And we're back.
This time we're getting into web application assessment.
Now this is where we're going to start separating the servers
from the applications.
And as we continue throughout the skill,
you'll start to understand what I'm talking about there.
Understanding that servers provide one function,
applications provide another.
And we're going to be doing this inside of a playground
and utilize the display ground
all throughout the remainder of this course.
Hopefully.
Hopefully the playground doesn't really crash
because you'll understand what we get there.
Now, we're moving into phase three
of our pen testing lifecycle,
where we're actually getting into two vulnerabilities.
Say I told you we'd be using this again
and continuing to cover it all throughout the remainder
of this course to re-familiarize ourself
with the pen testing lifecycle.
Say it's not just the once and done memorizing it
and button it back out for an exam or anything.
This is how we make our money here as pen testers.
And being able to understand that the pen testing lifecycle
is also circular,
that we'll be hitting up different portions
of this lifecycle as we continue
throughout the remainder of this course
and the actual pen test when we're boots on ground.
Say even in this very skill,
where even though we're in the vulnerability portion
of our lifecycle,
we'll be continuing to go back to reconnaissance
and do it a little bit of research
to understand what some of these vulnerabilities
and different systems are.
And that's something that we will cover here
in more in depth as we continue through the skill,
but this is one of those old sayings
of Jack of all trades, master of none.
Well, that's not the entire saying.
I don't remember the entire saying,
but what I do remember about it is,
is that we can be masters of individual crafts
and know enough about the side stuff
that we're not necessarily masters in
to continue on and know enough to know
whether we're right, wrong or indifferent and research
and utilizing the pen testing lifecycle reinforces that.
So that way us as pen testers
can be more universally fit
regardless of the situation that we may find ourselves in.
Now, of course, we're gonna be looking at some tools
and we're gonna be introducing them onesies
and twoies at a time as we continue
throughout the next few skills
in this portion of the overall course.
I don't wanna drop like 10 tools all at once
and then, you know, if it were me,
I'd be like, what are you doing?
But we're also going to be reinforcing one
that we've learned earlier,
one that's readily available,
that's a tongue twister right there for us,
in previous POSIX-based systems,
hint hint, it's WGIT.
Because we're gonna be taking a look
at identifying those web applications and web servers
to see if we can learn more about the system overall.
And we're gonna be taking a look at the playground
to get more familiar with it
and I'll give you links along the way
and we're going to be covering a lot of documentation.
Now, we're not gonna be reading it together
and taking a look at the PDFs
and getting bored with instruction manuals,
but I will have things readily available for you
to be able to do that on your own
and show you why it's really important
that we do that along the way.
Long story short, as we start to get into the skill,
we're gonna try our best to take everything
that we've learned up to this point,
continue to bake that bigger ball
by wrapping more layers of tin foil around it.
I don't know if you saw those tin foil balls
that are like really shiny or whatever,
but we're gonna continue adding layers to that
so that way it's so big
that you have to get a truck to carry it
with you to your next pen test.
If that makes that sounds kind of weird,
but I'll be right back.