Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 31 guests and 1 member online
 
Advertisement

You are here: Home
EH-Net
May 25, 2013, 12:18:59 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
  Home Help Calendar Login Register  
  Show Posts
Pages: 1 2 [3] 4 5 ... 40
31  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Backtrack 5 R2 priv escalation 0day found in CTF exercise on: April 13, 2012, 02:14:02 AM
in my opinion OffSec bit back a little too hard. sure they made it look worse than it is, and pointed out backtrack in particular while it is a vulnerability in an application that they use, not developed, but a simple statement that they are indeed vulnerable (which is a completely different discussion also, being a single user/root OS with a privilege escalation) but it is out of there hands because the vendor of the application needs to fix the bug, not them.
32  Resources / Career Central / Re: Feeling rejected and dont know what to do. on: April 13, 2012, 02:09:12 AM
If you aren't already using LinkedIn, start doing so  Grin

agreed, but there are some exceptions to this rule, i managed to do fine without linkedin, facebook and all those other social media thingies.

perhaps spicing your resume would be an option, mention what you do in your free time (i for example am active in the local 2600 chapter, volunteer at several conferences and give lectures at schools and hackerspaces, i even paid for some of my certificates.) now not all of these things might be work related, but sure show HR how motivated and active you are in the security community...
33  Resources / Mass Media / Re: "Breaking In" Pentest Sitcom on: April 13, 2012, 02:03:24 AM
good or not, they lost my attention when odette left the series...
34  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP review on: April 13, 2012, 02:00:50 AM
One more thing I would like to add:
there is a lot of self learning involved. Its a very good idea to go through videos on securitytube and g0tmilk's blogspot site. I also found it useful during labs that, when I was suspecting a particular weakness existed but was not able to exploit it, to go on youtube/security tube and search. A lot of times someone would have made a video going through the attack steps for a similar situation, or I would find tips on how to approach the problem eg a tool in backtrack I had not tried before, but which could be used in that situation.
g0tmilks site is really good for a newbie to see how a hack is carried out (with good music in the background !) It helped me to visualise how I should be approaching targets in general. corelan.be is good for buffer overflows if you are interested in the topic. I had done the tuts on this site before I had heard of OSCP, purely because i was interested in BOFs and it helped me understand the OSCP lectures faster.

One thing I would have liked more in the lectures was more emphasis on privilege escalation. I guess this is where sys admin experience, of which i had none, helps. g0tmilks site has a huge list of things to check for privilege escalation, on this forum Sil has a great post where he has detailed the things you should look out for as well.

one thing i find really good about the course is the buffer overflow part, it is well explained and documented and takes you through the process step by step, unlike other parts, but those you can figure out by yourself like you stated

anyway thanks for the writeup!
35  Ethical Hacking Discussions and Related Certifications / Wireless / Re: Alfa AWUS036NHR on: April 13, 2012, 01:57:02 AM
Quote
I recently bought an alfa R36 which can be used as an extender/repeater with the AWUS036NH, which also works great!

I have been looking at the R36 for when I get home, glad to hear that the driver issue has been fixed.

jup, it has been running non stop now for a couple of days, finally internet upstairs, these walls here are made of solid steel or something :S
36  Ethical Hacking Discussions and Related Certifications / General Certification / Re: Securitytube python scripting certification on: April 10, 2012, 08:06:22 AM
woops, did a search but did not find that topic, i guess this one can be closed...
37  Ethical Hacking Discussions and Related Certifications / Wireless / Re: Alfa AWUS036NHR on: April 10, 2012, 08:04:57 AM
i was looking at the specification of this new adapter, but i can not seem to find any good reason to get this one over the AWUS036NH, or am i missing something?

I recently bought an alfa R36 which can be used as an extender/repeater with the AWUS036NH, which also works great!

just some experience i want to share what i have had with alfa network:
at the time of purchase the R36 did not have compatibility with the AWUS036NH. i emailed them if they had any idea if this would be supported and if they had an ETA on the drivers that would support the AWUS036NH adapter. i received an answer within 24h (even with an apology for the delay because of the chinese newyear, now i dont know if my standards are low, but a reply within 24h is fast in my opinion) that the drivers would be released within the next few months. after a few weeks the updated driver was released and announced on their website. For me there is no substitute for alfa, i just love their products and the quality is excellent.
38  Ethical Hacking Discussions and Related Certifications / General Certification / Securitytube python scripting certification on: April 10, 2012, 07:55:51 AM
It seems that Vivek does not sit still, he has developed another securitytube course named pything scripting.

Here some info:
http://www.securitytube.net/video/3786

Now i know my programming needs some touch-up, all i can do is hope he will release the video's like he did with the other courses!
39  Ethical Hacking Discussions and Related Certifications / General Certification / Re: OSCP and Pentesting 101 on: April 10, 2012, 07:50:12 AM
great post, i remember someone saying that pentesting consists for the most part of waiting. This is only true if you truly master the skill, and by that i mean automate, automate and automate...let the computer do the work for you and use the fact it can multitask like no other...

some other tips:
try to separate automated scans. Sometimes tools get in eachother way. An example from my experience is that nmap and nessus can be working against each other during UDP-scans.

Talking about nikto, sometimes tools provide you with false positives (which is perfectly shown in the ubuntu/freebsd example) so NEVER trust the output of tools blind, always perform a manual check or use a second/third tool to confirm.
40  EH-Net / News Items and General Discussion About EH-Net / Re: [Article]-April 2012 Free Giveaway Sponsor - eLearnSecurity on: April 10, 2012, 07:40:49 AM
WOW, and another great prize! its time to step my game up
41  Resources / Links to cool sites. / Re: Course review - "Codename: Samurai Skills" on: March 22, 2012, 03:33:14 AM
Thank you Hayabusa for this review. At first i was a little sceptic about the course (they just keep popping up everywhere nowadays) but this review gives a good picture of the quality of the course. Also the fact that they listened and implemented your advice gives a good feeling about the guys that made the course. The only thing i did not like is that i have to add ANOTHER course to my list, hehe...
42  Ethical Hacking Discussions and Related Certifications / Malware / Re: Anonymous' OS...... on: March 15, 2012, 03:12:03 AM
heh, no chance in hell that os is getting anywhere near my rig Tongue i like the backgrounds though  Grin
43  Ethical Hacking Discussions and Related Certifications / ECSA - EC-Council Certified Security Analyst / Re: ECSA exam: required modules? on: March 15, 2012, 03:09:34 AM
Thanks guys, i'm already through half the course, so i will finish up first and start focussing on the first ten modules.
44  Ethical Hacking Discussions and Related Certifications / ECSA - EC-Council Certified Security Analyst / Re: ECSA exam: required modules? on: March 14, 2012, 08:23:37 AM
hmm, that is what i thought, but some research got me the following information:

http://eccouncil.org/courses/exam_information/ecsa_exam_412-79.aspx

Code:
The Exam 412-79 tests ECSA/LPT candidates on the following 35 domains.

    Module 1: The Need for Security Analysis
    Module 2: Advanced Googling
    Module 3: TCP/IP Packet Analysis
    Module 4: Advanced Sniffing Techniques
    Module 5: Vulnerability Analysis with Nessus
    Module 6: Advanced Wireless Testing
    Module 7: Designing a DMZ
    Module 8: Snort Analysis
    Module 9: Log Analysis
    Module 10: Advanced Exploits and Tools
    Module 11: Penetration Testing Methodologies
    Module 12: Customers and Legal Agreements
    Module 13: Penetration Testing Planning and Scheduling
    Module 14: Pre Penetration Testing Checklist
    Module 15: Information Gathering
    Module 16: Vulnerability Analysis
    Module 17: External Penetration Testing
    Module 18: Internal Network Penetration Testing
    Module 19: Router Penetration Testing
    Module 20: Firewall Penetration Testing
    Module 21: IDS Penetration Testing
    Module 22: Wireless Network Penetration Testing
    Module 23: Denial of Service Penetration Testing
    Module 24: Password Cracking Penetration Testing
    Module 25: Social Engineering Penetration Testing
    Module 26: Stolen Laptop Penetration Testing
    Module 27: Application Penetration Testing
    Module 28: Physical Security Penetration Testing
    Module 29: Database Penetration testing
    Module 30: VoIP Penetration Testing
    Module 31: VPN Penetration Testing
    Module 32: Penetration Testing Report Analysis
    Module 33: Penetration Testing Report and Documentation Writing
    Module 34: Penetration Testing Deliverables and Conclusion
    Module 35: Ethics of a Licensed Penetration Tester

which seems quite a lot for "just" 50 questions, that is less then 1 per module!
45  Ethical Hacking Discussions and Related Certifications / ECSA - EC-Council Certified Security Analyst / ECSA exam: required modules? on: March 14, 2012, 03:55:50 AM
I'm looking in to taking the self study road to getting myself ECSA/LPT certified, but i'm a little lost: i already figured out that you need to pass the ECSA exam to become ecsa certified, and if you want to obtain LPT you need to submit your certifications of both CEH and ECSA. This is all there is to it, no exam whatsoever, which is a little odd if you ask me.

Now i was wondering about the following: The ECSA/LPT course consists of 47 modules, where the first 11 are ECSA, the rest are LPT. Is the exam based on the frist 11 modules, or are all modules part of the exam?

it will probably be a while before i am going to take the exam, but expect a little review when i do...
Pages: 1 2 [3] 4 5 ... 40
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.07 seconds with 21 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.