KrisTeason

@KrisTeason wrote:

If you are new to programming, I would start with Python -> C -> ASM. Perl may not be necessary here. You should take a look at some of the courses Vivek has at Pentester Academy. There’s still promotional pricing available for a limited time. He has some ASM Material on there that is solid. In addition to Pentester Academy, Cybra…

[Read more]

@KrisTeason wrote:

For $3999 you can get access to all 9 of their courses (elite version). Insane deal!

+1

They are also currently offering a Christmas gift card for $150 off of new enrollments into individual courses as well, this also includes a further price reduction for adding additional course’s if purchased at the same time:…[Read more]

@KrisTeason wrote:

Look into:

The Basics of Web Hacking: Tools and Techniques to Attack the Web (Great introductory book)

Web Penetration Testing with Kali Linux

The Web Application Hackers Handbook, 2nd Edition

Thanks KrisTeason.

@KrisTeason wrote:

Hi mosunit90,

Welcome! PWK doesn’t go too far into Web Application Attacks. They saved their real content for their AWAE Course. To get an idea of what to look forward to check out their course syllabus (Check out Section 13). The OffSec guys developed a custom web app for you to play around with that’s provided on the Lab…

[Read more]

@KrisTeason wrote:

I’m feeling it Carlos, don’t know about you saying secure enough to keep the government out though, that’s a little over exaggerated. Let us know how this works out for you.

That’s fabulous if my flyer makes you feel insecure Kris :). 

At least I hope that’s what you meant :).  And not some weird attempt to feel my flyer t…[Read more]

@KrisTeason wrote:

It may be good to consider a virtual machine as your attack box so you could switch between your attack box with XP and your linux box with ease. Just wanted to say goodluck in advanced! Let us know how you do.

Thank you for the luck.  I’ll post a full review after the test.

I’ve considered that.  I would just need some m…[Read more]

@KrisTeason wrote:

Well first off congrats. Good to have yet another C|EH on board the site (Not that I’m one but there’s many here who also have it). Serious; Improper Grammar? That’s highly not professional, makes me wonder how employers actually see this certification in the industry. Can you provide for us what all you read / studied that…

[Read more]

@KrisTeason wrote:

lol,
my guess is he is man, he knows a lot about the course & provided the same e-mail up top.

Didn’t read that well enough. Today is not my day 😉

@KrisTeason wrote:

I bet that presentations a little too advanced for what he’s looking for. I’ve been studying this topic as well, I found this site useful:

http://heapoverflow.com/

And If You’d Like To Do A Hands On Demo Of A Stack Overflow, Go Through These Two Videos :

Learn Stack Overflow Exploitation – Part 1

&

Learn Stack Overflow…

[Read more]

@KrisTeason wrote:

Mambo, you may want to look into a book called “Build Your Own Security Lab: A Field Guide for Network Testing”.

It is a good book. I did run across a few dead links in it however…

@KrisTeason wrote:

Don’t know if anyone’s taken that course on here, I bet you’d have better lucky purchasing Fyodor’s book “Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning“. It’s a lot cheaper and your getting the instructions on how to use the tool from the author of it.

I have taken the course…[Read more]

@sgt_mjc wrote:

Is there a reason you did not mention a hardware firewall like that included in most home routers? I have found this to be a great help when I have scaned form the outside and there was only one outbound port open and I could not “see” the inside network. What are your thoughts on that?

Frankly speaking I don’t have much basic…[Read more]

@KrisTeason wrote:

Hahaha, Wow I had no idea Twitter didn’t have a password policy to lock an account after so many failed attempts.

Supposedly they do now. They’ve also implemented a timeout. We’ll see.

@KrisTeason wrote:

@dlupisella wrote:

I’m doing a FTP brute force on a network pen test and I wanted to find out what everyone’s opinion or favorite was on a good word list to use.  Thanks!

Doing a network pen test and FTP brute forcing? Isn’t this method highly likely to be picked up by an IDS?

You would think so, but you can some times get…[Read more]

@KrisTeason wrote:

I’d personally go with the Alfa AWUS036H as suggested below:
http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,2649.0/

I second that recommendation, also available at http://www.netgate.com/product_info.php?products_id=665 (no affiliation).

-Josh

@KrisTeason wrote:

You might want to look into the netstat command. I’d also suggest when talking to your victim to attempt to open a connection between you two chatting with each other, perhaps send your victim a file, get into a voice call directly with them or invite the user to your webcam,etc By doing these, you may have a better success rate…

[Read more]

Cheers for the responses guys, just got access to the course material today (wish I was at work, the download would be faster 🙁 ) Printer is currently in overdrive 😉

@KrisTeason wrote:

I know it states that programming knowledge isn’t really needed but throughout the course you do write useful bash scripts. If I were in your position I’d get a…

[Read more]

@KrisTeason wrote:

Ight, thanks for the reply Chris, good to get info from a respected member of this forum.

oh well hopefully one of those guys will reply soon.