Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 21 guests and 3 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum
Ethical Hacker Community Forums
January 08, 2009, 11:17:58 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2009 - May 4 - 9. Boot Camps & an Ethical Hacking Conf. www.chicagocon.com
 
  Home Help Calendar Login Register  
  Show Posts
Pages: [1] 2
1  Ethical Hacking Discussions and Related Certifications / Web Applications / Re: InfoSec Institute: Certified Application Security Specialist (CASS) course on: November 05, 2008, 06:47:13 PM
Look into the Sans 542.
2  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 25, 2008, 01:44:56 PM
I am trying to use proxychains with nmap to scan using a proxy. However nmap seems to be using my external ip and not the proxy ip in the proxychains.conf file.

What could be causing this?
3  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 23, 2008, 02:53:05 PM
I figured it out actually. In the end it was a configuration issue.
Thanks.
4  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 21, 2008, 11:27:48 PM
Can one of you guys help me out with implementing a netcat ssl session using stunnel?
5  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 20, 2008, 08:26:20 AM
The course itself is VERY good. Getting help sometimes can be tricky. There are some guys on there that are VERY helpful and others are a bit 'hostile'. So sometimes it can get get frustrating.
6  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 19, 2008, 11:19:59 PM
Update: FRUSTRATED !!!!!!!!
7  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 16, 2008, 11:52:44 AM
I think I should post the difference between the various CERTs mentioned here (CEH, OSCP,GPEN) as i have archived them.

CEH - I would rate this as 5 on a scale of 10. The reasons being its very heavy on tools. It tests the individual on the theoretical knowledge of tools and its options. If you memorize the function of the various tools and the options available you are golden. But achieving CEH does not proof that the holder has practical knowledge. I would place CEH at  entry level of the Pen testing / Ethical Hacking cert.

OSCP - This is great course though the lecture portion of it is only 7 hrs but the labs are just amazing. Its a tough course and assumes prior knowledge of a lots of important concepts to get the maximum out of this course. Its more on practical side and if you are going for cert challenge you better be good at networking concepts and windows/linux command line. Still this course does not deal with business aspects of the Pen Test. But its a great valve for the money.

GPEN - Amazing course, very well structured, covers the business aspects and methodologies of Pen test which I believe no other course/cert talks about. In my opinion this is very important  because you could be very good technically but if you cant deal with the business side, you will not be able to provide the true value of the services you have provided. It is very balanced on tools, concepts and labs. Does not Deal with with lots of tools but the tools discussed there are in depth providing deep insights and tips and tricks from trenches on using them. The philosophy of this course is different, in that it focuses on developing the skills on tools and tricks which are natively available on the OSs, with a rationale that when you are performing a Pen Test you most likely have the liberty to install tools on the Target.

Just my 2 cents.

Thanks
VJ

So doing the labs and extra mile is not enough for the exam?
8  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 11, 2008, 10:30:38 PM
Dark_Knight,
I was thinking about taking this course.  I do mostly computer forensics stuff.  I'm CHFI certified and have taken the CEH class (did not take the test because of the $250 fee.  I bought some equipment instead  Smiley).  Do you have to have a great knowledge on the subject?  Can you do the course on your own time?  I read the info on the course on the Offensive Security web page, but I would like to get your input, since you are taking it now.
Thanks in advanced,
Chuck378   
Hey Chuck,
The OSCP goes WAY more in depth than the CEH. Networking knowledge is key and there is also a fair amount of programming. This varies from simple scripts all the way up to python scripts.  I am currently doing it on my own time. I paid for  a 60 day lab pass based on what I read on this board.

The CEH basically gives you an intro into whats happening. The OSCP is another story. So for example you are introduced to buffer overflows in the CEH. You are also introduced to shellcode in fact they are several questions in the test that refer to this. In the OSCP you actually DO the buffer overlfow and you actually WRITE the shellcode. 
9  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 10, 2008, 02:34:11 PM
Well well well the course has stepped up a NOTCH  Smiley . I am currently on the Buffer Overflow section and lemme tell you it is VERY interesting. So I will keep you guys up to date..........................
10  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 08, 2008, 10:07:00 AM
Quote
# man host
...
SYNOPSIS
       host [-aCdlnrTwv] [-c class] [-N ndots] [-R number] [-t type] [-W wait]
            [-4] [-6] {name} [server]
...

so.. 'host -t ptr 1.2.3.4 ip.of.dns.server' is giving no joy?

Are you sure you've found a legit DNS server?
YGPM
11  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 08, 2008, 09:08:21 AM
Make sure you add the DNS to your resolve.conf file...
...Just make sure you add it to the top of the list for speed

...or query the DNS server you found directly with the host command (nice opportunity to test your newly found bash-fu Wink )
hmmmmmmmmmm I been down the host road but not getting anything also tried adding the dns to the resolv file and still coming up short.  Huh
12  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 07, 2008, 12:44:50 PM
Course is going well so far. For those that have done the course I am trying to
to get the domain name of the dns. I have identified the dns and tried using the host command to do a reverse lookup but that failed. What other options can I use?The dns doesn't seem to have a ptr should it?
13  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Next Up OSCP101 v2.0 on: October 06, 2008, 01:17:25 PM
Dark_Knight,

Hope you enjoy the OSCP. From my experience it was a great course and I learned a lot (and confirmed a lot of stuff I 'sort of' knew from other sources). My lab time (took 60 days) finished around a month ago and I have the exam scheduled *soon*.

I'd advise not taking your foot of the gas (as I did) if you start to get through the material quickly. Some of the final challenges and extra miles can be challenging and time consuming. Plus I would have liked to have spent more time 'playing' in the lab after completing the required exercises.

Let us know how you get on, specifically I'd be interested to see how the material compares to the CEH you've already got, as it's on my list of potential 'nexts'....

<Edit> as a side note, any advice from those already passed the exam would be appreciated as I'm starting to get slightly nervous...</Edit>

Thanks for the response man. I appreciate it and I will keep the board informed.
14  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Next Up OSCP101 v2.0 on: October 05, 2008, 10:11:38 PM
Guys,
Having just received the CEH I decided to go ahead and do the OSCP101 after reading all the reviews.So I started today.

15  Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: CEH @Infosec on: September 27, 2008, 09:46:11 PM
Dark_Knight, congrats!! Well done Smiley

Quote
For all the newbies thinking about doing the course Boot Camp style here's my 2cents. What you get out of the course will depend a lot on YOU.

I just want to add a little to this... a successful course also depends on the instructor as well. Be sure to ask the training center for information about the instructor prior to attending the course. You'll want to make sure that the course material is reflected in their experience.

BillV
Spot on BillV. That is sooooo true. Jeremy Martin came highly recommended and believe me he lived up to and surpassed expectations
Pages: [1] 2
Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2007, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.058 seconds with 21 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.