October 25, 2009 at 7:25 pm #4364
After studying the Offensive Security’s course, this Friday I passed OSWP exam. I will try to do a little review of both the course and the exam.
I found the course to be very well done; it gives structured information about the subject in an understandable way. It has many videos that present various tools and attacks, and a pdf manual that completes the course.
The manual starts with almost 160 pages of theory covering various subjects: the IEEE 802.11 standard, discussion about wireless networks, and very in depth theory about packets, frames, how authentication and association takes places in different scenarios. The theoretical part ends with a discussion about hardware used: cards, adapters and antennas.
Being an offensive course it covers in depth the Aircrack suite (cca 155 pages), with very much emphasis on: airmon-ng, airodump-ng, aireplay-ng, packetforge-ng, aircrack-ng, airtun-ng, wesside-ng and easside-ng tools. Each module comes with detailed explanations, videos, labs and examples. There are many captured files that can be downloaded, and once opened in wireshark helps you a lot to understand the principles. The others tools from the suite are briefly discussed.
The next big part of the course (~80 pages) covers the attacks against the wireless networks. Here are also videos, examples and “to do” labs that helps the student to understand how to perform the attacks, and how to apply the tools already studied.
The last part of the course discusses in few pages the other tools that can be used in order to do wireless penetration and assessment: Kismet and John the Ripper. Here there are no labs to do.
In conclusion I found the course to be interesting, sometimes fun and I think I learned a lot from it. I would like to see some examples on using John the Ripper, and definitely I would like the course to cover other subjects like Bluetooth, using GPS and some other modern subjects. But, this course is what it pretends to be: and offensive wireless security course.
After studying the manual and doing a lot of practical exercises I found the exam medium as difficulty. I finished it in 1 ½ hours out of the 4 allocated hours. Without the course maybe I would find it more difficult.
It was an offensive exam, so practically you connect to a machine in their environment, and you are given the challenge to find the keys for different networks.
After the exam you have 24 hours to send them a document containing the keys you have found, and (more important in my opinion) to explain what have you done and how.
For those of you that are interested in this field I certainly recommend this certification. If you want to understand more about wireless networks and how to penetrate them go for the course + exam version. You’ll learn a lot, especially about how to crack a WEP network.
If you are low on money or you consider that you have enough knowledge on the subject go for the exam. At 80$ it is very affordable. Play with your router at home, try to crack all the access control combinations: WEP (with or without clients, open authentication, shared key authentication, hidden ESSID) and WPA PSK. If you can do this you’ll pass the exam.
This certification will give you a formal recognition of your skills and knowledge, and, also, will help the guys from Offensive Security to be better known in the industry, and will supply them the funds necessary to improve and develop their courses.
October 26, 2009 at 12:42 am #27595Dark_KnightParticipant
WOOOOTTTTT!!!! 🙂 🙂 🙂 🙂
October 26, 2009 at 1:23 am #27596morpheus063Participant
Congratulations Alucian. Great work!!!!!
And all the best for your future studies and career. 🙂
October 26, 2009 at 1:31 am #27597KrisTeasonParticipant
Good Review alucian, I haven’t heard too much about this course but you described it well. I don’t know how popular this cert is yet but I’m sure it’ll grow and become more respected in the field. Congrats! 8)
October 26, 2009 at 2:12 am #27598Dark_KnightParticipant
I started this sometime ago. I really need to finish it up.
October 26, 2009 at 3:05 am #27599impelseParticipant
October 26, 2009 at 6:25 am #27600AnonymousParticipant
I am happy to say that am a newbie and my first post goes with “congrats”….!!
October 26, 2009 at 1:27 pm #27601XenParticipant
Congrats! And nice little review of the course.
October 26, 2009 at 2:08 pm #27602
I started this sometime ago. I really need to finish it up.
Same for me. I took it in the idea that it won’t be to difficult and I will do it during the summer. Then I had other priorities (renovations, move to the new house…) and I end in doing it just now.
Now, I will try it on the market, to see if it add value to my background.
I really enjoy doing it because is hands on. I am doing Heorot part1 now, and then … don’t know yet.
Good luck to you, too!
October 26, 2009 at 5:43 pm #27603
October 26, 2009 at 6:24 pm #27604UNIXParticipant
Thanks for the short review and congratulations. 😉
October 26, 2009 at 9:18 pm #27605
I’ll be interested to know (in due course) if it makes you any more valuable to a potential employer. Your post has made me decide what my Christmas present to me will be!
I looked at SANS GAWN certification. It appears to be mooore complex, but it is more expensive also (if you’ll pay it from your pocket).
This one will open many doors, as there are less than 80 certified guys in the world, and it is a very difficult certification.
I don’t think that OSWP alone will bring you a job, maybe for a huge company that has many locations and have to assess them, or as a consultant. I will try the former one, maybe combined with another pentest cert.
October 27, 2009 at 12:12 pm #27606SecManParticipant
The course is very nice. The main con with the course is that it doesn’t cover bluetooth, which the SANS course does.
April 22, 2013 at 5:07 am #27607cr1p70Participant
Passed OSWP Tonight 8:33pm started at 7:23pm hurray for me… ;D ;D ;D
CEH & PWB is on my target list will enjoy every bit as i did this thanks Offsec.
April 22, 2013 at 11:29 am #27608hayabusaParticipant
Congrats on the pass!
April 22, 2013 at 6:04 pm #27609azmattParticipant
Congrats cr1p70. Next time try to speed it up 😉
April 23, 2013 at 1:21 am #27610
April 23, 2013 at 7:33 am #27611Jamie.RParticipant
Well done how did you find the exam ?
April 25, 2013 at 7:27 pm #27612
Congrats cr1p70 !
Just for my own curiosity, why do you want to do CEH ??
- You must be logged in to reply to this topic.