Anyone here into infosec or cyber security?

Yup yup!

@linuxxx awesome, I'm kinda new to this and I would really appreciate any advice

@justasithlord No problem! What exact field are you looking at (sec in general, network sec, system sec, server sec, web app sec etc)? I'd be happy to give advice 😊

@linuxxx I just gave my comptia security+ examination and I cleared, and now I'm kinda interested in web app sec. I really have no clue what to do next

@justasithlord I'm into web application and server (Linux servers) security myself :)

@linuxxx if I want to go into web app sec field then where should I start?

@justasithlord Start reading yourself in with the owasp.org top ten 😃

@linuxxx gonna start with that then, thanks😁

@justasithlord No problem mate! 😉

@justasithlord If you have any more questions just give me a shout! 😄

Look if there's a CTF (capture the flag) team is near you. Usually tech universities have one.

Hello, @linuxxx i would like to ask you, if u can give me some advice about general security and stuff. I made some reverse shells, scanners in python. Recently i tryed web app testing with bwapp and dvwa. I have been using linux for at least 3years. I always wanted to learn c, assembly and rev engineering. And what knowledge should i have for linux it admin? Also writing exploits? Sorry for my not so good english and for too many questions. :)

@pascalwacker I'd try to find one. Maybe I'll get quite some knowledge just by observing them

@Lenzs hey man, I'm sorry for such a delayed reply.
Well I'd suggest you learn bash and python scripting which is quite essential for being a Linux it admin and understanding of networking is also crucial, also for learning reverse engineering it's important to know assembly really well! You can assembly through various sources out there!

Understanding how exploits work is really important so eventually you'll even grasp to make custom exploits out of python or shall I suggest Ruby? You might have heard of metasploit, it's a good pen testing framework, their modules and everything is written in ruby so you don't need to make a lot of scripts and also can make your custom whenever required and integrate it with metasploit.