|
EH-Net
|
|
May 19, 2013, 07:42:51 PM
|
Show Posts
|
|
Pages: 1 ... 5 6 [7] 8 9 ... 126
|
|
93
|
Resources / Tools / Re: Nessus 5.0 Released
|
on: February 16, 2012, 07:03:24 PM
|
|
Looks like it was a problem installing/upgrading from v4 to v5 (Windows x64).
For whatever reason, I had to fully uninstall and reinstall. The new stuff in v5 is to setup a user within the web interface and also do the activation there. I had no problems with the fresh install.
|
|
|
|
|
94
|
Resources / Tools / Re: Nessus 5.0 Released
|
on: February 16, 2012, 06:51:30 PM
|
Anyone else have this problem registering a home feed? C:\Program Files\Tenable\Nessus>nessus-fetch.exe --register 7BEE-F7E0-15AC-CAAC-1D34 Your Activation Code has been registered properly - thank you. Now fetching the newest plugin set from plugins.nessus.org... Error - this scanner is not registered. Please go to http://www.nessus.org/register/
C:\Program Files\Tenable\Nessus>nessus-fetch.exe --check nessus-fetch is not configured to receive a ProfessionalFeed nor a HomeFeed
C:\Program Files\Tenable\Nessus>nessus-fetch.exe --register 7BEE-F7E0-15AC-CAAC-1D34 The provided Activation Code (7BEE-F7E0-15AC-CAAC-1D34) has already been used.
C:\Program Files\Tenable\Nessus>
|
|
|
|
|
97
|
Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: C|EH v8?
|
on: February 16, 2012, 08:58:24 AM
|
|
And to answer your final question...
If they do it correctly, this could be a significant improvement.
I can tell you that I've been involved in a lot of the exam development process since back in October of 2010. The exam itself will be a better reflection of the skill set and knowledge required for this type of certification. It's up to EC-Council to do the same with the courseware (unless they outsource or contract some other people to write it).
I think it should be treated like any other new certification. Personally, I'd be hesitant to jump to anything new until it's been vetted by someone I know or respect.
|
|
|
|
|
98
|
Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: C|EH v8?
|
on: February 16, 2012, 08:51:59 AM
|
I don't disagree that they have work to do. They know they have work to do. What takes so long, I have no idea. I know we've seen posts about problems with instructors. I can't disagree there either. My own CEH instructor was horrible when I took the course. The guys recognized as Master Instructors that I know, are good at what they do and I'd happily sit in their course. How many are out there? Not a clue. Are there some designated as Master Instructors that truly don't know what they're doing? Again, I'm not sure but it wouldn't surprise me. We all know that the experience and ability of the instructor can easily make or break a class though. On the iLabs, we recently had a report on this portal about the failure of iLabs. They work, but it appears by report to be put together very poorly. Can you tell us about how it worked when you tested it? (NOTE: I see you replied to that post, not knocking your efforts, the poster said the labs appeared to work, but just not intuitively. I'll quote the relevant portion for those who havent seen the thread) The same can be said for the iLabs - to call it "unpolished" would be kind. Basically, you log in and reserve time in 2-3 hour blocks. The system creates a virtual lab environment for you on their network from which you can run their Bible-sized (both Old & New Testament) book of lab "exercises". The exercises themselves are basically just a very (very, very) simplistic execution of the myriad of tools accompanied by screen shots. For example, they'll have you install Cain and attempt to crack a password file but it really amounts to click here, now click here, okay, now click here. Done! There are no targets per se, just 3-4 different platforms you can run the different tools on. And there are no end-to-end exercises. My experience with iLabs was similar to what DragonGorge posted. Keep in mind I went through this about a year ago before iLabs was actually rolled out so I don't know if anything has changed (and it's hard to remember all the details). You basically access the system and reserve a block of time for doing your labs. The system then configures your virtual network for use. It consists of several different systems - I want to say 5 but I can't remember what all they were (Windows 2008, Windows 7, BackTrack and there may have been a second 2008 box). The instructions are similar to what was pointed out. At the beginning they give you some type of overview or scenario about when/why you might use the tool(s) in the lab. You are then told about the environment and which systems you will be using for the lab (W2K8, W7, BT, etc.). After that it walks you step-by-step through installing and running the tool. As DragonGorge mentioned, the labs only go so deep into the tool. They get you up and running and show you the basic functionality - it's left to you to explore the tool in greater detail and play within the lab. I believe they add some 'additional tasks' at the end of the lab or ask you questions about using the tool in other scenarios. Again, this is where it's up to the student to go the extra distance and do these tasks. If there are any targets required, the lab will tell you that you need multiple machines and you will use one to attack the other (e.g., the BT system attacking the W2K8 system). There are no end-to-end exercises as pointed out but probably should be. When working through the lab guides, there were spelling/grammar mistakes, wrong names of virtual systems, wrong systems selected, or stuff that just didn't work. I fixed the simple spelling/grammar errors, renamed the virtual systems (apparently the systems in the class are slightly different than iLabs, which would certainly cause confusion), and basically made sure the lab worked. If there were missing instructions I would add them or if something wasn't needed I removed it. For a couple of labs, I remember rewriting large portions. I wasn't responsible for creating or selecting the labs, just making sure they worked. When I was finished and turned everything back into ECC, everything was accurate and worked fine. What happened after that (whether they accepted all my changes, changed systems, changed/added labs), I have no idea.
|
|
|
|
|
99
|
Resources / Mass Media / Re: "Breaking In" Pentest Sitcom
|
on: February 15, 2012, 09:02:35 PM
|
|
Yes, this is an old thread. But has anyone else seen commercials on Fox announcing the season premiere of Breaking In (re)starting soon? Seems odd comsidering the attempted launch a year ago failed, and it never made it for a full season.
|
|
|
|
|
100
|
Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: C|EH v8?
|
on: February 15, 2012, 03:53:31 PM
|
The BIG issue is ECC, but beyond that...  I dont like the new version because such a big deal was made about v7, they have already pushed it out to testing providers, and companies have released study material for it. and now less than an actual full year later, we are getting a new release to fix courseware... They could simply insure they send out new couseware to people taking the new exam. Also the issue is studying. For the most part we have recommended v6 CW for studying for v7. Now we can extend that to v8. That is three major releases with no significant content change... In addition, the versioning could become an issue. Now v6 certified individuals are that much less valid in the grand scheme (honestly ive never had an employer ask about an exam version, but it could be a concern, especially with what i've heard about the older versions.). If i'm not mistaken, ECC now prints the version on the certificate, so its not just an internal issue. I can't speak for the courseware but the exam itself has been completely redesigned from the ground up. Things that a CEH-level person should know are included and things that are irrelevant have been removed. That being said, objectives will have to be changed which should mean that courseware has to follow suit. If that's the case, then v6 and v7 study guides will not be as valuable to the v8 exam as v6 guides were to v7. The whole push for the new version revolves around ANSI accreditation. The exam was developed per their standards. I don't know if they set standards for the courseware as well or not. Anyone that passes CEH v8 (and forward) will have the ANSI accredited version. Per ANSI guidelines the version has to remain. If you are a CEH v6, you are a CEH v6, not a CEH. This is how they will distinguish who passed the exam before and after the accreditation. My final issue is with v7 itself. We have seen numerous unresolved issues with it. without a real review of what is being changed in v8, i'm skeptical.Issues with the courseware, issues with the instructors, issues with Frankenstein and iLabs. Thats all that made v7 worthwhile. I just dont want someone going in with fishscales over their eyes.
I can't speak to the courseware as I've never actually unwrapped my copy. Instructors are a problem for any course. Frankenstein is for instructor use only. And, personally, I never had any problems with the iLabs. I went through every lab in the manual and revised as needed or rewrote the lab if it didn't work right. What happened after that, I have no idea. edit: I don't mean I changed the labs on-the-fly so they worked as I was studying but I was asked by EC-Council to review the iLabs manuals and make sure the labs worked.I'm not going to defend EC-Council, that's their own job and I've already done enough of it in the past. There are plenty of unhappy people out there (in their own members portal as well). Just wanted to explain why the changes are happening.
|
|
|
|
|
102
|
Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: C|EH v8?
|
on: February 15, 2012, 07:32:58 AM
|
|
The launch dates for the exam and courseware are different.
If I recall, the exam is targeted for an April launch and the courseware is not due out until roughly November.
My guess is that the courseware is going to be "cleaned up," as DragonGorge put it, but will also be aligned with the new exam (expected to be ANSI accredited soon).
A lot of effort has been put into developing this exam per ANSI standards (started back in late 2010). New objectives and task and knowledge domains have been developed by SMEs working in the field. There were a large amount of beta testers that provided feedback on each question. Multiple 'panels' were created to review all of this information and decide what to keep, change, or throw out.
In the end, I expect the exam itself will be a decent change but I don't know anything about the courseware.
|
|
|
|
|
103
|
Columns / Hoffman / Re: [Article]-Review: CEH Via Self Study
|
on: February 15, 2012, 07:25:55 AM
|
|
Okay, that makes much more sense.
I don't know which was created first but I do know that there are specific lab guides for iLabs that are different from the lab manuals with the books.
I have a copy of the v7 courseware but it's still in it's wrapping in a box under my desk. Maybe I'll finally open it and take a look to see if I can recognize differences.
What I can tell you is that I personally reviewed, revised, and tested the iLabs manuals. I made sure that all of the problems you've referenced didn't exist. If a lab didn't work, I changed the instructions so it would. If they weren't clear, I added additional instruction.
I'm not going to make excuses for EC-Council but I'm sorry to hear of your troubles. That's the reason why I reviewed those manuals in the first place - to ensure stuff like this didn't happen.
|
|
|
|
|
104
|
Columns / Hoffman / Re: [Article]-Review: CEH Via Self Study
|
on: February 13, 2012, 07:44:54 AM
|
The information in the lab instructions ran the gamut but peaked at "okay". They could be unclear: no front matter whatsoever on system requirements et al, no instructions on how to run the different OS configurations, etc. They could be wrong: instructions to install a tool that doesn't need installing, starting a [insert OS here] machine that doesn't exist on the system. They could be overly simplistic: one exercise actually ended with "Press File then press Exit to close the tool". Screenshots were often wrong and were accompanied by little blurbs in the margin which I discovered were just grabbed from the tool's website. Were you following the iLabs manuals? Or the lab guides included with the courseware? I would assume the books included with the courseware based on your description of "Bible-sized" book but just wanted to be sure.
|
|
|
|
|
Loading...
|