Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 43 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow CEH - Certified Ethical Hackerarrow Where's a good place to start?
EH-Net
May 18, 2013, 12:31:13 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Where's a good place to start?  (Read 8076 times)
0 Members and 1 Guest are viewing this topic.
Cirdan
Newbie
*
Offline Offline

Posts: 2


View Profile
« on: January 08, 2008, 01:18:33 PM »

Hi everyone,

I'm glad to finally be a member of ethicalhacker.net.  I've just about convinced my employer to send me off to CEH training, since our FTP server got hacked last year (my predecessor left the IUSR account with write permissions), and I'm concerned about what other holes there are which I don't yet know about.

My question:
I got a $50 certificate for Amazon for Christmas (Yay!) but I'm not sure which book to get as a good starting point.  I have a decent knowledge of networking, but most of my experience is in WinXP and prior desktop support, MSExchange2000-2003, and some light AD stuff.

Other info:
I've downloaded Netcat, Snort, Cain & Abel, and Nmap, but have not yet dug into those yet.

Any ideas would be most appreciated.
Many thanks!
Cir

~Wherever you go, There you are.~
Logged
g00d_4sh
Sr. Member
****
Offline Offline

Posts: 394



View Profile
« Reply #1 on: January 08, 2008, 03:36:01 PM »

For the CEH specifically I'm not quite certain where you would want to go.  I have a pdf of the review guide, but I haven't taken the exam yet myself so I'm not going to say one thing or another about what to study specifically for it.  There are quite a few books reviewed on this site with pretty expert opinions on them from some of our members. 

My suggestion, would go along the same lines as most of the posts here on the subject.  Get familiar with protocols and perhaps some basic programming.  Check out Insecure.org, and thier top 100 tools list.  Nessus, Metasploit, and Nmap are three of my fav's but they are just three of a huge number of very useful and powerful tools.  Wireshark is another of my favorite tools, but have a general understanding of a wide breadth of tools is probably best.  BackTrack is a great Linux distro for getting a taste of different tools, and having them all pre-installed and in one place.  Right now, I always keep a thumbdrive with me that has BT3 beta on it.  It's bootable, and allows me to have scanning, probing, and exploiting abilities with me wherever I go.  Or, to just reset passwords for built in accounts and whatnot at work.  BackTrack has somewhere over 300 security tools built into it by default, which is just sweet. 
Logged

"Bad.. Good?  I'm the guy with the gun"
Cirdan
Newbie
*
Offline Offline

Posts: 2


View Profile
« Reply #2 on: January 09, 2008, 11:46:49 AM »

Hey, thanks for the awesome tips, g00d_4sh.  I'm downloading Backtrack Beta 3 right now.  I'm trying to learn Linux distros and bash scripting right now (using Cygwin currently), so I'll be able to work on both at once.

Take care,
Cir
Logged
Negrita
Sr. Member
****
Offline Offline

Posts: 299



View Profile
« Reply #3 on: January 09, 2008, 04:04:49 PM »

Firstly I recommend Certified Ethical Hacker Exam Prep by Michael Gregg. You'll even get some change from your $50.

Secondly, it has been my personal experience that the Backtrack betas have been very buggy and unstable in the past. I have not tried the Backtrack 3 beta though. If you're still learning Linux I suggest sticking with a stable release.
Logged

CEH, CCSA NG/AI, NNCSS, MCP, MCSA 2003

There are 10 kinds of people, those that understand binary, and those that don't.
sgt_mjc
Sr. Member
****
Offline Offline

Posts: 294


View Profile
« Reply #4 on: February 06, 2008, 11:20:37 AM »

I did the course thorugh New Horizons and found gaps when I went to sit for the exam. I have used the tools and really like metasploit. Good luck.
Logged

Mike Conway
CISSP
CompTia Security +
C|EH
xXxKrisxXx
Hero Member
*****
Offline Offline

Posts: 512



View Profile
« Reply #5 on: February 06, 2008, 04:12:50 PM »

I Agree With Negrita, The Beta Versions of BT Werent Stable Enough For Me Either. If Your Going To Be Working With VMWare, I Suggest The Sites Back Track 2 Distro. It Runs Smooth. You Could Get It Below.
http://www.ethicalhacker.net/content/view/160/8/
Logged

eCPPT, GCIH, OSCP, OSWP
LSOChris
Guest
« Reply #6 on: February 07, 2008, 12:20:17 AM »

Hey, thanks for the awesome tips, g00d_4sh.  I'm downloading Backtrack Beta 3 right now.  I'm trying to learn Linux distros and bash scripting right now (using Cygwin currently), so I'll be able to work on both at once.

Take care,
Cir

if you are trying to LEARN linux, you'd be better off installing linux
Logged
shawal
Jr. Member
**
Offline Offline

Posts: 88


View Profile
« Reply #7 on: March 19, 2008, 11:15:52 AM »

Cygwin is a great POSIX environment for windows, it will be useful later on for runing some penetration testing tools such as john the ripper, and could be useful as a scripting environment if you want to automate tasks and other stuffs. one thing that motivated you to learn about this stuff is that you want to protect your environment, you can simply start by reviewing the patch management procedures, staging of patches, and antivirus updateds, group and system policies, runing vulnerability tool against a test machine with a similar setup of your production machine and interpreting the logs, try to learn how to defend against, and what is the best effective procedure to utilize against well know script kiddies/automated attacks. windows security is massive, there are tools from microsoft that can help you audit the state of patches on your machine,  secunia psi is another tool you can use, research file integrity checkers to protect yourself and systems from rootkits installed by malware, protect against malware by having your antivirus up to date almost all the time. hope that helps Smiley
Logged

RHCE, GIAC GCIH.
eth3real
Sr. Member
****
Offline Offline

Posts: 309



View Profile WWW
« Reply #8 on: March 19, 2008, 11:39:48 AM »

Cygwin is a great POSIX environment for windows...

There is also andLinux. I have not tried it, yet, but I have read some really good things about it.
Logged

Put that in your pipe and grep it!
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.508 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.