Phillip Wylie -- Pen Testing from Somebody who Knows about Pen Testing

Philip Wiley shares his unique journey from professional wrestling to being a renowned pen tester. We define pen testing and the role of social engineering in ethical hacking. We talk tools of the trade, share a favorite web app pentest hack and offer good advice on starting a career in cybersecurity. Philip shares some insights from his book, ‘The Pentester Blueprint: Starting a Career as an Ethical Hacker. ’ And we discuss the impact of AI on pen testing and where this field is headed in the next few years. Our guest in this episode is Phillip Wiley. We explore the definition of pentesting, its relationship with red team activities, and the role of social engineering in ethical hacking.The Application Security Podcast is brought to you by Security Journey.About Security JourneySecurity Journey is an enterprise-class solution with lessons that are built on learning science principles to deliver long-term measurable results.→ Learn more about Security JourneyConnect with Phillip Wylie:→ Phillipwylie→ Ranakhalil1Mentioned in this episode:→ The Pentester Blueprint: Starting a Career as an Ethical Hacker→ The Web Application Hacker's Handbook→ The Hacker Maker→ The Phillip Wylie Show→ @PhillipWylie→ Phillipwylie→ The Web Application Hacker→ The Pentester BluePrint: Starting A Career As An Ethical Hacker P 9781119684305→ Burp Suite→ OWASP ZAP→ Metasploit→ Nessus→ sqlmap→ Kali Linux→ Bugcrowd→ SANS Institute→ Ranakhalil1→ PCI DSSFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Phillip Wylie: Pen Testing from Somebody who Knows about Pen Testing02:33 Right. Oh, the typical story. No, unfortunately, I wish it was06:19 So one, one last wrestling question. This is quickly becoming the09:31 I gotta imagine that there's a certain amount of improv though11:19 Good decision there. So Phillip, how about security15:13 Mm-hmm. So pen testing, I think, is the, is the primary19:30 Yeah, that's a good, that's a good, good way to summarize22:45 You mentioned SQL injection. I'm always curious to understand from somebody24:12 Okay. So it's not something that's, uh, yeah, that's interesting that27:03 I wanted to circle back on, you mentioned social engineering and29:18 With payloads, like I said. Yeah. So if we think about32:52 Let's shift a little bit. Uh, I know that you've done35:47 We want to just mention and hear a little bit more38:36 Yeah, that's really cool. And I want to, um, I want39:31 I, and the pet peeve I have is Talk to a46:46 Yeah. How is, um, another just off the top of my50:11 Phillip, I want to just, I know you do podcasts and