Anyone who has been doing pentesting for any length of time knows that there,s a huge difference between what you read in books about pentesting, and what actually happens out in the field. The view of pentesting that is given by textbooks is glorified vulnerability scanning, while the field is moving towards boutique, objective-oriented red teaming. What is different about real-world red teaming, and what should aspiring pentesters be focusing on?

Back to GrrCON 2017 video list