I agree H1t M0nk3y. Also, I know information security standards like PCI-DSS are usually for financial institutions but FISMA and SOX has to influence a government agency, right. That would have to put some pressure on management to do their due diligence and due care. I would research some laws that show that not only can it be a hit to reputation and profits but it could possibly lead to charges being brought if any.
Good luck!!!! I hope all the studying and training can help you thru it. I will finally be able to take the OSCP training next month. Finally! Please tell us how you think you did when you are done. Again, good luck ZF!!
Thanks COm_BOY. I took a look and went through some of the challenges. I do like some of the programming ones and the Exploit challenge. As far as the quality, it was a complete range of 1 - 10. Some challenges were just looking through Google and some had you test your Assembly/Debugging skills. It is definitely worth a quick look. I have been trying to look for as many challenges as possible to prepare for the OSCP course. If anyone else is looking, here are some I have seen:
I have not taken it so I cannot give any helpful hints. But I still wanted to wish you good luck. And like you said, relax. I did find these links for inspiration and recommendations:
I apologize if this was answered already. Are there going to be anymore Skillz challenges this year? I really like the Prison Break challenge. There has been a lot of security topics for the year that may be cool to include:
Congrates guys. I also added the book to my wishlist. I should have it by next week hopefully. What inspired you guys to write the book? It just needed to be done or the love of InfoSec? Also, do you think Ninja skills increase your ability for Social Engineering?
Congrates Hayabusa!!! I am sorry to hear about the pain but you definitely have to time to rest now. Congrates again. You are really inspiring people especially being about to manage you time with a family. NICE WORK!
I agree. Great (brag) blog about buffer overflows. I found another good post about buffer overflows at (http://www.madirish.net/?article=215). That makes two great examples of services that can be attacked. NICE work. I can't wait to use the knowledge in the OSCP course.
Wait till you are married and have kids. Then, you really have no time. Just a note, try to follow the tweets of HD Moore and Jayson Street and you will learn that you have so much more to learn!! And of course, with no time.
I was wondering how others detect War-Driving or piggybacking on their wireless networks? I know Kismet has features for this but are there many others? How do you detect the passive probes to your wireless network?
For example, I saw someone suspicious with a laptop in his SUV. When he saw me, he took off. I was wondering if I should start using kismet more often to detect this sort of thing or am I just being paranoid as usual. Everyone else thinks I am.