Hey maksimu,

Looks like you've been given pretty good advise to get yourself started with this project of yours. You said you're new to this so I thought I would suggest you google for an exploit or vuln on whatever version of FTP, SSH, etc.. that you find through your nmap scan. You can also search with your results via Metasploit, mimlw0rm or a number of other exploit publishing sites.

Good luck!

nainsandeep, I agree with Boney that you should (if not already have) study for and obtain your LPT, ECSA or CISSP certification. I wish I could go for the CISSP or CEH as I also want to get into pen-testing but it looks like I'm not allowed to write the exams since I don't even have general IT security experience yet.

securED, it depends on where you live. Some of these bootcamps may not be in your area. Mile2 is definately one of the more popular ones everyone talks about. Personally I have not heard any bad stories about their instruction. Google came up with a ton of info if you just search "CCE+bootcamp" such as www.cce-bootcamp.com

LOL  Definately do not worry about getting spammed.  I actually don't remember ever receiving anything from EH-Net, but would like to... 

Boney, perhaps it's due to his location and what's available in IT?  I know people with their Masters and Ph.D's in Comp Sci who can only find Tech Support jobs in my city that I just moved away from. 

Nish,

If you're into Networking, I'd second the suggestion on going with the CCNA but firstly I'd do the Network+.  Also for any specialization that you get into, I'd start with the good ol' A+ that many HR ppl look at. That again may just be what they do in my area. (Western Canada)

Congrats, Ton van Waard on passing the CEH!

I hope the training for the ECSA is just as helpful.

Hey Jamie,

Glad to see ya visiting us.  There are probably thousands of various keyloggers out there with varying features, some free and some to buy (which usually come with a 2+ week trial).

I think someone mentioned Spector Pro www.spectorsoft.com which is a great tool, easy to use, has a TON of features but pretty heafty price tag at over $100.  It may be overkill.  The other I would recommend you at least have a look at is BigBrother www.iambigbrother.org. It looks to do everything that you will need. It'll record all keystrokes, you'll know who they're chatting with and what about, will record all websites that they use their browser to visit, they're emails, social communities sites such as My Space, etc...  I think that one is $30.

Hope you find what you need.

Thanks for the reply!  I'll have a look at Utimaco and SafeGuard now and keep looking for an encryption solution for our servers as well.

Hey Guys,

I'm looking to see what in your opinion is the best way to go for an encryption solution on various servers, mainly Win2k3 and 2k7 server and possibly a couple SANs, and SUN servers. The encryption I'm looking for will ultimately protect our data that we have on the servers if someone physically breaks into our stores and steals the physical server itself. One has been tried before (forget right now which one), but it seemed to increase the boot up time by 100% unfortunately.

Thanks!

I just checked out WGU and unfortunately you need to be a US citizen. So that's out for now... 

Thanks venom77 for the great post!  I'll have a look at WGU and see what they have. Hopefully I can even put some of my certs towards a degree with them. My work does help with tuition at i think $3000 per year but I'd need to stay with them for another year and not sure if I want to do that.

All I could get after graduating a few years ago was PC Repairs jobs and telephone/email tech support jobs with HP and Dell. Because of this, I need some good hands-on experience with routers, servers and administration, probably before jumping into a security job unfortunately.

Just curious, Oyle, but what was the name of your online school in Cali?

Wow! That's great to hear EH-Net will have their own version of BackTrack.  Since I cannot get down to Chicago, will this be available for us to d/l?

Wow! Those are some very good points.  Thanks for writing!

I don't really know anyone who can get me into the InfoSec industry with a good company, so that option may be out.  I am currently working with a well known company but in a limited tech support role with no future really. 

I'm not sure how to tell if the University has a good rep or not.  I'll email them though and find out if any of my College Diploma can count towards the degree.

I'm liking the idea of the free tuition but heard that it's extremely hard to get any job at all in Finland if you're not fluent in Finnish and have at least a Masters Degree. Those are the 2 min requirements for even scrubbing toilets!  If I can't work there, I'll probably run out of money just on rent and food while at the University.

This may have already been asked, but I don't see it on the forum...  I have an opportunity to move to Finland and make use of their FREE TUITION.  If I go, it would take me another 2 - 4yrs and then graduate with an actual 4yr BSc Degree in Computer Science.  Currently, I have a 2yr College Diploma in Networking, about 5yrs of IT Support experience with my certs I have listed in my sig.

My ultimate plan is to obtain a career in InfoSec/Pen-Testing. Do you think it's worth my time to go to Finland and upgrade to a BSc degree or should I hang tight and keep applying for networking jobs to get more hands on experience and go that route?

Thanks!

I'm sure there must be at least 1 other Canadian in our community here... so HAPPY CANADA DAY, guys!!!      (even though I work that day and being that I have an American company, I have 4th of July off and all American holidays) hmm..