Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 30 guests online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
CPT Practical - Feedback Please...
EH-Net
May 23, 2013, 02:19:17 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
(Moderator:
don
) >
CPT Practical - Feedback Please...
Pages:
1
...
4
5
[
6
]
7
8
9
Go Down
« previous
next »
Print
Author
Topic: CPT Practical - Feedback Please... (Read 63480 times)
0 Members and 1 Guest are viewing this topic.
SephStorm
Hero Member
Offline
Posts: 530
Re: CPT Practical - Feedback Please...
«
Reply #75 on:
October 22, 2011, 01:26:49 AM »
Oh goodness. I wish I had all of my material here.
I'm confused because he has the CEH, so I assume hes taking the ISI CEH/CPT. If that is the case, then he should have watched the videos/read the books, and the lab manual. The lab manual does a pretty good job of giving setup instructions. If you do the labs as you watch the videos, you should be able to take the CEH, then, the written CPT, followed by the Practical CPT.
As far as the boxes, I didnt log onto them locally, i.e I just booted them the only time I was on them was via telnet/ssh/ or some other remote shell session.
Anyway, if the OP PM's me, well set up a call, and il try to set you up.
Logged
Support my hactivities.
http://www.cafepress.com/TRUEHacker
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #76 on:
October 24, 2011, 06:48:04 PM »
Seph,
Did you get my PM?
Logged
Security+, Network+, C|EH, CHFI, CPT
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #77 on:
October 24, 2011, 09:11:39 PM »
Reading over everything I am not taking the ISI CEH/CPT. I am taking the IACRB and there were no videos
http://iacertification.org/
The links you provided I had already found and read through them. I believed I then posted my findings about what was happening.
Logged
Security+, Network+, C|EH, CHFI, CPT
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #78 on:
October 24, 2011, 10:29:59 PM »
In regards to my router. Here is what I have.
Automatic Configuration DCP
A few lines down it says :
DHCP server: X Enabled Disabled..>DHCP is enabled
Jump to another screen under Advanced Settings and I have NAT currently enabled.
Other than that, looking over the router setup there isn't anything that needs mentioning. Let me know what I need to do with these settings.
Logged
Security+, Network+, C|EH, CHFI, CPT
SephStorm
Hero Member
Offline
Posts: 530
Re: CPT Practical - Feedback Please...
«
Reply #79 on:
October 25, 2011, 12:09:12 AM »
Ok, got your PM and replied. I didnt know you weren't taking the class. Obviously that changes a few things, but im confident we can get you up and running. We'll post the results here.
Logged
Support my hactivities.
http://www.cafepress.com/TRUEHacker
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #80 on:
October 25, 2011, 09:11:43 AM »
Well I did take the class through Infosec but there was no tutorial on how to get the system for the CPT setup. All they did was have a table in the back of the room and said when you are done with the CEH test, you're done with the class. Grab the CPT practical before you leave.
The books have nothing in them on how to get this setup. I looked a long time ago. I only got two books anyways. One of them were nothing but all the slides we went over in class. The other being the "attack book" were it went through step by step on how to do an attack. This is whatI will be using once I get up and running but there isn't anything that explains how to get the VM up and running. In class on the first day everything was already setup and running.
Logged
Security+, Network+, C|EH, CHFI, CPT
SephStorm
Hero Member
Offline
Posts: 530
Re: CPT Practical - Feedback Please...
«
Reply #81 on:
October 25, 2011, 11:54:55 PM »
Just an FYI, we were able to get everything up and running. Look forward to hearing your results!
Logged
Support my hactivities.
http://www.cafepress.com/TRUEHacker
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #82 on:
October 26, 2011, 08:42:42 AM »
Thanks Seph, I swear I did this last week and I saw nothing like I did last night. Thanks again. Now time to get cracking.
Logged
Security+, Network+, C|EH, CHFI, CPT
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #83 on:
October 27, 2011, 09:08:04 PM »
Got some good things found already. Getting Nessus up and running now. Used Retina for the first time and it had some good results. So far all the documentation is going good.
LOL I spent like 3 hrs doing the report side to make it look nice and professional. So far my report is 13 pages and this is only done on cptvm1.
Logged
Security+, Network+, C|EH, CHFI, CPT
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #84 on:
October 29, 2011, 10:52:52 PM »
So I am having some problems and could use some help.
made some great progress. But now I am trying to get root passwords for the two systems.
I have access to hydra and John the ripper. I've tried a few cmds on both to try and crack the passwords but it's not really doing anything.
Watched some videos on youtube on how to use both tools but no luck. My problem I think is that I can't or don't know how to get the tons of word lists that Infosec gave me on one of the CD's into the VM to use.
Any suggestions?
Logged
Security+, Network+, C|EH, CHFI, CPT
SephStorm
Hero Member
Offline
Posts: 530
Re: CPT Practical - Feedback Please...
«
Reply #85 on:
October 30, 2011, 01:04:34 PM »
Wee you have a few options here. If you got the same test as me, I would say: Read the instructions for the practical carefully! It will guide you in the right direction.
Second, as far as wordlists, you can download them onto the VM you are running hydra from - from the internet. Or you can copy the tools/lists onto your windows machine (maybe in a tools directory) and share that folder with VMWare. (
http://www.vmware.com/support/ws5/doc/ws_running_shared_folders.html
)
remember, those instructions are critical.
Logged
Support my hactivities.
http://www.cafepress.com/TRUEHacker
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #86 on:
October 30, 2011, 07:55:00 PM »
Can you get root passwords by using Snort? I am using it and and some of the outputs have a password with the IP address to one of the VM's.
Logged
Security+, Network+, C|EH, CHFI, CPT
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #87 on:
October 30, 2011, 08:24:50 PM »
Joshsevo,
Very good question. I can see that you are learning quickly. Even though you continue to ask questions without fully researching it. To answer your question, Yes you can.
AHH, ya I am bored kind of. So I found the first root password by running Snort an then verified it by running Ettercap and that caught it rather quickly. Making good progress. About done actually. Need to figure out how to get the 2nd root password as John the Ripper doens't have a dictionary and I can't figure out how to get the one I have on the host onto the VM. Even if I do I can't figure out the syntax to have JTR use the dictionary.
Logged
Security+, Network+, C|EH, CHFI, CPT
SephStorm
Hero Member
Offline
Posts: 530
Re: CPT Practical - Feedback Please...
«
Reply #88 on:
October 30, 2011, 09:20:00 PM »
There are many videos on youtube that can show you how to use JTR. Just keep searching and i'm sure you'll do fine. Make sure you do lots of practice after you complete the cert. For me, this cert proved that I have a ways to go before I am ready for security prime time.
Logged
Support my hactivities.
http://www.cafepress.com/TRUEHacker
Joshsevo
Sr. Member
Offline
Posts: 278
Re: CPT Practical - Feedback Please...
«
Reply #89 on:
October 30, 2011, 11:47:23 PM »
Ahhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
you can click and drag..didn't know that. That's how you get the wordlists in.
John the Ripper is still too hard to figure out for me. All the videos are poor. Using Hydra now. Got it to run.
Wait for it.........
Logged
Security+, Network+, C|EH, CHFI, CPT
Pages:
1
...
4
5
[
6
]
7
8
9
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
Editor-In-Chief
: Special Xmas Deal: 10% Off eLearnSecurity Courses
(3) by
hekvvddtest
Greetings
: Hello
(6) by
hekvvddtest
Greetings
: Obtain The Scoop On mulberry bags Before You Are Too Late
(13) by
hekvvddtest
Calendar Of Events
: HITBSecConf2013 – Amsterdam
(9) by
hekvvddtest
Special Events
: [Article]-Webcast: Deep Dive into Red Teaming with the Metasploit Framework
(19) by
hekvvddtest
Network Pen Testing
: HackaServer - Anyone tried it?
(4) by
hekvvddtest
Greetings
: Good day ...
(7) by
hekvvddtest
Gates
: Chris Gates' Blog RSA Finalist
(5) by
hekvvddtest
Network Pen Testing
: Ruby on Rails Vulnerabilities / Attacks in BackTrack 5 r3
(1) by
hekvvddtest
General Certification
: nth topic on Career Advice
(9) by
hekvvddtest
General Certification
: Direction
(5) by
hekvvddtest
Hardware
: Discreet Hacking Devices
(8) by
hekvvddtest
Calendar Of Events
: CanSecWest 2013
(5) by
hekvvddtest
Forensics
: Burn Note
(5) by
hekvvddtest
Calendar Of Events
: Cyber Readiness Challenge - Rome
(1) by
hekvvddtest
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(0) by
prats84
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(0) by
prats84
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(27) by
don
Greetings
: Hi from the UK
(2) by
n37sh@rk
Network Pen Testing
: AIX Vulnerability Assessments
(2) by
ras76
Tutorials
: Need guidance
(9) by
hanyhasan
Programming
: Finished Python Course in Codecademy now what?
(15) by
hanyhasan
Network Pen Testing
: De-ICE 1.140 released!
(2) by
superkojiman
General Certification
: CPT Practical Submission
(1) by
UNIX
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.