EH-Net

Well, it will be nice to have my life back. I managed to get through the OSCE challenge and got word today that I obtained the cert.

I documented my experience like I did with the OSCP:

http://www.networkadminsecrets.com/2011/05/offensive-security-certified-expert.html (http://www.networkadminsecrets.com/2011/05/offensive-security-certified-expert.html)

well done

Great review.  I will be signing up soon, definitely.  I promised my wife I would take a break after the OSCP.  ;D  Of course I did the FC4 already just to see if I could do it.  Thanks for the review.  You and MaXe had a great experience even with the pain. LOL.  I have to take this course.  I am really excited now.  Will it matter if someone uses BackTrack 5 instead of BackTrack 4 when taking the course??

Congrats, cd1zz.


Doesn't matter.

Go for it dude. As far as BT4 or 5, it wont matter. I actually spent most of my time in Windows VMs using Immunity because most of this is windows exploit dev and windows pwnage.

Congrats!

And I really liked your review.

Gratz and nice review :)

Congratz cd1zz!!!

I took the CPT course too and I have yet to challenge the OSCE exam. I have to say the course indeed opened my eyes big time!

After doing the exercises, I took a pause and wrote the CISSP exam (because every contract requires it...). I basicaly went from one extreme to another! Passing from "dreaming about Hex" to learning about "Business Continuity Planning" was like eating vanilla ice cream after drink whiskey. It didn't taste good...

I am going to Dallas in a bit more than a week to take "Advanced Penetration Testing Course" by Joe McCray. Then, after a little break, I will start playing in exploitdb to recreate exploits.


BTW cd1zz, would you say this tactic paid off? Would you change anything in your preparation?

Thanks and congratulations again!!!

I've been putting off the CISSP but unfortunately I think its next for me. Nice work on getting through that.

For me, recreating exploits was key because I only knew basic assembly and had basic debugger skills. It forced me to become comfortable in a debugger and learn much more about assembly. For example, if the original author of an exploit wrote it as an EIP overwrite, I'd look for the SEH overwrite and rewrite it. If they didn't use an egghunter, I would add an egghunter. If the original author only wrote it for XP, I'd write it for Vista or 7. Using this method I managed to run into all kinds of issues I had to sort out.

My biggest weakness going into this course was on the web side. I wish I would have spent more time on this. I would recommend not only focusing on the exploit dev but understand exploiting all kinds of web apps.

Thanks cd1zz for your comments.


All my machines at home are 64 bits OS... I wanted to do the same as you and rewrite exploits at home, but I am a bit stock because of that...

Thanks for the advice on the web apps. It's true, we tend to focus more on the exploit development side...

Good luck for CISSP! PM me if you need some advice.

Congrats cd1zz! I know the pain of going through the CTP training and the challenge, and my time has come to suffer it again. Hopefully I'll be able to get my life back once I knock it off, unless I get hooked on with a new course.

It was fun, but all the glamour has almost worn off for me now lol ;D It won't matter which version of BackTrack you use, but different versions of Metasploit has different payloads, so you may want to grab an older version of Metasploit as well just in case if it doesn't work out. (There's more info on the student forums about this as well.)

There's a few other tools that requires different args as well, and some that works a little bit differently but this is just a part of the challenge in my opinion, so it shouldn't matter a lot since I didn't use BackTrack  ;)

Why can't you load up 32 bit VMs on your 64 bit host?

Just wondering, is the book, "Fuzzing: Brute Force Vulnerability Discovery" by
Michael Sutton, et al a good book to pick up before taking the OSCE course? 

I bought that book and found it to be useful at times during the course. I think its good to have in the arsenal regardless... I find myself referring to it more and more after I finished OSCE.

Hopefully by practicing the exploit-db exploits and checking out the book, I should be ready to tackle this course.  Thanks again for the info.   ;D

Good luck, you'll need it  ;)