I AUTOMATED a Penetration Test!?

Free Cybersecurity Education and Ethical Hacking with John Hammond
🔥 YOUTUBE ALGORITHM ➡ Like, Comment, & Subscribe!

[bawalicoder]

I really miss those days when John used to show CTF walkthroughs. I never felt bored for even those long videos where he was banging his head, but sadly those days are over 😢

[moneypennysloverboy]

Some of the people are way too spoiled in comments. As a web dev I find this very informative as it's
1. quick overview of pentesting a flask app
2. showing how redundancy in testing can be automated with sponsored tool that has FREE TIER, that you DON'T HAVE TO use btw, but you will learn how these kinds of tools in general work and if you wanna be serious in this business you're gonna have to use them eventually for efficiency.

I don't mind this "going straight to it" approach, but if John considers any changes, on longer videos especially, those quick previews at the beginning that list things that will be covered in the video are always cool (I think). For example if I started this video 2 min in and something have come up, I might just turn it off and forget to get back to it, whereas if I know what the structure will be and I find it interesting and potentially useful, I will bookmark it or send it to myself. And in that short overview, Jonh can mention ad so spoiled brats stop crying in comments.

[kuczaq]

I think you need some better guidelines on disclosing sponsored content... This was quite disappointing.

[avihayl]

Why give John such a hard time for showcasing a pretty cool practical tool that will help you as professionals to shine at interviews and on the job?
Free and open source is fine but sometimes having a real product at your fingertips can raeally make a difference!

Also, he actually showed you at first a really long how to guide to do it yourselves.

Dont be cheap and invest in yourselves instead of crying about "ads"...

[JustinJ.]

This channel is turning in to a NetworkChuck type channel, much ado about nothing, too much sponsored content, bring back the old John who used to teach us stuff, not show tools that cost 100's of USD a month

[uncommoncharlie]

Watched 9 minutes in before realizing I’m ad revenue, sick 😂

[jimmynoo]

I will volunteer using this for my OSCP attempt /s

[getr]

John is trying to make his money but at least let us know it's a paid ad.

[Logan-vwbg]

Correct me if I'm wrong... Doesn't Legion do most of this already?

[wardellcastles]

I thought I paid for an ad free subscription to YouTube

[IntiArtDesigns]

Only $400 a month if you want access to everything. *dies inside* I see why he failed to mention pricing in this ad. That's an awful lot of money just to save yourself some time. I think i'd rather invest the time into doing those basic preliminary scans myself and save myself that money. Even the cheapest personal plan is $860 for the year, with only 5 assets and limited access to functionality and tools. Sheesh.

I don't think i could justify paying that even on a 6 figure income. You've spent a long time learning how to use those tools and do those scans, so you might as well just do them, as monotonous as they may be. IMHO.

[capability-snob]

I have to know the justification for the deliberate eval 💀 also: werkzeug sites running in dev mode used to have a built-in shell on error, not sure if that still works

[cybersamuraidk]

Very cool tool! :) But very expensive!

[Jamy-blib]

please make video on how to find lost bitcoin wallet and how to withdraw this amount into your wallet

[YTBAlexis]

This tool feels quite dangerous to use on a real test, how intrusive this web checks are ? Would it break something while testing ?

[NotToBeTooTakenSeriously]

does the free version come with limited uses?

[ibwthunder]

funny how my graduation project prof just agreed to a web pentest tool idea, and i am really worried on how i would do it

[IlIIIl]

Unsubscribed because you’re literally just an ad channel now. It’s beyond ridiculous now how many ads this vid has. I understand the need to make money however this is borderline unethical. All the best.

[HEXiT_]

seems pretty cool.
im guessing using these kinds of tools isnt allowed on bug bounty's?.
shame though as it ripped through that really quick.

[highfiveshighfives]

Did he say redis as read-is?. I’ve heard it pronounced red-is