Suggestions
Ben R.
Head of Information Security at Hack The Box
Ben R. is a Trilingual Information Security professional with over a decade of experience in delivering security assessments and penetration testing for large organizations worldwide.
Currently, Ben serves as the Training Lead for Hack the Box, overseeing the HTB Academy platform, responsible for course planning, quality control, research, and course creation to develop offensive, defensive, and IT modules.
Ben is actively involved in the information security community in Tampa Bay, providing hands-on offensive security training for various clients, educational institutions, and local organizations.
With a background in Business Administration and Spanish Studies, Ben has industry certifications including OSCP, OSCE, eWPT, eCPPT, eWPTX, CISSP, CISA, and PMP.
Ben has held key roles such as Former Head of Information Security, Head of Training Development, Managing Principal, Senior Content Developer, and Moderator at Hack the Box, as well as Senior Security Consultant and Information Security Consultant at GuidePoint Security.
Additionally, Ben has experience as a Senior Associate at PwC, Project Manager, and Information Systems Security Manager at Schreiber Translations, Inc., and Principal Security Consultant at MBL Technologies Inc.
Highlights
Awesome new module by Julio Ureña and Mozhar Alhosni. Packed full of information for anyone looking to dig deep into DACL attacks. The skills assessment was intense and fun. Looking forward to part II!
"Your scans are slowing our network down to a halt."
The network admin was skeptical of our abilities since the kickoff call.
He stated that previous penetration tests from other companies had slowed the network down massively due to "inexperienced and reckless testers."
Less than 20 minutes into testing, and he sent emails to the entire distribution list and came over to my desk telling me that our scans had slowed the network to a halt. But he was wrong.
Eventually, we discovered that this was caused by the debug mode being enabled on every network device, which combined with normal Nmap scans, caused slowdowns. Once this was disabled, testing proceeded without issues.
Our documentation backed up our actions and forced the customer to investigate further. If we didn't have any (or had poor) documentation, the blame could have easily been placed on us, and it could have greatly impacted the client relationship and our firm's reputation.
This incident happened years ago and is one I share all the time to reinforce the point:
Documentation and reporting are critical during penetration testing engagements. #security #cybersecurity
Like/follow or comment to hear more.
