Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 45 guests online
 
Advertisement

You are here: Home
EH-Net
May 18, 2013, 05:20:24 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
  Home Help Calendar Login Register  
  Show Posts
Pages: 1 [2] 3 4 ... 9
16  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey... on: September 11, 2012, 09:05:33 PM
You are a CCIE and passed the practical lab test for the CCIE in one of the CISCO labs worldwide and claim that 'once you pass the OSCP you can pass any CCIE lab' ??  Shocked Cheesy Cheesy

Funny stuff !!!

Like I say, I guestimated 400 to 600 hours to pass the OSCP, I think it's way more to reach a CCIE


17  Ethical Hacking Discussions and Related Certifications / Other / Re: GoDADDY.com gets hacked. DoS for millions of websites. on: September 11, 2012, 12:45:35 PM
GoDaddy wouldn't even let me interview for a pentesting position because i didn't have enough experience, so is it ok that I take a little pleasure in this?

Hahahaha

Yes, that is really funny.

THey said the fault was some corrupted routing tables.

I call that BS. I don't buy it. But hey, what else can they say ?
18  Ethical Hacking Discussions and Related Certifications / Other / Re: GoDADDY.com gets hacked. DoS for millions of websites. on: September 11, 2012, 07:16:26 AM
A misconfiguration ?

They will never admit to that right ?

If they admit they misconfigured something everybody could sue them for that mistake right ?

It's easier to say: we got hacked we are figuring things out why, and never answering to it.
19  Ethical Hacking Discussions and Related Certifications / Other / Re: GoDADDY.com gets hacked. DoS for millions of websites. on: September 10, 2012, 03:56:18 PM
couple of hours later.. still not up !!!!

What a disaster !! all email down too of millions of domains.
20  Ethical Hacking Discussions and Related Certifications / Other / GoDADDY.com gets hacked. DoS for millions of websites. on: September 10, 2012, 03:55:50 PM
Anonymous hacks one of the biggest webfarms in the world. Godaddy.com hosting millions of websites.

Millions of websites.. ALL DOWN!!!

ALL DOWN...

OMG!!

Anonymous...

http://www.cbsnews.com/8301-501465_162-57509744-501465/godaddy-goes-down-anonymous-claims-responsibility/
21  Ethical Hacking Discussions and Related Certifications / General Certification / Re: How NOT to pass a job interview on: September 10, 2012, 12:05:35 PM
I agree with a lot of the posters here.

Why is it so difficult ? If people don't wear suits at work and you don't think that people showing up for an interview need to wear one, why not put it in the job description ?

Strange, you can't blame a guy showing up without a suit on a job interview when none of his coworkers is wearing one when they are doing the job.

Or you have to be like the euro style, that you wear a suit to show respect to the other party in a job interview... to never wear it again on your job.  Roll Eyes
22  Ethical Hacking Discussions and Related Certifications / Malware / Re: My new article on: September 09, 2012, 09:20:42 PM
I say it's not possible to create a virus without knowing how to code in any computer language that will not be detected by the anti virus programs coded by the best assembly programmers on this planet.

Go ahead and let me read your article.

I will be the first to tell you that I was wrong and that all the Heuristic analysis is just voodoo and you can beat them without having to code anything nor have to know how to code anything.
23  Ethical Hacking Discussions and Related Certifications / OS / Re: Linux Distros Purpose on: September 09, 2012, 09:17:20 PM
+1 on distrowatch, I read this site for many many years. It's the best and fastest source on a quick update about all the flavors.

Don't forget this small joke :

http://theoatmeal.com/blog/fix_computer
24  Ethical Hacking Discussions and Related Certifications / General Certification / Re: How NOT to pass a job interview on: September 09, 2012, 09:09:30 PM
I'd much prefer they answer that they don't know, but understand who to ask, or how to find the answers they need.  

Well if they did the OSCP that wouldn't be a problem at all for them, would it ?
I hope you forgive me hayabusa for this remark but I really couldn't resist.  Cheesy

You're absolutely right. While many people might think that they have to talk their way true it on every job interview question, in fact it's not. Most job interview questions aren't supposed to be answers all 100% correctly.

A great book for coders that could help them is :

http://www.amazon.com/Cracking-Coding-Interview-Programming-Questions/dp/098478280X/ref=sr_1_fkmr0_1?ie=UTF8&qid=1347242932&sr=8-1-fkmr0&keywords=how+to+job+interview+coder+c%2B%2B

I used that book myself to hire people.
25  Ethical Hacking Discussions and Related Certifications / Malware / Re: My new article on: September 09, 2012, 09:01:15 PM
I read many things that I don't like, some I reply to, others I don't.

I have no problem with people having another opinion. It seems to me I stepped on some 'holy ground' .. your Offensive OSCP ratings and reputation. It's not allowed at all to say anything negative about it or I'm almost put away in the dog house.

About this thread, sure, write your article about how you will write your virus code without programming 1 line of code, or even better, without knowing any programming language - beating the best coders I have seen personally in my life -who I consider friends since many years- who program nota bene in assembly language at a level that you can only dream off.

Crazy stuff. Makes you wonder.
26  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey... on: September 09, 2012, 08:43:34 PM
I'm blown away by the amount of time you need to put into of 'figuring out' what to learn on yourself and what pisses me off the most is that they don't give you the source where to find correct information.

That is offensive's choice and their responsibility. I'm just frustrated and have to undergo it.

I have read about other people complaining about this very matter.

Did I learned ? Hell yeah i did. Would be strange if I wouldn't by putting so far approximately more than 150 hours of my time in it. Is it enough what they give me ? NO AND THAT'S WHAT I'M COMPLAINING ABOUT. I have a feeling I'm on 30% of what I need to know. So my guestimate would be that a person should be ready to put around 400 to 500 hours of study time in this course to achieve the rating.

From my experience it takes about double the time to achieve an OSCP rating compared to get a Cisco CCNA rating.

I did not complain about paying, i did not complain about the quality of their labs, why do you put this in my mouth ?

What you guys do now, stating that hey, you know what, that's just your own fault, deal with it, you should be smart enough before, and why are you so stupid to even start this course since you're not a great pentester yet, is absolutely not in line with what their marketing material states. It states clearly that you if you have knowledge of linux and scripting you should be fine.

I will tell you: you're not.

Well I will deal with it. No problem.  But not without posting about it in this thread about 'my OSCP journey'.

Don't like what you read ? move on, there's other nice stuff on this forum that's in line with your dogmas.

So now I have heard so far:
1. It's your own problem, you should be smarter before, even much smarter than we write on our marketing material
2. You only do it to get adored, maybe I need a shrink ? People making the effort to post on forums only do it because they have to prove something to the world. Is it a phallus problem maybe ?
3. I'm not reading you anymore because you're not drinking the cool aid, and that's your own fault too.
4. Hey, real pentesting is even harder, why should we have to learn you even more ? Figure it out for yourself dude!

* TRY HARDER AND SHUT UP *

Ok guys. I get it.
27  Ethical Hacking Discussions and Related Certifications / Malware / Re: My new article on: September 09, 2012, 02:46:06 PM
@sternone - I'm happy to see you advancing in Offsec's labs, however, I think your 'play-by-play', as someone called it, is borderline on giving other students too much information.  The post where you pointed out the multi-NIC machine, for instance, OS and all (even without giving the IP's) is enough to have people openly going looking for that box.  While yes, there is something to hitting the other parts of the network, if they start focusing on that, there's a lot of other machines that they might 'skip', thinking the importance of reaching the admin network, for instance, is of utmost importance.  They'll miss out on learning topics from the remaining lab boxes.

I know you didn't give away the proverbial 'keys to the kingdom' or anything, but I think you're teetering on the fencepost.  Also, please note the next bit, here, is not an attack, but...  In addition, attacking cyber.spirit's article idea, when 'tooting your own horn', constantly, after every exploit you achieve in the OSCP lab, leaves me thinking you're out for self-promotion and glory.  Doesn't leave me much more interested in your future writings, either.

Be tactful and respectful, please.

Thanks for your reaction.

I really watch out not to disclose anything that would blow it for future lab customers. You know that very well.

About the multihomed machine, well, if they don't get that, they are not in the right place. It's Offensive's own document who shows the network layout, not my posts. I don't need any glory. I would like you to explain me what all the other posts on the forums are for, are they only done for Glory ? Please elaborate. I learn from other's people posts and maybe some would do the same from my posts. Are you affiliated with Offensive Security ? You sure sound like it after I gave 'some small' critical remarks about it your tone completely changed.

About cyber.spirit, he's allowed to post whatever he wants to. I would say that counts both ways, People can say whatever they want to in reply to my posts, again, that works both ways. If you don't like it, well then you shouldn't go on a 'forum' at all.
28  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey... on: September 09, 2012, 02:33:24 PM
I just warn people that are thinking of getting the OSCP rating by working true their videos and their PDF documents and working in the lab their butt off isn't going to work pass the OSCP.

It needs an extremely high time consuming and high individual effort of reading several books and researching on your own without any guidelines from the teaching company Offensive in this case. You are out there on your own to read the books you 'think' are interesting, read the texts you 'think' will help you and watch hours of other videos on the internet you found yourself and 'think' they will help you.

Remarks from people like you who 'think' the OSCP is awesome because they swallowed the marketing of it and they think that it let's you try harder  is a great thing but haven't even tried the OSCP makes no sense at all. I'm not saying that OSCP is not good for you, as I read your signature with all your ratings you already achieved you are probably in a very much better situation than I am with no ratings but only programming, linux and windows administrating experience and a love for security. I would probably first get those 4 letter abbreviations like you have before attempting the OSCP.

Again, my posts lately are more of a warning to the people considering getting the OSCP. They have to think twice.

29  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey... on: September 09, 2012, 01:12:58 PM
You're killing me, dude. If you just want walk-throughs of how to exploit systems, hop on SecurityTube and watch the videos. There is no shortage of that type of instruction available, and that is not remotely the purpose of this course.

Exactly, the OSCP is about the labs, not about you expecting to let the Offensive guys 'learn' you a lot. You need to do it on yourself. Future customers of Offensive need to understand this before jumping in.


Quote
What do you think a real pen test is like? Do you expect to be able to walk into an organization and completely understand how everything is configured, how their custom in-house applications work, etc., right off the bat?

You're currently working on what, 40-50 systems over 90 days? Try hundreds or thousands of systems over five days. There's always going to be weird stuff you've never encountered before, and you need to be able to adapt and get acclimated to that environment quickly. That gets stressful while dealing with fast-approaching deadlines. You can't just stop when you're burned out and return to a troublesome system after taking a weekend off.

While some of the non-standard configurations in this course are frustrating, there's probably more of that in the real world. Try dealing with NAC or other controls that'll shutdown or temporarily disable your switchport if triggered, or users (surprisingly) taking their system to IS when an exploit unexpectedly triggers an AV alert. Try adding the complexity of things that break after being subjected to a basic nmap scan; I've yet to visit a client that provides "revert" functionality (unless you count rebooting the system after yelling at the tester).

This type of work is rarely easy, things rarely go as expected, and you're never going to master everything. You can view this as challenging or frustrating, and I think your perspective will really determine how far you'll go professionally.

I agree completely on what you write. But you aren't paying your customers to learn something. I did it to Offensive. But they are lacking that part. They have a good lab and they have a good framework providing that lab. Their marketing text about what you should know before starting this lab is - to say the least- very misleading.

There's no way that with basic programming skills and basic linux and windows administrating skills you are able to pass that lab and test successfully. Maybe somebody has done it. but the other 95% won't.

Sorry you Offensive cool-aid drinkers are reading something that you don't like, but again, I post what I think for future Offensive customers. Let's say they are warned.

About the giving up part. That's not what I did. I hit bottom on the course motivation to do what ? Exactly... to get deeper into tunneling and hacking my first tunneled server. On the same day. That doesn't sound like giving up does it ? Just explain me why it does.
30  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey... on: September 09, 2012, 01:02:57 PM
But I'm still pissed on Offensive Security on letting me read 100's of blogs of folks that can count their pubertal hairs on 1 hand.

WTH are you talking about???  

A.) Offensive Security 'letting' you read something, or 'making' you read something?  What you see now is what you're going to see in real life.  You'll often need some info on an exploit or topic and have to go find it.  I don't recall Offensive 'making' me look at anything, in particular.  Specifically if you're referring to blogs.  Blogs are others' writings, not Offensive's.

Maybe you're just venting about something, but your vent just made no sense, as written...

A/ Yes, I'm talking about Offensive not really having or using any course material explaining in 'debt' to let your learn the material. I don't need them to write a 20000 pages book, I would expect them to tell me what to read. But even that is : "try harder"

Was there a B coming up ? Let me give you one :

B/ Because I'm out there looking for material I come across all kind of sources wasting days of valuable time, I don't see what the use is of this.

This is a big warning for people want to jump in the OSCP course. It's absolutely not for newbies. Basic linux and programming adminstrating skills won't do it here. You need to study much more before attempting it. Otherwise you could be left out frustrated.

I'm venting what I want here in here, I started this thread not to get people into buying the OSCP lab, I started this lab to explain my findings with this course.
Pages: 1 [2] 3 4 ... 9
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.11 seconds with 21 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.