Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 52 guests online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow OSCP - Offensive Security Certified Professionalarrow OSCP Walkthrough
EH-Net
May 22, 2013, 10:43:13 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 ... 6 7 [8] 9 10   Go Down
  Print  
Author Topic: OSCP Walkthrough  (Read 80145 times)
0 Members and 1 Guest are viewing this topic.
tturner
Sr. Member
****
Offline Offline

Posts: 432


View Profile WWW
« Reply #105 on: January 14, 2011, 05:39:41 AM »

Which is why I haven't done it yet myself. When I get home from work I have a limited amount of time since I work fairly long hours, have an hour-long commute one way (which is great for listening to security podcasts btw), wife and 2 small kids (infant and toddler) and am finishing up my B.S. degree this semester that I procrastinated on forever. Oh and working a 2nd job too as a consultant for a state agency doing security research but there's no set hours (usually log 10 to 15 hours a week) and I work from home on that one.

I can do a lot of this kind of stuff during work hours but they have not accommodated all my lab requests yet, including a dedicated cable modem, but I'm hopeful this can happen soon. Allowing me to VPN from our network to the Offsec network will not be happening, EVER. And honestly that's how I want to keep it.

I typically spend about 5 to 10 hours a week on developing skills in my lab. Would that be sufficient or would I likely need more time than that? I could probably shift things around and get another 10 hours in over the weekend if I had to, but probably not every weekend.
Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog  @tonylturner http://bsidesorlando.org
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #106 on: January 15, 2011, 10:28:55 PM »

tturner

I would recommend using the offsec labs. Setting up your own labs gives you an advantage since you know what you installed etc. Using their labs, you're exposed to things you know nothing about and which you have to figure out. This is half the battle. I blogged about my experience here if you want to know what I think in detail: http://networkadminsecrets.blogspot.com/2010/12/offensive-security-certified.html
Logged

tturner
Sr. Member
****
Offline Offline

Posts: 432


View Profile WWW
« Reply #107 on: January 16, 2011, 08:02:38 AM »

Thanks cd1zz. That's my issue, can't use Offsec labs at work (not until I get separate internet connection for my lab so I can connect to their VPN), and don't have time when I get home. At least not yet. That's why this one keeps getting delayed, which is too bad because it seems to be rising in demand quite rapidly.
Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog  @tonylturner http://bsidesorlando.org
AndyB
Full Member
***
Offline Offline

Posts: 100



View Profile
« Reply #108 on: January 16, 2011, 12:53:49 PM »

I'd like to thank everyone who's posted in this thread and congratulate jOrDY and the rest who have passed the exam.  It has been a great read and an eye opener.

This cert is definitely on my ToDo list after reading Ryan Linn's article but after reading about your experiences j0rDy, I think I'll wait a few months whilst I brush up on my skills and programming.

Whilst I know i'd learn a lot on the course, the exam would be beyond me at the moment!  I've got some serious studying to do over the next few months (and pearl or python to learn)
Logged

Net+ Sec+ More to come
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #109 on: January 16, 2011, 01:33:23 PM »

tturner - I see your dilemma. If you could do it while you're at work that would be nice!! Having long blocks of solid time is the best way to to conquer the course.... best of luck.
Logged

j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #110 on: January 17, 2011, 02:05:25 AM »

I'd like to thank everyone who's posted in this thread and congratulate jOrDY and the rest who have passed the exam.  It has been a great read and an eye opener.

This cert is definitely on my ToDo list after reading Ryan Linn's article but after reading about your experiences j0rDy, I think I'll wait a few months whilst I brush up on my skills and programming.

Whilst I know i'd learn a lot on the course, the exam would be beyond me at the moment!  I've got some serious studying to do over the next few months (and pearl or python to learn)

Thank you and i'm glad you liked it. Remember that if you want to get experience the PWB course itself is great! its just the exam thats a b*tch Tongue And welcome to EH.net!
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
alucian
Full Member
***
Offline Offline

Posts: 225



View Profile
« Reply #111 on: January 17, 2011, 08:33:08 AM »

I can do a lot of this kind of stuff during work hours but they have not accommodated all my lab requests yet, including a dedicated cable modem, but I'm hopeful this can happen soon. Allowing me to VPN from our network to the Offsec network will not be happening, EVER. And honestly that's how I want to keep it.


Why don't you use a laptop with a wireless connection (mobile phone for example) to connect to the lab? I know that it is expensive, but if you really want to do the course this way you can attain your goal.
Logged

CISSP ISSAP, CISM/A, GWAPT, GCIH, eCPPT, OSWP
tturner
Sr. Member
****
Offline Offline

Posts: 432


View Profile WWW
« Reply #112 on: January 17, 2011, 12:37:03 PM »

I probably could, I do have a DroidX with Proxoid setup with ADB for tethering on my linux machine. http://carnal0wnage.blogspot.com/2010/11/tethering-your-droid-to-linux-system.html

I've used that before for reverse connections but it's painful sometimes since my cellular coverage is a bit spotty and I've noticed that some connections tend to get filtered by Vz, but then sometimes they don't. It's almost like some Vz nodes are filtered but if I get routed through a different Vz node it isn't. I suppose if it's inside the VPN tunnel that probably won't be an issue. If I can't get the work cable modem approved I may go that route.

*post edited because I realized that my pondering was a really bad idea. Fun, but not smart*
« Last Edit: January 20, 2011, 03:46:47 PM by tturner » Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog  @tonylturner http://bsidesorlando.org
WCNA
Full Member
***
Offline Offline

Posts: 187



View Profile
« Reply #113 on: March 07, 2011, 09:14:45 PM »

I was in one of the first few OSCP exam groups so I don't know how much it has changed since then. At that time, while the course starts at a basic level, muts made it clear to us that outside resources would have to be used. So to pass the exam, you needed to have expanded your knowledge in certain areas. You were expected to look at all the options/arguments/switches/etc of the tools you were using....to use your mind/think outside the box rather that a step1 do this kind of course. That's not to say you had to become an expert in Olly or memorize all the nmap commands, you just had to know they existed or how to find them quickly. Hope this helps.
« Last Edit: March 07, 2011, 09:16:31 PM by WCNA » Logged

ISC2 Associate, WCNA, CWNA, OSCP, Network+
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #114 on: March 11, 2011, 02:19:11 AM »

Just a final post to let everyone know i received my certification in the mail the other day. The feeling i got when i received the "congratulations" mail came back once again!
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
WCNA
Full Member
***
Offline Offline

Posts: 187



View Profile
« Reply #115 on: March 11, 2011, 08:29:01 AM »

Congrats. Hope you had as much fun as I did. I see you have listed yourself as Associate of ISC2. Is there a reason you didn't post it as CISSP (Associate)? Is there some rule against that?
Logged

ISC2 Associate, WCNA, CWNA, OSCP, Network+
jsm725
Newbie
*
Offline Offline

Posts: 36



View Profile
« Reply #116 on: March 11, 2011, 03:57:10 PM »

To answer for j0rDy, you have to have 5 years (or 4 + a degree) of work experience in the CISSP domains to have the cert. He passed the test and is just waiting to get the experience. Then they will let him have the cert. But in my humble opinion, the OSCP should be first in the signature. CONGRATS j0rDy!!! Label me jealous. I hope to give the OSCP a go this year sometime.
« Last Edit: March 11, 2011, 04:00:50 PM by jsm725 » Logged

CISSP, PCI-QSA, OSWP
WCNA
Full Member
***
Offline Offline

Posts: 187



View Profile
« Reply #117 on: March 13, 2011, 09:07:09 AM »

Thanks for the reply. I understand about the cert process (I'm just now starting this one) but most employers don't know what "Associate of ISC2" is but would more likely know what CISSP (Associate) is. "Associate of ISC2" doesn't tell anyone what exam you have passed. Let me restate the question: Is there anything wrong with using CISSP (Associate)?
Logged

ISC2 Associate, WCNA, CWNA, OSCP, Network+
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #118 on: March 13, 2011, 12:09:30 PM »

Thanks for the reply. I understand about the cert process (I'm just now starting this one) but most employers don't know what "Associate of ISC2" is but would more likely know what CISSP (Associate) is. "Associate of ISC2" doesn't tell anyone what exam you have passed. Let me restate the question: Is there anything wrong with using CISSP (Associate)?

I listed mine as: Associate of (ISC)2 (CISSP Application Pending)
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #119 on: March 14, 2011, 03:04:37 AM »

Jsm725 is right. i am waiting to get the experience (still 2 yrs to go) to be able to apply for a full CISSP degree. It is PROHIBITED to use the CISSP tag in any form when you are an ISC2 associate. If they find out you use it, even with the associate clarification, they will either ask you to remove it with a warning, or permanently revoke your certification, so be warned!
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
Pages: 1 ... 6 7 [8] 9 10   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.061 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.