Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 29 guests online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Resourcesarrow Tutorialsarrow Where to start?
EH-Net
May 23, 2013, 02:19:44 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1] 2   Go Down
  Print  
Author Topic: Where to start?  (Read 19147 times)
0 Members and 1 Guest are viewing this topic.
uz3r
Newbie
*
Offline Offline

Posts: 10


View Profile
« on: February 25, 2011, 02:31:44 AM »

I have been a computer user most of my life and know my way around windows and ubuntu. I know my way around desktop pc hardware but have no hacking or programming experience. I just started school and am planning on taking CIS classes in hopes of later becoming a network security admin and penetration tester as well as a comp hardware technician. Recently my financial aid was dropped because I didn't renew my fafsa and now I have 5 months of nothing to do as I am an unemployed felon (lol)
Now I've discovered several different courses of action in the last week as I have decided to go the way of working towards dynamic studies towards certification. I am considering CompTIA A+ because I've heard its a good place to start for someone with no experience in the field. However, I've also checked out Career Academy (which teaches CompTIA course) as well as elearn security and Hacking DOJO. I heard that CEH certification is not as thorough and deep rooted and is more the understanding of how to use specific tools. I want a full and thorough understanding for when the government takes over the internet XD

So my questions:

Where is the best place to start for a beginner like myself?

If CompTIA A+ is the best route, would I go with the CompTIA site's A+ courses or Career Academy's A+ courses?

I have a good number of reading material on the subject but as I have nothing to do for the next 5 months, I wouldn't mind spending my money where I have actual instructors and labs for which to get support and experiment with. Any other suggestions would be very appreciated. Thanks! Smiley
Logged
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #1 on: February 25, 2011, 09:27:29 AM »

Welcome to the forum.

This is actually a pretty common question on the forum, so common infact that there are pinned topics in the Pentester section. You'll probably find the answer to your questions there.

As for labs. Some classes will let you use there lab for a fixed amount of time, or you could build your own. Building your own lab will give you some extra skills, like running VMWare, and system installation of different kinds.

You'll want programming skills too. They make some good network simulators that will work for what you want to do, or you could hit up ebay and buy used equipment.
Logged

OSWP, Sec+
uz3r
Newbie
*
Offline Offline

Posts: 10


View Profile
« Reply #2 on: February 25, 2011, 06:28:36 PM »

I actually have VMware on my windows 7 boot. I'm running a windows/ubuntu x64 dual. I have been looking at CompTIA.org with their elearning bundles but I've also seen careeracademy and learnkey are viable options. Any suggestions or preferences? I'll likely be teaching myself python as I go seeing as how I have pretty much limitless time on my hands.
Logged
UNIX
Hero Member
*****
Offline Offline

Posts: 1235


View Profile
« Reply #3 on: March 02, 2011, 08:43:23 AM »

If you can afford it, take a look at courses offered by InfoSec Institute. Their basic Ethical Hacking course goes through some of the most important basics and offers enough hands-on practice to get your hands dirty. If you can't take the live course, you could opt for the online version, which is a recorded version of a live training. The course also prepares for both CEH and CPT.
Logged
uz3r
Newbie
*
Offline Offline

Posts: 10


View Profile
« Reply #4 on: March 02, 2011, 12:09:18 PM »

I already checked out InfoSec and they are way too expensive. I'm taking TestOut's 7-day free trial and I got the CBT Nuggets 2009 A+ videos. Do you think TestOut + CBT Nugs will be sufficient? I'm teaching myself out of my house, just taking mad notes and reviewing everything. I have a good knowledge of hardware and software installation and operating systems.
Logged
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #5 on: March 04, 2011, 09:00:26 AM »

To add to my recommendation above, get a copy of Dissecting the Hack: The F0rb1dd3n Network by Jayson Street, Brian Baskin, and Kent Nabors.

I got a copy the other week and have been reading it. It's pretty good, broken up in to a story section that gives you an idea of the tools are used, and the STARS (Security Threats Are Real) section that goes a little more indepth on the tools and tricks used in the story.

The book won't make you a hacker overnight, but it will give you some ideas of things to look at and play with.
Logged

OSWP, Sec+
WCNA
Full Member
***
Offline Offline

Posts: 187



View Profile
« Reply #6 on: March 04, 2011, 09:52:16 AM »

Don't forget about metasploitable. If you don't have a lab, it'll definitely help beginners.
Logged

ISC2 Associate, WCNA, CWNA, OSCP, Network+
lorddicranius
Sr. Member
****
Offline Offline

Posts: 447



View Profile WWW
« Reply #7 on: March 04, 2011, 02:05:27 PM »

Don't forget about metasploitable. If you don't have a lab, it'll definitely help beginners.

Thanks for the metasploitable recommendation, that looks like a great tool to use to learn metasploit (which is currently on my list of things to do Smiley).
Logged

GSEC, eCPPT, Sec+
WCNA
Full Member
***
Offline Offline

Posts: 187



View Profile
« Reply #8 on: March 05, 2011, 07:37:02 PM »

Your welcome. I don't know why someone hasn't already done this but I think it might be a very good opportunity for someone to open a site that would let security students vpn into a lab with a whole bunch of vulnerable machines. Sorta like what muts does with the OSCP course. You could have deepfreeze on the machines and they would reboot every hour, wiping out all the pwnage. You could even have contests to see how many machines you can compromise before the hour is up.
Logged

ISC2 Associate, WCNA, CWNA, OSCP, Network+
jason
Hero Member
*****
Offline Offline

Posts: 1012



View Profile WWW
« Reply #9 on: March 07, 2011, 06:26:28 PM »

Stay tuned. Something very much like what you describe is in the works, and we hope to have exactly such an environment available in the near future. When we have the beta environment nailed down, we'll be pinging the EH netters to test it out, so get your l337 h4X0r Sk1ll2 warmed up.
Logged
AndyB
Full Member
***
Offline Offline

Posts: 100



View Profile
« Reply #10 on: March 10, 2011, 01:41:54 AM »

Your welcome. I don't know why someone hasn't already done this but I think it might be a very good opportunity for someone to open a site that would let security students vpn into a lab with a whole bunch of vulnerable machines. Sorta like what muts does with the OSCP course. You could have deepfreeze on the machines and they would reboot every hour, wiping out all the pwnage. You could even have contests to see how many machines you can compromise before the hour is up.

Check out http://www.hacking-lab.com/events/swiss-cyber-storm-3-cargame-challenge.html.  They have competitions running for hacking their systems.  Currently not doing it to win the car, just gain experience!
Logged

Net+ Sec+ More to come
lorddicranius
Sr. Member
****
Offline Offline

Posts: 447



View Profile WWW
« Reply #11 on: April 02, 2011, 09:39:45 PM »

So I've finally gotten around to setting up some VM's (using VMWare Player), went to download Metasploitable and I can't seem to find a link that works.  Initially started here and found that the "torrent" link doesn't work anymore.  I tried a few searches around metasploit.com with no luck either.  Anybody know of a good link to download from?
Logged

GSEC, eCPPT, Sec+
millwalll
Guest
« Reply #12 on: April 03, 2011, 10:39:44 AM »

There is a a link here http://www.metasploit.com/learn-more/how-do-i-use-it/test-lab.jsp This show how to setup a lab http://www.securityaegis.com/pentest-lab-web-application-edition/

If you need any help let me know as I was at same stage you are around 6 months ago send me a PM
Logged
lorddicranius
Sr. Member
****
Offline Offline

Posts: 447



View Profile WWW
« Reply #13 on: April 03, 2011, 04:14:48 PM »

Awesome, thanks Jamie Smiley
Logged

GSEC, eCPPT, Sec+
uz3r
Newbie
*
Offline Offline

Posts: 10


View Profile
« Reply #14 on: April 09, 2011, 03:20:27 PM »

So I think I'll check out the books you all suggested and the metasploit thing. I consider myself pretty apt with computers. Though I have no real programming knowledge, I figure I'll be starting with A+ which is more in my familiarity zone. I can upgrading and install hardware/software on windows no problem and have basic understanding of networking and troubleshooting so I think I'll just hit the books instead of fork out the cash for a fast track certification.
Logged
Pages: [1] 2   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.089 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.