So my next question is, when if EVER do you use your exploit-dev skills on a pentest? Most environments can be pwned without needing the heavy artillery not so?

Your response maybe that I said most, but how often do you get to go up against an environment that requires OSCE etc skillz?

OSCE vs GXPN vs Corelan...go


 

And I have FOUR eyes

Yeah I cant make them out for nothing. Must be another easier way.

I knew I read about this somewhere before....have a look at this
http://computer-forensics.sans.org/blog/2012/02/21/protecting-privileged-domain-account-safeguarding-password-hashes

What do you want to know?

Do you guys really think you could survive an interview with MaXe..I mean seriously 

U sure about that 

................All seems to be working out..

WAHH2 - http://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470

......have you had issues doing authenticated scans with w3af?

@MaXe what settings do you typically use for Dirbuster? Are you also using the raft wordlist

Wordlist: http://code.google.com/p/raft/downloads/detail?name=raft-wordlists-20110803.7z

Congrats alucian.......I think certs in general are addictive

The OSCP will require a lot more than just knowledge of python. At least that was my experience when I did it. Keep in mind that I didn't know python either.

As it relates to progressing through languages, I would focus on the fundamentals i.e programming paradigms OOP/Procedural, control structures and so on.

Once you have mastered that it comes down to syntax and knowing how each language implements a particular concept.

Congratz...check pm

Couple questions:

Building a Metasploit Module:
The candidate will demonstrate a high-level understanding of how to create a Metasploit module

Q:How does this differ from the msf module in the OSCP?

Python and Scapy For Pen Testers   
The candidate will demonstrate an understanding of the ability to read and modify Python scripts and packet crafting using Scapy to enhance functionality as required during a penetration test
Q: How deep do you into using scapy?

Advanced Stack Smashing   The candidate will demonstrate an understanding of how to write advanced stack overflow exploits against canary-protected programs and ASLR
Q:Is this partial overwrite technique?

In terms of value for money which would you say would better suite a pentester the OSCE or GXPN?