Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 72 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow OSCP - Offensive Security Certified Professionalarrow How to prepare for PWB?
EH-Net
May 19, 2013, 03:15:10 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: How to prepare for PWB?  (Read 7360 times)
0 Members and 1 Guest are viewing this topic.
Chadk
Newbie
*
Offline Offline

Posts: 6


View Profile
« on: November 09, 2011, 04:43:09 AM »

Hey,

In January I'll be doing PWB. Until then, I have 2 months(including my Christmas vacation) to basically do studying ahead of doing PWB.

What books should I be reading over the next months to prepare myself for PWB, and make my life less of a hell once I do it? Anything I should be doing?

Any advice is most welcome!

Thanks in advance.
Logged
n3r
Jr. Member
**
Offline Offline

Posts: 95



View Profile
« Reply #1 on: November 09, 2011, 04:50:27 AM »

The more you 'll learn before the more you'll be prepared  Grin
Logged
Chadk
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #2 on: November 09, 2011, 05:23:15 AM »

The more you 'll learn before the more you'll be prepared  Grin
That's not helpful. I can read all the books in the world, but if I don't read things that's actually gonna help me over the next 2 months, then it's not worth it.

So what books should I read over the next 2 months? Or other activity that will teach me stuff, that would make PWB a bit easier?
Logged
TheXero
Full Member
***
Offline Offline

Posts: 112


Try Harder!


View Profile WWW
« Reply #3 on: November 09, 2011, 05:31:17 AM »

Last January I decided I was going to start PWB roughly in April (this year) so I decided to try and get some experience in developing exploits to try and get me up to speed before starting the course.

When I started the course in April, I realised that I'd already done probably about 80% of the course material on my own for several years and felt that I was at an advantage on the course material, but the lab time is really where the course pays for itself.

With the exploit development module, try to make sure that you know before hand about the CPU registers on the x86 architecture before you start the course and even try developing some exploits.

If you need some help with this I am happy to assist or alternatively you can view the video and write-up hosted on my website at http://www.thexero.co.uk/exploit-development/ or on SecurityTube.net here http://www.securitytube.net/video/2377

Good luck with pwb Wink

Regards,
TheXero
Logged

Chadk
Newbie
*
Offline Offline

Posts: 6


View Profile
« Reply #4 on: November 09, 2011, 06:18:51 AM »

I already went through the first couple of exploit development guides at corelan, and have exploited a number of targets(Including freefloat). So I'm pretty up to speed on buffer overflows(No SEH/Stack cookie exploiting so far though) Smiley
Logged
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #5 on: November 09, 2011, 07:12:17 AM »

Exploit development is just a tiny part of PWB. OSCE on the other hand is 90% exploit dev.

There really isn't too much you can do do prepare yourself for the lab, but I would definitely familiarize yourself with the syllabus http://www.offensive-security.com/documentation/penetration-testing-with-backtrack.pdf

You'll get ideas on the content of the course there and possibly begin researching based on that.
Logged

TheXero
Full Member
***
Offline Offline

Posts: 112


Try Harder!


View Profile WWW
« Reply #6 on: November 09, 2011, 07:35:12 AM »

A point I forgot to mention, have you ever looked at the De-ICE.net pentest live cd's before?

Hopefully they will help you on your way to getting the correct mindset, but also have a look at some methodologies as well such as the OSSTMM or ISSAF.  They are pretty boring to read, but they will make sure you don't miss anything during a pentest.

Regards,
TheXero
Logged

Agoonie
Full Member
***
Offline Offline

Posts: 176



View Profile WWW
« Reply #7 on: November 09, 2011, 08:03:18 AM »

Exploit development is just a tiny part of PWB. OSCE on the other hand is 90% exploit dev.

There really isn't too much you can do do prepare yourself for the lab, but I would definitely familiarize yourself with the syllabus http://www.offensive-security.com/documentation/penetration-testing-with-backtrack.pdf

You'll get ideas on the content of the course there and possibly begin researching based on that.

I would agree 100%.  Just be ready to learn everything they teach you and more.  The only thing you can do to prepare is open up Backtrack and take a look at every tool that is there.  Get familiar with most of the tools and look over the PDF.  Also, figure out the best way for you to take notes.  I never knew how important the note taking process would be in a pentest till I took that course.  Lastly, prepare the family. You might be missing sleep some nights. Smiley My 2 cents.  Oh yeah, and have fun!
Logged

OSCE, OSCP, OSWP, CISSP, GPEN

www.agoonie.com
th3d0ct0r
Newbie
*
Offline Offline

Posts: 2



View Profile
« Reply #8 on: February 08, 2012, 12:41:09 PM »

Hey I am kinda new to Info Sec. I wanted to know if I might be good to start the OSCP course. I have strong knowledge of tcp/ip, my linux skills are still at a beginner level but not to bad. I have been playing around with Backtrack and metasploit intensely for about a year now. What do you guys think should I be ok?
Logged
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1056


aka dynamik


View Profile WWW
« Reply #9 on: February 08, 2012, 01:15:04 PM »

Hey I am kinda new to Info Sec. I wanted to know if I might be good to start the OSCP course. I have strong knowledge of tcp/ip, my linux skills are still at a beginner level but not to bad. I have been playing around with Backtrack and metasploit intensely for about a year now. What do you guys think should I be ok?

You might want to beef up your Linux skills and learn a bit of Python first. You can always purchase more lab time if you feel like you need it, and you can schedule the test whenever you're ready. There's really no harm in starting the course when you feel like you're close to being where you need to be, even if you may not be prepared for everything.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
th3d0ct0r
Newbie
*
Offline Offline

Posts: 2



View Profile
« Reply #10 on: February 08, 2012, 06:35:49 PM »

Thanks dynamik. I will study up on Python and start beating myself to work on my linux skills.  Grin
Logged
eterjack
Newbie
*
Offline Offline

Posts: 2


View Profile
« Reply #11 on: February 13, 2012, 05:39:16 AM »

Hello,

It is possible make the lab and exam with virtual machine backtrack ? Or you guys recommend to install backtrack on the same physical PC.

Which book would you recommend for reading before the OSCP training?
Logged
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #12 on: February 13, 2012, 08:18:19 AM »

VM is fine for the BT box. If possible, try to use a host that can give at least 1gb of ram to your BT box.

As far as books go, I wouldnt worry about it since the material you'll be covering, will cover specific sections out of like 5 books. Brush up on your scripting/bash skills,
Logged

pharmerjoe
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #13 on: February 17, 2012, 01:56:53 PM »

Would it be enough to just learn from whatever course material Offensive Security give you? Or is a lot of outside reading required? (aside from programming skills)
Logged
hayabusa
Hero Member
*****
Offline Offline

Posts: 1630



View Profile
« Reply #14 on: February 17, 2012, 02:12:11 PM »

You can ALMOST survive on what they give you, but you WILL need to do outside research on some things, in order to 'pop' some of the targets, both in the lab, and in the exam.  That said, though, they give you enough info to pretty much guide you where to FIND what you need, in the wild.

But one thing that makes it very realistic training, is that just like in a real-world pentest, you will run into things you don't know, and have to do some research on your own.  That's one BIG reason I like the way Offensive Security puts their stuff together.  It prepares you, not only to pass a certification exam, but for what to expect, in the real world.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.093 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.