Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 75 guests and 2 members online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow OSCP - Offensive Security Certified Professionalarrow Finally took the plunge, started 08/05/12
EH-Net
May 21, 2013, 10:13:38 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 2 3 [4] 5 6   Go Down
  Print  
Author Topic: Finally took the plunge, started 08/05/12  (Read 18408 times)
0 Members and 1 Guest are viewing this topic.
sh4d0wmanPP
Newbie
*
Offline Offline

Posts: 42


View Profile
« Reply #45 on: August 23, 2012, 03:34:55 AM »

@hayabusa would you mind telling some about the OSCE track? As I understand it this track is mostly about advanced exploit development techniques but that is all I can find.
Logged

EXIN ISO/IEC 27002: ISF & ISMAS, ITIL Foundation, Comptia Security+, CCNA, CCNA Security, Wip: OSWP
YuckTheFankees
Sr. Member
****
Offline Offline

Posts: 324


View Profile
« Reply #46 on: August 23, 2012, 03:43:30 AM »

http://www.offensive-security.com/information-security-certifications/osce-offensive-security-certified-expert/

What questions do you have?

Have you passed the OSCP?
Logged

OSCP in progress
ajohnson
Recruiters
Hero Member
*
Online Online

Posts: 1057


aka dynamik


View Profile WWW
« Reply #47 on: August 23, 2012, 06:23:56 AM »

There's also the Syllabus: http://www.offensive-security.com/documentation/cracking-the-perimiter-syllabus.pdf
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
hayabusa
Hero Member
*****
Offline Offline

Posts: 1631



View Profile
« Reply #48 on: August 23, 2012, 07:32:17 AM »

Easier to explain something, or discuss, if there are some 'more specific' questions...  (sorry, but you need to give me something to work with)
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
hayabusa
Hero Member
*****
Offline Offline

Posts: 1631



View Profile
« Reply #49 on: August 23, 2012, 07:37:14 AM »

I'll start with a couple of generalities:

CTP / OSCE teaches more about combining attack vectors in creative ways, to reach the end goal.

They do discuss 0-day bug hunting / exploit development, and also touch on some more web exploitation techniques, in ways one might not have thought to use them.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
sh4d0wmanPP
Newbie
*
Offline Offline

Posts: 42


View Profile
« Reply #50 on: August 23, 2012, 08:33:15 AM »

Read that file already yes. I was just curious what you thought of the course, does it complement OSCP well? Did you find OSCE more difficult?

Here a few other questions I came up with after thinking a bit more:

Web Application:
- how deep does it go? Since they are in the process of developing a stand alone track as well. Will I learn anything new if I master the techniques of the "Web Application Hacker Handbook"?

0Day / Advanced Exploitation:
- Windows only?
- Does it touch on 64-bit?
- If I am correct, OSCP goes just in the basics of buffer overflow exploitation. Does OSCE handle things like SafeSEH/DEP/ALSR bypass, heapspraying? A yes or no is enough, no details needed if sharing is forbidden by Offensive Security.
Logged

EXIN ISO/IEC 27002: ISF & ISMAS, ITIL Foundation, Comptia Security+, CCNA, CCNA Security, Wip: OSWP
m0wgli
Full Member
***
Offline Offline

Posts: 248


View Profile
« Reply #51 on: August 23, 2012, 08:44:29 AM »

@hayabusa would you mind telling some about the OSCE track? As I understand it this track is mostly about advanced exploit development techniques but that is all I can find.

There is also a review on here for it:

http://www.ethicalhacker.net/content/view/342/24/
Logged

Security + | OSWP | eCPPT | CSTA
hayabusa
Hero Member
*****
Offline Offline

Posts: 1631



View Profile
« Reply #52 on: August 23, 2012, 10:16:29 AM »

There is also a review on here for it:

http://www.ethicalhacker.net/content/view/342/24/

<nods head> ...and Ryan's review was a good one.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
sh4d0wmanPP
Newbie
*
Offline Offline

Posts: 42


View Profile
« Reply #53 on: August 23, 2012, 10:25:54 AM »

Thanks, I did throw OSCE in the search here but did not get this article. This answers most of my questions. Already played the reg challenge but first have to complete OSCP hehe.
Logged

EXIN ISO/IEC 27002: ISF & ISMAS, ITIL Foundation, Comptia Security+, CCNA, CCNA Security, Wip: OSWP
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #54 on: August 24, 2012, 03:50:17 PM »

Here is my review, from last May.

http://www.networkadminsecrets.com/2011/05/offensive-security-certified-expert.html
Logged

ajohnson
Recruiters
Hero Member
*
Online Online

Posts: 1057


aka dynamik


View Profile WWW
« Reply #55 on: August 24, 2012, 08:19:36 PM »


Nice write-up. I'm curious what percentage of people pass on the first attempt. It seems like nearly everyone I know semi-personally that has one has come up short the first time around (which really adds to the intimidation factor, especially considering how much outside prep you did beforehand).
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #56 on: August 24, 2012, 08:32:14 PM »

It's got to be a low number. I have yet to talk to anyone who passed on their first try.
Logged

SecurityMonkey
Jr. Member
**
Offline Offline

Posts: 89



View Profile WWW
« Reply #57 on: August 25, 2012, 12:05:39 AM »

The fact that it has such a low pass rate makes it all the move valuable I think. It means that you can't just read a couple of brain dumps and pass the exam.
Logged

sternone
Full Member
***
Offline Offline

Posts: 129


View Profile
« Reply #58 on: August 26, 2012, 09:04:45 PM »

I'm reading extra 6 books right now and are taking it more slowly to grasp the information more deeply than presented before taking the OSCP test.

I'm also going to extend my lab time huge :-)

I'm figuring it's the only way. Script kidding isn't going to work in that test imho.
Logged

Try harder....hmpf!!
Jamie.R
Sr. Member
****
Offline Offline

Posts: 429


View Profile
« Reply #59 on: August 27, 2012, 05:48:09 AM »

Offensive course always seem to get great reviews I guess that why so many people want to jump in and do them.

The course also seem really well know all over the land what makes it appearing on your CV pretty good for job applications.

This is course that I really plan on doing sooner rather than later just hope I pass as it seems like a right challenge.
Logged

OSWP | Hackingdojo Nidan | eCPPT
Pages: 1 2 3 [4] 5 6   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.659 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.