Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 67 guests online
 
Free Business and Tech Magazines and eBooks

You are here: Home
EH-Net
May 22, 2013, 12:34:41 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
  Home Help Calendar Login Register  
  Show Posts
Pages: [1] 2 3 ... 45
1  Ethical Hacking Discussions and Related Certifications / General Certification / Re: The Art of exploiting Injection flaws@ Black Hat Vegas 2013 on: March 05, 2013, 08:37:37 AM
It's a very good course, I recently some most of it, he knows his stuff (and beyond), no questions about that  Grin
2  Ethical Hacking Discussions and Related Certifications / General Certification / Re: Hacking Dojo Novice Access - No Confirmation email/link. on: March 04, 2013, 11:24:18 PM
Give him some time, he usually responds within a week as all access is manually set up, and Grendel is usually extremely busy, be patient  Smiley
3  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: OSCP in current state ? on: March 01, 2013, 07:43:19 AM
There's no measurement, but it's the best way to learn the basics of pentesting when it comes to courseware. The Labs, may be very tough if you're very new to pentesting. I suggest you become familiar with linux and the console a bit, before diving into OSCP/PWB.
It's also useful to have a good working knowledge about computers and networks in general (just the basics), despite the course covers much of this.
What you must be willing to do, is to never give up during the PWB/OSCP course and certification, and if you don't understand something, try harder on your own, use the student forums, google, etc.
I took OSCE a couple of years ago, it was awesome, despite it was quite tough for me back then, after all, it was my first certification  Grin If you're motivated enough, you can do OSCP.
4  EH-Net / News Items and General Discussion About EH-Net / Re: Ethical Hackers' thoughts on a general misunderstanding of "hacker"? on: February 28, 2013, 05:59:57 PM
Yes, thank you all so much for your help in determining what "hacking" really is!  This is a wonderful community Smiley  I had no idea how much hackers do!

We didn't determine anything. We only shared the truth.
5  Ethical Hacking Discussions and Related Certifications / General Certification / Re: Hackingdojo on: February 27, 2013, 08:01:47 PM
I've done most of the Shodan course, however I failed at cracking some passwords. Despite that I tried idunno, 50-100'000 relevant variations of the mentioned topic, and 165 million random different passwords. Did any of them crack? Nope.
6  Ethical Hacking Discussions and Related Certifications / Web Applications / Re: [question]understanding parameterized queries ? on: February 27, 2013, 03:57:04 AM
You should consider posting your message on one forum first, and then wait a bit, before posting it across multiple forums. I've already replied on InterN0T.
7  Resources / Looking For Work / Re: Looking for security opportunity on: February 27, 2013, 01:35:57 AM
What kind of practical experience do you have with security? Your resume and certifications doesn't tell if you know about penetration testing, vulnerability assessments, etc.
8  Ethical Hacking Discussions and Related Certifications / General Certification / Re: Certificates vs Degree on: February 24, 2013, 11:31:11 PM
The course I recommended from BackTrack, is not that expensive:
http://www.offensive-security.com/information-security-training/penetration-testing-with-backtrack/ (750$, I recommend 60 days lab time)
and this: http://www.offensive-security.com/information-security-training/cracking-the-perimeter/ (1200$)

Don't do OSCE without knowing quite a bit about hacking first, as it's really a killer if you don't know a sufficient amount of hacking.
9  Ethical Hacking Discussions and Related Certifications / General Certification / Re: Certificates vs Degree on: February 24, 2013, 06:59:21 PM
A degree in computer science is good if you're in Austraila, and as you are doing a masters in Computer Security that's also very good. You should however look into Offensive Security certifications as well, as they are valued at some companies in Australia. CREST certifications are quickly gaining popularity at the moment, but they are very costly, and, extremely overpriced. I suggest you do OSCP first before you even attempt CRT if you got the money.

Employers here, will look at your education, but also certifications as they can be merit (but seriously, finish your education), however some of them will most likely test your technical skills in a theoretical and/or practical test, so make sure you know what you're talking about.

Having the right education and certifications is one thing, but knowing your stuff is even better, and having a combination of both is the best.  

GIAC certifications and SANS courses are known, but not as highly valued as OffSec certs.

So look into getting OffSec certs for starters.
10  Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: CEH application fee? on: February 23, 2013, 10:34:29 PM
I guess it's just money for checking the papers and perhaps your linkedin profile  Grin Even though, I think those 500$ for the exam voucher, should cover that hilarious 100$ administration fee. On the other side, GIAC certifications does not have this fee, but they are like priced at 899$. On a third side, CEH is waste of time, unless it's a job requirement.
11  EH-Net / News Items and General Discussion About EH-Net / Re: Ethical Hackers' thoughts on a general misunderstanding of "hacker"? on: February 22, 2013, 10:44:58 PM
All what mrvore said is truth, even though the term script kiddie (and the acronym skiddie) is still widely used  Smiley
12  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Failed my first attempt at the OSCP exam on: February 18, 2013, 05:12:27 AM
A lot of OSCPs and especially OSCEs fall the first time. Recognize your weakness as you did, and make sure you won't fail the second time  Smiley
13  Ethical Hacking Discussions and Related Certifications / eCPPT - eLearnSecurity Certified Professional Penetration Tester / Re: Call for Beginners : All you wanted to know about Penetration Testing on: February 17, 2013, 12:43:47 AM
Well, it's cool you're hosting this event for free. But common questions are not "all you wanted to know" for most hackers  Grin But I am still glad you do this for free and for e.g. newbies in the community / industry.
14  EH-Net / Calendar Of Events / Re: Symantec Cyber Readiness Challenge - Minneapolis on: February 17, 2013, 12:41:52 AM
I like how you wrote "Recruiting Security Experts Worldwide!!" while it's not really true, as a lot of US-based companies won't even consider hiring you unless you got a green card already and if you pay for your own relocation, then they might hire you. At least, that is how I have seen it was not long ago.

In Sydney on the other hand, they do recruit security experts worldwide, but they also pay for relocation a few of them. (The companies)

Plus, most of these events are almost always in the US too, flying there from Europe, Australia and many other countries costs quite a lot of money, especially for someone in non-security related job or any other job that doesn't pay well.

Just sayin' my thoughts out loud  Grin

Thanks for posting about this event Don, not ranting about you, only the event  Smiley

Edit: Didn't see they're also hosting this event in France, The UK (I guess I saw that too?), Italy (well, they got some hackers down there), Belgium (cool, but why? There's a lot more hackers in Germany), and a few other places in the US.
15  Resources / Tutorials / Re: SQL injection on: February 17, 2013, 12:38:29 AM
Havij is a script kiddie tool just like Pangolin is, except Havij is more widely used by script kiddies especially in the middle east. A pro tool, which can do a lot more, but is also a lot harder to use is sqlmap.

However, using a tool only, without knowing what causes SQL Injection, how to fix it (in the code!) and how to test manually will not teach you anything, and thus you will always be a script kiddie unless you know  the cause, remediation and how to test all types of SQL Injection vulnerabilities manually.

Sometimes the tools simply won't work, and then you have to test manually as a penetration tester.
Pages: [1] 2 3 ... 45
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.095 seconds with 21 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.