Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 39 guests online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow EH-Netarrow News Items and General Discussion About EH-Netarrow Hi everybody
EH-Net
May 19, 2013, 09:30:04 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Poll
Question: Whis is so hard strarting to work in the security area?
Difficult - 3 (100%)
Impossible - 0 (0%)
Total Voters: 3

Pages: [1]   Go Down
  Print  
Author Topic: Hi everybody  (Read 5388 times)
0 Members and 1 Guest are viewing this topic.
ruggine
Newbie
*
Offline Offline

Posts: 2


View Profile
« on: May 21, 2010, 02:30:10 AM »

Hi. First of all i'd like to thanks all for creating this site in which i'll find (i hope) a lot of informations about computer security.I'm quite old (42) but i have got a real experience of computer programming and networking. I actually work as a computer angel in a University at the Faculty of Economics.I'm a security enthusiast and ,sometimes, i do some basic security tests in our network.i'd like to improve my security skill and try to transform this "hobby" in something much more interesting but nobody here is really interested in doing this. I try to conctact some security company thinking that they can help me, but the only answer that i got is: you have not the minimal requisite (degree and certification and blablabla). Now what? I think that the university network is a good way of learning security in real scenario. Any ideas?
Thanks.


 
Logged
Manu Zacharia (-M-)
Sr. Member
****
Offline Offline

Posts: 393


c0c0n Hacking Conference - where hackers unite


View Profile WWW
« Reply #1 on: May 21, 2010, 03:50:46 AM »

Hello Ruggine,

Welcome on-board EH-Net.

That's a wonderful introduction. Your programming skills will definitely help you with the security related researches. As far as learning security in the university network, I won't suggest if it is not a controlled lab. Try to setup a controlled lab network where you can practice and try out various security exercises. There are few threads discussing this:

Network pentest lab setup   

Pentest Lab: Web Application Edition

Wishing you all the best for your learning initiatives.

Happy learning 'n' hacking Smiley

Logged

Manu Zacharia
MVP (Enterprise Security), ISLA-2010 (ISC)², C|EH, C|HFI, CCNA, MCP,
Certified ISO 27001:2005 Lead Auditor

There are 3 roads to spoil; women, gambling & hacking. The most pleasant with women, the quickest with gambling, but the surest is hacking - c0c0n
Synquell
Full Member
***
Offline Offline

Posts: 169



View Profile
« Reply #2 on: May 21, 2010, 05:19:50 AM »

Welcome to the forum!
I'm sure there are lot's of answers in various posts here. If you don't find any, ask away! Smiley
Logged

Twitter: https://twitter.com/dietervds
Blog: https://synquell.wordpress.com (not much there yet)

The beginning of knowledge is the discovery of something we do not understand.
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #3 on: May 21, 2010, 05:53:58 AM »

Hello, ruggine! Welcome to the forum Smiley
You've come to the right place. I'm sure that you'll find solution to any question you might have. Just stick around and you'll learn a great deal just by reading the discussions.

Quote
I try to contact some security company thinking that they can help me, but the only answer that i got is: you have not the minimal requisite (degree and certification and blablabla).
Have you considered any certifications? Security+ is a good one to start with. Even if you have some security skills, most employers will ask for some concrete proof to show to them. Certification is that proof. Check security jobs in your local newspapers and make note of certifications employers look for and start working on them.
I would also advice you to purchase Counter Hack reloaded by Ed Skoudis and practice the material in your OWN lab.

Quote
I think that the university network is a good way of learning security in real scenario. Any ideas?
Perhaps not. Make sure you've proper permission before you practice on your University network, otherwise you're just calling for unnecessary trouble.

Manu Zacharia has given you excellent links to build your own virtual lab. However, if you still have any confusion I'll just copy-paste a similar response I posted in some other thread. http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,5376.msg28590/#msg28590

You do not need any expensive stuff to build your 'virtual' test lab. In fact most of the stuff in my lab is absolutely free. You can find various open source counterparts of commercial tools.
There are various 'free' virtualization products available like virtualbox, vmware player and vmware server. I'm a big fan of vmware products. Personally, I believe that vmware server will be enough for what you want to do. Vmware server is a stripped down version of the excellent commercial vmware workstation but contains almost all the basic features you'll require. You can download pre-built linux virtual machines from the vmware website http://www.vmware.com/appliances/directory/
There's also a free route to get Windows OS. Either you can download the OS from Microsoft's website which comes with around 3 month trial period. Furthermore, you can also download Windows XP SP2 virtual machine from  NIST's website http://www.offensive-security.com/metasploit-unleashed/windows-xp-machine-setup
As for the softwares like ftp, telnet daemons and webservers etc...well most of them are free anyway  Cheesy

Jhaddix and Laz3r have posted wonderful tutorials to build a virtual test lab. You can get them here:-
Network pentest lab setup    
Pentest Lab: Web Application Edition

Additionally, you can practice on ready made targets like De-ICE live disks, hackerdemia and pWnOS all of which are available here http://forums.heorot.net/  You also have LAMP security disks http://sourceforge.net/projects/lampsecurity/  Also try your hands at the 'Skillz' section of this forum http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/board,12.0/ They will test your limits.
There's also a topic here at EHNet which will direct you to more stuff for practicing http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,5043.0/
Logged
zeroflaw
Full Member
***
Offline Offline

Posts: 208



View Profile
« Reply #4 on: May 22, 2010, 09:22:46 AM »

Hello, welcome to EH-Net!
Logged

ZF
hayabusa
Hero Member
*****
Offline Offline

Posts: 1630



View Profile
« Reply #5 on: May 22, 2010, 09:41:28 AM »

Welcome aboard!
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #6 on: May 23, 2010, 03:50:10 AM »

Welcome! the only advice i can give you is look at the virtual lab building guide Equix3n- posted above...
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
JollyJokker
Guest
« Reply #7 on: May 23, 2010, 05:40:20 AM »

Welcome! I am also new to the forum and new to Information Security. I guarantee you that this is an ideal place to learn!
Logged
ruggine
Newbie
*
Offline Offline

Posts: 2


View Profile
« Reply #8 on: May 27, 2010, 06:10:18 AM »

Thank's all. I create a small hacklab machine in which i put vmware server and other stuff that you suggested me. Obviously the machine is completly disconnect from the network university and i can play around with it without getting in troubles. I can scan,version,fingerprint and try to exploit known vulnerabilities with bt4.That's good stuff but i think that activity is not considered to be ethical hacking.I mean that noone will call me and say "Hey check my internal network and try to find known security holes! you'll get paid for this." Unfortunately i live in a small town in italy and the nearest interesting city is Milano. Perhaps i have to found someone like me and try to mix our experience... not so easy!!
Anyhelp(of corse)will be greatly appreciated.

Logged
hayabusa
Hero Member
*****
Offline Offline

Posts: 1630



View Profile
« Reply #9 on: May 27, 2010, 07:20:54 AM »

Ah, but that is very much, still, ethical hacking.  Doesn't matter whether you're pentesting against an internal or external network.  Doesn't even matter if you're finding holes that the network owner is already aware of.  Very often you WILL get paid for this, because, even if you're just confirming their known flaws, there are legal and certification requirements that must be satisfied, through a pentest or audit.

As an ethical hacker, it's your job to find and disseminate security risks to the company, whether confirming existing or finding new ones.  Very often, I'm involved in a situation where the IT department knew about a hole, but didn't close it, because they didn't feel it was a high enough risk to the organization.  However, when I showed them, through a pentest, the amount of actual damage that could come THROUGH that hole, their mindsets changed.

Additionally, the internal side of things is VERY important, as it's where a skilled hacker / attacker is going to head, immediately, as soon as they breach the perimeter (whether by exploiting a flaw on the border servers, or by social engineering and client-side exploit.)  Either way, security holes on the inside MUST be closed, to avoid further potential data loss and risk.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
yatz
Full Member
***
Offline Offline

Posts: 222


View Profile WWW
« Reply #10 on: May 27, 2010, 09:11:09 AM »

I'm new to these boards too, so welcome!  I think you'll find all sorts of skill levels around here, and the eagerness to learn is infectious!
Logged

"Live as though you would die tomorrow, learn as though you would live forever."

CCNA, MCSA, MCTS, Sec+, Net+, Linux+, CEH
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.081 seconds with 25 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.