Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 98 guests and 2 members online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
OffSec/eLearnSec vs. more traditional certs...
EH-Net
May 23, 2013, 11:02:42 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
(Moderator:
don
) >
OffSec/eLearnSec vs. more traditional certs...
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: OffSec/eLearnSec vs. more traditional certs... (Read 5214 times)
0 Members and 1 Guest are viewing this topic.
Artholm3
Newbie
Offline
Posts: 10
OffSec/eLearnSec vs. more traditional certs...
«
on:
May 05, 2010, 10:22:53 AM »
I'm curious about the "validity" of the more hands-on security training methods online and how they are seen in the real world. This is not disparaging either of the mentioned programs, I've simply found that I learn better by actually doing hands-on work vs only reading/notes
Logged
hayabusa
Hero Member
Offline
Posts: 1633
Re: OffSec/eLearnSec vs. more traditional certs...
«
Reply #1 on:
May 05, 2010, 12:27:05 PM »
So you don't think there is 'hands-on' in Offsec's training??? I can assure you, there's plenty. That's what the lab packages are for, and the 24-hour long practical, hands-on exam, at the end. I'm starting Offsec's OSCP v3 this Sunday. I'll let you know more of my thoughts, thereafter, but others have already spoken to the validity of their training.
And I believe there are labs with eLearnSec's stuff, too...
<edit> no offense intended, just wondering why you'd think as you did, that's all...
Logged
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH
Artholm3
Newbie
Offline
Posts: 10
Re: OffSec/eLearnSec vs. more traditional certs...
«
Reply #2 on:
May 05, 2010, 12:48:26 PM »
Quote from: hayabusa on May 05, 2010, 12:27:05 PM
So you don't think there is 'hands-on' in Offsec's training??? I can assure you, there's plenty. That's what the lab packages are for, and the 24-hour long practical, hands-on exam, at the end. I'm starting Offsec's OSCP v3 this Sunday. I'll let you know more of my thoughts, thereafter, but others have already spoken to the validity of their training.
And I believe there are labs with eLearnSec's stuff, too...
<edit> no offense intended, just wondering why you'd think as you did, that's all...
After re-reading my post, hayabusa, i simply phrased that badly. OffSec has excellent labs as does eLearn's courses.
I'm just worried how a potential employer might react to hearing "I'm an OSCP" if they aren't familiar with the course versus hearing "I am Sec+/GPEN/GSEC certified."
Hopefully that makes a bit more sense and again, I'm NOT taking shots at the courses offered by OffSec or eLearnSecurity.
Logged
hayabusa
Hero Member
Offline
Posts: 1633
Re: OffSec/eLearnSec vs. more traditional certs...
«
Reply #3 on:
May 05, 2010, 02:03:27 PM »
<grin>
There you go, I think you worded your thoughts better, now. And I certainly understand that thinking. Unless you're really involved, specifically, in penetration testing, etc, you don't often hear about OSCP and other similar certifications and classes.
This is something you DO have to consider, when applying to a potential or new employer. However, most employers 'hopefully' aren't looking at the certifications, alone (unless you're moving into management, then I see it happen that way, a lot ! <EVIL GRIN>) Generally, you'll have technical interviews and such, where you'll need to prove what you know, and show your value.
On my resume, for example, I not only list the certification name, but I also give a little detail on what each one is (not a lot, as most initial reviewers could care less, but enough that the next person to see it might look more closely.) You should also list your experience and such, in a way that can grab their attention, and really help them to focus on your value, as a candidate for their position / opening. Then, as you move forward, and talk with them, more, you can explain the similarities and contrasts between what certs you hold, and others that they might be more familiar with.
Finally, if an employer flat out insists on you holding one of the other certs, then it really doesn't matter what certs you have, and you just have to either talk them through it, and explain that you WILL get their required certs, or move on to the next openings out there.
HTH, and is a little more clearly tailored to what you were asking.
Logged
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH
Ketchup
Hero Member
Offline
Posts: 1021
Re: OffSec/eLearnSec vs. more traditional certs...
«
Reply #4 on:
May 05, 2010, 03:02:48 PM »
I would agree with hayabusa. Most employers, especially in HR, wouldn't know what the OSCP certification is. They are only aware of the standards, like CISSP and Security+. However, if you resume made it to your future direct supervisor, he/she will likely know and appreciate the OSCP certication if you are applying for a pen-testing position. In other words, I think that the OSCP may open a second door for you, once you already through the front door.
Logged
~~~~~~~~~~~~~~
Ketchup
Artholm3
Newbie
Offline
Posts: 10
Re: OffSec/eLearnSec vs. more traditional certs...
«
Reply #5 on:
May 05, 2010, 03:30:27 PM »
Quote from: Ketchup on May 05, 2010, 03:02:48 PM
I would agree with hayabusa. Most employers, especially in HR, wouldn't know what the OSCP certification is. They are only aware of the standards, like CISSP and Security+. However, if you resume made it to your future direct supervisor, he/she will likely know and appreciate the OSCP certication if you are applying for a pen-testing position. In other words, I think that the OSCP may open a second door for you, once you already through the front door.
<grin> Oh the joys of being a hands-on learner... But seriously, wise words there, Ketchup. I definitely want to be a pen-tester over a network admin etc. so I'm banking on the more specialized technical training may give me a leg up. Now just need a *nix laptop and tuition fees, lol
Logged
hayabusa
Hero Member
Offline
Posts: 1633
Re: OffSec/eLearnSec vs. more traditional certs...
«
Reply #6 on:
May 05, 2010, 06:08:31 PM »
The *nix laptop is neither here nor there. You can boot to a bootable BackTrack CD/DVD/USB Stick, or you can always use VMWare and run Linux / BackTrack from within. (However, if your reason is to become intimately familiar with everyday *nix, then I understand you. (Dual boot, or again, boot the CD/DVD and run live, so you can always go back to Winderz when you want to.)
Logged
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH
What90
Full Member
Offline
Posts: 120
Re: OffSec/eLearnSec vs. more traditional certs...
«
Reply #7 on:
May 05, 2010, 10:22:00 PM »
Hello Artholm3,
I'd have to say it depends :-)
These (OSCP, eLearning, GPEN) courses are targeted at teaching specific skills, thus specific, specialised roles in a company. Having these skills/certs is great but they have to fit in with an employer’s need for them to be required, thus having HR identify what they are in the first place.
If you're looking at working in normal company with no or minimal security skills, planning or direction, the only qualification the HR staff will recognize is the CISSP or CISM/CISA, as Ketchup mentioned. These have no hands on components but are seen as industry “standards” for security. They may even just look for OS skill sets with the word security tacked on the end or a certain vendor (Cisco/Juniper/etc) certs.
The security specific company should know, or at least check, what different security certs are. The certs with solid hands on experience proves a certain level of understand and ability. I’ve seen CV’s with certs I’ve never heard of, but after a quick check I know whether to say “Wow!” or “hmmm”. As new courses/certs appear, they either become adopted in to the industry after a while or disappear.
If you’re looking for the right training to get your dream job, hit the job web site and find similar roles. They be asking for certain skills, training and knowledge, so flip that to a course and you’ll be one step closer to get that job!
Logged
http://www.chris-mohan.com
konectics
Guest
Re: OffSec/eLearnSec vs. more traditional certs...
«
Reply #8 on:
May 06, 2010, 04:48:27 PM »
OffSec's Penetration Testing Training with BackTrack course is pretty good. Fully hands on. Their course covers most pentest tools that come with BackTrack 4 in a lab environment.
The price for the course is really unbeatable and worth every cent. Something comparable from SANS would run you five times the cost.
Now, they made it clear up front that they expect hard work on your part. Most of the modules and labs expect you to do homework and prompt you for further reading and experimentation.
I definitely suggest that you have some linux, shell scripting and possibly perl/python programming skills to get the most out of the course.
As far as potential employers, sure, they like to see CISSP in your resume, but once you go into the initial interview, the techies will ask a lot of questions and know if you really have a grasp for the subject at hand.
I'd suggest you examine what field of infosec you want to get into; pen testing, incident handling, security analyst, etc., and immerse yourself in it. Read all you can from books, webinars, hands-on courses, build a lab, etc.
Best of luck!
Logged
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(3) by
H1t M0nk3y
Greetings
: Hi from the UK
(3) by
UKSecurityGuy
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(0) by
prats84
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(27) by
don
Network Pen Testing
: AIX Vulnerability Assessments
(2) by
ras76
Tutorials
: Need guidance
(9) by
hanyhasan
Programming
: Finished Python Course in Codecademy now what?
(15) by
hanyhasan
Network Pen Testing
: Ruby on Rails Vulnerabilities / Attacks in BackTrack 5 r3
(0) by
SUdoctstudent
Network Pen Testing
: De-ICE 1.140 released!
(2) by
superkojiman
General Certification
: CPT Practical Submission
(1) by
UNIX
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.