. I have a rack of Cisco gear. There's nothing like it. Full IOS, the blinkies, the fan noise. I'm good with it. I like the portability of the virtualization platforms, but when I'm studying at home, give me my physical gear over anything else.
if Im a complete noob at IT meaning I can turn on my computer and that's it. Should I do something like Try Hack Me or Hack The Box? Or should I try something else first? Thank you for this awesome content David.
Great one David thanks
Thank you David for this video , I like the way you help.people to focus on learning something.
thank you Bombol wonderful and blessed
I am building a home lab using all old equipment and spare parts that are lying around. I have virtualization but its fun putting things together, its like Lego for geeks.
Excellent!!!! Thank you :-)
Love the cliffhanger. Didnt see it coming.
Thank you. Lots more coming :)
Hey David very cool video !!! Can you make a video about botnets ?? I am so confused !
I don't fully agree with that, I like to have the physical equipment to break stuff and fix them back. That alone helps me understand any problem I may face in these virtual labs and fix them. I kind of need to understand how the physical equipment work for me to be able to troubleshoot problems virtually.
But I make sure to stay in my budget and not go overboard with homelab equipment.
Also for me personally, building and connecting the physical equipment goes a long way in my understanding and It's just fun to play around and break stuff.
-Just completing:
-If you are poor like me and want to study Cyber there are many ways to learn and show that you are learning.
-The first two Fortinet Security Certifications NSE Network Security Expert are free and just studying on their platform is free knowledge and are two certifications to post on your Linkedin.
-Cisco has the introductory badges for Cyber security that are free for both the net academy course and the badge.
-IBM has several courses on their study platform including an introduction to Cyber security, which the course and the badge are free of charge.
-And of course the eJPT course for me is at least free, and I can do it and learn everything and then just pay the 200 dollars, but just because they give the course for free I make sure to get certified and go be my first Cyber certification.
A bit evil of you David to end it like that. I’m gonna watch this awesome content regardless, now I have to deal with cliffhangers too? 😅 Still better than Netflix.
It would be way too long to include the next part here 😀
@@davidbombal just pulling your leg my friend. 😁
My homelab is to play with older hardware and for fun :) I like physical hardware :D
Totally aggree sir bombal and sir Bridges
AMAZING INTERVIEW!
Thank you Nawid!
hey, i’m going to be starting my first year in university for a cyber security course later this year, any tips at all for a newbie like me just getting into the sector with little-to-no experience at all like budgeting, software/hardware preferences and other inside secrets?
Regarding the home lab. I think that another big point that was missed is the maintenance costs of that curtain home lab, be it financial or time wise. Some software is not supported on older HW. So is you buy some older server from ebay then you might end up wasting money if most software you wanted to use won't work on that poor HW.
I laughed out loud when the video ended after "you can decide whether to include it in your video or not." rofl.
Edit: I was listening to it, not watching. I just saw it was continued. That might have been a good place for a voiceover that said, "Continued!" lol
This is just an extended sales pitch. Of course you need to build a home lab so you can understand networking and operating systems properly.
This is like telling someone to be a car mechanic by renting someone else's car and then working on repairing only the headlights
I grabbed a Lenovo X1 Extreme and threw 4tb worth of HD and 64gb of ram in it. Even as a network guy there is nothing I can not spin up virtually at this point. And if I really need more horse power I can just spin it up in AWS or Azure.
No need for anything physical at this point anymore.
One of the FIRST things that I do, personally, when I get really interested in something new.. be it something to learn about or a sport to take up, whatever.. I buy absolutely everything involved in that topic that I can in any way shape or form.. most of the stuff veterans in the topic would of not even heard of most of this stuff, lol. My point is that maybe that is what people are doing at first. Being eager and bulk buying all things cyber lol 😆 😅 on a real and honest level, though, I think that is most definitely it. Unless the majority of earth's population isn't as impulsive or crazy 🤪 as myself. But yes,'Eager Purchasing' sounds like eager purchasing to me..
Great interview. I must add: HTB beats them all...
"expert understanding of one tool is better than a topical understanding of 200 tools" now if that isnt the best quote for beginers i dont know what is. (start with nmap)
Im also a lifetime pass owner from @TCM-Security