Mark Buffalo

lmao

That's pretty nifty.

You get an official business address, can get up on google maps/apple maps/etc.

Virtual office/coworking spaces with mail-forwarding would be a really good investment if you can afford a little extra, if this works where you are. Here, it's like $40/m.

lol

Completely inappropriate for law.se.

Yup

And not worry about it at all.

You can probably bypass the PO Box thing with a virtual office.

I believe you can have those in the U.K. And for some extra, they can forward mail to your home.

Consider a virtual office.

Right, and why pay out the ass to rent a commercial space?

See?

^ Exactly.

There are many legitimate reasons to have a shell, etc.

His suggestion that you're doing this for illegal reasons is moronic and unhelpful.

So your name doesn't show up.

The registered agent basically would be the contact address of your company

In the U.S. we have registered agents. Not sure if you have those where you are.

Hope you get what you need, man.

You need a lawyer, dude. I don't make any decisions like this without consulting a lawyer.

I would disengage. This person is not worth your time.

Seems like a pretty lazy answer that doesn't really give me any real confidence.

Lol. I would consult a lawyer

That’s why I moved to Texas :P

Ah, ok. I know some folks in London looking. But yeah, I love southern climates.

Any chance of working in London?

I think it’s tax related. Where are you based?

But either way, wish you were U.S.-based. Got a few friends looking too.

Dang, sorry dude. Wish I could help. And yeah — mixed you up with someone else.

It's pretty handy :) I used to use ZAP, curl and the browser dev tools (groan), and learned burp a few years back. Best investment ever.

Yeah, like I said, learn to use burp suite

If you want to do web app pentesting, learn to use burp suite pro (in particular, burp repeater, the squiggly lines for fuzzing, payloads, etc) and try pentesterlab.com -- do all the exercises until you understand them. Then get certs...

Don’t get me wrong, I’m not knocking OSCP (just OSWE). It was actually an impressive course, but kind of outdated. It’s definitely a good cert to get as an entry-level tester, but if you’re going to be primarily testing web apps, OSCP only becomes worth it when you get to the RCE portion, assuming the scope of the engagement actually allows you to move laterally at that point. For the tests I’ve done, that is rare unless it’s a full red team engagement.

Not gonna give spoilers, but I literally compromised every single machine in the OSCP lab in under 2 weeks, including the VLAN segments IT, Admin, Dev and the firewall. It was very very light on web app testing overall.

I have the OSWE course. Wouldn’t recommend at all for web app pentesting.

Neither is OSWE... there are better training materials out there.

I have an OSCP, and it was really basic... but yes, I suppose it teaches a lot. But for web app pentesting, OSCP isn’t the way to go.

Their OSWE is extremely basic

These days, most companies seem to need web app pentesters... very few are network-related.

It will definitely get you an entry-level job somewhere, though.

But the problem with OSCP is that it's super-light on web app pentesting. It's mostly a network pentest cert, and it doesn't include much in the way of exploiting domain controllers.

But it's worthwhile

It's a really basic entry-level cert

If you wanna do pentesting, get OSCP

@AndrolGenhald Most importantly... what do you want to do in security?

Even if you don't meet all qualifications, you can still apply if you think you're in a decent position to do so. And whenever you "lose" an interview, spend time studying what you failed to respond to, even if it's inane.

Few people care about certs over passion/experience, unless it's a govt job, then you can just get a CEH and get hired anywhere in gov.

If you can go through the OWASP Top 10 and learn about the exploits and how to fix them, you'll be in good shape.

OWASP Top 10, CWE Top 25, business logic stuff?