.

CEH Cert

<<

keith

Newbie
Newbie

Posts: 6

Joined: Fri May 08, 2009 11:26 pm

Post Wed Jan 27, 2010 11:42 am

CEH Cert

Hi All,
I'm new to this and appreciate all of you that share your experience. Have done some research, been in IT areas for a long time but not as a programmer.  Sounds like pen testers need a pretty high level of coding expertise to be really good at it.  Am I right??
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Wed Jan 27, 2010 2:13 pm

Re: CEH Cert

Welcome to the forums, keith.
As you are asking in the CEH subforum, I assume you are asking in regards of the CEH exam. If so, then no uberspecial knowledge in programming is required in order to pass, though one should be able to read some code and understand some of the basic concepts.
<<

unsupported

User avatar

Sr. Member
Sr. Member

Posts: 318

Joined: Sun Feb 08, 2009 3:38 pm

Location: 407

Post Wed Jan 27, 2010 2:30 pm

Re: CEH Cert

It is not a prerequisite to be a great coder to be a great pen tester.  Understanding coding will assist you in breaking down possible threat vectors of your own, rather than using someone elses code.
-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
<<

KamiCrazy

Jr. Member
Jr. Member

Posts: 78

Joined: Wed Jun 17, 2009 8:40 pm

Post Wed Jan 27, 2010 4:20 pm

Re: CEH Cert

I think you need to at least be able to code in python/ruby in order to be a good pen tester. I just can't see how you can be a good pentester without being able to write your own exploits.
<<

keith

Newbie
Newbie

Posts: 6

Joined: Fri May 08, 2009 11:26 pm

Post Wed Jan 27, 2010 5:26 pm

Re: CEH Cert

I see the obvious benefit of being fluent in coding, but I'm thinking libraries (functional code sets) would be available for those like me to adapt for specific instances - sort of like readily available CSS code modules for website development - long as I was able to understand the code and make mods.  And one couldn't help but improve the more they practice it.  Anyone's thoughts about that?  Thanks
<<

KamiCrazy

Jr. Member
Jr. Member

Posts: 78

Joined: Wed Jun 17, 2009 8:40 pm

Post Wed Jan 27, 2010 10:11 pm

Re: CEH Cert

One of the big things IMO that separates a pen tester, who just knows how to run a tool and use automated scans vs a great pen tester is the ability to write your own exploits.

One of the best frameworks for developing exploits currently is metasploit and if you want to write modules for metasploit you must be able to write code in ruby.

Advanced hacking courses like OCSE and CEPT etc devote a large amount of their curriculum to coding. Not simply writing the exploit code but things like fuzzing and learning the nuances of x86 assembly.
<<

keith

Newbie
Newbie

Posts: 6

Joined: Fri May 08, 2009 11:26 pm

Post Thu Jan 28, 2010 1:02 am

Re: CEH Cert

KamiCrazy - Thanks so much for your comments.  You make sense - don't know how great I'll be but if it means learning ruby/metasploit then so be it.  Just finished some coursework in xhtml/css so I'll just carry on...
Tks again

Return to CEH - Certified Ethical Hacker

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software