Can one of you guys help me out with implementing a netcat ssl session using stunnel?

The course itself is VERY good. Getting help sometimes can be tricky. There are some guys on there that are VERY helpful and others are a bit 'hostile'. So sometimes it can get get frustrating.

Update: FRUSTRATED !!!!!!!!

So doing the labs and extra mile is not enough for the exam?

Hey Chuck,
The OSCP goes WAY more in depth than the CEH. Networking knowledge is key and there is also a fair amount of programming. This varies from simple scripts all the way up to python scripts.  I am currently doing it on my own time. I paid for  a 60 day lab pass based on what I read on this board.

The CEH basically gives you an intro into whats happening. The OSCP is another story. So for example you are introduced to buffer overflows in the CEH. You are also introduced to shellcode in fact they are several questions in the test that refer to this. In the OSCP you actually DO the buffer overlfow and you actually WRITE the shellcode. 

Well well well the course has stepped up a NOTCH  . I am currently on the Buffer Overflow section and lemme tell you it is VERY interesting. So I will keep you guys up to date..........................

YGPM

hmmmmmmmmmm I been down the host road but not getting anything also tried adding the dns to the resolv file and still coming up short. 

Course is going well so far. For those that have done the course I am trying to
to get the domain name of the dns. I have identified the dns and tried using the host command to do a reverse lookup but that failed. What other options can I use?The dns doesn't seem to have a ptr should it?

Thanks for the response man. I appreciate it and I will keep the board informed.

Guys,
Having just received the CEH I decided to go ahead and do the OSCP101 after reading all the reviews.So I started today.

Spot on BillV. That is sooooo true. Jeremy Martin came highly recommended and believe me he lived up to and surpassed expectations

Guys the course ended yesterday and lemme tell you it was awesome. Its the best money I spent in a long while. The instructor was VERY good. So Don, Jeremy did live up to expectations. That guy knows so much its just down right scary 
I also mentioned the site in class every opportunity I got. In fact when I introduced myself to Jeremy I told he comes highly recommended from the guys over @EH. Jeremy didnt just read from a script he regularly gave REAL world examples.

I sat 2 exams, CPT part 1 and the CEH v5. The CPT was held on Thursday and the CEH on Friday. The material in the course went by quickly and so I wasnt feeling 100% confident about doing either test. I felt the material was just too much to cover in the time frame. So I didnt do he CPT on Thursday instead I went back to my room to study. At one point I said it just wasnt gonna happen and I deceided to do the test at some other time.

Well guys on Friday morning I decided to just go balls out. So I did both tests back to back.I passed BOTH. So now I am CEH

For all the newbies thinking about doing the course Boot Camp style here's my 2cents. What you get out of the course will depend a lot on YOU. The material goes by like USAIN BOLT running the 100m. So if you can get material before hand that would go a far way.You also have to ask A LOT of questions. This is very important. You cannot be afraid to ask questions. Also talk to the instructor every opportunity you get. Utilize the break sessions etc.

Before I did the course I read several threads on this board stating what you needed to know before doing the course.Well they were spot on. Be comfortable with networking knowledge not necessarily a guru but comfy. This proved quite challenging for me because I am from a programming background. Also get comfy with the TCP/IP communication it goes a long way.

At the end of the day the CEH wont make u a hacker. It will open up your eyes to what is out there after which you can then choose the path your gonna take. I plan to do Web Application and Wireless track.

All in all it was a damn good course.

Will do and I will keep you guys informed.

I decided to do the CEH course at Infosec. The instructor will be Jeremy Martin. The course outline is shown below:

Day 1
Security testing methodologies
The Ethical Hacking Profession
Passive Intelligence Gathering – 2007 Version
Network Sweeps
Stealthily Network Recon
Passive traffic identification
Identifying system vulnerabilities
IPv6 Vulnerabilities
Abusing Domain Name System (DNS)
Abusing Simple Network Management Protocol
(SNMP)

Some of the instructor-led hands-on lab exercises:
Network Sweeping
Scanning from spoofed IP addresses
Stealthy Recon
Injecting p0f for passive OS fingerprinting
Scanning through firewalls
IPv6 Scanning
Discover all subdomains owned by an
organization
Discover whois record changes over last 3 years
Windows 2003 Server & Vista DNS Cache
Poisoning Attacks
Pumping SNMP for data – OID Dissection
Attacking SNMP
Capture the Flag exercises every night!

Day 2 include:
• Remote buffer overflow exploit lab
• Custom compiling Shellcode
• Running payloads in RAM
• Hiding exploit payloads in jpeg and gif image
files
• Attacking email vectors (Lotus Notes and
Microsoft Exchange, and Outlook Web Access)
• Registry manipulation
• Client side IE & Firefox exploits
• Using custom Trojans to circumvent Antivirus
• Remote kernel overflows
• RDP (Remote Desktop Protocol) Exploitation
• Cracking Windows Passwords
• Building Rainbow Tables
• Cracking Windows 2003 native mode passwords
• Brute forcing salted Unix passwords
• Attacking Kerberos Pre-Auth Hashes
• Cracking IOS and PIX passwords

Day 3
centers on extending access beyond the initial layer of
penetration. You will learn how to deploy trojan software
stealthily, attack through DMZs IDS & IPS, and deploy
cover channel keyloggers and kernel mode rootkits.
• Trojan genres
• Windows, Unix and Linux Trojans
• Kernel Mode Windows Rootkits
• System Call Hijacking vs. Direct Kernel Object
Modification
• Kernel Mode Linux Rootkits
• Covert communication channels
• Spoofing endpoints of communication tunnels
• Tunneling through IPSec VPNs by abusing ESP
• Steganographic Tunnels
• Remote command execution
• Sniffing and hijacking SSL encrypted sessions
• Installing sniffers on low privilege account in
Windows 2003 Server
• Stealthy Remote keylogger installation
• Circumventing Antivirus

Day 4: Attacking Network Infrastructure, Wireless
Attacks, and malicious evidence removal
After compromising and extending access to all
vulnerable systems at your target organization, you will
learn how to cover your tracks from even the most
vigilant defenders. The second half of Day 4 covers
attacking network infrastructure, including routers,
switches, IDS/IPS and firewalls. Some of the Day 4
lectures include:
• Modifying syslog entries
• Raw binary editing to prevent forensic
investigations
• Editing the Windows Event Log
• Abusing Windows Named Pipes for Domain
Impersonation
• Impersonation of other Users- Hijacking kernel
tokens
• Disguising network connections
• Attacking Cisco IOS
• Attacking STP & BGP protocols
• Wireless Insecurity
• Breaking Wireless Security – WEP, WPA, WPA2
• Blinding IDS & IPS
• Attacking IDS & IPS

Some of the instructor-led hands-on lab exercises:
• Malicious event log editing
• Binary filesystem modification for anti-forensics
• Named Pipe abuse
• Kernel Token Hijacking
• Attacking Border Gateway Protocol (BGP)
• Attack WEP
• Cracking WPA
• Cracking WPA2
• Cisco IOS Exploits
• Breaking into Cisco routers
• Blinding IPS
• Attacking IPS

Day 5: Web Application Hacking
Day 5 is totally dedicated to the latest frontier in hacking
and information security -- web application hacking. You will
come to master the penetration of web applications and
web enabled devices.
• Abusing Web Applications
• Attacking Java Applets
• Breaking web app authentication
• SQL Injection techniques
• Modifying form data
• Attacking session IDs
• Cookie stealing
• Cross Site Scripting
• Cross Site Request Forgery (CSRF) Attacks

Thoughts..................