|
EH-Net
|
|
May 22, 2013, 12:34:41 PM
|
Show Posts
|
|
Pages: [1] 2 3 ... 45
|
|
3
|
Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: OSCP in current state ?
|
on: March 01, 2013, 07:43:19 AM
|
There's no measurement, but it's the best way to learn the basics of pentesting when it comes to courseware. The Labs, may be very tough if you're very new to pentesting. I suggest you become familiar with linux and the console a bit, before diving into OSCP/PWB. It's also useful to have a good working knowledge about computers and networks in general (just the basics), despite the course covers much of this. What you must be willing to do, is to never give up during the PWB/OSCP course and certification, and if you don't understand something, try harder on your own, use the student forums, google, etc. I took OSCE a couple of years ago, it was awesome, despite it was quite tough for me back then, after all, it was my first certification  If you're motivated enough, you can do OSCP.
|
|
|
|
|
9
|
Ethical Hacking Discussions and Related Certifications / General Certification / Re: Certificates vs Degree
|
on: February 24, 2013, 06:59:21 PM
|
|
A degree in computer science is good if you're in Austraila, and as you are doing a masters in Computer Security that's also very good. You should however look into Offensive Security certifications as well, as they are valued at some companies in Australia. CREST certifications are quickly gaining popularity at the moment, but they are very costly, and, extremely overpriced. I suggest you do OSCP first before you even attempt CRT if you got the money.
Employers here, will look at your education, but also certifications as they can be merit (but seriously, finish your education), however some of them will most likely test your technical skills in a theoretical and/or practical test, so make sure you know what you're talking about.
Having the right education and certifications is one thing, but knowing your stuff is even better, and having a combination of both is the best.
GIAC certifications and SANS courses are known, but not as highly valued as OffSec certs.
So look into getting OffSec certs for starters.
|
|
|
|
|
14
|
EH-Net / Calendar Of Events / Re: Symantec Cyber Readiness Challenge - Minneapolis
|
on: February 17, 2013, 12:41:52 AM
|
I like how you wrote "Recruiting Security Experts Worldwide!!" while it's not really true, as a lot of US-based companies won't even consider hiring you unless you got a green card already and if you pay for your own relocation, then they might hire you. At least, that is how I have seen it was not long ago. In Sydney on the other hand, they do recruit security experts worldwide, but they also pay for relocation a few of them. (The companies) Plus, most of these events are almost always in the US too, flying there from Europe, Australia and many other countries costs quite a lot of money, especially for someone in non-security related job or any other job that doesn't pay well. Just sayin' my thoughts out loud  Thanks for posting about this event Don, not ranting about you, only the event  Edit: Didn't see they're also hosting this event in France, The UK (I guess I saw that too?), Italy (well, they got some hackers down there), Belgium (cool, but why? There's a lot more hackers in Germany), and a few other places in the US.
|
|
|
|
|
15
|
Resources / Tutorials / Re: SQL injection
|
on: February 17, 2013, 12:38:29 AM
|
|
Havij is a script kiddie tool just like Pangolin is, except Havij is more widely used by script kiddies especially in the middle east. A pro tool, which can do a lot more, but is also a lot harder to use is sqlmap.
However, using a tool only, without knowing what causes SQL Injection, how to fix it (in the code!) and how to test manually will not teach you anything, and thus you will always be a script kiddie unless you know the cause, remediation and how to test all types of SQL Injection vulnerabilities manually.
Sometimes the tools simply won't work, and then you have to test manually as a penetration tester.
|
|
|
|
|
Loading...
|