Passed the OSWP challenge

Viewing 18 reply threads
  • Author
    Posts
    • #4364
      alucian
      Participant

      Hello,

      After studying the Offensive Security’s course, this Friday I passed OSWP exam. I will try to do a little review of both the course and the exam.

      The course

      I found the course to be very well done; it gives structured information about the subject in an understandable way. It has many videos that present various tools and attacks, and a pdf manual that completes the course.

      The manual starts with almost 160 pages of theory covering various subjects: the IEEE 802.11 standard, discussion about wireless networks, and very in depth theory about packets, frames, how authentication and association takes places in different scenarios. The theoretical part ends with a discussion about hardware used: cards, adapters and antennas.

      Being an offensive course it covers in depth the Aircrack suite (cca 155 pages), with very much emphasis on: airmon-ng, airodump-ng, aireplay-ng, packetforge-ng, aircrack-ng, airtun-ng, wesside-ng and easside-ng tools. Each module comes with detailed explanations, videos, labs and examples. There are many captured files that can be downloaded, and once opened in wireshark helps you a lot to understand the principles. The others tools from the suite are briefly discussed.

      The next big part of the course (~80 pages) covers the attacks against the wireless networks. Here are also videos, examples and “to do” labs that helps the student to understand how to perform the attacks, and how to apply the tools already studied.

      The last part of the course discusses in few pages the other tools that can be used in order to do wireless penetration and assessment: Kismet and John the Ripper. Here there are no labs to do.

      In conclusion I found the course to be interesting, sometimes fun and I think I learned a lot from it. I would like to see some examples on using John the Ripper, and definitely I would like the course to cover other subjects like Bluetooth, using GPS and some other modern subjects. But, this course is what it pretends to be: and offensive wireless security course.

      The exam

      After studying the manual and doing a lot of practical exercises I found the exam medium as difficulty. I finished it in 1 ½ hours out of the 4 allocated hours. Without the course maybe I would find it more difficult.
      It was an offensive exam, so practically you connect to a machine in their environment, and you are given the challenge to find the keys for different networks.
      After the exam you have 24 hours to send them a document containing the keys you have found, and (more important in my opinion) to explain what have you done and how.

      Conclusions

      For those of you that are interested in this field I certainly recommend this certification. If you want to understand more about wireless networks and how to penetrate them go for the course + exam version. You’ll learn a lot, especially about how to crack a WEP network.

      If you are low on money or you consider that you have enough knowledge on the subject go for the exam. At 80$ it is very affordable. Play with your router at home, try to crack all the access control combinations: WEP (with or without clients, open authentication, shared key authentication, hidden ESSID) and WPA PSK. If you can do this you’ll pass the exam.

      This certification will give you a formal recognition of your skills and knowledge, and, also, will help the guys from Offensive Security to be better known in the industry, and will supply them the funds necessary to improve and develop their courses.

      Best regards,

      Lucian

    • #27595
      Dark_Knight
      Participant

      WOOOOTTTTT!!!! 🙂 🙂 🙂 🙂
      Congratz

    • #27596
      morpheus063
      Participant

      Congratulations Alucian. Great work!!!!!

      And all the best for your future studies and career. 🙂

    • #27597
      KrisTeason
      Participant

      Good Review alucian, I haven’t heard too much about this course but you described it well. I don’t know how popular this cert is yet but I’m sure it’ll grow and become more respected in the field. Congrats! 8)

    • #27598
      Dark_Knight
      Participant

      I started this sometime ago. I really need to finish it up.

    • #27599
      impelse
      Participant

      Congrats

    • #27600
      Anonymous
      Participant

      I am happy to say that am a newbie and my first post goes with “congrats”….!!

      Congrats alucian…..!!

    • #27601
      Xen
      Participant

      Congrats! And nice little review of the course.

    • #27602
      alucian
      Participant

      @Dark_Knight wrote:

      I started this sometime ago. I really need to finish it up.

      Same for me. I took it in the idea that it won’t be to difficult and I will do it during the summer. Then I had other priorities (renovations, move to the new house…) and I end in doing it just now.
      Now, I will try it on the market, to see if it add value to my background.
      I really enjoy doing it because is hands on. I am doing Heorot part1 now, and then … don’t know yet.

      Good luck to you, too!

    • #27603
      Ignatius
      Participant

      @alucian wrote:

      Now, I will try it on the market, to see if it add value to my background.

      I’ll be interested to know (in due course) if it makes you any more valuable to a potential employer.  Your post has made me decide what my Christmas present to me will be!

    • #27604
      UNIX
      Participant

      Thanks for the short review and congratulations. 😉

    • #27605
      alucian
      Participant

      [/quote]
      I’ll be interested to know (in due course) if it makes you any more valuable to a potential employer.  Your post has made me decide what my Christmas present to me will be!
      [/quote]

      I looked at SANS GAWN certification. It appears to be mooore complex, but it is more expensive also (if you’ll pay it from your pocket).
      This one will open many doors, as there are less than 80 certified guys in the world, and it is a very difficult certification.

      I don’t think that OSWP alone will bring you a job, maybe for a huge company that has many locations and have to assess them, or as a consultant. I will try the former one, maybe combined with another pentest cert.

    • #27606
      SecMan
      Participant

      The course is very nice.  The main con with the course is that it doesn’t cover bluetooth, which the SANS course does.

    • #27607
      cr1p70
      Participant

      Passed OSWP Tonight  8:33pm started at 7:23pm hurray for me… ;D ;D ;D
      CEH & PWB is on my target list will enjoy every bit as i did this thanks Offsec.

    • #27608
      hayabusa
      Participant

      Congrats on the pass!

    • #27609
      azmatt
      Participant

      Congrats cr1p70. Next time try to speed it up 😉

    • #27610
      Phillip Wylie
      Participant

      @cr1p70 wrote:

      Passed OSWP Tonight  8:33pm started at 7:23pm hurray for me… ;D ;D ;D
      CEH & PWB is on my target list will enjoy every bit as i did this thanks Offsec.

      Congrats!

    • #27611
      Jamie.R
      Participant

      Well done how did you find the exam ?

    • #27612
      alucian
      Participant

      Congrats cr1p70 !

      Just for my own curiosity, why do you want to do CEH ??

Viewing 18 reply threads
  • You must be logged in to reply to this topic.

Copyright ©2020 Caendra, Inc.

Contact Us

Thoughts, suggestions, issues? Send us an email, and we'll get back to you.

Sending

Sign in with Caendra

Forgot password?Sign up

Forgot your details?