ha ha not funny is any actually willing to teach me to hack because i wonna learn      because it sounds like your bullshiting with me or am i wrong

Sweet! Will you teach me also if I send you my password? 

rance,

I'm preparing for the CEH with EC Council material. You say the test was easy mostly because you have been working in the area.  Well, I have not been working in the security area.  I want the cert so I can get into security.  My background, I have had a few computer technician jobs and was a network admin for a little while.  I have A+, Sec+ and CCNA.  I currently manage training for IT people and do portal stuff (web).  Anyway, can you give me some advice on what to concentrate on besides my books? 

Thanks

Commgirl

is any on nice enough to teach me how to hack i would love to learn plus ive got tones of time because im 14. and i love computers     and i know a little about the internet

thanks

..snip..

At some point, security is going to be so strong and automated that breaking down the front gates is going to be so rare.

../snip..

..snip..

And SQL seems to be THE html of the future. lol

../snip

...
It is well known that pen testing out of a virtual machine will result in slightly different results than testing "from the iron".  (ie.  you actually booted the OS and are using it live)  I got kicked in the pills over this just a short while ago.  One of the guys that worked for me forgot to bring our testing image (we boot off of external hard drives) to a client site so he used BT3 in a virtual machine to do some of his testing.  After we turned over our reports our client wanted to challenge one of the major findings. It turns out some of their admins followed behind us and used their own tools to validate our work, and they found one issue that they could not replicate.  It turns out that by using the VM the tester basically got a false positive on a fairly critical vulnerability.  This occurs because there is some level of abstraction occuring by your traffic having to pass our of a virtual network stack, into the real network stack, to the target, back to your real network stack, then back to your virtual stack.  It isn't common, but it can cause some odd behavior.  Morale of the story:  training with VMs is good, real world testing with VMs is not so good.

Alright, I'm doing some 'footwork' myself, to gather and glean information, but I would definately appreciate any links, experience, or advice and opinions from those of you who know on this issue.  We're going over our VOIP system right now, and considering the security of it in general.  We are of course in a switched network, and have the VOIP traffic running over it's own VLAN. 

My question is... security wise how would that be looking?  We're a Cisco house, using Cisco VOIP phones, etc.  I was under the impression that ARP poisoning, and man in the middle attacks, combined with Cain and Abel or another sniffer/translator program would make listening into the VOIP system rather easy.  I just recently in my search came accross a Cisco white paper saying that having the phones on a different VLAN (even though the computers hook into the phones) negates man in the middle attacks. 

So, please any thoughts, opinions, insights, or solutions would be highly appreciated.

Dividing your broadcast domains in your network up can limit the effectiveness of an ARP based attack. Traffic for a machine not on the same broadcast domain as the attacker cannot be redirected due to the nature of ARP; it's a broadcast protocol. Dividing your important servers into a separate network can provide a layer of security against this type of attack and follows good industry design standards.

One additional method of defending against this attack is to hardcode each IP address to each MAC address on vulnerable systems. Naturally, this has a high level of administrative overhead and can be cumbersome and fraught with problems in some situations. Implementing a solution such as this is only practical for a limited number of servers and devices in most cases, but is probably one of the more effective methods of actually stopping ARP spoofing attacks.

Rance,

looks quite nice, I'm a php man myself and the tool fits in nicely with a job I've been putting off for a few weeks. I'll have a play and let you know if I find any issues.

Cheers for sharing