Simply put:
Red team = offensive, attacking team
Blue team = defensive team

Hi,

Sorry to butt in, but since I am currently enrolled in elearnsecurity's PTP course, I thought I would throw my 2 cents in.

Upon first glance at the eLS PTP course, I was extremely excited. I was glad to see they covers network security and system security as well and not just web app security.

Now, with me being more than halfway through the web app security portion, I must say, the English is erroneous and confusing (I am sympathetic as I know English is not the instructor's first language. However, it was unacceptable that I had to go to various external resources to fill in the missing gaps). Second, there is no chatroom where students can converse with other students. Apparently it is on its way, but it's been some time now and we have not received an update. A chatroom cannot be that hard to implement (there is already a forum). Thirdly, and this bugs the hell out of me, there is no direct line of communication between instructor (or other instructors) and student. At present, I can email a support-line email, which does not guarantee a reply, or I can contact the instructor via the forum, again, without guarantee of a reply. I finally received a reply to one of my questions and that was after waiting several days. At present, the eLS course feels more like a very expensive slideshow. I'm almost afraid to submit my pen-test report, because I feel like I am missing something 

Some of you will think my review is unduly harsh, but I honestly believe that it is precisely this criticism that will inspire improvements. The trouble is that would-be instructors cannot just throw brain dumps up on a site and charge for access, there needs to be interactivity, you need to be there for your customer/student to answer any question that may arise (because what is the difference between this and a book or video learning). We pay our fees and expect that there will be an instructor there to help us when we get stuck.

Now, with all that said, the course is slated to be updated sometime soon. Again, nobody has set a date, so can't say when that is, only "soon". So perhaps the update will address all my concerns. Guess I'll have to wait and see.

Thanks for listening to my review.

hungrymind

Great so i could prob break this down into:

Foundation
Technical Administration (red/Blue team)
Management
Legal??

Does auditing come under management or would this justify its own category? What Certs would you be looking at for Auditing/Legal??

Dear community of The Ethical Hacker Network,



After many months of struggle I have finally been able to pass my OSCE examination and I am now Offensive Security Certified Expert. The course it self was hard but not impossible to learn, do and complete however the examination was not easy at all.

It isn't for fun you're certified as an "Expert" when you do the OSCE certification because it really is that hard in my opinion, but far from impossible as you can see since there are OSCE's in this world.

I don't think it would be appropriate by copy+pasting my process here through CTP (Cracking the Perimeter) and the OSCE examination, so here's the links to my 4 blog entries about the course and the final examination.

Links:
http://forum.intern0t.net/blogs/maxe/95-cracking-perimeter-part-1.html
http://forum.intern0t.net/blogs/maxe/101-cracking-perimeter-part-2.html
http://forum.intern0t.net/blogs/maxe/108-cracking-perimeter-part-3.html
http://forum.intern0t.net/blogs/maxe/111-cracking-perimeter-part-4.html

You can read about the certification here:
http://www.offensive-security.com/information-security-certifications/#OSCE



Best regards,
MaXe

I just got the results today from the exam, so from now on I am an eCPPT!

I really liked the course. It is very well structured, and a very important advantage is that you can access it any time.

Now I am doing some checks for work and I use the course as a guide for the most important steps. I recommend following the course multiple times, because there is so much information so you can't digest it in a single shot.

I just wait for the new course they will produce (supposed to be an advanced one).

I found this course to take you from the novice to an intermediate level for the web application part, and this is what I wanted. The other two modules are at an intermediate level.

Thanks Dutchie


I talk to the guys at Offensive-Security and their answer was: "Metasploit is forbidden on some machines".

So it is good, they want to know if we can do without on some machines and if we know how to use it on others.

Another question, I know we won't be allow to use some tools during the exam, like Core Impact or Ettercap.

Do you guys know if we will be allow to use Metasploit, since it is part of the course? If we aren't, I will make sure I study some other stuff...

Lol!  No, definitely from the car accident.  Just wish they actually eased the pain.  Docs keep prescribing the same things, even when I tell them nothing's helping.  My latest was that the docs ordered an MRI for me, and come to find out, they ordered it on the completely wrong section of my spine, so now I'm waiting for yet another one to be done, as the chiropractor and others are afraid to do anything else, based on my pain and what they're seeing / feeling, without having a better picture of what's going on.

I'm actually going to be taking the next two weeks (this coming Saturday through Sept 5) off work, to TRY to rest, as I can't even lay in bed with any comfort, and GOOD, restful sleep has eluded me now for almost 6 weeks.

But nah, OSCP was challenging, but not so much as to make me have to self-medicate!  

Well it's official guys - I received an e-mail this morning confirming me that I successfully received my OSCP Certification. I'm super excited and finally have something to throw in my signature. I may do a review similar to Ryan Linn's. He covered a good review of the material that's in the course and my opinion is very similar. I may even just give my opinion of the newly added sections (Like the linux buffer overflow exploitation section & updates web application attack section). I'll keep everyone posted.

@j0rDy I have heard that in the test, you don't have to pivot to attack another network. So although it is very useful, if you can't find other networks during your lab time, you should be ok for the exam.

BTW, after my initial lab time has expired, I was going on holidays (DefCon!). So I asked them if I had to buy a lab extension right away or if I could wait a bit. They said I could take all the time I wanted, so I ended up waiting a full month before buying some extra time.

All that to say if you are planning to buy more lab time, you don't have to buy it right away.

Also, I am scheduled for the OSCP test Saturday, August 21st! So I am buying 10 days of lab today to get ready for the exam!!! Man I hope I pass it...

Passed my OSCP this weekend.  Should've been a perfect score, but the last box in the challenge I was working on eluded me, as I've been on some heavy pain meds from a car accident last weekend, that had me spinning.  But I'm not one for excuses, and I passed, anyway, so w00t!

For all of those in the process, or planning to be, it's a great experience, you'll learn a lot, even if you are well-versed, already, and you'll have a really good time along the way.  Just be prepared for long hours and lots of self-paced study!

Tim