EH-Net

I haven't seen any mention of this curriculum on the boards but I thought I'd throw a link out for anyone interested.

http://www.thehackeracademy.com/ (http://www.thehackeracademy.com/)

It's 97.00/month or 997/year and they are releasing new content each month. The trainers include Mike Murray who has written some articles for EH-net see http://www.ethicalhacker.net/content/category/7/39/24/ (http://www.ethicalhacker.net/content/category/7/39/24/) and Mike Bailey is also an instructor for those of you who know his good work. And for those who don't check out http://blog.skeptikal.org/ (http://blog.skeptikal.org/). They are also planning on utilizing several guest instructors and have committed to a continuous content update cycle as new threats and techniques arise. They seem very interested in keeping the content cutting edge and is in fact one of their selling points.

I've been granted 3 months of access and will be going through and evaluating the content for possible future usage within my organization and would be more than happy to share my thoughts here. So far it looks pretty good, I'll followup on this post in a couple months when I have more detailed info. from the curriculum page:

Ethical Hacking

    * Module 1: Hacking Fundamentals
          o Professional Penetration Testing
          o The Mind of a Hacker
          o Security Fundamentals
    * Module 2: Reconnaissance
          o Business Intelligence
          o Network Intelligence
          o Search Engine Hacking
    * Module 3: Network Penetration Testing
          o Networking Basics
          o Network Orientation
          o Network Scanning
          o Sniffing
          o Denial of Service
    * Module 4: Server Penetration Testing
          o Protocols and Basics
          o Exploitation of Buffer Overflows
          o Using Metasploit
    * Module 5: Client Penetration Testing
          o Client and User Attacks
          o Social Engineering Basics
    * Module 6: Web Application Penetration Testing
          o Web Application Hacking Basics
          o XSS
          o CSRF
          o SQL Injection
    * Module 7: The Structure of a Penetration Test
          o The Basic Structure

The Cutting Edge (These are some of the monthly updates released)

    * Cross-site Flash Attacks
    * Social Engineers Toolkit (SET)
    * Introduction to PDF Attacks
    * Cloud Computing *NEW
    * PDF Reconnaissance and Data Disclosure Attacks *NEW
    * Monthly Mindset Practice Quizzes
          o Monthly Mindset Practice Quizzes are supplementary exercises, released once per month, to help practice your inductive/abductive reasoning, convergent/divergent deduction, and recursive thinking skills. While considered bonus content, and not mandatory for or attached to any one module – they are pretty awesome.

I really wish some of these places would offer discounts for more experienced individuals. It seems like there's a ton of overlap between this, Hacking Dojo/Heorot, LSO, eLearnSecurity, and countless others. I want to review it all because I have OCD, but I can't justify hundreds or thousands of dollars when I'll probably just sporadically pick up a tip here or there.

I worked with Mike Bailey for awhile at my previous job and can vouch for his knowledge and skills. This should be a good course.

@ Dynamik

I am totally with you.  Just as I thought the hackingDOJO would certainly be a good training method for me I see this post for the Hacker Academy at the same rate as Hackingdojo....Urghhh...

I would love to do them all but MONEY and TIME are HUGE factors....

I would certainly like to do the Advanced Penetration Tester Course with Joe but is out of my budget!

So now I am swaying a little... HackingDOJO or Hacker Acacdemy... i think i will wait a few weeks and await some feedback from you guys!

No, I have decided HackingDOJO....sticking with you Grendel, dont let me down ... you will receive my first payment tomorrow   :)

That was quick, hahahahah ;D

@ impelse

Yeah it was a very quick decision  ;D

I just finished paying the eLearnsecurity training, I need to wait one moth to begin with HackingDojo

Hey tturner, any updates? :)

Yes I had a sent some initial feedback over to THA awhile back and they resolved a few issues and I'm waiting on a followup before I submit my review here. I have not forgotten :)

Does anyone have a review for the Hacker Academy or the Hacking DOJO?  I have watch some good webinars with the Hacker Academy so I know that they know their stuff.  Of course, the people at the Hacking DOJO know their stuff too so it seems like a hard choice.  I am wondering if I should just save up for the OSCE course instead.   ???

Any info would be greatly appreciated.

I just heard back from the THA crew today and should have my review up by next week if all goes according to plan. Just a little longer  ;)

Great - thanks tturner.  I look forward to reading it :)

I took their training for three month and they are good. The give you some steps and information, later they give you the excercise and YOU NEED TO FIND OUT HOW TO MAKE IT WORK, sure when you have any problem, just shot them an email and they answer back almost the same day.

Review is completed (1622 words), just waiting on permission to use a couple screenshots from their internal material. Will try to get that up next week.

Awesome, thanks for the follow-up. My interest was piqued again when they were on a relatively recent episode of pauldotcom.