Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 56 guests and 1 member online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
CEH - Certified Ethical Hacker
CEH w/o taking the course
EH-Net
May 18, 2013, 08:11:13 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
>
CEH - Certified Ethical Hacker
(Moderator:
don
) >
CEH w/o taking the course
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: CEH w/o taking the course (Read 11205 times)
0 Members and 1 Guest are viewing this topic.
bamed
Newbie
Offline
Posts: 48
CEH w/o taking the course
«
on:
January 13, 2010, 12:16:00 PM »
I'm looking at obtaining my CEH. I've already got my OSCP. I noticed on the EC-Council it says:
"If you have opted for self-study and not attended training, you must have at least two years of information security related experience."
Anybody know what counts as "security related experience."
I've been a sysadmin for 6+ years. My job includes some security aspects such as managing the firewall, IDS, etc. Would this count, or do I need more specific experience?
Logged
chown -R bamed ./base
unsupported
Sr. Member
Offline
Posts: 318
Unofficial Newbie Moderator
Re: CEH w/o taking the course
«
Reply #1 on:
January 13, 2010, 12:42:37 PM »
You just need to submit a form (
http://www.eccouncil.org/portals/0/documents/CEH-Exam-Eligibility-Application-Form.pdf
) from your manager type person outlining your experience. I had the requisite time, but I just outlined my duties and other certifications I had obtained. Just be honest and see what happens. I think having OSCP should be enough.
Logged
-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
UNIX
Hero Member
Offline
Posts: 1234
Re: CEH w/o taking the course
«
Reply #2 on:
January 13, 2010, 01:09:24 PM »
I too would say that it counts - just write what you have done so far and see how things will go. As far as I know EC-Council is very accommodating, so there shouldn't be any problems.
Logged
sandcrawler
Newbie
Offline
Posts: 13
Re: CEH w/o taking the course
«
Reply #3 on:
January 13, 2010, 03:09:08 PM »
I just got my CEH a couple weeks ago and I was in much the same situation as you... My experience came from a small municipal government agency which I haven't worked at for a couple of years. While I was there (8 years) I became primarily responsible for all aspects of security. That included firewalls, IDS, antivirus, countermeasures and a small bit of forensic work, etc. I just detailed this in brief and prefilled the form for my old supervisor. She signed it and I faxed it to EC-Council. If I remember correctly they responded in less than 8 hours with the code I needed to register for my exam.
With that said, the content of the test was NOT what I expected. I used resources I had here at work to read a couple of the study guides available via books24x7. It seems the books more or less skimmed over the content enough to say.. "This is what you need to know..." but it was apparent from the depth of the questions that you really HAD to know more than what the book taught. I even googled one of the apps mentioned in the test because I was sure I hadn't read about it in either guide and still to this day don't know what the right answer is. Granted, I didn't spend a lot of time looking for the answer because I'm sure it exists but I didn't feel like it was relevant enough to pursue at this point in time.
Good luck!
Logged
UNIX
Hero Member
Offline
Posts: 1234
Re: CEH w/o taking the course
«
Reply #4 on:
January 13, 2010, 03:56:03 PM »
sandcrawler, were you able to pass the exam because of your working experience as you wrote that the guides were not sufficient or deep-enough? Just curious, as I am using CEH Prep Guide and CEH Official Certified Ethical Hacker Review Guide as well (beside others) and will probably take the exam within February.
Logged
bamed
Newbie
Offline
Posts: 48
Re: CEH w/o taking the course
«
Reply #5 on:
January 13, 2010, 10:04:07 PM »
OK, my supervisor will have paperwork filled out by the end of the week.
Now answer me how well the knowledge gained passing the OSCP will help when taking the CEH?
Logged
chown -R bamed ./base
BillV
Hero Member
Offline
Posts: 1892
Re: CEH w/o taking the course
«
Reply #6 on:
January 14, 2010, 07:36:26 AM »
It'll help that you have some experience with the process and many of the tools. The OSCP focuses on BackTrack though and the CEH is more of general overall view of ethical hacking. You'll need to become familiar with some of the laws, the phases of an attack and various terms used. Typically it's recommended to go the opposite route, CEH -> OSCP, but I'm sure you'll be fine. Your experience will be fine.
Logged
unsupported
Sr. Member
Offline
Posts: 318
Unofficial Newbie Moderator
Re: CEH w/o taking the course
«
Reply #7 on:
January 14, 2010, 08:40:44 AM »
Quote from: awesec on January 13, 2010, 03:56:03 PM
sandcrawler, were you able to pass the exam because of your working experience as you wrote that the guides were not sufficient or deep-enough? Just curious, as I am using CEH Prep Guide and CEH Official Certified Ethical Hacker Review Guide as well (beside others) and will probably take the exam within February.
I passed reading those two books and also setting up a lab of three computers. Some of the tools I worked with live were Wireshark, NMAP, Snort, Cain and Able.
Logged
-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
sandcrawler
Newbie
Offline
Posts: 13
Re: CEH w/o taking the course
«
Reply #8 on:
January 21, 2010, 02:03:56 PM »
awesec,
For me it had more to do with experience, logic and some common sense than the books. That made it more difficult as I've been doing systems management instead of infosec the past three years. The books helped some with terminology and process but the V6 tests have a lot of new stuff even compared to what was in those books.
Everyone will have a different experience with the test, I'm sure. I expected a lot more questions based on tools like nmap and snort with which I'm familiar and I found more questions on the test based around windows group policies to which I know very little. As a matter of fact I don't remember a single snort or nmap question.
If I had to do it all over I'd do a better job of looking at what each module expected me to know and studying more on the modules I felt weak at.
Logged
T_Bone
Full Member
Offline
Posts: 199
Re: CEH w/o taking the course
«
Reply #9 on:
January 23, 2010, 04:08:46 PM »
Hi
I really wanted to do the CEH exam after self study but as said a letter of recommendation is required from my employer. I am currently a contractor and to be honest didn't really want my employers to know i have an interest in security in case it has an adverse affect but cannot do it without this letter. Do you know whether ECcouncil actually contact my employers in regards to the letter for more detail? I am thinking of asking my manager for a recommendation letter but without going into any detail
Cheers
Logged
UNIX
Hero Member
Offline
Posts: 1234
Re: CEH w/o taking the course
«
Reply #10 on:
January 24, 2010, 02:20:28 AM »
I don't think that they contact each employers as this would be very time consuming, though I am not sure.
I would just try it and see what happens.
Logged
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4165
Editor-In-Chief
Re: CEH w/o taking the course
«
Reply #11 on:
January 24, 2010, 12:50:46 PM »
If you're a contractor, aren't you your own employer?
Don
Logged
CISSP, MCSE, CSTA, Security+ SME
chrisj
Hero Member
Offline
Posts: 1163
Re: CEH w/o taking the course
«
Reply #12 on:
January 24, 2010, 06:07:24 PM »
Don
Depends on who the contract was written. The place I work at now, I started as a contractor. I was a 1099, but a contract house dealt with finding the job and doing the billing (for their cut of course).
Shady, but when you're desperate for a job, then you take what you can get.
Logged
OSWP, Sec+
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
Ethical Hacktivism
: lulzsec in it for the money
(7) by
Georgydfea
News Items and General Discussion About EH-Net
: [Article]-Holiday 2012 Free Giveaway Sponsor - Rapid7
(20) by
Georgydfea
News Items and General Discussion About EH-Net
: Наконец то ра
(4) by
Georgydfea
Web Applications
: Nessus and Nikto
(4) by
Seen
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(4) by
impelse
Tutorials
: Need guidance
(7) by
impelse
Malware
: EICAR?
(2) by
SephStorm
Network Pen Testing
: Cracking salted MD5 hash
(4) by
n37sh@rk
CEH - Certified Ethical Hacker
: Passed my C|EH
(3) by
n37sh@rk
Mass Media
: EC-council hacked, irony at his best?
(0) by
j0rDy
Web Applications
: SQL Injection into an INSERT statement.
(6) by
eyenit0
Network Pen Testing
: Solution for sipXtapi INVITE Message CSeq Field Header Remote Overflow
(1) by
m0wgli
Web Applications
: dns
(2) by
H1t M0nk3y
Other
: BSides Boston
(0) by
3xban
Career Central
: InfoSec in Central, FL
(2) by
tturner
Web Applications
: Web vulnerability scanner
(4) by
H1t M0nk3y
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
Free Business and Tech Magazines and eBooks
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.