Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 68 guests and 1 member online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum
EH-Net
May 21, 2012, 01:42:13 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
  Home Help Calendar Login Register  
  Show Posts
Pages: 1 2 [3] 4 5 ... 26
31  Ethical Hacking Discussions and Related Certifications / eCPPT - eLearnSecurity Certified Professional Penetration Tester / Re: eLearnSecurity opinions? on: November 10, 2010, 09:03:10 AM
Congrats Alucian! Looks like you need to update your signature Smiley

I've to submit my report by 14 November. I'm almost done, just have to perform some backend infrastructure tests though. Hopefully, I'll be an eCPPT by the end of this month.

32  EH-Net / News Items and General Discussion About EH-Net / Re: [Article]-November 2010 Free Giveaway Sponsor - InfoSec Institute on: November 04, 2010, 01:55:53 AM
Great giveaway! Good luck to all participating members.
33  Columns / Haddix / Re: [Article]-Review: eLearnSecurity’s Penetration Testing Pro (PTP) on: October 29, 2010, 10:44:12 AM
Hello, hungrymind!

I am  eLearnsecuirty's PTP course student. xXxKrisxXx and I did a small post comparing PWB and PTP. You can find it here
http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,5938.msg31605/#msg31605

Let me know if you've more questions, I'll be happy to help =)
34  Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: pentest for SQL Injection on: October 27, 2010, 06:10:02 AM
COm_BOY wants to ask whether you want a commercial tool or an opensource tool?
http://en.wikipedia.org/wiki/Open_source
35  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Setting up a test lab on: October 22, 2010, 09:43:57 AM
This is my standard 'building your lab' response at EH-Net  which I copy-paste from one thread to another. Hope you'll find it helpful.

You do not need any expensive stuff to build your 'virtual' test lab. In fact most of the stuff in my lab is absolutely free. You can find various open source counterparts of commercial tools.
There are various 'free' virtualization products available like virtualbox, vmware player and vmware server. I'm a big fan of vmware products. Personally, I believe that vmware server will be enough for what you want to do. Vmware server is a stripped down version of the excellent commercial vmware workstation but contains almost all the basic features you'll require. You can download pre-built linux virtual machines from the vmware website http://www.vmware.com/appliances/directory/
There's also a free route to get Windows OS. Either you can download the OS from Microsoft's website which comes with around 3 month trial period. Furthermore, you can also download Windows XP SP2 virtual machine from  NIST's website http://www.offensive-security.com/metasploit-unleashed/windows-xp-machine-setup
As for the softwares like ftp, telnet daemons and webservers etc...well most of them are free anyway  Cheesy

Jhaddix and Laz3r have posted wonderful tutorials to build a virtual test lab. You can get them here:-
Network pentest lab setup    
Pentest Lab: Web Application Edition

Additionally, you can practice on ready made targets like De-ICE live disks, hackerdemia and pWnOS all of which are available here http://forums.heorot.net/  You also have LAMP security disks http://sourceforge.net/projects/lampsecurity/  Also try your hands at the 'Skillz' section of this forum http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/board,12.0/ They will test your limits.
There's also a topic here at EHNet which will direct you to more stuff for practicing http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,5043.0/
36  EH-Net / News Items and General Discussion About EH-Net / Re: [Article]-September 2010 Free Giveaway Winner - APT by Joe McCray on: October 07, 2010, 08:11:42 AM
Congrats Jason!
37  Ethical Hacking Discussions and Related Certifications / Malware / Re: Botnet lab exercises for graduate-level security class? on: September 29, 2010, 09:46:55 AM
You might want to check some links I posted few months back http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,5541.0/
38  Ethical Hacking Discussions and Related Certifications / Programming / Re: Suggest me a e-book for understanding basics of buffer over flow? on: September 19, 2010, 06:58:49 AM
Do you have basic understanding of C/C++, specifically arrays,strings and pointers? If not then it'll be useful to firstly get some programming experience. I suggest reading "C programming language" http://www.amazon.com/Programming-Language-2nd-Brian-Kernighan/dp/0131103628/ref=sr_1_1?ie=UTF8&s=books&qid=1284897188&sr=8-1

You can then move to assembly language tutorials from securitytube especially videos 1,2,3,4 and 11. (I suggest watching all the videos, but if you can't then don't miss at least these five)
http://www.securitytube.net/Assembly-Primer-for-Hackers-%28Part-1%29-System-Organization-video.aspx

Armed with this knowledge it should be easy for you to understand bufferoverflows.
Again, securitytube has free buffer overflow primer videos. I found these very useful.
http://www.securitytube.net/Buffer-Overflow-Primer-Part-1-%28Smashing-the-Stack%29-video.aspx
39  EH-Net / News Items and General Discussion About EH-Net / Re: [Article]-August 2010 Free Giveaway Winners - CareerAcademy.com on: September 04, 2010, 06:16:04 AM
Congrats guys!
40  Ethical Hacking Discussions and Related Certifications / Wireless / Re: Does Mobile Security Deserve New Board? on: September 03, 2010, 07:13:00 AM
I also vote for a new board. There's a lot of stuff going in mobile security which wireless security doesn't encompass.
41  Resources / Tutorials / Re: Post your Cheat Sheets on: August 29, 2010, 11:58:18 AM
I know it's an old topic. But I found some new cheat sheets and didn't want to make a new thread.
Approx 70 cheat sheets for Linux users.
http://www.scottklarr.com/topic/115/linux-unix-cheat-sheets---the-ultimate-collection/
42  Ethical Hacking Discussions and Related Certifications / Programming / Re: Learning C++ on: August 23, 2010, 01:15:50 PM
Which book are you referencing?
43  Ethical Hacking Discussions and Related Certifications / Programming / Re: Learning C++ on: August 22, 2010, 07:59:57 AM
You might also want to consider the following free lectures from Stanford.
CS106-B Programming Abstractions: Teaches C++ programming. Natural successor to CS106-A which teaches programming methodology in Java
http://see.stanford.edu/see/lecturelist.aspx?coll=11f4f422-5670-4b4c-889c-008262e09e4e
http://www.youtube.com/user/stanforduniversity?blend=2&ob=4#g/c/FE6E58F856038C69

CS106-A Programming Methodology
http://see.stanford.edu/see/lecturelist.aspx?coll=824a47e1-135f-4508-a5aa-866adcae1111
http://www.youtube.com/user/stanforduniversity?blend=2&ob=4#g/c/84A56BC7F4A1F852
I haven't gone through both of the above, but I checked the first video of CS106A and I guess you'll be fine if you jump straight into CS106B.

I'm currently going through CS107. Excellent stuff. It's a must if you want to learn some advanced programming basics. Highly recommended. It basically teaches what happens under the hood, so don't study from it if don't already know basic C/C++.
CS107 Programming Paradigms
http://see.stanford.edu/see/lecturelist.aspx?coll=2d712634-2bf1-4b55-9a3a-ca9d470755ee
http://www.youtube.com/user/stanforduniversity?blend=2&ob=4#g/c/9D558D49CA734A02

Edit: Just found a really good paper or Pointers. Do read it.
cslibrary.stanford.edu/102/PointersAndMemory.pdf
44  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Anyone did OSCE (CTP) ? on: August 20, 2010, 10:36:11 AM
@dynamik
Nothing related to this thread, but just wanted to tell you that if you ever start learning from shellcoder's handbook use an old distro for the first 4-5 chapters. Preferably Redhat Linux 8 and above.
The examples used in these chapters assume that you've absolutely no protection enabled in your system- NX bits, ASLR... Even Redhat Linux 9 uses ASLR, built in the kernel and can't be disabled, and so you won't be able to use it for a LOT of exploits.
Majority of these protections can be disabled in the current distributions but there are still hidden elements which prevent your code from working properly. I learned all of this the hard way Embarrassed

It's still fun to first test your code in an old distro and then try to make it work in the newer ones Tongue
45  Ethical Hacking Discussions and Related Certifications / Programming / Re: Learning C++ on: August 19, 2010, 11:52:18 AM
Have you ever tried to pass an array as an argument to a function? How do you do this?<-- Think on this for a moment, and try to find a solution for it.
Also, how do you allocate dynamic memory?

I learned C programming (I'm not very good at C++ though I can read and understand the code) and especially pointers from a lot of books and online articles, so I can't direct you to any absolute resource. However, a good starting point will be to clear your concepts pertaining to arrays and strings and how they're stored in memory and then move to pointer. Learn all about pointers,pointers to arrays/strings, array of pointers (different form pointer to arrays), function pointers, pointers to other datatypes and try to compare how using a pointer is different from using that variable in a normal way. At each point try to visualize what's happening in the memory.

Here are some resource which might help you.
http://www.cprogramming.com/tutorial/lesson6.html
http://www.augustcouncil.com/~tgibson/tutorial/ptr.html
http://c-faq.com/ptrs/index.html
http://c-faq.com/malloc/index.html
http://c-faq.com/aryptr/index.html
Pages: 1 2 [3] 4 5 ... 26
Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.173 seconds with 21 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.