Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 28 guests online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
Looking for beginner advice
EH-Net
May 24, 2013, 11:09:08 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
(Moderator:
don
) >
Looking for beginner advice
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: Looking for beginner advice (Read 10034 times)
0 Members and 1 Guest are viewing this topic.
ismisunderstood
Newbie
Offline
Posts: 3
RTFM
Looking for beginner advice
«
on:
May 09, 2006, 03:56:18 PM »
Hello everyone. I guess I should start by saying I'm not 100% certain this is in the correct forum, so if a Mod. needs to move it please do so...and thanks.
I've been a silent watcher of this site for a few months or so now, but finally broke down and decided I just had to ask a question;
I was looking the black hat 2006 page, and was really interested in the
"Cadet Training / hacking by numbers"
and the
"exploiting 101"
courses. Problem is, it's not looking like my boss is willing to send me, and I can't scrape together the $3000 to get myself there (short of taking out a second mortgage against my house...which I'd rather not do).
Was wondering if anyone had run across a similar course or book...something like basic programming (and compiling), some sample scripts, ect. I found the book "
Hacking: The Art of Exploitation"
on a local book sellers webpage (covers more of the logic behind the exploits), and I thought this would be a perfect introduction to the field...if only I had the basic skills in regards to programming (specifically the compiling portion).
Does anyone know of a good resource for me? I'm not really wanting to learn a full language if I can avoid it for the time being.
Thanks everyone! (Now please oh please let my links work so I don't look like a fool...)
Logged
Yep...I said that...
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4169
Editor-In-Chief
Re: Looking for beginner advice
«
Reply #1 on:
May 18, 2006, 04:13:38 PM »
I think this is a tough one for members to answer. It seems as though you are interested in programming but don't want to learn to program. Sounds like a quandry. Don't get me wrong, there are plenty of security professionals and pen testers out there that don't. On a side note, that is probably the number one reason to hire a Red Team (a group of pen testers with each having an expertise in a particluar area) instead of trying to find the 1 guy to do it all and do it well.
But I'll give it a go...
For basic programming if you've never coded, try
Faster Smarter Beginning Programming
. It is for Visual Basic .NET and was written in 2003. It assumes you have no programming experience whatsoever, but that you also are a tech who can grasp the concepts. It's a quick read and although it won't make you a hot shot coder, it will give you a foundation of understanding.
If it's specifically code for malware that interests you, try our friend Ed Skoudis' book (and Lenny Zeltser),
Malware: Fighting Malicious Code
.
Hope this helps,
Don
Logged
CISSP, MCSE, CSTA, Security+ SME
ismisunderstood
Newbie
Offline
Posts: 3
RTFM
Re: Looking for beginner advice
«
Reply #2 on:
May 18, 2006, 04:29:25 PM »
Thanks Don!
I have a little (really...a
little
) programming knowledge. I took a visual basic class a while back, but the instructor barely spoke english, and I was NOT going to pay $1000's of dollers per course to teach myself. Maybe I do need to break down and learn a language.
Is it justifiable...maybe that's not the right word...maybe I should say "industry acceptable"... to not start with the programming side of this? Like I said, I have a
very
basic understanding of programming logic, but no so much with the actual coding side.
Either way, I will certainly check out both those books. Both sound like a step in the right direction.
Logged
Yep...I said that...
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4169
Editor-In-Chief
Re: Looking for beginner advice
«
Reply #3 on:
May 18, 2006, 04:40:26 PM »
The best way to answer your question is to point you to our current poll on the site's home page. Look at the results and let me know what you think.
Don
Logged
CISSP, MCSE, CSTA, Security+ SME
Oyle
Sr. Member
Offline
Posts: 264
"Man. Nature. Technology".
Re: Looking for beginner advice
«
Reply #4 on:
May 18, 2006, 04:42:11 PM »
Don't forget you have to have a certain kind of mind to be a programmer. I'm the world's worst programmer, so I don't even try.
I did a course in Visual Basic 3.0 at my local community college back in the late 80's, when I was working on my Associate's degree. The teacher was good, and fair. It was just me. You have to be able to think logically.
Think for a second: Can you see yourself as from the planet Vulcan? Mr. Spock from Star Trek would probably be the world's BEST programmer, as he thinks logically. You could write a program with thousands of lines of code, but if you make a mistake in your logic, could you find it? Finding a logic error is a tremendously hard task, IMHO, as it doesn't show up as an error to the operating system. But it will cause your output to be wrong.
Not trying to scare you off, but some people are programmers, and some are not. Not everybody can program.
Why don't you try a programming course at your local community college? Then you can see if it's right for you. Community colleges are meant to be affordable.
«
Last Edit: May 18, 2006, 04:45:01 PM by Oyle
»
Logged
MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".
From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
-Tapeworm
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4169
Editor-In-Chief
Re: Looking for beginner advice
«
Reply #5 on:
May 18, 2006, 05:03:12 PM »
You can always try stuff for free to see if it is your bag. If you think java is your direction, try some of the free programming tools that come with Linux distros such as
Fedora Core 5
:
Quote
This release of Fedora Core represents another big step down the free Java path. Through the introduction of the completely free software stack java-gcj-compat that runs native and bytecode Java, Fedora can now compile and run software written in Java without relying upon proprietary and closed Java machine implementations.
The excellent Fedora Java development team of Red Hat and community hackers have built many popular Java-based or Java-using packages utilizing java-gcj-compat for this release. These packages, which include OpenOffice.org, Eclipse, Apache Tomcat, and Jakarta, are now compiled and run on a 100% free and open software stack.
We included a complete set of packages and development goodies in Fedora Core 5 for Java technologies. Fedora Extras also has many Java applications: the popular BitTorrent utility Azureus, RSSowl, and others, all powered by gcj-java-compat.
http://fedoraproject.org/wiki/Java
http://www.gnu.org/philosophy/java-trap.html
Or if .NET is your thing, Microsoft offers
Visual Studio Express and SQL Server Express
, free versions of their 2005 developer offerings described by MS as:
Quote
Free, lightweight, easy-to-use, and easy-to-learn tools for the hobbyist, novice, and student developer.
Free stuff, a book or 2, some time and a thirst for knowledge...
Don
Logged
CISSP, MCSE, CSTA, Security+ SME
pcsneaker
Jr. Member
Offline
Posts: 73
Re: Looking for beginner advice
«
Reply #6 on:
May 19, 2006, 01:53:43 AM »
To be a pen-tester you don't need to be an expert programmer. But at least I think you should be able to understand the overall purpose of a program when looking at the source code.
Furthermore you should be able to do some scripting (not matter what language, it depends on your prefered platform: if you're a windows guy try Visual Basic Script, on Linux Shell scripting and to be used on both perhaps Perl)
Without having at minimum some basic programming skills it would be a hard job to do successful pen-testing...
Logged
MCSA:Security (W2k, W2k3)
MCSE:Security (W2k, W2k3)
CPTS, Network+
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4169
Editor-In-Chief
Re: Looking for beginner advice
«
Reply #7 on:
May 19, 2006, 10:57:19 AM »
Good point about scripting and the ability to at least be able to follow the logic especially of malicious code.
Don
PS - I hope the responses to this post will make other 'silent watchers' like ismisunderstood join the conversation. A simple question can spawn a lot of great content.
Logged
CISSP, MCSE, CSTA, Security+ SME
ismisunderstood
Newbie
Offline
Posts: 3
RTFM
Re: Looking for beginner advice
«
Reply #8 on:
May 19, 2006, 12:09:31 PM »
Thank you everyone!
All those comments certainly help clear some things up. I think maybe scripting might be the way to start, and move more into it if it suits me. My main concern has always been knowing why things work, not just accepting that they do.
By the way...you guys rock.
Logged
Yep...I said that...
Oyle
Sr. Member
Offline
Posts: 264
"Man. Nature. Technology".
Re: Looking for beginner advice
«
Reply #9 on:
May 19, 2006, 01:28:14 PM »
In that case, check out this here site
here.
And of course,
here.
«
Last Edit: May 19, 2006, 01:37:53 PM by Oyle
»
Logged
MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".
From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
-Tapeworm
Negrita
Sr. Member
Offline
Posts: 299
Re: Looking for beginner advice
«
Reply #10 on:
May 23, 2006, 05:37:33 PM »
I'm also a newbie to programming and scripting. I was talking to the developers at work about which language to learn, and they unanimously said I should learn Perl. I asked whether I should study something else first, like C or Java or Python and they said no. They particularly said I should read the book
Teach Yourself Perl in 21 Days
.
«
Last Edit: May 23, 2006, 05:40:06 PM by Negrita
»
Logged
CEH, CCSA NG/AI, NNCSS, MCP, MCSA 2003
There are 10 kinds of people, those that understand binary, and those that don't.
Oyle
Sr. Member
Offline
Posts: 264
"Man. Nature. Technology".
Re: Looking for beginner advice
«
Reply #11 on:
May 24, 2006, 08:08:46 AM »
IMHO, the language to learn here in the States is C/C++, followed by [any variant of] SQL, then Java, VB, etc. Perl is OK, but it IS just scripting.
I'm a fine one to talk, though.
Logged
MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".
From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
-Tapeworm
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(30) by
don
Tools
: Symbolic Exploit Assistant project is looking for collaborators
(0) by
galapag0
Greetings
: Hi from the UK
(5) by
prats84
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(9) by
prats84
Network Pen Testing
: Want a challenge? Want a GXPN practice exam?
(0) by
ajohnson
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(1) by
prats84
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
Free Business and Tech Magazines and eBooks
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.