.

OSWP - VPN Connection Question

<<

esojzuir

User avatar

Newbie
Newbie

Posts: 37

Joined: Mon May 02, 2011 9:41 pm

Post Thu Mar 01, 2012 5:25 pm

OSWP - VPN Connection Question

Hello Everyone!

I have a question regarding the Offensive Security Wireless Test. You are supposed to connect remotely to the test site and use a terminal to attack the routers. I've never done anything like this before (used to the multiple selection tests) and I wanted to see if anyone that has taken the test can clear some doubts:

When you log in do you actually open a terminal and see a BT machine and work from that or do you log in and open a putty terminal and work from that?

Any help will be appreciated

Thanks in advance!
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Thu Mar 01, 2012 5:53 pm

Re: OSWP - VPN Connection Question

You will receive an email from offsec with instructions on how to connect to the exam machine through SSH, which will be your attacking machine.
<<

esojzuir

User avatar

Newbie
Newbie

Posts: 37

Joined: Mon May 02, 2011 9:41 pm

Post Thu Mar 01, 2012 6:43 pm

Re: OSWP - VPN Connection Question

Thanks for the response. So it will be correct to assume that I will connect to an instance of the BT machine with GUI and from then open a konsole and fire away???
<<

cd1zz

User avatar

Recruiters
Recruiters

Posts: 566

Joined: Sun Oct 03, 2010 9:01 pm

Post Thu Mar 01, 2012 8:59 pm

Re: OSWP - VPN Connection Question

No GUI, just console sessions. You can open more than one, I think I had 4 going during my test.
<<

TheXero

User avatar

Full Member
Full Member

Posts: 112

Joined: Tue Dec 07, 2010 12:24 pm

Post Fri Mar 02, 2012 4:44 am

Re: OSWP - VPN Connection Question

esojzuir, I used 'screen' in my exam and I would recommend it :)
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Fri Mar 02, 2012 9:40 am

Re: OSWP - VPN Connection Question

TheXero wrote: esojzuir, I used 'screen' in my exam and I would recommend it :)


Good advice; I love screen. There's also the added benefit of being able to retrieve your session if you get disconnected.
The day you stop learning is the day you start becoming obsolete.
<<

esojzuir

User avatar

Newbie
Newbie

Posts: 37

Joined: Mon May 02, 2011 9:41 pm

Post Fri Mar 02, 2012 9:46 am

Re: OSWP - VPN Connection Question

Thanks for the help everyone! How can I get screen??? Is there a link you can post???
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Fri Mar 02, 2012 9:52 am

Re: OSWP - VPN Connection Question

I believe it's installed by default in BT5, which is what you'll be connecting to.

Otherwise, apt-get install screen (or whatever the equivalent is on non-Debian systems)

It's pretty simple, but you should still experiment with it a bit in advance to get used to the key commands, etc. Just check out the man page.
The day you stop learning is the day you start becoming obsolete.
<<

venom77

User avatar

Hero Member
Hero Member

Posts: 1905

Joined: Mon Dec 11, 2006 3:23 pm

Post Fri Mar 02, 2012 10:15 am

Re: OSWP - VPN Connection Question

Well I'm glad these guys remembered because I sure didn't. :P I just remember it being very quick.

Good luck on your test!
<<

esojzuir

User avatar

Newbie
Newbie

Posts: 37

Joined: Mon May 02, 2011 9:41 pm

Post Tue Mar 27, 2012 8:37 am

Re: OSWP - VPN Connection Question

I passed the OSWP!!!!! It's a really cool and fun way to get introduced to the world of practical examinations, as I was used to the typical questions type exam.

The next project is elearnsecurity pro and then PWB!!!!
<<

Darktaurus

User avatar

Full Member
Full Member

Posts: 181

Joined: Thu Sep 03, 2009 8:48 am

Post Tue Mar 27, 2012 9:23 am

Re: OSWP - VPN Connection Question

Congrats! What version did you take, 3.0? If v3, how did you like the Rogue Access Points and coWPAtty modules?
OSCE, OSCP, OSWP, CISSP, GPEN

www.agoonie.com
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Tue Mar 27, 2012 9:50 am

Re: OSWP - VPN Connection Question

Congrats esojzuir!

I passed mine a couple weeks ago as well. I've been meaning to write a review.

Agoonie, the v3 additions were a nice improvement. v2 was always good for WEP, but it has felt dated for a long time. I thought the GPU RT generation with Pyrit was pretty slick. I have a decent GPU because I'm a bit of gamer, and it was interesting to see how that fared against the i7.

The actual exam is still v2, and I think there is still room for growth there (i.e. client attacks with karmetasploit, etc.).
Last edited by dynamik on Tue Mar 27, 2012 9:57 am, edited 1 time in total.
The day you stop learning is the day you start becoming obsolete.
<<

Darktaurus

User avatar

Full Member
Full Member

Posts: 181

Joined: Thu Sep 03, 2009 8:48 am

Post Tue Mar 27, 2012 11:07 am

Re: OSWP - VPN Connection Question

ajohnson wrote:Congrats esojzuir!

I passed mine a couple weeks ago as well. I've been meaning to write a review.

Agoonie, the v3 additions were a nice improvement. v2 was always good for WEP, but it has felt dated for a long time. I thought the GPU RT generation with Pyrit was pretty slick. I have a decent GPU because I'm a bit of gamer, and it was interesting to see how that fared against the i7.

The actual exam is still v2, and I think there is still room for growth there (i.e. client attacks with karmetasploit, etc.).


Thanks for the heads up.  I figured I would take it later this year to see what they improved on.  It sounds cool so I am sure I will find the time at some point.  Did they have anything on attacking WPA2 Enterprise?  I found some people talking about it but I do not remember if the OffSec guys had anything. Meh, either way, I am going to take the new course.  ;D
OSCE, OSCP, OSWP, CISSP, GPEN

www.agoonie.com
<<

esojzuir

User avatar

Newbie
Newbie

Posts: 37

Joined: Mon May 02, 2011 9:41 pm

Post Tue Mar 27, 2012 11:42 am

Re: OSWP - VPN Connection Question

Thanks everyone!!!! I took version 3 and both the cowpatty and rogue access point modules were really good, both on video and the text. You can set up and use both topics really fast. Unfortunately none were used on the test.

I tried cowpatty for the WPA but it wasn't even installed on the attack machine, so yes it's still a v2 exam, but lots of fun. I started the exam and for those weird reasons after 1/2 hour I was no able to crack my first target!!!!!!!!!!

I decided to move to the other 2 and I was done with those in about 25 minutes with all the documentation and everything. Then I took a breather and cracked the first one in 15 minutes, so in all I spent 1 hour and 40 minutes cracking, writing and getting screenshots and 2 hours setting the report.

I agree that later on they should add rogue access point and karmetasploit attacks to the exam. Maybe have 5 targets to attack and make it 6-8 hours to do the test. I really recommend this class to anyone!!!!!
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Tue Mar 27, 2012 12:29 pm

Re: OSWP - VPN Connection Question

Agoonie wrote:Did they have anything on attacking WPA2 Enterprise?  I found some people talking about it but I do not remember if the OffSec guys had anything.


No, just PSK.

I thought the upgrade was worth it. I found the rainbow tables generation, airserv/airtun, and GPS portions to be particularly interesting.

They have the v3 Syllabus online if you haven't reviewed it yet: http://www.offensive-security.com/docum ... llabus.pdf
The day you stop learning is the day you start becoming obsolete.
Next

Return to Wireless

Who is online

Users browsing this forum: No registered users and 1 guest

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software