HomeCalendarCertificationsColumnsFeaturesForumResourcesVitals
 
Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.
Lost Password?
No account yet? Register
Who's Online
We have 68 guests and 2 members online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Web Hackers Handbook labs?
EH-Net
May 19, 2013, 01:44:39 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1] 2 3   Go Down
« previous next »
  Print  
Author Topic: Web Hackers Handbook labs?  (Read 20307 times)
0 Members and 1 Guest are viewing this topic.
Sinco98
Newbie
*
Offline Offline

Posts: 5


View Profile
« on: December 14, 2011, 02:54:00 AM »
I am wondering if anyone has used the web hackers handbook labs from mdsec.net
Logged
millwalll
Guest
« Reply #1 on: December 14, 2011, 03:49:06 AM »
Hi

No I have the book but I think the labs are too expensive when there are ways to test for free like webgoat,DVWA so on..

If the labs were a one off payment for a certain amount of time like $50 for a month then I would be more tempted to use them.
Logged
Sinco98
Newbie
*
Offline Offline

Posts: 5


View Profile
« Reply #2 on: December 14, 2011, 05:00:06 AM »
yes that was my thinking $7 an hour (£5) seems to bit expensive when like you stated DVWA is available.

Thanks,
Logged
millwalll
Guest
« Reply #3 on: December 14, 2011, 05:57:41 AM »
yah don't get me wrong I sure there labs are amazing and I sure they making lots money from companies who can afford $7 an hour but for someone new to the industry trying to work you way in with no money it just crazy
Logged
alucian
Full Member
***
Offline Offline

Posts: 225



View Profile
« Reply #4 on: December 14, 2011, 08:28:03 AM »
I plan to buy 10 hours of lab time. I know that thery are expensive compared to eLS or even OS*P. But, the best way of learning is by studying and doing.

In my opinion, if someone will go through the most of the labs he will be extremelly skilled. Also, consider the fact that the book is about 40$ plus 100 hours lab time is 740$. A lot, but a SANS course is more than 3000$.

I did SANS GWAPT, eLS and I have the book. Soon I will do a comparison between them.

I also think that paying by the hour will make you sweat more.  Smiley
Consider the following analogy: having a girfriend (pay monthly access) and "renting" a wh*re by the hour. In which case will you "give your best" and want the best ROI??  Roll Eyes
Logged
CISSP ISSAP, CISM/A, GWAPT, GCIH, eCPPT, OSWP
hayabusa
Hero Member
*****
Offline Offline

Posts: 1630



View Profile
« Reply #5 on: December 14, 2011, 09:10:24 AM »
<grin>  That's quite the analogy, alucian!   Wink
Logged
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'

OSCE, OSCP , GPEN, C|EH
millwalll
Guest
« Reply #6 on: December 14, 2011, 09:17:58 AM »
That is fair comment and yes compared to most courses run by sans its really good value. I personally would rather read the book use free alternatives and the money I save by not going into the labs spend on another course that would help me develop in another area.

I guess if you want to be amazing at web apps then spending the money on it like a course would be beneficial.
Logged
Sinco98
Newbie
*
Offline Offline

Posts: 5


View Profile
« Reply #7 on: December 15, 2011, 02:54:22 AM »
I suppose there is one good thing about it. You can follow it through with the book and all the examples in the book are relevant to the prac on the website.
Logged
millwalll
Guest
« Reply #8 on: December 15, 2011, 04:23:14 AM »
Yah I think if you just wanted to learn web apps then may you could do it as course buy the book spend rest on the labs but more pen tester have to be skilled in many area I personally would buy the book use the free apps then spend other money on networking security course.
Logged
alucian
Full Member
***
Offline Offline

Posts: 225



View Profile
« Reply #9 on: December 15, 2011, 08:14:46 AM »
@Jamie
I think that you are wrong. For example you have the chapter about session management and how to test the tokens. Then you have three labs where you can practice. Like this you'll apply what you've just read, and you'll better understand and remember.

I plan to do at least a lab from each category. If I a do OK I'll move on, otherwise I'll do another one.

If you'll read the book, and then read one about network secutiry, then wireless... you'll be cabbage. Honestly. 

At the beggining I was upset about the fact that they only give hourly access (I still think that it is too expensive). But, for lazy guys like me this will be a motivation to really use that hour.

I think that they are loosing money by putting a price so high on the lab. It is like the horses you can find in the malls. I will not pay 1$ for my kids to play 2 minutes, but I will pay 50 cents (maybe I will have them play 3 times).

I will keep you informed about the quality of the labs.
Logged
CISSP ISSAP, CISM/A, GWAPT, GCIH, eCPPT, OSWP
millwalll
Guest
« Reply #10 on: December 15, 2011, 10:28:22 AM »
I agree with you that the price and book make sense if you look at it as a course. However IMO I would not pay for the labs as I think there are lots of free alternatives where you can practice most if not all the vulnerabilities in the book.

And I think one best way to lean web security is to build your own web applications and then break them.

IMO I think the price is too high and I think they would make more if it was more affordable.

Logged
Seen
Full Member
***
Offline Offline

Posts: 134


View Profile
« Reply #11 on: December 16, 2011, 08:30:20 AM »
Has anyone gone through all the Coliseum labs for elearnsecurity?  How do those compare?  Are there any other online labs that are perhaps a better value than the WAHH ones?
Logged
Sec+, eCPPT
lorddicranius
Sr. Member
****
Offline Offline

Posts: 447



View Profile WWW
« Reply #12 on: December 16, 2011, 09:22:20 AM »
I thought the eLS Coliseum Labs were great.  They really helped me learn and remember the techniques that were taught during the course, and actually seeing what happens when you exploit a vuln helped a lot as well.  The stories that went along with each battle made it fun too.

I haven't done the WAHH labs though, so I can't compare the two.  But I can say that the eLS Labs are definitely worth it.

eLS = $99 for a month access
WAHH - At $7/hr, 2 hours a night, you'll get to $98 spent by the end of one week.
Logged
GSEC, eCPPT, Sec+
Seen
Full Member
***
Offline Offline

Posts: 134


View Profile
« Reply #13 on: December 16, 2011, 01:16:47 PM »
I think there were 10-20 eLS labs when I went through it during my course, I was just wondering how many there are now if anyone knows.
Logged
Sec+, eCPPT
Seen
Full Member
***
Offline Offline

Posts: 134


View Profile
« Reply #14 on: December 16, 2011, 01:20:53 PM »
Never mind, I found a description on the website, looks to be a few new labs from when I did it.
Logged
Sec+, eCPPT
Pages: [1] 2 3   Go Up
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com 		Valid XHTML 1.0! Valid CSS!
Page created in 0.09 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.