Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 35 guests online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
OSCP - Offensive Security Certified Professional
Finally took the plunge, started 08/05/12
EH-Net
May 25, 2013, 08:58:30 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
>
OSCP - Offensive Security Certified Professional
(Moderator:
don
) >
Finally took the plunge, started 08/05/12
Pages:
1
[
2
]
3
4
...
6
Go Down
« previous
next »
Print
Author
Topic: Finally took the plunge, started 08/05/12 (Read 18532 times)
0 Members and 1 Guest are viewing this topic.
dbest
Jr. Member
Offline
Posts: 79
Re: Finally took the plunge, started 08/05/12
«
Reply #15 on:
August 11, 2012, 12:10:30 AM »
Quote from: satish.lx on August 10, 2012, 09:39:25 AM
I don't know why every bufferover flow document talking about 32bit OS exploit (EIP, ESP etc..)
I didn't find any single document about 64bit OS exploit (RIP, RSP etc..) Because it has totally different register set..
Slightly off-topic, but I suppose this may help:
http://turkeyland.net/projects/overflow/index.php
Logged
CISM, CEH, CISA, ISO 27001 LA
YuckTheFankees
Sr. Member
Offline
Posts: 324
Re: Finally took the plunge, started 08/05/12
«
Reply #16 on:
August 11, 2012, 01:04:45 AM »
thank you for the link!
Logged
OSCP in progress
sh4d0wmanPP
Newbie
Offline
Posts: 42
Re: Finally took the plunge, started 08/05/12
«
Reply #17 on:
August 11, 2012, 07:55:54 AM »
Right now I have not signed up and am studying many different attacks and the theory behind it. However I feel overwhelmed as well since there is so much to cover.
Besides reading many of the papers mentioned here I practise as well on smashthestack.org (mainly IO). There are many different challenges that expose you to the various types of vulnerabilities, helps you to identify them and gives you an understanding how to exploit them in a timely manner. Of course I document everything and write my own little scripts or code where I need it. You never know when you need it again.
I struggle a bit with GDB as I am used to Immunity, Olly or IDA. Yeah yeah, I am a Windows guy hehe.
There is cheatsheet worth printing:
darkdust.net/files/GDB%20Cheat%20Sheet.pdf
And of course an Intel Assembler 80x86 one:
http://www.jegerlehner.ch/intel/
Anyway it is a good prep for the OSCP cert I think. Will be signing up after OSWP. Good luck everybody
Logged
EXIN ISO/IEC 27002: ISF & ISMAS, ITIL Foundation, Comptia Security+, CCNA, CCNA Security, Wip: OSWP
YuckTheFankees
Sr. Member
Offline
Posts: 324
Re: Finally took the plunge, started 08/05/12
«
Reply #18 on:
August 19, 2012, 07:10:34 AM »
Update: Today will be my 16th day with the course and so far the course has met my expectations. I have currently put 42 hours into the course and I am happy to say I have gained root on 5 boxes so far . Every time I gain root on a system, my confidence in the lab goes up ten fold. Given, they might not of been the hardest systems in the vulnerable network but never-the-less, I have learned SO MUCH in the last 2 weeks.
At this point in time, I am thinking about taking the OSCP exam somewhere near the end of September/beginning of October.
Logged
OSCP in progress
shadowzero
Full Member
Offline
Posts: 120
It's a UNIX system, I know this!
Re: Finally took the plunge, started 08/05/12
«
Reply #19 on:
August 19, 2012, 08:16:25 AM »
Quote from: YuckTheFankees on August 19, 2012, 07:10:34 AM
Update: Today will be my 16th day with the course and so far the course has met my expectations. I have currently put 42 hours into the course and I am happy to say I have gained root on 5 boxes so far . Every time I gain root on a system, my confidence in the lab goes up ten fold. Given, they might not of been the hardest systems in the vulnerable network but never-the-less, I have learned SO MUCH in the last 2 weeks.
At this point in time, I am thinking about taking the OSCP exam somewhere near the end of September/beginning of October.
Make sure you leave time to write the report before taking the exam.
Logged
YuckTheFankees
Sr. Member
Offline
Posts: 324
Re: Finally took the plunge, started 08/05/12
«
Reply #20 on:
August 19, 2012, 08:34:58 AM »
Thanks for the advice, the report has already been on my mind. I've read from multiple reviews that the final report is hundreds of pages...
Logged
OSCP in progress
Jamie.R
Sr. Member
Offline
Posts: 429
Re: Finally took the plunge, started 08/05/12
«
Reply #21 on:
August 19, 2012, 08:41:00 AM »
Just a question is the lab you practice in the same as the exam or are you given another lab ?
Logged
OSWP | Hackingdojo Nidan | eCPPT
YuckTheFankees
Sr. Member
Offline
Posts: 324
Re: Finally took the plunge, started 08/05/12
«
Reply #22 on:
August 19, 2012, 08:51:41 AM »
The exam is not given in the same lab you practice in.
Logged
OSCP in progress
sh4d0wmanPP
Newbie
Offline
Posts: 42
Re: Finally took the plunge, started 08/05/12
«
Reply #23 on:
August 19, 2012, 09:55:40 AM »
Do I understand correctly that you have to create 2 reports? One for the student network that you exploit and one for the actual exam?
If so, does not owning all boxes on the student network have an impact on your final grade?
I wish you can clarify this for me.
Logged
EXIN ISO/IEC 27002: ISF & ISMAS, ITIL Foundation, Comptia Security+, CCNA, CCNA Security, Wip: OSWP
Jamie.R
Sr. Member
Offline
Posts: 429
Re: Finally took the plunge, started 08/05/12
«
Reply #24 on:
August 19, 2012, 10:07:12 AM »
great question i would like to know the answer too that too
Logged
OSWP | Hackingdojo Nidan | eCPPT
YuckTheFankees
Sr. Member
Offline
Posts: 324
Re: Finally took the plunge, started 08/05/12
«
Reply #25 on:
August 19, 2012, 10:11:18 AM »
@sh4d0wmanPP ,
I haven't looked to far into the final reports but I would think they would be 2 separate reports. I don't think they would want your lab info mixed in with your final report? But I do not know for sure.
The number of systems you own during the lab will have not hinder your OSCP grade.
I have heard of some people only owning 8 systems and taking the test, but I have also heard about people owning 30-50 systems.
Logged
OSCP in progress
UNIX
Hero Member
Offline
Posts: 1235
Re: Finally took the plunge, started 08/05/12
«
Reply #26 on:
August 19, 2012, 10:22:28 AM »
Quote from: Jamie.R on August 19, 2012, 08:41:00 AM
Just a question is the lab you practice in the same as the exam or are you given another lab ?
The lab environment for practicing and the exam environment are two different ones. Also, it's not a must to document how you owned machines in the practice lab, but recommended. If you are on the edge between pass and fail of the examination, you might have better chances to pass with a report that also contains your efforts in the practice lab environment.
Logged
hayabusa
Hero Member
Offline
Posts: 1633
Re: Finally took the plunge, started 08/05/12
«
Reply #27 on:
August 19, 2012, 10:38:02 AM »
As for the report, I combined mine (but had separate sections.) My lab notes were an appendix to the exam report.
I don't know what was considered 'proper', but that was how I did it.
Logged
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH
cd1zz
Recruiters
Hero Member
Offline
Posts: 561
Re: Finally took the plunge, started 08/05/12
«
Reply #28 on:
August 19, 2012, 01:28:23 PM »
My report was combined as well. It was only 78 pages.... not hundreds...
Logged
OSCE | OSCP | GXPN | OSWP | CISSP
http://www.pwnag3.com
http://www.networkadminsecrets.com
YuckTheFankees
Sr. Member
Offline
Posts: 324
Re: Finally took the plunge, started 08/05/12
«
Reply #29 on:
August 19, 2012, 01:31:35 PM »
Thanks for the info guys. My bad, I read one review where the guy said his report was 350ish pages, that's crazy to me...
Logged
OSCP in progress
Pages:
1
[
2
]
3
4
...
6
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(30) by
don
Tools
: Symbolic Exploit Assistant project is looking for collaborators
(0) by
galapag0
Greetings
: Hi from the UK
(5) by
prats84
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(9) by
prats84
Network Pen Testing
: Want a challenge? Want a GXPN practice exam?
(0) by
ajohnson
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(1) by
prats84
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.
News Items and General Discussion About EH-Net : Change is Coming to EH-Net!!
