Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 39 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow OSCP - Offensive Security Certified Professionalarrow OSCP V3.0 certificaton available!
EH-Net
May 21, 2013, 05:10:24 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 [2] 3   Go Down
  Print  
Author Topic: OSCP V3.0 certificaton available!  (Read 24085 times)
0 Members and 1 Guest are viewing this topic.
UNIX
Hero Member
*****
Offline Offline

Posts: 1235


View Profile
« Reply #15 on: March 02, 2010, 12:09:58 PM »

@H1t M0nk3y: Eventually you might write another e-mail, as this seems to be an auto-response. If you are lucky, you might work something out.
Logged
H1t M0nk3y
Hero Member
*****
Offline Offline

Posts: 864



View Profile
« Reply #16 on: March 02, 2010, 03:48:17 PM »

Quote
as this seems to be an auto-response
I waited almost 4 hours for the response... Huh

Quote
The pricing was listed on their site, already
I recall seeing it when I registered AFTER I read their email...  Undecided

And since I am paying from my own pocket, I will think about paying an extra $200...
Logged

OSCP, GPEN, GWAPT, GSEC, CEH, CISSP
hayabusa
Hero Member
*****
Offline Offline

Posts: 1631



View Profile
« Reply #17 on: March 02, 2010, 04:04:21 PM »

Quote
The pricing was listed on their site, already
I recall seeing it when I registered AFTER I read their email...  Undecided

And since I am paying from my own pocket, I will think about paying an extra $200...

LOL!   Grin  Wasn't meant to be sarcastic or critical, was just pointing it out, so all could easily link to it, etc.  Trust me, as soon as I saw the original post from the email, I went looking to see what they had posted!  I greatly appreciate your post, as it'll save me the time, and let me wait to register for v3, instead of jumping into 2, only to turn around and go to 3.

I think the extra $200 would be worth it, myself, based on the new things they're saying they're adding to it.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
MarcusW
Newbie
*
Offline Offline

Posts: 3


View Profile
« Reply #18 on: March 03, 2010, 03:07:50 AM »

I think the extra $200 would be worth it, myself, based on the new things they're saying they're adding to it.

Absolutely. I've upgraded mid-course so I'll be getting my courseware on the 21st and I'm getting my new labs allocated on the 21st as well. Given there's additional focus on Buffer Overflows, Web Apps and modern operating systems I definitely see the benefit in upgrading.

If it's any issue, I've been warned that Core Impact won't be installed in the new Version 3 XP boxes, which implies it may have been dropped from the syllabus.
Logged
H1t M0nk3y
Hero Member
*****
Offline Offline

Posts: 864



View Profile
« Reply #19 on: March 03, 2010, 05:18:48 AM »

Quote
Wasn't meant to be sarcastic or critical

Hayabusa, I didn't take it bad at all! I really, really appreciate your comments. I should just do my homework first... Tongue Cheesy

You guys convinced me, I will upgrade to v3 for $200 !

The Linux buffer overflow convinced me too! Grin
Logged

OSCP, GPEN, GWAPT, GSEC, CEH, CISSP
MarcusW
Newbie
*
Offline Offline

Posts: 3


View Profile
« Reply #20 on: March 03, 2010, 10:44:25 AM »

I quizzed the sales team as to when the V3 syllabus would be published and they said it'll hit the web site next week.
Logged
cmattmiller
Newbie
*
Offline Offline

Posts: 2


View Profile
« Reply #21 on: March 03, 2010, 11:37:10 AM »

I'd love to upgrade, but can't afford it myself and the first $700 was like pulling teeth from management.  Sad

I just have to save my pennies.
Logged
partek
Newbie
*
Offline Offline

Posts: 27


View Profile
« Reply #22 on: March 03, 2010, 01:05:15 PM »

If it's any issue, I've been warned that Core Impact won't be installed in the new Version 3 XP boxes, which implies it may have been dropped from the syllabus.

I don't think it will really be missed if it is dropped from the course. The course really only gave an overview of it as a pentesting framework.
Logged

CISSP, CISM, CISA, CCNA Security, OSCP, CEH
KamiCrazy
Jr. Member
**
Offline Offline

Posts: 78


View Profile
« Reply #23 on: March 03, 2010, 02:49:02 PM »

Using core on OS101 was fun, but largely useless as a learning tool for pentesting...
Logged
pizza1337
Full Member
***
Offline Offline

Posts: 156

Resource is Power.


View Profile
« Reply #24 on: March 12, 2010, 04:14:02 PM »

http://www.offensive-security.com/blog/backtrack/pwb-v3-information-security-training-at-its-best/
its recent.

also has demo video.
« Last Edit: March 12, 2010, 04:15:42 PM by pizza1337 » Logged

Knowledge Resource is Power.
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #25 on: March 13, 2010, 03:50:25 AM »

thanks pizza! lets have a look at the differences.

management told me i can apply at the end of the year due to reorganizations thats going on now and they dont know where i will be stationed yet (weird that i already know and they dont, but thats a different story). so if i want to do it now i have to pay for it myself. no problem but i have to wait at least a month before i can cough up the dough.

i'm looking at the video now, but i also noticed they removed some (possibly all?) metasploit material. i know this isnt very hard/cutting edge stuff, but basic knowledge you should have. why?
« Last Edit: March 13, 2010, 04:04:09 AM by j0rDy » Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
hayabusa
Hero Member
*****
Offline Offline

Posts: 1631



View Profile
« Reply #26 on: March 13, 2010, 08:54:51 AM »

Are you asking why metasploit stuff might be necessary, or why they removed it?  Not having taken v2, and preparing to take v3, I can't speak for why it'd be removed.  It's good knowledge to have, as you really need to understand, for instance, how to take code from a 0day or other exploit, and compile and use it, with meterpreter or others, against your targets.  

Based on them saying 'kernel payloads and db_autopwn' were what was removed, I'm not so sure they removed metasploit, entirely.  The kernel payload section... I'm not sure what exactly he used to cover, so maybe it just tended to be something a bit harder to grasp and took more concentration away from other topics, etc.  Or it could be that with many of the other attack vectors that are coming to be, muts and company wanted to put attention and focus on other things.  I won't speculate.  

db_autopwn would take some of the learning out of the picture, by automating steps and functions that you really SHOULD understand, to be an effective pentester, and not always relying on pre-canned tools and scripts.  The same would go for the removal of CoreImpact.  As KamiCrazy mentioned, Core is so fully capable of many things, that using it in such a class could very easily lead you to become complacent / lazy, and not truly get the value and understanding that comes with manual testing procedures.  

I know that I, personally, would MUCH rather understand the how's and why's of what happens underneath such tools and scripts, than to lean so heavily on commercial tools or pre-compiled scripts, etc, as it's much more beneficial and useful, in cases where, for instance, a customer doesn't allow you to bring your own machines and code into their network, but rather, you need to scrape together 'available' tools and ideas to do your tests.  You'll be a better pentester from the experience, by learning things the hard way.  Once you truly understand these things, then using other commercial tools and scripts becomes a timesaver, not an exercise in laziness, and you can better test and validate findings from those tools, by using other knowledge and techniques.

Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
MosGuy
Newbie
*
Offline Offline

Posts: 10


View Profile
« Reply #27 on: March 13, 2010, 02:19:39 PM »

I agree with hayabusa. The way I read the changes, it came across to me like they haven't removed metasploit fully. Likely just certain areas they likely felt either didn't enhance the course much, or would lead to students getting to "lazy" relying on automated tools and scripts. Which as mentioned, typically leads to not fully understanding the process behind it. There's always the option of Metasploit Unleased. Which I'm sure goes into more detail then PWB anyway.

Of course that's just my take on it. Like hayabusa, I haven't done v2 tho plan to take v3 early next month. The only sure answer is to ask the OffSec team. But with Metasploit Unleased out there, I can't see there will be any real loss of material.
Logged

A+, Network+
pizza1337
Full Member
***
Offline Offline

Posts: 156

Resource is Power.


View Profile
« Reply #28 on: March 13, 2010, 02:21:19 PM »

They do have http://www.offensive-security.com/metasploit-unleashed/  (love it)
I hope they have full version of this course soon.
Logged

Knowledge Resource is Power.
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #29 on: March 14, 2010, 06:03:03 AM »

metasploit unleashed is a great resource! i can understand why they removed the db_autopwn like hayabusa said, but for the completeness of the course i should have kept it in...anyway i'm convinced the quality of the course will not be less!
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
Pages: 1 [2] 3   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.088 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.