 |
| |
| |
|
Who's Online |
|
We have 45 guests online |
|
| |
|
|
 |
|
EH-Net
|
|
May 18, 2013, 05:20:24 PM
|
Show Posts
|
|
Pages: 1 [2] 3 4 ... 9
|
|
21
|
Ethical Hacking Discussions and Related Certifications / General Certification / Re: How NOT to pass a job interview
|
on: September 10, 2012, 12:05:35 PM
|
I agree with a lot of the posters here. Why is it so difficult ? If people don't wear suits at work and you don't think that people showing up for an interview need to wear one, why not put it in the job description ? Strange, you can't blame a guy showing up without a suit on a job interview when none of his coworkers is wearing one when they are doing the job. Or you have to be like the euro style, that you wear a suit to show respect to the other party in a job interview... to never wear it again on your job. 
|
|
|
|
|
22
|
Ethical Hacking Discussions and Related Certifications / Malware / Re: My new article
|
on: September 09, 2012, 09:20:42 PM
|
|
I say it's not possible to create a virus without knowing how to code in any computer language that will not be detected by the anti virus programs coded by the best assembly programmers on this planet.
Go ahead and let me read your article.
I will be the first to tell you that I was wrong and that all the Heuristic analysis is just voodoo and you can beat them without having to code anything nor have to know how to code anything.
|
|
|
|
|
25
|
Ethical Hacking Discussions and Related Certifications / Malware / Re: My new article
|
on: September 09, 2012, 09:01:15 PM
|
|
I read many things that I don't like, some I reply to, others I don't.
I have no problem with people having another opinion. It seems to me I stepped on some 'holy ground' .. your Offensive OSCP ratings and reputation. It's not allowed at all to say anything negative about it or I'm almost put away in the dog house.
About this thread, sure, write your article about how you will write your virus code without programming 1 line of code, or even better, without knowing any programming language - beating the best coders I have seen personally in my life -who I consider friends since many years- who program nota bene in assembly language at a level that you can only dream off.
Crazy stuff. Makes you wonder.
|
|
|
|
|
26
|
Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey...
|
on: September 09, 2012, 08:43:34 PM
|
|
I'm blown away by the amount of time you need to put into of 'figuring out' what to learn on yourself and what pisses me off the most is that they don't give you the source where to find correct information.
That is offensive's choice and their responsibility. I'm just frustrated and have to undergo it.
I have read about other people complaining about this very matter.
Did I learned ? Hell yeah i did. Would be strange if I wouldn't by putting so far approximately more than 150 hours of my time in it. Is it enough what they give me ? NO AND THAT'S WHAT I'M COMPLAINING ABOUT. I have a feeling I'm on 30% of what I need to know. So my guestimate would be that a person should be ready to put around 400 to 500 hours of study time in this course to achieve the rating.
From my experience it takes about double the time to achieve an OSCP rating compared to get a Cisco CCNA rating.
I did not complain about paying, i did not complain about the quality of their labs, why do you put this in my mouth ?
What you guys do now, stating that hey, you know what, that's just your own fault, deal with it, you should be smart enough before, and why are you so stupid to even start this course since you're not a great pentester yet, is absolutely not in line with what their marketing material states. It states clearly that you if you have knowledge of linux and scripting you should be fine.
I will tell you: you're not.
Well I will deal with it. No problem. But not without posting about it in this thread about 'my OSCP journey'.
Don't like what you read ? move on, there's other nice stuff on this forum that's in line with your dogmas.
So now I have heard so far: 1. It's your own problem, you should be smarter before, even much smarter than we write on our marketing material 2. You only do it to get adored, maybe I need a shrink ? People making the effort to post on forums only do it because they have to prove something to the world. Is it a phallus problem maybe ? 3. I'm not reading you anymore because you're not drinking the cool aid, and that's your own fault too. 4. Hey, real pentesting is even harder, why should we have to learn you even more ? Figure it out for yourself dude!
* TRY HARDER AND SHUT UP *
Ok guys. I get it.
|
|
|
|
|
27
|
Ethical Hacking Discussions and Related Certifications / Malware / Re: My new article
|
on: September 09, 2012, 02:46:06 PM
|
@sternone - I'm happy to see you advancing in Offsec's labs, however, I think your 'play-by-play', as someone called it, is borderline on giving other students too much information. The post where you pointed out the multi-NIC machine, for instance, OS and all (even without giving the IP's) is enough to have people openly going looking for that box. While yes, there is something to hitting the other parts of the network, if they start focusing on that, there's a lot of other machines that they might 'skip', thinking the importance of reaching the admin network, for instance, is of utmost importance. They'll miss out on learning topics from the remaining lab boxes.
I know you didn't give away the proverbial 'keys to the kingdom' or anything, but I think you're teetering on the fencepost. Also, please note the next bit, here, is not an attack, but... In addition, attacking cyber.spirit's article idea, when 'tooting your own horn', constantly, after every exploit you achieve in the OSCP lab, leaves me thinking you're out for self-promotion and glory. Doesn't leave me much more interested in your future writings, either.
Be tactful and respectful, please.
Thanks for your reaction. I really watch out not to disclose anything that would blow it for future lab customers. You know that very well. About the multihomed machine, well, if they don't get that, they are not in the right place. It's Offensive's own document who shows the network layout, not my posts. I don't need any glory. I would like you to explain me what all the other posts on the forums are for, are they only done for Glory ? Please elaborate. I learn from other's people posts and maybe some would do the same from my posts. Are you affiliated with Offensive Security ? You sure sound like it after I gave 'some small' critical remarks about it your tone completely changed. About cyber.spirit, he's allowed to post whatever he wants to. I would say that counts both ways, People can say whatever they want to in reply to my posts, again, that works both ways. If you don't like it, well then you shouldn't go on a 'forum' at all.
|
|
|
|
|
28
|
Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey...
|
on: September 09, 2012, 02:33:24 PM
|
|
I just warn people that are thinking of getting the OSCP rating by working true their videos and their PDF documents and working in the lab their butt off isn't going to work pass the OSCP.
It needs an extremely high time consuming and high individual effort of reading several books and researching on your own without any guidelines from the teaching company Offensive in this case. You are out there on your own to read the books you 'think' are interesting, read the texts you 'think' will help you and watch hours of other videos on the internet you found yourself and 'think' they will help you.
Remarks from people like you who 'think' the OSCP is awesome because they swallowed the marketing of it and they think that it let's you try harder is a great thing but haven't even tried the OSCP makes no sense at all. I'm not saying that OSCP is not good for you, as I read your signature with all your ratings you already achieved you are probably in a very much better situation than I am with no ratings but only programming, linux and windows administrating experience and a love for security. I would probably first get those 4 letter abbreviations like you have before attempting the OSCP.
Again, my posts lately are more of a warning to the people considering getting the OSCP. They have to think twice.
|
|
|
|
|
29
|
Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey...
|
on: September 09, 2012, 01:12:58 PM
|
You're killing me, dude. If you just want walk-throughs of how to exploit systems, hop on SecurityTube and watch the videos. There is no shortage of that type of instruction available, and that is not remotely the purpose of this course.
Exactly, the OSCP is about the labs, not about you expecting to let the Offensive guys 'learn' you a lot. You need to do it on yourself. Future customers of Offensive need to understand this before jumping in. What do you think a real pen test is like? Do you expect to be able to walk into an organization and completely understand how everything is configured, how their custom in-house applications work, etc., right off the bat?
You're currently working on what, 40-50 systems over 90 days? Try hundreds or thousands of systems over five days. There's always going to be weird stuff you've never encountered before, and you need to be able to adapt and get acclimated to that environment quickly. That gets stressful while dealing with fast-approaching deadlines. You can't just stop when you're burned out and return to a troublesome system after taking a weekend off.
While some of the non-standard configurations in this course are frustrating, there's probably more of that in the real world. Try dealing with NAC or other controls that'll shutdown or temporarily disable your switchport if triggered, or users (surprisingly) taking their system to IS when an exploit unexpectedly triggers an AV alert. Try adding the complexity of things that break after being subjected to a basic nmap scan; I've yet to visit a client that provides "revert" functionality (unless you count rebooting the system after yelling at the tester).
This type of work is rarely easy, things rarely go as expected, and you're never going to master everything. You can view this as challenging or frustrating, and I think your perspective will really determine how far you'll go professionally.
I agree completely on what you write. But you aren't paying your customers to learn something. I did it to Offensive. But they are lacking that part. They have a good lab and they have a good framework providing that lab. Their marketing text about what you should know before starting this lab is - to say the least- very misleading. There's no way that with basic programming skills and basic linux and windows administrating skills you are able to pass that lab and test successfully. Maybe somebody has done it. but the other 95% won't. Sorry you Offensive cool-aid drinkers are reading something that you don't like, but again, I post what I think for future Offensive customers. Let's say they are warned. About the giving up part. That's not what I did. I hit bottom on the course motivation to do what ? Exactly... to get deeper into tunneling and hacking my first tunneled server. On the same day. That doesn't sound like giving up does it ? Just explain me why it does.
|
|
|
|
|
30
|
Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey...
|
on: September 09, 2012, 01:02:57 PM
|
But I'm still pissed on Offensive Security on letting me read 100's of blogs of folks that can count their pubertal hairs on 1 hand.
WTH are you talking about??? A.) Offensive Security 'letting' you read something, or 'making' you read something? What you see now is what you're going to see in real life. You'll often need some info on an exploit or topic and have to go find it. I don't recall Offensive 'making' me look at anything, in particular. Specifically if you're referring to blogs. Blogs are others' writings, not Offensive's. Maybe you're just venting about something, but your vent just made no sense, as written... A/ Yes, I'm talking about Offensive not really having or using any course material explaining in 'debt' to let your learn the material. I don't need them to write a 20000 pages book, I would expect them to tell me what to read. But even that is : "try harder" Was there a B coming up ? Let me give you one : B/ Because I'm out there looking for material I come across all kind of sources wasting days of valuable time, I don't see what the use is of this. This is a big warning for people want to jump in the OSCP course. It's absolutely not for newbies. Basic linux and programming adminstrating skills won't do it here. You need to study much more before attempting it. Otherwise you could be left out frustrated. I'm venting what I want here in here, I started this thread not to get people into buying the OSCP lab, I started this lab to explain my findings with this course.
|
|
|
|
|
Loading...
|
|
 |
|