4 answers
4
Questions
Asked
610 views
What kind of things do Ethical hackers do?
#hacking #ethicalhacking #coding #programming #computer-programming
Login to comment
4 answers
Updated
Allen’s Answer
The main overview: Use their knowledge of computers and surrounding technologies, as well as security principles and common vulnerabilities to identify gaps in security and many time even to suggest how to fix these blind spots.
This can take many forms. You can work for a pentesting firm that will work with organizations on contract to locate as many vulnerabilities as they can in a given amount of time. You can do internal Red Teaming within an organization to offensively asses your company's security, whether in the products they are putting out or with their infrastructure. You can focus on bug-bounty programs and find exploitable vulnerabilities within various companies' source codes for cash bounties. You can even work in a crowd-sourced pentesting organization and set when and what you do for work.
There are a lot of possibilities, but you essentially use your knowledge to assess the security level of an organization and attempt to give them information to prove this exists and demonstrate how and why to fix them. Hope that helps a bit!
This can take many forms. You can work for a pentesting firm that will work with organizations on contract to locate as many vulnerabilities as they can in a given amount of time. You can do internal Red Teaming within an organization to offensively asses your company's security, whether in the products they are putting out or with their infrastructure. You can focus on bug-bounty programs and find exploitable vulnerabilities within various companies' source codes for cash bounties. You can even work in a crowd-sourced pentesting organization and set when and what you do for work.
There are a lot of possibilities, but you essentially use your knowledge to assess the security level of an organization and attempt to give them information to prove this exists and demonstrate how and why to fix them. Hope that helps a bit!
Updated
Shubhankar’s Answer
Hi Signora, it is a very nice question
The name Ethical Hackers is an old term it seems and needs an update. These are highly skilled security professionals that do some of the following
1. They try and find security issues in the software setup or application.
2. They help in the mitigating these vulnerabilities.
In short, they are in house testers who try and break the security to find the flaws if any in the software or security infrastructure.
Hope this helps.
The name Ethical Hackers is an old term it seems and needs an update. These are highly skilled security professionals that do some of the following
1. They try and find security issues in the software setup or application.
2. They help in the mitigating these vulnerabilities.
In short, they are in house testers who try and break the security to find the flaws if any in the software or security infrastructure.
Hope this helps.
Updated
Phani’s Answer
The path to finding work as an ethical hacker will almost invariably pass through many years as a member of a security team providing defensive security services. Assignment to an elite offensive team is most commonly a progression through the ranks of the department.
For more details how to become ethical hacker:
https://cybersecurityguide.org/resources/ethical-hacker/#:~:text=The%20path%20to%20finding%20work,the%20ranks%20of%20the%20department.
For more details how to become ethical hacker:
https://cybersecurityguide.org/resources/ethical-hacker/#:~:text=The%20path%20to%20finding%20work,the%20ranks%20of%20the%20department.
Updated
Anthony’s Answer
Ethical Hackers provide a self evaluation and self assessment service to the companies they work for or with. An ethical hacker simulates the role of a digital bad actor attempting to circumvent the set of network and application security measures that have been put in place by organizations. Identifying potential vulnerabilities and gaps in these sets of measures provides network security experts with valuable insights as to where defenses can be reinforced or established in some cases to combat areas of network and application infrastructure that may be at greater risk from legitimate attacks by bad actors.
Typically, EHs are placed into penetration testing and drill teams to employ tools that can be used against a specific target area of a network or application infrastructure for the mission stated above.
Typically, EHs are placed into penetration testing and drill teams to employ tools that can be used against a specific target area of a network or application infrastructure for the mission stated above.