Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 37 guests and 1 member online
 
Advertisement

You are here: Home arrow EH-Netarrow News Items and General Discussion About EH-Netarrow Greetingsarrow Hello everyone!
EH-Net
May 24, 2013, 09:11:59 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1] 2   Go Down
  Print  
Author Topic: Hello everyone!  (Read 6530 times)
0 Members and 1 Guest are viewing this topic.
JTD121
Newbie
*
Offline Offline

Posts: 16



View Profile WWW
« on: September 06, 2012, 12:26:23 PM »

So I'm a general techie, into all sorts of stuff.

Know a bit of programming (some VB6, a little C++. Can read much better than write it). Love security stuff, even if I don't use most of it much.

Just bought this book and on their site was a link to this place! So here I am!

Where should I start reading up on stuff? I don't believe I have fully read up on security or coding or whatever, I'm a jack-of-all-trades, and haven't decided to 'specialize' into one field just yet.
Logged
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1060


aka dynamik


View Profile WWW
« Reply #1 on: September 06, 2012, 12:43:52 PM »

Welcome to the forums!

That's a decent book to start with. Be sure to review other posts in the greetings forum, especially this one.

There are a lot of other, "How/Where do I get started?" posts, so search around a bit. Let us know if you have any specific questions after that.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
JTD121
Newbie
*
Offline Offline

Posts: 16



View Profile WWW
« Reply #2 on: September 06, 2012, 01:33:27 PM »

HM...Good point. I am currently A+ Certified, and I've taken the Net+ classes, but have not taken the test. Currently in Chapter 6 of the 2009 edition of the study guide, but at this point, it seems a tad much, just really boring (but necessary, I know!) stuff at the point I am in the book. Plus I know, in general, how TCP/IP works as it relates mostly to Windows systems. I've dabbled in Linux, but have never really used it in a desktop, day-to-day situation for very long. I've tried Slackware....back in 2003/4, Ubuntu every couple releases (not a fan of Unity, BTW), and I think once I tried Gentoo to force myself to learn about Linux, and that just netted me an unbootable machine for a week.  Undecided

Have been thinking really hard about getting CCNA certified, taking the classes because of the incredible volume of information, but don't have ~$3k+ for the classes, and I can't find a local campus offering the course at the moment.

The way I learn is very complicated, but according to this list on Wikipedia, I can learn all four 'ways', but I would prefer not to stick to a single method if possible. Hence my want of the class for CCNA specifically.

It seems Self-Study, for me, only works for a while, maybe a month at max. After that I just lose interest in the text and move on to something else. Maybe a study group of some kind?

Also, are there free(ish) alternative to the courses offered by SANS? I might be able to get some kind of tuition reimbursement from my employer (if I get a day position in their IT dept) but I'm not holding my breath, plus, I'd have to have the cash to pay for any training myself first.....

Ah, First World Problems, right? Looks like I am going to enjoy my time here! Can't believe I haven't found this place, or similar before! I wonder is there a 'Non-Ethical Hacker' sister site?  Tongue Grin
Logged
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1060


aka dynamik


View Profile WWW
« Reply #3 on: September 06, 2012, 09:11:29 PM »

HM...Good point. I am currently A+ Certified, and I've taken the Net+ classes, but have not taken the test. Currently in Chapter 6 of the 2009 edition of the study guide, but at this point, it seems a tad much, just really boring (but necessary, I know!) stuff at the point I am in the book. Plus I know, in general, how TCP/IP works as it relates mostly to Windows systems. I've dabbled in Linux, but have never really used it in a desktop, day-to-day situation for very long. I've tried Slackware....back in 2003/4, Ubuntu every couple releases (not a fan of Unity, BTW), and I think once I tried Gentoo to force myself to learn about Linux, and that just netted me an unbootable machine for a week.  Undecided

Linux is definitely important.

Gentoo has a pretty steep learning curve. It's a good experience to go through setting up a system, but it can be difficult to maintain if you're not really into tweaking every minor setting. I personally don't have the time for it. Try installing KDE or Gnome on the server version of Ubuntu if you like the distro sans end-user clutter. There are similar Debian-based distros, such as Mint, as well.

Grab VMware Player or VirtualBox and load up a Linux distro. Try and stay in full-screen mode as long as you can and get acclimated to the environment. It's any easy and unobtrusive way to really dive into it.

Have been thinking really hard about getting CCNA certified, taking the classes because of the incredible volume of information, but don't have ~$3k+ for the classes, and I can't find a local campus offering the course at the moment.

The way I learn is very complicated, but according to this list on Wikipedia, I can learn all four 'ways', but I would prefer not to stick to a single method if possible. Hence my want of the class for CCNA specifically.

That's kind of an odd article. I didn't think there was that much controversy over the various learning styles. These are the statistics I've typically gone by (the percentages obviously aren't perfect, but that order is roughly what I've observed in myself and others):

Quote from: PsychoTactics
To summarize the numbers (which sometimes get cited differently) learners retain approximately:
90% of what they learn when they teach someone else/use immediately.
75% of what they learn when they practice what they learned.
50% of what they learn when engaged in a group discussion.
30% of what they learn when they see a demonstration.
20% of what they learn from audio-visual.
10% of what they learn when they’ve learned from reading.
5% of what they learn when they’ve learned from lecture.

http://www.psychotactics.com/blog/art-retain-learning/

The CCNA certainly provides a good foundation for any security role. It's also great for helping you land a full-time IT position, which seems to be a current goal of yours.

Have you looked at TrainSignal or CBT Nuggets CBT-based training? That might be a cheaper alternative to classroom training while still providing the same style of training. The only downside is you can't directly ask questions, but you can always ask here or at one of the many other IT forums. You'll miss out on hands-on exercises as well, but you can build your own CCNA lab for a fraction of the price of a course (~$300-500).

I think a class is overkill for this cert. There's a lot to it, but it's really not that bad. The breadth can be a bit overwhelming for someone seriously diving into networking for the first time. You should be fine with CBT > Written Resource > Lab Activities > Practice Exam.

I recommend grabbing this as a supplementary resource as well: http://www.amazon.com/CCNA-Portable-Command-Guide-Edition/dp/1587201933/ref=sr_1_1?ie=UTF8&qid=1346982662&sr=8-1

It seems Self-Study, for me, only works for a while, maybe a month at max. After that I just lose interest in the text and move on to something else. Maybe a study group of some kind?

Pay for the exam and set a date at the onset. Create an actual deadline to target if you find yourself having difficulty staying motivated.

Also, are there free(ish) alternative to the courses offered by SANS? I might be able to get some kind of tuition reimbursement from my employer (if I get a day position in their IT dept) but I'm not holding my breath, plus, I'd have to have the cash to pay for any training myself first.....

I don't know of anything free that's on-par with SANS, but there are plenty of free resources to keep you busy for the foreseeable future. Here's a few to get started with:

http://www.securitytube.net/ (especially the MegaPrimers)
http://www.irongeek.com/
http://g0tmi1k.blogspot.com/

Ah, First World Problems, right? Looks like I am going to enjoy my time here! Can't believe I haven't found this place, or similar before! I wonder is there a 'Non-Ethical Hacker' sister site?  Tongue Grin

Are you fluent in Russian and/or Chinese?
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
sternone
Full Member
***
Offline Offline

Posts: 129


View Profile
« Reply #4 on: September 07, 2012, 01:14:39 AM »

Quote
Are you fluent in Russian and/or Chinese?

No, but google translate is  Cheesy Cheesy
Logged

Try harder....hmpf!!
fred
Sr. Member
****
Offline Offline

Posts: 351


The World is sick, Save your mind...


View Profile
« Reply #5 on: September 07, 2012, 03:21:45 AM »

hello and welcome to this great forum
As i mentioned over and over i think its not a good idea to start learning hack directly, its better to provide some background first to have better idea about future lessons

networking background
i think its the first requirement which you need to learn because without having a good knowledge about networking you'll never understand what is server, how its work and so on so please be experienced in this field. here is a good book which make you learn networking very fast:

Sybex network plus fast pass

Virtualization basics
Virtualization gives you the ability to run multiple operating systems in same time and you'll need it for exercises and during real pentest. but Virtualization has some techniques and its necessary to learn. Here i provided some links for that:

http://www.amazon.com/Virtualization-Beginners-Guide-Nelson-Ruest/dp/007161401X

https://www.virtualbox.org/manual/

linux basic
i think a hacker without knowing Linux is nothing!! because Linux has great features which is necessary for hack. So you must learn one of Linux  pen test distro such as backtrack, back box and so on. but if your newbie i suggest you to learn ubuntu linux:

http://www.amazon.com/Official-Ubuntu-Book-Benjamin-Mako/dp/0132435942

Create your own hacking lab
To do your exercises you cant attack to the real internet server because its not ethical. So here virtualization can help you . you can easily create some virtual computer with different O.S. i suggest you to install these operating systems:

Backtrack Linux
metasploitable
damn vulnerable linux
windows xp sp1
De-ice.net

that book which you bought is great but i also recommend this book too:
http://www.amazon.com/Professional-Penetration-Testing-Creating-Learning/dp/1597494259

Man as you see the route is soo long so be patient and again practice is the key of everything

Goodluck

Cyber.spirit


     
Logged

ICS Academy Network Security Certified
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #6 on: September 07, 2012, 08:22:22 AM »

I thought the basics of Pen-testing and hacking was ok. My biggest complaint was it felt more like a do this walk through, instead of a here is what is possible now go and play.

I like the Security+ get certified and get ahead book more. I think that this book gave more of a mind set to start thinking in the terms of security.

But that's just me.

Just to be a generalist I'd learn the following:
- Virtualization
- Linux administration
- Windows administration
- Basic networking, including basic firewalling / packet filtering
- a scripting language
- how to read packet captures
- how to harden systems.
- learn to read logs

if you want real fun, spin up a server somewhere on the internet, and try to keep up as people pound the hell out of it.
Logged

OSWP, Sec+
JTD121
Newbie
*
Offline Offline

Posts: 16



View Profile WWW
« Reply #7 on: September 09, 2012, 09:33:58 AM »

Cyber.spirit and chrisj thanks for the advice! I'll look into many of these things soon!

And I bought the basics of pentesting book because I don't know how to do it, hence, I need the basics. I understand basic security concepts and abstracts, but have had little "in-the-field" experience with them.

But PenTesting sounds like something I might be able to do as a job, maybe even a career of sorts. Not sure what I want to do as a career right now, but I do want it to be in the vast IT industry Smiley
Logged
fred
Sr. Member
****
Offline Offline

Posts: 351


The World is sick, Save your mind...


View Profile
« Reply #8 on: September 12, 2012, 04:06:54 PM »

your welcome jtd and if you want to learn hacking from the basics, as i mentioned over and over and over! Its great place to start:
www.hackerhighschool.org
DO NOT FORGET TO PROVIDE SOME NETWORKING BACKGROUND

And tell me about your problems im here to help.

Not only me, many of other friends are here to help!!!
Logged

ICS Academy Network Security Certified
Jamie.R
Sr. Member
****
Offline Offline

Posts: 429


View Profile
« Reply #9 on: September 13, 2012, 03:38:51 AM »

That is a good little book to start with and depending on what area you interested in there are loads of other great reading resources to purchase.

I would say read books and try do some course if you can afford them they help you learn quicker and also give you something to put on your CV.

good luck Tongue
Logged

OSWP | Hackingdojo Nidan | eCPPT
jjwinter
Jr. Member
**
Offline Offline

Posts: 76


View Profile
« Reply #10 on: September 13, 2012, 08:57:32 PM »

Anyone try the Hackhighschool.org lab? What is it like? Worth $150?
Logged
JTD121
Newbie
*
Offline Offline

Posts: 16



View Profile WWW
« Reply #11 on: September 17, 2012, 11:08:53 AM »

No offense, but am older than high school age (nearly 26), so I don't believe the HHS will work out for me, plus, there is almost no information on how/when/where theses ISECOM 'events' take place, their price, etc.

It seemed interesting until I tried to find out if it was an online thing, or you had to go to an on-site training, or if it was offered specifically to high school teachers/students....

EDIT: Okay, it's geared specifically at students still in public school....nevermind. Thanks anyway!
« Last Edit: September 17, 2012, 11:11:35 AM by JTD121 » Logged
fred
Sr. Member
****
Offline Offline

Posts: 351


The World is sick, Save your mind...


View Profile
« Reply #12 on: September 18, 2012, 12:38:34 AM »

No offense, but am older than high school age (nearly 26), so I don't believe the HHS will work out for me, plus, there is almost no information on how/when/where theses ISECOM 'events' take place, their price, etc.

It seemed interesting until I tried to find out if it was an online thing, or you had to go to an on-site training, or if it was offered specifically to high school teachers/students....

EDIT: Okay, it's geared specifically at students still in public school....nevermind. Thanks anyway!
Lol! Man i have 23 and it worked for me. Basics are basics no matter when u learn. Just learn and dont care about highschool or kindergarten!!!!

Just download and read their lesson and it will give u good ideas about how to start you can create ur own lab later like me
Good luck and any other problem or question? Let us know
« Last Edit: September 18, 2012, 12:40:24 AM by Cyber.spirit » Logged

ICS Academy Network Security Certified
jjwinter
Jr. Member
**
Offline Offline

Posts: 76


View Profile
« Reply #13 on: September 18, 2012, 05:21:56 AM »

I'm 40 and I could learn a lot there, I think.
Logged
JTD121
Newbie
*
Offline Offline

Posts: 16



View Profile WWW
« Reply #14 on: September 18, 2012, 06:48:06 AM »

Oh snapples! I thought the 'Lessons' section was going to be an overview of the stuff they teach you, rather than the actual lessons.

Guess I still have a bit to learn on the info-gathering! Wink
Logged
Pages: [1] 2   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.086 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.