Spencer Alessi’s Post

View profile for Spencer Alessi, graphic

Pentester @SecurIT360 | Recovering Sysadmin | Ethical Threat | Active Directory Security Connoisseur

Pentesting against a well-defended organization can either be the worst experience or the absolute BEST experience. Let me explain… It can be the worst if you think you’re only there to hack stuff… It can be the best if you realize you’re there to help the company improve… Didn’t find any critical vulnerabilities? Good. Found some “small” thing that seems like it doesn’t matter all that much? Good!

Vebjørn Risa

Cybersecurity Consultant and Content Creator | Principal Penetration Tester at KPMG Norway

1mo

Its also an opportunity to highlight the great work that has been done by the organisations security team🙌

Paul C.

Senior Penetration Tester GXPN/GWAPT/GREM/GCFA/GDSA

1mo

It can make you get creative. Cant get in with an off the shelf python script? My proudest moments didn't result in Domain Admin, but still could have been catastrophic losses for the orgs and used tools I made myself.

Daniel Krilich

| Penetration Tester | PNPT | PJPT | Security+ | (ISC)2 CC | Army Veteran #AATW | Mental Health Advocate

1mo

Nothing like having to write the report after demolishing a company on a test 😭

Omair M.

Cybersecurity Visionary | Chief Hacker @ ioSENTRIX | AppSec & Manual Penetration Testing Expert | vCISO | Bridging the Gap Between Perceived and Actual Security

1mo

True, no findings aren’t a failure, they are validation. But overlooked gaps can always snowball into bigger risks down the line.

See more comments

To view or add a comment, sign in

Explore topics