Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 23 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow CEH - Certified Ethical Hackerarrow CEH w/o taking the course
EH-Net
May 25, 2013, 04:41:23 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: CEH w/o taking the course  (Read 11222 times)
0 Members and 1 Guest are viewing this topic.
bamed
Newbie
*
Offline Offline

Posts: 48


View Profile WWW
« on: January 13, 2010, 12:16:00 PM »

I'm looking at obtaining my CEH.  I've already got my OSCP.  I noticed on the EC-Council it says:
"If you have opted for self-study and not attended training, you must have at least two years of information security related experience."

Anybody know what counts as "security related experience."
I've been a sysadmin for 6+ years.  My job includes some security aspects such as managing the firewall, IDS, etc.  Would this count, or do I need more specific experience?

Logged

chown -R bamed ./base
unsupported
Sr. Member
****
Offline Offline

Posts: 318


Unofficial Newbie Moderator


View Profile
« Reply #1 on: January 13, 2010, 12:42:37 PM »

You just need to submit a form (http://www.eccouncil.org/portals/0/documents/CEH-Exam-Eligibility-Application-Form.pdf) from your manager type person outlining your experience.  I had the requisite time, but I just outlined my duties and other certifications I had obtained.  Just be honest and see what happens.  I think having OSCP should be enough.
Logged

-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
UNIX
Hero Member
*****
Offline Offline

Posts: 1235


View Profile
« Reply #2 on: January 13, 2010, 01:09:24 PM »

I too would say that it counts - just write what you have done so far and see how things will go. As far as I know EC-Council is very accommodating, so there shouldn't be any problems.
Logged
sandcrawler
Newbie
*
Offline Offline

Posts: 13


View Profile
« Reply #3 on: January 13, 2010, 03:09:08 PM »

I just got my CEH a couple weeks ago and I was in much the same situation as you...  My experience came from a small municipal government agency which I haven't worked at for a couple of years.  While I was there (8 years) I became primarily responsible for all aspects of security.  That included firewalls, IDS, antivirus, countermeasures and a small bit of forensic work, etc.   I just detailed this in brief and prefilled the form for my old supervisor.  She signed it and I faxed it to EC-Council.  If I remember correctly they responded in less than 8 hours with the code I needed to register for my exam.

With that said, the content of the test was NOT what I expected.  I used resources I had here at work to read a couple of the study guides available via books24x7.  It seems the books more or less skimmed over the content enough to say..  "This is what you need to know..." but it was apparent from the depth of the questions that you really HAD to know more than what the book taught.  I even googled one of the apps mentioned in the test because I was sure I hadn't read about it in either guide and still to this day don't know what the right answer is.  Granted, I didn't spend a lot of time looking for the answer because I'm sure it exists but I didn't feel like it was relevant enough to pursue at this point in time.

Good luck!

Logged
UNIX
Hero Member
*****
Offline Offline

Posts: 1235


View Profile
« Reply #4 on: January 13, 2010, 03:56:03 PM »

sandcrawler, were you able to pass the exam because of your working experience as you wrote that the guides were not sufficient or deep-enough? Just curious, as I am using CEH Prep Guide and CEH Official Certified Ethical Hacker Review Guide as well (beside others) and will probably take the exam within February.
Logged
bamed
Newbie
*
Offline Offline

Posts: 48


View Profile WWW
« Reply #5 on: January 13, 2010, 10:04:07 PM »

OK, my supervisor will have paperwork filled out by the end of the week.

Now answer me how well the knowledge gained passing the OSCP will help when taking the CEH?
Logged

chown -R bamed ./base
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #6 on: January 14, 2010, 07:36:26 AM »

It'll help that you have some experience with the process and many of the tools. The OSCP focuses on BackTrack though and the CEH is more of  general overall view of ethical hacking. You'll need to become familiar with some of the laws, the phases of an attack and various terms used. Typically it's recommended to go the opposite route, CEH -> OSCP, but I'm sure you'll be fine. Your experience will be fine.
Logged
unsupported
Sr. Member
****
Offline Offline

Posts: 318


Unofficial Newbie Moderator


View Profile
« Reply #7 on: January 14, 2010, 08:40:44 AM »

sandcrawler, were you able to pass the exam because of your working experience as you wrote that the guides were not sufficient or deep-enough? Just curious, as I am using CEH Prep Guide and CEH Official Certified Ethical Hacker Review Guide as well (beside others) and will probably take the exam within February.

I passed reading those two books and also setting up a lab of three computers.  Some of the tools I worked with live were Wireshark, NMAP, Snort, Cain and Able.
Logged

-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
sandcrawler
Newbie
*
Offline Offline

Posts: 13


View Profile
« Reply #8 on: January 21, 2010, 02:03:56 PM »

awesec,

For me it had more to do with experience, logic and some common sense than the books.  That made it more difficult as I've been doing systems management instead of infosec the past three years.   The books helped some with terminology and process but the V6 tests have a lot of new stuff even compared to what was in those books. 

Everyone will have a different experience with the test, I'm sure.  I expected a lot more questions based on tools like nmap and snort with which I'm familiar and I found more questions on the test based around windows group policies to which I know very little.  As a matter of fact I don't remember a single snort or nmap question.

If I had to do it all over I'd do a better job of looking at what each module expected me to know and studying more on the modules I felt weak at.
Logged
T_Bone
Full Member
***
Offline Offline

Posts: 199


View Profile
« Reply #9 on: January 23, 2010, 04:08:46 PM »

Hi

I really wanted to do the CEH exam after self study but as said a letter of recommendation is required from my employer.  I am currently a contractor and to be honest didn't really want my employers to know i have an interest in security in case it has an adverse affect but cannot do it without this letter.  Do you know whether ECcouncil actually contact my employers in regards to the letter for more detail?  I am thinking of asking my manager for a recommendation letter but without going into any detail

Cheers
Logged
UNIX
Hero Member
*****
Offline Offline

Posts: 1235


View Profile
« Reply #10 on: January 24, 2010, 02:20:28 AM »

I don't think that they contact each employers as this would be very time consuming, though I am not sure.

I would just try it and see what happens.
Logged
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 4169


Editor-In-Chief


View Profile WWW
« Reply #11 on: January 24, 2010, 12:50:46 PM »

If you're a contractor, aren't you your own employer?

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #12 on: January 24, 2010, 06:07:24 PM »

Don

Depends on who the contract was written. The place I work at now, I started as a contractor. I was a 1099, but a contract house dealt with finding the job and doing the billing (for their cut of course).

Shady, but when you're desperate for a job, then you take what you can get.

Logged

OSWP, Sec+
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.077 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.