Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 18 guests and 2 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow CEH - Certified Ethical Hackerarrow CEH - Official Course Modules v4arrow Content of CEH v.4
Ethical Hacker Community Forums
January 09, 2009, 07:13:54 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2009 - May 4 - 9. Boot Camps & an Ethical Hacking Conf. www.chicagocon.com
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Content of CEH v.4  (Read 3556 times)
0 Members and 1 Guest are viewing this topic.
pcsneaker
Jr. Member
**
Offline Offline

Posts: 73


View Profile
« on: May 20, 2006, 11:28:49 AM »

I haven't read all the postings of the different modules of CEH v.4 but I'm wondering if that exam is really up to date.

Oyle, having a look at the DoS Section I found that you're talking about Smurf, Fraggle, Ping of Death and others. All these are very very outdated (who is still running Win95 to be a target for the Ping of death ? are there really more than a few having echo or chargen open on Internet hosts ?).

That has nothing to do with actual threats. Even if it can not hurt to know a bit about historical threats I really think that should'nt be on an actual exam anymore.

So what they have changed from v3 to v4 ? Didn't they update the content but only add some new threats ?
Logged

MCSA:Security (W2k, W2k3)
MCSE:Security (W2k, W2k3)
CPTS, Network+
Oyle
Moderator
Sr. Member
*****
Offline Offline

Posts: 264


"Man. Nature. Technology".


View Profile WWW
« Reply #1 on: May 21, 2006, 01:11:18 PM »

If you'll look at the IMPORTANT! notice in the Study Group Forum, it outlines the changes between my version 2.3 and the current version 4.0. There really isn't a lot of changes. Besides, you really should have a handle on this stuff. When I did the exam in Nov-Dec 04, most of it was very heavy on progtramming, anyway. It was/still is, I believe 125 questions, in random order. I don't know if EC-council has updated the exam or not.
I had one question in the exam on URL Deobfuscation that we did not even discuss in class. You really need to know about it, as well....

Remember, the CEH gives you a BASIC FOUNDATION INTO SECURITY,I don't believe it is meant to be all-inclusive. There are new threats comuing out every day, you need to stay current on your own.

You'd be surprised. I worked at a company last year on a contracting job, where most of the people in the office were using Win98, including the President. They had only a few XP clients. They were also extremely vulnerable to Cherynobyl. I told the idiot I was working for about it and to warn them, he only sent them the warning I wrote up the day before Chernobyl was due to hit. Idiot.

There are A LOT of companies out there still using old equipment. This idiot even sent me to a rubber company that was still using Win 3.1!!!!
The printer they wanted to print to was labelled in Chinese. They were using it inside a "sealed" room that was totally contaminated with rubber dust. You couldn't touch a mouse without getting rubber dust all over your hands. The Win3.1 box they were using was complaining it was missing  driver file, and it wanted Win3.1 disk 7, which was a 5 1/4" floppy disk!! We had to go hunting for it. Found it, and inserted it, disk drives heads were corrupted from all the rubber dust in the room.

NEVER take anyrthing for granted!!!


Not trying to be nasty or anything, but you could take the version 4 class, and then psot all the new changes into the forum, too...  Cheesy
« Last Edit: May 25, 2006, 03:33:56 PM by Oyle » Logged

MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".

From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
                  -Tapeworm
Dengar13
Moderator
Full Member
*****
Offline Offline

Posts: 224



View Profile
« Reply #2 on: May 21, 2006, 03:25:44 PM »

There are still those antiquated attacks on the 4.0 version pcsneaker.  The difference I think that 4 has is pen-testing and it doesn't go ito great depth of it like CPTE/S would.  Hey not to get off track but is the Mile2 CPTE class any good?  They are coming to my town for a weeks class and I am thinking of going if I can get a sitter.
Logged

A+, Net+, MCP, CEH
MCSE: Security/Messaging
MCSA: Security/Messaging
Former U.S. Marine and damn proud of it!
Oyle
Moderator
Sr. Member
*****
Offline Offline

Posts: 264


"Man. Nature. Technology".


View Profile WWW
« Reply #3 on: May 21, 2006, 03:37:41 PM »

Dengar:


You did the vr.4 courseware, right? Why don't you post a module on Pen-testing?? Then we could be current with EC-council.....


« Last Edit: June 05, 2006, 04:33:51 PM by Oyle » Logged

MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".

From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
                  -Tapeworm
Dengar13
Moderator
Full Member
*****
Offline Offline

Posts: 224



View Profile
« Reply #4 on: May 21, 2006, 03:42:56 PM »

Sure, just give me a few to get my stuff together.
Logged

A+, Net+, MCP, CEH
MCSE: Security/Messaging
MCSA: Security/Messaging
Former U.S. Marine and damn proud of it!
Oyle
Moderator
Sr. Member
*****
Offline Offline

Posts: 264


"Man. Nature. Technology".


View Profile WWW
« Reply #5 on: May 24, 2006, 07:52:50 PM »

Thanks, Dengar, good job so far.

Y'know, pcsneaker, it may actually be a GOOD thing these companies still use old equipment. If any of us fledgling CEHes want to practice attacking a company  Wink (you didn't hear it from ME)  Wink it gives us a good place to start and presents us with a "relatively" easy opportunity.

<This post may self-destruct in 30 years>

...Insert Mission:Impossible theme here...
« Last Edit: May 24, 2006, 07:54:36 PM by Oyle » Logged

MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".

From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
                  -Tapeworm
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2007, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.047 seconds with 26 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.