Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 97 guests and 2 members online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow OSCP - Offensive Security Certified Professionalarrow Please help me decide...
EH-Net
May 23, 2013, 11:02:39 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Please help me decide...  (Read 4971 times)
0 Members and 1 Guest are viewing this topic.
packet.Wire
Newbie
*
Offline Offline

Posts: 6


View Profile
« on: June 28, 2011, 06:32:11 AM »

I'm interested in the OSCP class, but I have a concern about my current abilities. I've done pen tests for the company that I work for now, and I understand the basics of Metasploit, nmap, nessus, etc., but I've been reading comparisons between this course and eLearnSecurity's course. eLearnSecurity states that their course is designed for 0 - 3 years of experience and it seems to be the recommended before doing OSCP. I don't pen test on a daily basis, so I don't know how much relevant and practical experience in "years" that I really do have.

I don't know ASM (I'm reading up on it now), I have the basics of Python (written a few scripts from scratch), I don't know Ruby, and I know a little C/C++ but have never written an exploit. I've used BT off and on since BT3, but nothing major.

I guess I need to know if I'm a good candidate for the course. I don't want to get in over my head.
Logged

CISSP CCNP CCSP Sec+
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #1 on: June 28, 2011, 06:52:52 AM »

From what you've posted, I think you'd do fine in OSCP, however, not knowing you, personally, or your drive / motivation level, I can't say, conclusively, that it's for you.  The biggest factor you'll face with OSCP, if your original post is an honest assessment of yourself, is time.  You need to make the time to really dive into the course.  But that said, again, if you're being truthful, I've seen folks with less experience pass OSCP, successfully.

While I have not had the time to take the final 'exam' for it, I can tell you, too, that eLearn's course is also excellent.  I reviewed it for Armando, a while back, and I feel he has some excellent material in there.  It's another A+ learning experience.  Additionally, he's a member here, and can give you some more information if you open up a discussion with him.

Ultimately, I'd say this.  If you're nervous, and want to dive in, but unsure of your time and commitment levels, yet, I'd definitely start with eLearn.  There's a lot to it, but you've got more time to work through it.  If you're a glutton for punishment, and feel that you have the time and resources to go for OSCP, then it's sort of up to you which way you want to go.  Both are excellent courses, and you'll learn a lot, either way.

Good luck, and keep us posted on how you do.
« Last Edit: June 28, 2011, 06:54:33 AM by hayabusa » Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
packet.Wire
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #2 on: June 28, 2011, 07:02:04 AM »

Thanks hayabusa. I've read a lot of your other posts on here  Smiley

I read a comparison on this site (I'll have to find a link) that said eLearn's offering was more of a point and click course whereas OSCP was more CLI driven. Is that true? Any thoughts on that?
Logged

CISSP CCNP CCSP Sec+
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #3 on: June 28, 2011, 07:30:36 AM »

Well, I can say that eLearn's course is more of a reading / viewing experience, or at least it was, expecting you to then take the knowledge to your own labs for testing.  I know Armando and his team have been working on creating their own attack labs, and more hands on experience for their courses.  Could be significantly better, for hands on experience, by now.  I haven't had opportunity (and my temporary access will likely expire, due to lack of time) to their latest labs.  But lifetime access - to the materials, slides and info covered - does make a nice bonus, if you ever want to go back and review.

OSCP is a really about the effort.  They make you go outside of the box, do your own outside research on a lot of topics, and really spend your time going in depth on the various pieces.  There's a lot of 'Try Harder' (one of their favorite hints / taunts / motivators) strewn throughout the online labs, and they really push you to figure things out, even if not fully covered in the reading / videos.  I personally enjoy that type of learning, so it was a bonus for me, to just dig in, get my hands dirty, and go after it.

Again, I think if you're really motivated, and can dedicate the time, you could likely pass OSCP.  But I think if you're concerned about those factors, I can tell you that eLearn's course was top notch, and can be taken at a more leisurely pace, while still honing your skills, learning new topics, and gaining lots of good information.  Both courses come with great support, by way of email, chat, etc, and both have a good community built up around them, to assist you, now.

In the end, it's going to come down to a personal choice, which obviously, we can't make for you.  But in the end, whichever way you go, you're in for a good experience, IMHO.

Edit:  Oh, and as far as point'n'click versus CLI...  Much of what is done, in the eLearn stuff, is done with GUI tools, at least, in the webapp side of things.  And that's due, in large part, to the fact that a lot of the current webapp scanning / testing tools are GUI-based.  You could still do much of that from a CLI, but when tools are available, makes more sense to use them.  Much COULD be done with GUI tools in OSCP, as well.  OSCP definitely has you spending a lot of time in Metasploit framework, and at a coding level, so you'd definitely want to be comfortable with a command prompt / shells.  But either way, for BOTH courses, you could do a lot.  At the end of the day, you'll be using both, and want to be comfortable with both, and if you've done some programming, I think you'll do fine, either way.
« Last Edit: June 28, 2011, 07:37:03 AM by hayabusa » Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #4 on: June 28, 2011, 09:26:35 AM »

I think you've got enough to start OSCP. I wrote a detailed review awhile back, it might help give you some additional insight http://www.networkadminsecrets.com/2010/12/offensive-security-certified.html
Logged

packet.Wire
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #5 on: June 28, 2011, 03:06:52 PM »

Awesome! Your site is the one that I linked to in my business proposal to have the class covered. I sent it to my boss' manager so he could see the reviews since it's not a "well known" cert.
Logged

CISSP CCNP CCSP Sec+
don
Editor-In-Chief
Administrator
Hero Member
*****
Online Online

Posts: 4167


Editor-In-Chief


View Profile WWW
« Reply #6 on: June 28, 2011, 03:24:04 PM »

Be sure to check out Ryan Linn's reviews as well:

http://www.ethicalhacker.net/content/category/7/40/24/

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
xXxKrisxXx
Hero Member
*****
Offline Offline

Posts: 512



View Profile
« Reply #7 on: June 28, 2011, 03:40:42 PM »

I read a comparison on this site (I'll have to find a link) that said eLearn's offering was more of a point and click course whereas OSCP was more CLI driven. Is that true? Any thoughts on that?

Having taken both courses I can confirm this! Both are great and fun (:

I completely agree with hayabusa's posts. I think your ready to indulge in the OSCP class - just be sure to purchase enough lab time. They recommend 60 but you'll have so much fun and get more experienced purchasing 90! Give it your all and you'll prevail victorious!
Logged

eCPPT, GCIH, OSCP, OSWP
packet.Wire
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #8 on: June 28, 2011, 03:59:18 PM »

Wow! Thanks everyone for the awesome replies! I'll definitely look into it!
Logged

CISSP CCNP CCSP Sec+
don
Editor-In-Chief
Administrator
Hero Member
*****
Online Online

Posts: 4167


Editor-In-Chief


View Profile WWW
« Reply #9 on: June 28, 2011, 04:11:20 PM »

Also, check out Jason Haddix's review of eLS Pro:

http://www.ethicalhacker.net/content/category/7/42/24/

We'll have a review of student coming next month.

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #10 on: June 29, 2011, 05:41:56 AM »

if you are looking for reviews, check mine out too! when i read your current "skill level" i think you are on the same level as when i started OSCP, read the walktrough and you will see i had great difficulty passing, but then again, i did pass so it can be done! just be prepared to invest many hours of learning, and i mean very very very many...Good luck and keep us posted!
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.065 seconds with 25 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.