|
EH-Net
|
|
May 19, 2013, 07:26:20 PM
|
Show Posts
|
|
Pages: 1 ... 3 4 [5] 6 7 8
|
|
62
|
Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Finally took the plunge, started 08/05/12
|
on: August 19, 2012, 08:16:25 AM
|
Update: Today will be my 16th day with the course and so far the course has met my expectations. I have currently put 42 hours into the course and I am happy to say I have gained root on 5 boxes so far . Every time I gain root on a system, my confidence in the lab goes up ten fold. Given, they might not of been the hardest systems in the vulnerable network but never-the-less, I have learned SO MUCH in the last 2 weeks.
At this point in time, I am thinking about taking the OSCP exam somewhere near the end of September/beginning of October.
Make sure you leave time to write the report before taking the exam.
|
|
|
|
|
64
|
Ethical Hacking Discussions and Related Certifications / Malware / Re: msfpayload
|
on: August 16, 2012, 07:40:51 AM
|
If you own both computers, then just try it and find out what happens. Part of learning to hack is experimenting and seeing what the results are and interpreting them.
So u want me to drive a half of city to find out that im failed?! Man these systems are not in my local lab to switch between them easily. If your machine is already exposed to the internet such that you can attack it, then you can easily monitor its state remotely by setting up SSH, or even some remote desktop over VPN. Log in remotely, run your exploit, check to see if it worked.
|
|
|
|
|
65
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Is it a good starting-point?
|
on: August 15, 2012, 07:10:10 PM
|
Mmm, so python is the most important and required script language?
No. It's not the most important or required, but you should know at least one programming language, be it Perl, C, Python, or whatever else. The point is, you should be able to quickly write and read code so you can modify exploits, write your own tools, etc. Python is just recommended because it's easy to learn, and you can write some powerful scripts relatively quickly.
|
|
|
|
|
66
|
Ethical Hacking Discussions and Related Certifications / Malware / Re: msfpayload
|
on: August 15, 2012, 07:07:39 PM
|
If you own both computers, then just try it and find out what happens. Part of learning to hack is experimenting and seeing what the results are and interpreting them. hi guys, Im so sorry i posted another topic near to this subject before but i did that coz i have to so again so sory
Guys i can work with msfpayload program but i have these quiz:
1- Can i use this payload against computers over the internet (i meam for systems with dynamic ipv4 address can i attack them?)
2- is this payload files detectable by av?
3- can i put two payloads in a file?
4- has msf some key loggers with this payload?
Help me please Thnx
|
|
|
|
|
68
|
Resources / Tools / Re: Backtrack 5 R3 (upgrade vs clean install)
|
on: August 14, 2012, 03:58:08 PM
|
|
I prefer a clean install. I use it on a VM, and all my customizations are stored in a repository in my local network, and I can quickly git clone them over to the new install. I have scripts that copy old configurations over and setup everything the way I like it. This allows me to quickly get it up to speed with minimal interaction in a matter of minutes.
|
|
|
|
|
69
|
Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: OSCP exam tomorrow (16th)
|
on: August 14, 2012, 09:45:35 AM
|
|
Certain sections in the course can be done offline. You have three months to schedule your exam after your lab time ends, so you could easily spend an extra three months working on those sections you feel weak in before you take the exam. Things like buffer overflows are good a good example of things you can practice offline. You can download vulnerable virtual machine images made to be broken into for practice during that time as well, there's plenty of material out there to practice on once your lab time ends.
|
|
|
|
|
75
|
Features / Book Reviews / Re: Recomended book for Pen Tester
|
on: August 09, 2012, 08:18:51 PM
|
I've flipped through Advanced Penetration Testing for Highly-Secured Environments. I have some mixed feelings about it. Some things in the book aren't what I'd consider "advanced" (starting an ftp server, basic nmap scans, snmp scans, selecting a text editor (  )). Yet there are some gems in there, like setting up your own virtual lab, and bypassing IDSs and firewalls. Other things it barely touches upon (buffer overflow refresher - but never really goes into detail). There's a section on fuzzing, but only covers basic fuzzing. Maybe it's just me, but when I see "Advanced" I expect something like this: http://www.inguardians.com/research/docs/Skoudis_pentestsecrets.pdf
|
|
|
|
|
Loading...
|