|
EH-Net
|
|
May 19, 2013, 11:53:47 AM
|
|
1531
|
Resources / Tools / Re: BackTrack 4 Final Release is out
|
on: January 28, 2010, 11:57:24 AM
|
|
I've not had issues with mine, either, and it's been performing up to snuff with the pre-... so not certain what you might be running into. Perhaps looking at the log files might help, to see if there are any erroneous errors?
|
|
|
|
|
1534
|
Ethical Hacking Discussions and Related Certifications / Hardware / Re: Tablets
|
on: January 28, 2010, 10:51:21 AM
|
|
Immunity's stuff has always been top notch. Dave Aitel and company really put in a lot of hours to come up with the solutions they offer. I hadn't taken the time to look at Silica before, but now I'll have to.
I'd already been working on some custom scripts and tools for my own usage, but if Silica works as well as I'd expect, coming from Immunity, I might just cough up the cash and go with theirs, myself!
|
|
|
|
|
1540
|
Ethical Hacking Discussions and Related Certifications / Other / Re: HTTPS Now Default for Gmail
|
on: January 20, 2010, 06:48:49 PM
|
Public wifi hotspots?  So they mean to tell me that using tools like Ettercap and SSLSTrip, they won't have folks doing mitm to grab GMAIL data, if they really want to? I'd agree it keeps the general public from 'stumbling' onto data, but it certainly doesn't take a rocket scientist to bypass a simple ssl login scenario, particularly at a public hotspot. Don't get me wrong... I guess it's a matter of general security, and thus, for the average joe, probably a good thing, but really, I wouldn't tout it as a HUGE security remedy. SSL, by itself, isn't a very solid, promising safeguard, to me. For instance, many of these sslvpn types of scenarios which rely solely on a username and password... Let me sniff that with one of the tools above, and I now have your vpn login credentials. However, if you ADD something to the mix, say a secureID token or something, they MAY get your username and password, but are mush less likely to get into your account using your login, as now you've added the necessity to possess the token, to be able to pass the proper key with the credentials...
|
|
|
|
|
1541
|
Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: Is CEH Right for me?
|
on: January 20, 2010, 06:37:35 PM
|
|
I'd agree with BillV. While CEH certainly may not be a management credential to hold, if you're truly looking for a better understanding of the concepts, it certainly wouldn't hurt to at LEAST self-study it, even if you don't pursue the certification at the end. Just studying the materials, if you truly do some Googling, etc, in the process, will lend a lot to your overall awareness and knowledge of the topics covered in the course materials and in day-to-day security 'discussions,' even if you never truly understand the underlying pieces of attacks and penetration tests.
Good luck, and welcome.
|
|
|
|
|
Loading...
|