Hector Bermudez

Pentesting 101

How I started in this field by actually doing a hands-on pentest exercise. Audience will see first hand all the hurdles that I experienced and how I conducted this engagement. The presentation goes technical at some point but the general layout is as follow,

– My Background
– Purpose and Scope
– Ethics and Legality (ROE, NDA, etc)
– The Challenge
– Tools and Techniques
– Recon
– Multiple Tools from Kali like maltego, ettercap, msfvenom, etc
– AV bypass…done manually.
– The Outcome
– Lessons Learned
– Q & A


I got my Computer Engineer bachelor degree and MS in Digital Forensics from UCF. I am currently a Red Team Pentester with some certifications on my pocket like Security +, CEH, OSCP, OSCE (in progress).