Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 37 guests and 3 members online
 
Advertisement

You are here: Home
EH-Net
May 24, 2013, 10:14:21 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
  Home Help Calendar Login Register  
  Show Posts
Pages: 1 2 [3] 4 5 6
31  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey... on: August 23, 2012, 05:20:22 PM
You can't use Metasploit on the exam.

Just to clarify, from what I've seen online you can use Metasploit during the exam for things such as scanning ports & creating payloads, and at least in one case, exploit. I'm not clear if the single Metasploit use is a) because you're only allowed one or b) there's only one box you can use Metasploit against.

Have you heard something different sternone?
32  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: My OSCP journey... on: August 23, 2012, 02:25:33 PM
Metasploit is pretty powerful and can facilitate delivering a BoF exploit but I don't think it's capable of actually finding it in an application. But give HD Moore time...I'm sure he'll come up with a way eventually.

BoFs are still a more or less manual process.
33  Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / C|EH Core Concepts on: August 23, 2012, 02:23:40 PM
I'm sure most CEHers have gotten this email already but has anyone gotten a look at the material(s)?

I can't say for certain what intrigues me more, the fact that they're putting out supplemental info for free or that one needs to submit a course evaluation to get it.

http://www.eccouncil.org/courses/certified_ethical_hacker.aspx
Quote
WHAT IS CEHv7 CORE CONCEPTS?

 
EC-Council launches CEHv7 Core Concepts on August 17th, an addendum written by real-world penetration testers (pen testers) in order to support CEHv7 students and information security professionals to better understand and apply the subject matter covered in the CEHv7 official curriculum.

Core Concepts adds a layer of depth to the already robust CEHv7 course.  Based on the perspective of real-world pen-testers, Core Concepts further develops a detailed understanding of the ideas in CEHv7.  Recognizing that the concepts presented in the CEH course are broad, complex and require constant updates, EC-Council has released this addendum to help students gain a more comprehensive understanding of the subject matter as they steer through the various concepts, labs, techniques, best practices, methodologies, and frameworks that are presented in CEH.

To produce Core Concepts, EC-Council appointed a group of highly regarded pen testers with real-world experience to ensure that the real-life applications of CEH are thoroughly covered, beyond what is presented in the courseware or covered by the instructor in class.
 
According to Jay Bavisi, EC-Council’s CEO, “While the CEH is a product of hundreds of subject matter experts’ contributions, we felt compelled to appoint a couple of the subject matter experts to further elaborate key ethical hacking skills in their own words.  We are convinced that this will enrich the entire learning experience of the EC-Council CEH program.”

HOW DO I GET MY CEHv7 CORE CONCEPTS FREE?
Effective August 17th, Core Concepts is offered to all EC-Council CEHv7 students free of charges. Please find below how you can redeem this:

New CEHv7 students are required to fill up their EC-Council Course Evaluation (the steps to complete the course evaluation can be found on 2nd page of the CEHv7 official courseware) and opt “YES” to receive the Core Concepts and other benefits from EC-Council.
Existing CEHv7 students who had completed their EC-Council Course Evaluation will receive an e-mail from EC-Council on how to redeem their Core Concepts within 3 business days.
Students who attended CEHv7 official training and has yet to fill up EC-Council Course Evaluation, what are you waiting for? Fill up the EC-Council Course Evaluation (the steps can be found in 2nd page of the CEHv7 official courseware) and opt “YES” to receive your Core Concepts.
Students who have access to CEHv7 Academia iLearn, iClass iLearn, digital courseware, or e-courseware will have their Core Concepts pre-bundled in their account.

34  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: OSCP exam tomorrow (16th) on: August 14, 2012, 09:19:50 AM
I'm going to preface this response by saying that it is in no way, shape, or form meant to come across as snarky or negative.

Maybe it's issue of interpretation. I take "extra" literally, i.e. beyond what is usual, expected, or necessary. In the past I've seen "extra mile" exercises to mean, "good skill/information to know but not necessary for the exam." So, if I'm weighing my time (class, work, family, a wife who has only seen the back of my head for the last 5 weeks), I might be tempted to skip the extra mile in favor of brushing up on ruby or catching up on some household chores, etc, etc. And if the extra miles are mean to impart research, problem solving, and organization skills,  critical to passing the exam, then why not simply move the extra mile exercises into the main body of the course?

Quote
If you're not even putting the time into doing the majority of the Extra Mile exercises and lab systems, you're not obtaining the skills to do well on the exam (or out in the real-world).
I don't have a problem with extra practice, and I think it's been made very clear that we're supposed to hone our skills on the lab machines. My issue is with extra mile exercises that cover concepts that may or may not be on the exam but weren't covered in the lecture.
35  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: OSCP exam tomorrow (16th) on: August 13, 2012, 04:47:00 PM
Did you do the extra mile challenges during the course?

I'm taking the course now but I'm not trying to get exam hints. Does your question imply that the (somewhat uncovered) concepts in the extra mile(s) are needed for the exam? If so, why doesn't Offsec teach them as part of the core material?
36  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Is python needed? Bash enough? on: August 07, 2012, 01:55:41 PM
I'd recommend at least a peripheral understanding of python. You don't need to be fluent but a lot of the material in OSCP is in python as are the exploits in backtrack.

A high level search of the exploitdb in backtrack showed that there are roughly 2000 in c and 900 a piece for python & ruby.
37  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Finally took the plunge, started 08/05/12 on: August 06, 2012, 09:31:45 AM
I kind of wish OffSec would give you the choice of going through the PDF and Video's for a week or two, then starting the lab time. The material is totally worth it but I can't help but think I'm losing money by reading, researching, and watching video's..rather than messing with the lab.
I completely agree. I think the key here is your loss = their gain as a lot of people seem to end up buying extensions.

One thing I'd caution you on is to use BOTH the pdf & video - I got hung up in a big way on the buffer overflow section because the pdf skipped over a key component. The video on the other hand covered it correctly.
38  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: OSCP exam tomorrow (16th) on: August 01, 2012, 09:16:50 AM
A few questions to who ever took this course, do they teach you python or C?
No, they do not teach python, C, Ruby, Bash, or any other language. "Introduce" might be a better word. The key thing here is that you don't need to be fluent in any of the languages, just familiar enough so you can understand what's going on. However, like ZO said, it's predominantly python & bash. Realistically, if you can read/write python you can probably do enough ruby & perl with a little googling.
39  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: OSCP exam tomorrow (16th) on: July 31, 2012, 04:08:17 PM
Now I'll be having a go at this again in maybe a month or so.
Hey ZF - sorry to hear about your bad luck. Are you still planning on retaking the exam? I've heard some say that you're better off doing it right away because of the likelihood that the exam is the same.
40  EH-Net / News Items and General Discussion About EH-Net / Re: Plaintext passwords emailed? For shame on: July 09, 2012, 04:02:06 PM
If the information we store here won't ruin our careers, reputations, or financial lives, then I don't need strong encryption and elaborate retrieval processes.

Headline: "hacking-ethically.org Hacked - Usernames & Passwords Posted On Pastebin"

Real damage? Minimal. Sniggering in the security community? Probably a bit more. When it happened to Reddit was it a catastrophe? No, more of a "Whoopsie" but still something I'll bet they wish they didn't have to deal with.

It's definitely not on the level of say an evangelical preacher being caught with a prostitute...maybe more like a politician who forgot to check if her housekeeper is in the country legally.

I think we all agree that plain text passwords are not a good idea. And while this is "just a forum", to me it's a matter of practicing what you preach. However, in saying that, I don't really know how much extra effort is required to go from plain text to hashed/encrypted so maybe this is a case where the cost isn't worth the benefit.
41  EH-Net / News Items and General Discussion About EH-Net / Re: Plaintext passwords emailed? For shame on: July 05, 2012, 10:25:43 AM
I gotta agree with labrat:

http://jamesmckay.net/2011/04/eight-wrong-reasons-why-you-are-storing-passwords-for-clear-text-recovery/

I was similarly surprised when CEH sent me my password in plaintext.
42  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: OSCP Fail on: July 02, 2012, 10:48:04 AM
A fews guys I chatted with said they opted to start their test early, like between 7-9 AM. That way by the halfway mark, you're still in the mind/body's "awake" zone. Plus, they all said they were too wired to sleep in the middle. I don't know if that was from caffeine or the rush of the test.

That said, of the 3, two passed and one failed so it's not a guarantee. Anyway, good luck on your retest.
43  Ethical Hacking Discussions and Related Certifications / Hardware / Re: Hacking Course - Need Laptop on: July 02, 2012, 10:04:50 AM
I bought a Lenovo Ideapad last year. At first I hated the chicklet keyboard and it's still terrible for gaming, but I eventually got used to it. It's a decent computer and pretty powerful for the price. Good enough to run all my programs (VMWare, Backtrack, et al).

Beware though - it runs hot (fry an egg hot) if you're playing a game.
44  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: OSCP Fail on: July 02, 2012, 09:21:40 AM
Just out of curiousity - why did you schedule your exam for so late in the afternoon? Have you considered starting it in the early AM so you're fresher?
45  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: certifications dilema on: June 18, 2012, 08:11:04 PM
However, I should add that I am not really interested in the HR or job hunt certs. I must say that even though all of us would like the pay but I am more into a REALY STUFF! I am interested in skills development, personal challenge and self satistifaction.
In that case I'd stick with OSCP. You're not going to get a whole lot of depth in CEH - "Mile wide and a foot deep"
Pages: 1 2 [3] 4 5 6
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.064 seconds with 21 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.