|
EH-Net
|
|
May 22, 2013, 08:59:07 AM
|
Show Posts
|
|
Pages: 1 [2] 3 4
|
|
22
|
Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: [Opinion] CEHv6 self-study material
|
on: December 09, 2009, 12:53:52 PM
|
Thank you Fr0z3n, I will check it out. Bill thanks for getting back to me, I hope you feel better now. I have the flu also but today I feel much better than few days ago. I've purchased some of the EC-Council Press books, and I was about to post about what I found. I liked how the books are ordered, brief explanation of the concept, tools used, questions and answers, and finally hands-on training, that requires as you said access code. I used the access code to get to the students resources, but I was disappointed as it does not include most of the tools/materials mentioned in the training. I'm not sure whom to contact in this regard. I tried to call EC-Council office in US but the number listed is NOT working. 
|
|
|
|
|
26
|
Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / [Opinion] CEHv6 self-study material
|
on: December 03, 2009, 01:09:27 PM
|
For those who took CEHv6, and used the self-study material do you think the review below is still valid for the current content? Study Guide Content Each of the books was quite thick, containing literally hundreds of pages. I was quite surprised at the amount of text I was to begin studying. It didn’t take me long to realize that these books were written extremely poorly. The CEH’s choice of actual modules was quite good, though I have issue with how the actual content of the modules was presented. The courseware books really came across as being more of a Teacher’s Guide than a self-study course. I say this because there would commonly be a PowerPoint slide on the top of a page, then an explanation written beneath each slide. I don’t so much have issue with that, though it also wasn’t uncommon for the explanation written beneath to be the exact text that just appeared in the above PowerPoint with nothing extra added. That didn’t seem to make much sense. I found a number of core issues with the courseware books: - Proofread: The books are in dire, dire need of being proofread. - No Clear Flow: Technical information can be dry, but there is still a need to make the content readable in an attempt to at least be in somewhat of a story format. The content of the modules often didn’t have any logical flow, and often an area would be covered to what you believe to be completion, then an item relating to that area would appear seemingly out-of-turn later in the module. - Overwhelmed with Tools: Without question, it is important to be familiar with the various hacking tools that are available; that is pretty much the point of this course. That notwithstanding, tool after tool is literally dumped on the reader, without context of why you would want to use one tool over another. The tools were not logically grouped within each module, either, so it was difficult to have comprehension of the purpose of the tools after reading the module. Also, there’s more to hacking than just knowing the tools. The tool’s use needs to be put into context with an example of when the tool should be utilized. This was not adequately done in the courseware material. I actually went back to count the various tools that were discussed, and unofficially the count was over 250. I didn’t have the heart to actually go back and count each and every one for an exact number. Personally, I think that number could have been drastically reduced with more emphasis on select tools, their use and the situations in which you would want to use that tool. Instead, the reader is just literally dumped with brief explanations of hundreds of tools. - Choppy: Reading the material felt like reading thousands of individual pages - not thought-out and modules had no flow to them. I actually told my boss that in reading this material, that I truly felt the authors had Attention Deficit Disorder with poor grammar skills. http://www.ethicalhacker.net/content/view/54/24/
|
|
|
|
|
28
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Pass-the-hash question
|
on: November 30, 2009, 12:03:45 AM
|
|
Thanks much timmedin. Incidentally I was reading the post you kindly provided a link to.
This is my understanding on the subject. Cracking a sniffed challenge-response hash to get the password hash is not an easy task (time wise) when the challenge key is not known. If the challenge key is known, the process will be much easier. This is however if LM/NTLM challenge-response is sniffed, however if NTLMv2 is sniffed, it will be extremely hard to do.
Thanks a lot timmedin for all your help in this post.
|
|
|
|
|
30
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Pass-the-hash question
|
on: November 16, 2009, 12:38:41 PM
|
|
Thanks so much timmedin for the detail explanation.
In my previous post, I posted a capture I gathered from msf smb module. What I did to the html page to make it work is that I change the img url to this <img src="file://ubuntu/blah/blah.img" >
But as you can see from the capture LM is not used at all. NTLM hash is much longer than the usual. I'm not sure if there is further tweaks needs to be done to the hash to make it usable, or if it can't be used at all.
Any idea?
thx
|
|
|
|
|
Loading...
|