Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 16 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Certificationarrow CREA Certified Reverse Engineering Analyst
Ethical Hacker Community Forums
January 08, 2009, 02:19:28 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1] 2   Go Down
  Print  
Author Topic: CREA Certified Reverse Engineering Analyst  (Read 6333 times)
0 Members and 1 Guest are viewing this topic.
NickFnord
Newbie
*
Offline Offline

Posts: 47



View Profile WWW
« on: September 06, 2008, 12:13:38 PM »

Hi All,

I was just wondering if anyone here has completed the Reverse Engineering Course offered by the InfoSec Institute and/or completed the certification?

I'm just curious becuase I have searched these forums a bit but can't seem to find any reviews on it.  I'm about to take the course myself as they're releasing it in an online format so I don't have to travel to the US to do it.

I'll definately post a review myself when I finish it.

oh, by the way - this is my first post - this looks like a good set of forums, I hope to be able to contribute to it in the near future.  :-)

Cheers,
Nick
« Last Edit: September 08, 2008, 07:27:55 AM by NickFnord » Logged
NickFnord
Newbie
*
Offline Offline

Posts: 47



View Profile WWW
« Reply #1 on: September 08, 2008, 07:24:06 AM »

I guess not many people have done this or are interested..... this thread is now the second result in a google search of the entire interwebs for "Certified Reverse Engineering Analyst"    Undecided
Logged
oleDB
Full Member
***
Offline Offline

Posts: 231



View Profile WWW
« Reply #2 on: September 08, 2008, 08:20:40 AM »

I think there is definitely interest, but since this is an already crowded niche for certification, it may just be that nobody has taken the course yet. I know the SANS and Mandiant courses are very popular in this area.
Logged
NickFnord
Newbie
*
Offline Offline

Posts: 47



View Profile WWW
« Reply #3 on: September 08, 2008, 10:46:41 AM »

I had looked at the SANS course, and although it looks good I'd heard they were fairly expensive, there's also a time limit on the availability of the online content which I think is not the case for the infosec institute course (although I'll check). 

I'm not in it for the certification and my company is not paying for it so I'm hoping I've made a good decision - will find out within the next month or so I guess.
Logged
NickFnord
Newbie
*
Offline Offline

Posts: 47



View Profile WWW
« Reply #4 on: October 21, 2008, 08:30:11 AM »

Just recieved word that this course should be ready for shipping out today - hopefully I'll get to start it by the end of the week  :-)

having done a bit of learning by myself over the past month or so, I'm concerned that the course content won't add much that I couldn't have learned for free via the web.  not that I'm doubting the knowledge and experience of the instructors, just I have lowish expectations unfortunately. 

I'll definately post some detail when it becomes available.
Logged
jason
Sr. Member
****
Offline Offline

Posts: 363


Aut Viam Inveniam Aut Faciam


View Profile WWW
« Reply #5 on: November 01, 2008, 06:20:02 PM »

How is the course going?
Logged
NickFnord
Newbie
*
Offline Offline

Posts: 47



View Profile WWW
« Reply #6 on: November 01, 2008, 07:25:05 PM »

Unfortunately not that well - I still havn't recieved the course material - I'm following it up with the infosec institute.

I have access to the online component which just contains the lecture videos by Danny Quist (from http://www.offensivecomputing.net/).  the videos start off fairly basic, but they get straight into it by about the 5th one (out of 35).   the idea goes that you watch a video of the instructor and then you do a lab excersise (contained in the material that was supposed to be mailed to me)  so the videos don't really go into all that much depth from the early on ones that I've seen.

It's also obvious that they're having some teething problems with the whole online thing - some of the videos are just powerpoint slides with a mouse cursor frantically trying to indicate something but with no one talking... so I'm assuming these things will sort themselves out.  going to give them another call on monday to see how everything is coming along.

I'm expecting the course to be high quality content, even if the delivery is lacking at the moment - they've had great reviews about the CEPT certification so I'm expecting the CREA one to be of similar caliber.

in the meantime I've got the Shellcoders handbook to keep me satiated.
Logged
jason
Sr. Member
****
Offline Offline

Posts: 363


Aut Viam Inveniam Aut Faciam


View Profile WWW
« Reply #7 on: November 01, 2008, 09:58:11 PM »

Hrmm that's too bad, it sounded promising.
Logged
jason
Sr. Member
****
Offline Offline

Posts: 363


Aut Viam Inveniam Aut Faciam


View Profile WWW
« Reply #8 on: November 02, 2008, 05:09:18 PM »

in the meantime I've got the Shellcoders handbook to keep me satiated.

I was just looking at this today. Looks like a very cool book.
Logged
NickFnord
Newbie
*
Offline Offline

Posts: 47



View Profile WWW
« Reply #9 on: November 03, 2008, 04:40:16 AM »

I've found it to be excelent so far.

I've made a few notes on the second chapter concepts on my blog (www.nickfnord.com) I don't know if it will help persuade you to get it.

I heard good things about the first edition and most of the reviews on amazon.com are about the first edition - some mention the mistakes throuought etc.

the second edition is very good and although I can't compare it to the entire first edition, it does seem to have a less condecending tone than the one chapter I read of the first edition somewhere.

It does go in-depth very quickly and so I'm taking it very slowly and making sure I understand everything before I move on, but it is has a nice tone to it that makes it a bit less dry:

quote from chapter 2:
Quote
"Now it is time to do something useful with the vulnerability you exploited earlier. Forcing overflow.c to ask for input twice instead of once is a neat trick, but hardly something you would want to tell your friends about - "Hey, guess what, I caused a 15 line C program to ask for input twice!" No, we want you to be cooler than that."

I have alredy found a number of minor technical errors, but at the moment suspect that they may have been introduced deliberately perhaps, as it forces you to understand what's going on rather than just copying and pasting code from the book. 

also - it's been noted that Jack Koziol is notably absent from the authors list of the second edition, but he is specifically mentioned in the authors acknowledgements and his code is liberaly sprinkled throuought the book:

Code:
[jack@0day local]$ gcc shellcode.c -o shellcode
[jack@0day local]$ ./shellcode
sh-2.05b#

despite the fact I'm a newbie in this sort of thing, I'd highly recommend it anyway.  it definately doesn't hold your hand and so I'd imagine that it would be great for an old hat also.

Logged
NickFnord
Newbie
*
Offline Offline

Posts: 47



View Profile WWW
« Reply #10 on: December 03, 2008, 07:51:50 AM »

Finally recieved my package with the software and lab notes.  It was merely a miss-communication of package tracking numbers rather than the fault of the infosec institute.

They've also fixed the online component and added practical excersise videos also.

Now to get stuck into it.  I'll be writing a complete review after about a week or so.

I'm particularly impressed with the CD's that just came - they have all the software required for the lab excersises including the crackme's and viruses that are analysed and on the other CD there's one large VMware image containing everything for those who don't have a lab environment set up already.

*rubs hands together with childish glee*
Logged
RoleReversal
Hero Member
*****
Offline Offline

Posts: 507


View Profile WWW
« Reply #11 on: December 03, 2008, 09:35:48 AM »

Nick,

keep us (me in particular, I'm being selfish) posted. I like the sound of this course, so I'd be interested in a first hand review.

RR

<edit: note to self, must learn to type....>
« Last Edit: December 03, 2008, 10:51:19 AM by RoleReversal » Logged

A little bit of sanity:
http://www.infosanity.co.uk
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2435


Editor-In-Chief


View Profile WWW
« Reply #12 on: December 03, 2008, 10:09:29 AM »

Do you have a place to publish that review? Wink wink nod nod.

Don
Logged

CISSP, MCSE, CEH, Security+ SME
NickFnord
Newbie
*
Offline Offline

Posts: 47



View Profile WWW
« Reply #13 on: December 03, 2008, 10:34:58 AM »

oh, I was definately ntending on posting it here on EH.net (and on my blog with gratuitous linking to the EH article of course) - would you prefer I start a new article or place it in this thread?   
Logged
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2435


Editor-In-Chief


View Profile WWW
« Reply #14 on: December 03, 2008, 10:41:25 AM »

Please continue posting individual thoughts in this thread, as I'm sure many want to be kept in the loop during your training. Let's take the article discussion of board.

Don
Logged

CISSP, MCSE, CEH, Security+ SME
Pages: [1] 2   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.056 seconds with 24 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.