|
EH-Net
|
|
May 21, 2013, 08:25:47 PM
|
Show Posts
|
|
Pages: [1] 2
|
|
4
|
EH-Net / Greetings / Re: Another new guy
|
on: April 12, 2012, 05:37:23 PM
|
|
Welcome Deadpool614. Good luck with your studies. Another suggestion/idea for a scripting language to learn: Lua. I don't know it myself, but may be worthwhile, for Nmap scripting. Python is great and I much prefer it to Perl. Not sure how good it is, but there's a book Dive Into Python available free online.
|
|
|
|
|
7
|
Ethical Hacking Discussions and Related Certifications / Malware / Re: Is there a virus program that will make my computer run well?
|
on: March 03, 2010, 08:41:21 PM
|
|
Just wanted to mention, the idea of good viruses, goes back much further. Dr Fred Cohen wrote some interesting papers about it. Most AV companies won't even consider the possibility, because part of what they are selling is trust. That said, the Morris worm is a classic example of why even a good/research worm, might not be a good idea. No matter how careful people are, only testing a worm on a private network, lysine deficiency type stuff.. Things can still go wrong. Particularly when on the Internet, it's a lot harder to guess/programatically determine what OS a host is running, what strange drivers/other malware/other network apps are running etc., and be sure that your worm will run as you want.
|
|
|
|
|
8
|
Ethical Hacking Discussions and Related Certifications / General Certification / Re: Advice for a Network Security career plan
|
on: January 18, 2010, 07:24:58 AM
|
|
This is just my impression, but I believe CISSP is meant to be a more general, risk management type course. Yes it's long, difficult and expensive, but if you are interested in technical skills, it may not be so helpful anyway. I would perhaps look at GSEC (vendor neutral, which is always a plus I think), or CCNA. As much as it bugs me that a lot of people, primarily recruitment staff and managers, see Cisco certifications as being security-related, they will help you get jobs. A CCNA should get you a reasonable networking job, which you can leverage to find a security-related position, and perhaps look at doing more specific security certs then. Good luck!
|
|
|
|
|
10
|
Ethical Hacking Discussions and Related Certifications / Programming / Re: [Python] Parsing text from a webpage
|
on: January 28, 2009, 12:02:30 AM
|
|
I'm new to Python too, but how about this? Same as yours, but it should strip out HTML tags.
import urllib2, sre, re, sys, string
def remove_html_tags(data): p = re.compile(r'<[^<]*?>') return p.sub('', data)
print "Enter The website: " url = raw_input()
response = urllib2.urlopen(url) data = remove_html_tags(response.read())
print "search word" topic = raw_input()
matches = re.findall(topic, data) print matches
|
|
|
|
|
11
|
Ethical Hacking Discussions and Related Certifications / Malware / Re: Security related issues
|
on: January 25, 2009, 08:31:20 PM
|
|
Maybe this is partly a personal thing, but I think that it's almost always a bad idea to reinstall/format. If it's a production box and you really need its functionality, I'd suggest you do something like restore from images/backups a duplicate system, or swap drives, so you haven't messed with the infected volume. You can then get some resources onto identifying exactly what it was infected with and more importantly how, so you can ensure you won't get infected again. Might also be worthwhile keeping evidence so you can if not pursue legal avenues, have samples of malware which you can send to your AV vendor. I always find it odd that so many large corporates pay lots of $ for AV services, and don't bother sending in samples. It's not helpful bitching about vendors not finding all malware, if you don't make sure they know which malware they don't find. If you reinstall, there's a very good chance, that the reinstalled machine will get reinfected; note it's possible for malware to survive a reinstall.
|
|
|
|
|
12
|
Ethical Hacking Discussions and Related Certifications / Forensics / Re: Any good network based solutions for blog monitoring?
|
on: January 13, 2009, 01:14:25 AM
|
|
That's what an acceptable use policy is all about. Note too, that as far as I'm aware, the laws between different countries vary considerable regarding how much monitoring is allowed, and whether or not the company has to have some just cause for doing a thorough audit of an employee's machine etc. IDS rules won't be perfect. You only have to look at spam filtering to see how limited machines can sometimes be at matching patterns etc without proper context!
|
|
|
|
|
Loading...
|