.

SANS GXPN Review

<<

cd1zz

User avatar

Recruiters
Recruiters

Posts: 566

Joined: Sun Oct 03, 2010 9:01 pm

Post Mon Oct 22, 2012 9:54 pm

SANS GXPN Review

<<

azmatt

User avatar

Full Member
Full Member

Posts: 103

Joined: Sun Jul 29, 2012 2:11 pm

Post Mon Oct 22, 2012 11:33 pm

Re: SANS GXPN Review

Congrats!!!!

I took my first GCIH practice test yesterday and take the real one in two weeks so I'm in a SANS mood :)
GCFA, GCIH, GCIA, GWAPT, CISSP, CEH, GSEC
<<

MaXe

User avatar

Hero Member
Hero Member

Posts: 671

Joined: Tue Aug 17, 2010 9:49 am

Post Tue Oct 23, 2012 12:19 am

Re: SANS GXPN Review

Grats  ;D I look forward to read the review  :)
I'm an InterN0T'er
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Tue Oct 23, 2012 12:37 am

Re: SANS GXPN Review

Nice review - congrats, cd1zz!

What's next?
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Tue Oct 23, 2012 1:42 am

Re: SANS GXPN Review

UNIX wrote:Nice review - congrats, cd1zz!


Yes, congrats and thanks. As someone who was on the fence as to whether I should pay for this myself, your feedback was definitely appreciated.

UNIX wrote:
What's next?


Corelan 8)
Last edited by dynamik on Tue Oct 23, 2012 1:23 pm, edited 1 time in total.
The day you stop learning is the day you start becoming obsolete.
<<

SephStorm

User avatar

Hero Member
Hero Member

Posts: 569

Joined: Sat Apr 17, 2010 12:12 pm

Post Tue Oct 23, 2012 8:20 am

Re: SANS GXPN Review

What I really appreciated was this article: http://www.pwnag3.com/2011/12/my-road-t ... sting.html

Thank you.
sectestanalysis.blogspot.com/‎
<<

cd1zz

User avatar

Recruiters
Recruiters

Posts: 566

Joined: Sun Oct 03, 2010 9:01 pm

Post Tue Oct 23, 2012 8:45 am

Re: SANS GXPN Review

@UNIX ajohnson is right. We're in the process of getting Peter from Corelan to come to the office for a brain melting two day training session.  I've got my eyes set on the OSWE and OSEE, if they don't kill me first.
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Tue Oct 23, 2012 8:53 am

Re: SANS GXPN Review

Oh, that's great. Please be sure to write a review about his course too, as I'd be interested to read about how it is compared to CTP, AWE, and other similar courses. I'd also be interested to read about how much additional material is covered, which is not already present in his tutorials (like the module on Windows 8 ). He covers quite a few topics in a rather short amount of time, but so far all reviews I've read about his course were very positive.
<<

cd1zz

User avatar

Recruiters
Recruiters

Posts: 566

Joined: Sun Oct 03, 2010 9:01 pm

Post Tue Oct 23, 2012 8:56 am

Re: SANS GXPN Review

Yeah it's literally going to be crammed into two days, over a weekend. That's in December, I'll let you know...
<<

Darktaurus

User avatar

Full Member
Full Member

Posts: 181

Joined: Thu Sep 03, 2009 8:48 am

Post Tue Oct 23, 2012 11:23 am

Re: SANS GXPN Review

Congrats! Nice review! Always hard at work. When you get the OSEE/OSWE, I would love to know your thoughts on the courses. 
OSCE, OSCP, OSWP, CISSP, GPEN

www.agoonie.com
<<

Dark_Knight

User avatar

Sr. Member
Sr. Member

Posts: 294

Joined: Mon Aug 11, 2008 7:03 pm

Post Tue Oct 23, 2012 11:59 am

Re: SANS GXPN Review

Congratz...check pm

Couple questions:

Building a Metasploit Module:
The candidate will demonstrate a high-level understanding of how to create a Metasploit module


Q:How does this differ from the msf module in the OSCP?

Python and Scapy For Pen Testers
The candidate will demonstrate an understanding of the ability to read and modify Python scripts and packet crafting using Scapy to enhance functionality as required during a penetration test

Q: How deep do you into using scapy?

Advanced Stack Smashing The candidate will demonstrate an understanding of how to write advanced stack overflow exploits against canary-protected programs and ASLR
Q:Is this partial overwrite technique?

In terms of value for money which would you say would better suite a pentester the OSCE or GXPN?
Last edited by Dark_Knight on Tue Oct 23, 2012 12:03 pm, edited 1 time in total.
CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
<<

cd1zz

User avatar

Recruiters
Recruiters

Posts: 566

Joined: Sun Oct 03, 2010 9:01 pm

Post Tue Oct 23, 2012 2:25 pm

Re: SANS GXPN Review

Q:How does this differ from the msf module in the OSCP?

I took OSCP v3.0 and I don't recall any msf sections outside of basic usage. This the SANS module is only 15 pages but its more about porting an existing PoC to a msf module

Q: How deep do you into using scapy?

Pretty basic, but it will get you comfortable which is enough to probably do anything you want.

Q:Is this partial overwrite technique?

This is specific to *nix exploitation and walks through defeating Linux SSP. It's pretty cool stuff.

In terms of value for money which would you say would better suite a pentester the OSCE or GXPN?


Good question. I think if your goal is to become a better pen tester, definitely go with GXPN. There are a lot of practical techniques you can immediately walk away with and use. If your goal is to become a better exploit developer, go with both courses...
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Tue Oct 23, 2012 6:43 pm

Re: SANS GXPN Review

Also, if you're looking for more advanced MitM attacks (and haven't seen it already), check out Ryan Linn's DerbyCon talk where they embedded Lua in Ettercap. I haven't had a chance to play around with it personally, but it looks pretty cool.
The day you stop learning is the day you start becoming obsolete.
<<

Triban

User avatar

Hero Member
Hero Member

Posts: 620

Joined: Fri Feb 19, 2010 4:17 pm

Post Wed Oct 24, 2012 4:07 pm

Re: SANS GXPN Review

Nice review man!  SANS courses are pretty decent (they better be for the cost).  That is really the only negative I have on them and the GIAC certs.
Certs: GCWN
(@)Dewser
<<

alucian

User avatar

Full Member
Full Member

Posts: 228

Joined: Mon Dec 29, 2008 2:01 pm

Location: Montreal, Canada

Post Wed Oct 24, 2012 8:35 pm

Re: SANS GXPN Review

woot!

Congrats! This one is no 2 or 3 on my SANS list.

Nice review!
CISSP ISSAP, CISM/A, GWAPT, GCIH, GREM, GMOB, OSWP
Next

Return to General Certification

Who is online

Users browsing this forum: No registered users and 3 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software