apollo

@sysreq wrote:

And looking through the posts on the lab forums it seems that many people have been floundering. I’m not saying that the material is not worth the money, just that to get the most out of it, requires a serious investment in time (or a little luck to guess the “tricks” that are hinted at on the forums).

I contribute this to two…[Read more]

Sorry for the delay in joining in.  If you know your stuff, you can ace this stuff in 60 days, and be pretty good in 30 days.  I only used 20 days of lab time before I took the test, and that was with spending a good amount of time on some of the bonus content of the course.  I finished the exercises themselves in the first 2 weeks, and had mo…[Read more]

Sneakers (OLD school hacking, great movie)
Enemy of the State (not hacking as much as spy stuff)

These two are among my favorites.

If you get bored, I have some stuff on capturing challenge hashes and having fun with them in my presentation at http://www.sector.ca/presentations.htm.  Basically, if you have a static challenge for NTLMv1 auth, then you haven’t really increased complexity of cracking the password by very much.  The reason for this is for NTLMv1 only the server…[Read more]

I found a bunch of sample questions on the internet and made my own quiz engine in php/mysql.  I did a 5 day course for the knowledge, and then never touched that content again.  I took the sample questions and my test thing, and got used to the feel of the questions, and picking the “best” answer (which is always the one that makes sense in the b…[Read more]

Check out:
http://nopsr.us/

I haven’t competed in the finals at DefCon, I did the qualifiers this year with some folks from Midnight Research Labs.  I gotta say, win, loose, or draw it was a lot of fun.  I hope to do the qualifiers again this year.  I have been working on my RE/Exploit skillz, but I’m not sure I know I have ways to go. 

Congrats!  That’s awesome.

To be honest, book choice is very personal.  For me, I already know other languages so for the most part I want to reference that tells me functions, parameters, and use cases, but if you don’t have very much experience programming then that may not be ideal for you.  I recommend going to a bookstore and flipping through some books starting with t…[Read more]

Just as a heads up, you don’t have to be a top notch coder for this course.  Some basic scripting is really all that you need.  If you do one of the in 21 days type book you will probably have all that you need.  The course focuses on short scripts that perform very task oriented things so you won’t need to deal with any of the really complex pr…[Read more]

It’s my fault 🙂  I haven’t gotten it to Don yet, but I hope to this weekend.  I was at SecTor (http://www.sector.ca) this week and was preparing for it last week so I have been slow in getting this out.  Check back in a few days and you will hopefully see it 🙂  The next sections cover actual exploit development, compiling and utilization so I t…[Read more]

Both certs are packed with good information.  The answer to your question revolves around what you want to learn.  Everything from SANS has a business take to it.  GPEN is focused making sure that you are covered, that you follow good processes, and also it has some great skills for the actual process.  It covers all the goodies with enu…[Read more]

Video led.  Here’s my thoughts on getting help.  At 4am, I have asked a question in IRC and had it answered.  There are always folks on there, and if they don’t know the answer right away, if you give it a little bit an instructor will get back with you.  Theres so much information though, there is never a spot where you will be “If I don’t get…[Read more]

I would say for the most part yes.  You are talked through what is going on while you watch, and then much of the information is put into the manual.  In some cases, I think the manual is more thorough than the videos, and I had no trouble going back to reference the manual.  Actually any time I needed to remember how to do something that I saw I…[Read more]

Although you didn’t ask for it really, I figure I’ll throw in my thoughts about what your stated goals are.  Taking the exploit out of metasploit and trying to port it into your own application doesn’t really help your knowledge of how the exploit works.  When you look into the metasploit framework at each individual exploit, what you see is j…[Read more]

Could you clarify which software you downloaded and what are you are hoping to do with the hash.  With that information I can hopefully get you a little bit closer. 

Sorry for the delay, I was out of town for a bit. 

For the class I have been using a BackTrack 4 VM on my Macbook (with 1G of memory).  I have been using VMWare as my virtualization, and have had it in both bridged and nat mode depending on where I am. I have accessed the network via both my home internet connection and 3G.  If you are doing 3G…[Read more]

As this isn’t a case of someone doing something benign to be funny, but appears to be pretty serious,  I’d contact a lawyer as soon as possible to talk about what is going on.  I am not a lawyer, but I suspect that this breaks a number of laws.  The lawyer can talk to you about your situation and the impact of bringing law enforcement into it.  …[Read more]

Thanks!  I will definitely give a recap.  Last year was the first time I’ve had the opportunity to do BH/DC so this isn’t my first year, but I do expect my experience to be different.  I will write up some thoughts when I’m done, or maybe before in case there are folks who are new who are going.  I was very lucky last year and Don put up with me,…[Read more]

I agree with the server side ESX or ESXi, for host side, I like VirtualBox.  It’s free, the network isn’t as easy to setup, but it is more flexible so you can do more stuff with it.  It is also free for personal use. 

Let us know!  I’d be interested in what, if anything, it left behind once you were done with it.