Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
Jan 2009 Free Giveaway Sponsor - Black Hat DC
Scooby Doo and the Crypto Caper - Answers and Winners
Daemon - A Contest Revealed
Hacking: The Art of Exploitation 2nd Edition
Nov 2008 Free Giveaway - Winners
Dec 2008 Free Giveaway Sponsor - SANS
Santa Claus is Hacking to Town
Plug-N-Play Network Hacking
Nov 2008 Free Giveaway Sponsor - CWNP
Daemon - A Contest Begins Now
It Happened One Friday - Answers and Winners
Daemon - A Contest
Scooby Doo and the Crypto Caper
MS Blue Hat Hackers Headline Chicago Security Con
The Pen Testing Perfect Storm Webcast Series with Skoudis, Wright, Johnson
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 12 guests and 2 members online
EH-Net Donations
Enter Amount:
$
CAD
USD
GBP
AUD
JPY
EUR
Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations
You are here:
Home
Forum
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
Looking for beginner advice
Ethical Hacker Community Forums
January 09, 2009, 09:04:28 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: ChicagoCon 2009 - May 4 - 9. Boot Camps & an Ethical Hacking Conf.
www.chicagocon.com
Home
Help
Calendar
Login
Register
Ethical Hacker Community Forums
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
(Moderator:
don
) >
Looking for beginner advice
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: Looking for beginner advice (Read 5289 times)
0 Members and 1 Guest are viewing this topic.
ismisunderstood
Newbie
Offline
Posts: 3
RTFM
Looking for beginner advice
«
on:
May 09, 2006, 03:56:18 PM »
Hello everyone. I guess I should start by saying I'm not 100% certain this is in the correct forum, so if a Mod. needs to move it please do so...and thanks.
I've been a silent watcher of this site for a few months or so now, but finally broke down and decided I just had to ask a question;
I was looking the black hat 2006 page, and was really interested in the
"Cadet Training / hacking by numbers"
and the
"exploiting 101"
courses. Problem is, it's not looking like my boss is willing to send me, and I can't scrape together the $3000 to get myself there (short of taking out a second mortgage against my house...which I'd rather not do).
Was wondering if anyone had run across a similar course or book...something like basic programming (and compiling), some sample scripts, ect. I found the book "
Hacking: The Art of Exploitation"
on a local book sellers webpage (covers more of the logic behind the exploits), and I thought this would be a perfect introduction to the field...if only I had the basic skills in regards to programming (specifically the compiling portion).
Does anyone know of a good resource for me? I'm not really wanting to learn a full language if I can avoid it for the time being.
Thanks everyone! (Now please oh please let my links work so I don't look like a fool...)
Logged
Yep...I said that...
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 2442
Editor-In-Chief
Re: Looking for beginner advice
«
Reply #1 on:
May 18, 2006, 04:13:38 PM »
I think this is a tough one for members to answer. It seems as though you are interested in programming but don't want to learn to program. Sounds like a quandry. Don't get me wrong, there are plenty of security professionals and pen testers out there that don't. On a side note, that is probably the number one reason to hire a Red Team (a group of pen testers with each having an expertise in a particluar area) instead of trying to find the 1 guy to do it all and do it well.
But I'll give it a go...
For basic programming if you've never coded, try
Faster Smarter Beginning Programming
. It is for Visual Basic .NET and was written in 2003. It assumes you have no programming experience whatsoever, but that you also are a tech who can grasp the concepts. It's a quick read and although it won't make you a hot shot coder, it will give you a foundation of understanding.
If it's specifically code for malware that interests you, try our friend Ed Skoudis' book (and Lenny Zeltser),
Malware: Fighting Malicious Code
.
Hope this helps,
Don
Logged
CISSP, MCSE, CEH, Security+ SME
ismisunderstood
Newbie
Offline
Posts: 3
RTFM
Re: Looking for beginner advice
«
Reply #2 on:
May 18, 2006, 04:29:25 PM »
Thanks Don!
I have a little (really...a
little
) programming knowledge. I took a visual basic class a while back, but the instructor barely spoke english, and I was NOT going to pay $1000's of dollers per course to teach myself. Maybe I do need to break down and learn a language.
Is it justifiable...maybe that's not the right word...maybe I should say "industry acceptable"... to not start with the programming side of this? Like I said, I have a
very
basic understanding of programming logic, but no so much with the actual coding side.
Either way, I will certainly check out both those books. Both sound like a step in the right direction.
Logged
Yep...I said that...
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 2442
Editor-In-Chief
Re: Looking for beginner advice
«
Reply #3 on:
May 18, 2006, 04:40:26 PM »
The best way to answer your question is to point you to our current poll on the site's home page. Look at the results and let me know what you think.
Don
Logged
CISSP, MCSE, CEH, Security+ SME
Oyle
Sr. Member
Offline
Posts: 264
"Man. Nature. Technology".
Re: Looking for beginner advice
«
Reply #4 on:
May 18, 2006, 04:42:11 PM »
Don't forget you have to have a certain kind of mind to be a programmer. I'm the world's worst programmer, so I don't even try.
I did a course in Visual Basic 3.0 at my local community college back in the late 80's, when I was working on my Associate's degree. The teacher was good, and fair. It was just me. You have to be able to think logically.
Think for a second: Can you see yourself as from the planet Vulcan? Mr. Spock from Star Trek would probably be the world's BEST programmer, as he thinks logically. You could write a program with thousands of lines of code, but if you make a mistake in your logic, could you find it? Finding a logic error is a tremendously hard task, IMHO, as it doesn't show up as an error to the operating system. But it will cause your output to be wrong.
Not trying to scare you off, but some people are programmers, and some are not. Not everybody can program.
Why don't you try a programming course at your local community college? Then you can see if it's right for you. Community colleges are meant to be affordable.
«
Last Edit: May 18, 2006, 04:45:01 PM by Oyle
»
Logged
MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".
From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
-Tapeworm
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 2442
Editor-In-Chief
Re: Looking for beginner advice
«
Reply #5 on:
May 18, 2006, 05:03:12 PM »
You can always try stuff for free to see if it is your bag. If you think java is your direction, try some of the free programming tools that come with Linux distros such as
Fedora Core 5
:
Quote
This release of Fedora Core represents another big step down the free Java path. Through the introduction of the completely free software stack java-gcj-compat that runs native and bytecode Java, Fedora can now compile and run software written in Java without relying upon proprietary and closed Java machine implementations.
The excellent Fedora Java development team of Red Hat and community hackers have built many popular Java-based or Java-using packages utilizing java-gcj-compat for this release. These packages, which include OpenOffice.org, Eclipse, Apache Tomcat, and Jakarta, are now compiled and run on a 100% free and open software stack.
We included a complete set of packages and development goodies in Fedora Core 5 for Java technologies. Fedora Extras also has many Java applications: the popular BitTorrent utility Azureus, RSSowl, and others, all powered by gcj-java-compat.
http://fedoraproject.org/wiki/Java
http://www.gnu.org/philosophy/java-trap.html
Or if .NET is your thing, Microsoft offers
Visual Studio Express and SQL Server Express
, free versions of their 2005 developer offerings described by MS as:
Quote
Free, lightweight, easy-to-use, and easy-to-learn tools for the hobbyist, novice, and student developer.
Free stuff, a book or 2, some time and a thirst for knowledge...
Don
Logged
CISSP, MCSE, CEH, Security+ SME
pcsneaker
Jr. Member
Offline
Posts: 73
Re: Looking for beginner advice
«
Reply #6 on:
May 19, 2006, 01:53:43 AM »
To be a pen-tester you don't need to be an expert programmer. But at least I think you should be able to understand the overall purpose of a program when looking at the source code.
Furthermore you should be able to do some scripting (not matter what language, it depends on your prefered platform: if you're a windows guy try Visual Basic Script, on Linux Shell scripting and to be used on both perhaps Perl)
Without having at minimum some basic programming skills it would be a hard job to do successful pen-testing...
Logged
MCSA:Security (W2k, W2k3)
MCSE:Security (W2k, W2k3)
CPTS, Network+
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 2442
Editor-In-Chief
Re: Looking for beginner advice
«
Reply #7 on:
May 19, 2006, 10:57:19 AM »
Good point about scripting and the ability to at least be able to follow the logic especially of malicious code.
Don
PS - I hope the responses to this post will make other 'silent watchers' like ismisunderstood join the conversation. A simple question can spawn a lot of great content.
Logged
CISSP, MCSE, CEH, Security+ SME
ismisunderstood
Newbie
Offline
Posts: 3
RTFM
Re: Looking for beginner advice
«
Reply #8 on:
May 19, 2006, 12:09:31 PM »
Thank you everyone!
All those comments certainly help clear some things up. I think maybe scripting might be the way to start, and move more into it if it suits me. My main concern has always been knowing why things work, not just accepting that they do.
By the way...you guys rock.
Logged
Yep...I said that...
Oyle
Sr. Member
Offline
Posts: 264
"Man. Nature. Technology".
Re: Looking for beginner advice
«
Reply #9 on:
May 19, 2006, 01:28:14 PM »
In that case, check out this here site
here.
And of course,
here.
«
Last Edit: May 19, 2006, 01:37:53 PM by Oyle
»
Logged
MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".
From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
-Tapeworm
Negrita
Sr. Member
Offline
Posts: 289
Re: Looking for beginner advice
«
Reply #10 on:
May 23, 2006, 05:37:33 PM »
I'm also a newbie to programming and scripting. I was talking to the developers at work about which language to learn, and they unanimously said I should learn Perl. I asked whether I should study something else first, like C or Java or Python and they said no. They particularly said I should read the book
Teach Yourself Perl in 21 Days
.
«
Last Edit: May 23, 2006, 05:40:06 PM by Negrita
»
Logged
CEH, CCSA NG/AI, NNCSS, MCP, MCSA 2003
There are 10 kinds of people, those that understand binary, and those that don't.
Oyle
Sr. Member
Offline
Posts: 264
"Man. Nature. Technology".
Re: Looking for beginner advice
«
Reply #11 on:
May 24, 2006, 08:08:46 AM »
IMHO, the language to learn here in the States is C/C++, followed by [any variant of] SQL, then Java, VB, etc. Perl is OK, but it IS just scripting.
I'm a fine one to talk, though.
Logged
MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".
From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
-Tapeworm
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Special Events
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009
=> News Items and General Discussion About EH-Net
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> Certification
===> The Charter Study Group - Pen Test
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
=====> CEH - Official Course Modules v4
=====> CEH - Official Course Modules v5
=====> CEH - Official Course Modules v6
===> CPTS - Certified Pen Testing Specialist
=====> CPTS - Official Course Modules v5
===> CPTE - Certified Pen Testing Expert
=====> CPTE - Official Course Modules v1
===> ECSA - EC-Council Certified Security Analyst
=====> ECSA - Official Course Modules v1.2
=====> ECSA / LPT - Official Course Modules v3
===> OSCP - Offensive Security Certified Professional
===> GPEN - GIAC Certified Penetration Tester
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
=====> CHFI - Official Course Modules v2
===> EnCE - EnCase® Certified Examiner
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Hardware
=> Malware
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Gates
=> Heffner
=> Hoffman
=> RichM
=> Murray
=> J. Peltier
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
Loading...
Sponsors
Polls
How many security events including conferences and training do you attend a year:
1 - 2
3 - 4
5 - 6
7+
None - But want to
None - Choose not to
Support EH-Net
Support EH-Net by
Buying all of your
Amazon items using
the search bar above.
Try CBT Nuggets Free!
Recent Forum Topics
Wireless
: Wait for newer adaptors or just get an alfa?
(0) by
nap191
Other
: Windows 7 Beta Available Tomorrow
(7) by
NickFnord
Wireless
: WEP cracking, how to ping router?
(2) by
duffman984
Oct 2008 - Scooby Doo and the Crypto Caper
: Skillz October 08 Winning Entry - Creative
(2) by
rforsythe
Book Reviews
: Need a book suggestion!
(5) by
unicityd
OSCP - Offensive Security Certified Professional
: Offensive Security Releases Sample Pen Testing Report
(2) by
Chan
Web Applications
: Determine URL from IP address
(3) by
scottr
Malware
: uninstall trend mciro officescan clients
(2) by
Hack_80
Other
: openSUSE 11.1 Released
(0) by
don
Other
: Insanity?
(5) by
jason
Other
: Fedora Hits the 10 Spot
(0) by
don
Other
: FreeBSD 7.1 Released
(0) by
don
OSCP - Offensive Security Certified Professional
: Next Up OSCP101 v2.0
(39) by
don
Tools
: Core Impact Essentials
(0) by
sgt_mjc
News from the Outside World
: Google branching out a little further...
(3) by
jason
Physical Security
: Magnetic stripe card spoofing
(5) by
jason
Gates
: Oracle version module for metasploit
(3) by
RoleReversal
Malware
: THe website is Evil but what to do??
(3) by
NickFnord
CEH - Certified Ethical Hacker
: Helow... help some tutorials...
(7) by
K3lV1n
CEH - Certified Ethical Hacker
: CEH is a scam
(20) by
K3lV1n
Mass Media
: Daniel Suarez Interview
(9) by
blackazarro
Malware
: Security Forecast for 2009
(5) by
jason
News from the Outside World
: Is this acceptable?
(9) by
jason
Wireless
: Wireless Pen Testing Cards
(6) by
jason
Oct 2008 - Scooby Doo and the Crypto Caper
: Skillz October 08 Winning Entry - Technical
(1) by
jason
Book Reviews
: [Article]-Mitnick - The Art Of Intrusion: Ch 1 - Hacking The Casinos For A Million Bu...
(5) by
jason
Links to cool sites.
: Free Computer Engineering Classes From Stanford
(3) by
jason
Oct 2008 - Scooby Doo and the Crypto Caper
: [Article]-Scooby Doo and the Crypto Caper - Answers and Winners
(2) by
jason
News Items and General Discussion About EH-Net
: [Article]-Jan 2009 Free Giveaway Sponsor - Black Hat DC
(1) by
jason
News Items and General Discussion About EH-Net
: EH-Net Milestone - 2 Articles Cross 1 Million Page Views
(3) by
BillV
Other
: What kind of lab, machines you have for your security testing?
(12) by
charlottebandit
Malware
: Network Virus Problem
(9) by
RoleReversal
Wireless
: WUSB600N good usb ?
(2) by
nap191
Other
: FBI code cracking challenge
(3) by
jimbob
Calendar Of Events
: RSA 2009
(0) by
don
Forensics
: Network Forensic tools/practice/techniques
(2) by
jimbob
Malware
: Autoplay when i try to open the drive.
(4) by
jimbob
CEH - Certified Ethical Hacker
: Any Practice Environment for learning tool for CEH?
(15) by
don
Wireless
: a petri-dish bridge
(2) by
don
CEH - Certified Ethical Hacker
: TFTP Tranfer time out
(5) by
jason
Vote For EH-Net
progenic.com
binarica.com
technorati fave
Privacy Notice
for TDCC & All Properties
© 2009 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.