Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Top Posters

Who's Online (2)

Powered by Vanilla. Made with Bootstrap.
What are your Aims for 2011
  • Xin
    Posts: 3,251
    Aside from improving iExploit i would like to:
    - Learn some ASM
    - Learn to shellcode manually
    - Improving my python programming skills
    - Improve my reversing and exploitation skills


    What about you?
    Xin
  • -Improve on my Python
    -Improve on my C
    -Learn some ASM also
    -Develop more exploits
  • Sh3llc0d3
    Posts: 1,910
    - Get into Uni!!!!
    - Learn & perfect shellcoding/exploitation skills
    - Improve my Perl coding
    - Build on the ASM i'm learning in class at the moment
    - Perhaps get around to improving my knowledge on web app sec.
  • sangf
    Posts: 203
    i'll second getting into uni! i also want to:
    - explore asm more, and hopefully write some 65816 snes games for masofun
    - improve my reversing knowledge (really need to learn lots about executable formats, memory, asm/disasm, debugging, etc.)
    - finish a few of my coding projects, and start some actual useful ones
    - finally learn to play my guitar
  • alix10
    Posts: 73
    -master python
    -get better in school
    -create my private website/forum
    -start making money from the Internet(a power leveling site for games)
    and thats about it
  • Xin
    Posts: 3,251
    said:


    -mastering in python,reverse engineering
    -get good grades in school(hopefully)
    -will concentrate on courses provided by Eccouncil,security+ and OSCP and OSWP
    -will create exploits



    Problem with Eccouncil courses is that you need a few years experience in IT security before you can even take their first course, that is unless you train at a specific place thats like register but then that costs thousands
    Xin
  • Sh3llc0d3
    Posts: 1,910
    said:


    said:


    said:


    -mastering in python,reverse engineering
    -get good grades in school(hopefully)
    -will concentrate on courses provided by Eccouncil,security+ and OSCP and OSWP
    -will create exploits



    Problem with Eccouncil courses is that you need a few years experience in IT security before you can even take their first course, that is unless you train at a specific place thats like register but then that costs thousands


    you mean school students cant apply even apply for CEH??


    http://en.wikipedia.org/wiki/Certified_ ... xamination

    You can go on the course by an approved training centre, then take the test. However as Xin says the in-class course is very expensive. With 2 years experience you can self study and take the test automatically, that is after they double-check your experience.
  • Sh3llc0d3
    Posts: 1,910
    [spoiler=Not wanting to go off-topic]From people I know who have done CEH they've said it's pretty much crap in comparison to other certs. The reason it is so well known is that fact DoD [Department of Defense] supports it. If you want to go into pen-testing then it's a good cert to get. However unless you have the experience to back it up in the real world you'll instantly be on the back foot when applying for jobs. Other people with experience in related areas and the CEH cert will be ahead of you. I believe McKittrick pointed this out when he mentioned about having something more than everyone else. Everyone who wants to be a eth. hacker wants to do the CEH and therefore there's a sub-group of eth. hackers who have the exams but no experience and find it hard to get work.

    Example: when I did my doorman's licence, without previous experience in security I had to prove myself as capable of handling a 16st bloke before I could do the job. When You have the experience getting jobs will come a lot easier. The Validity of the test and the licence didn't instantly guarantee I could do the job, it's like passing a driving test, you drive to pass the test and when you pass you learn how to really drive. Just my opinion on it anyway.[/spoiler]

    Back on topic :P
  • i scanned this thread and i found something lacking. maybe it's just me, but i noticed everyone is so eager to advance their programming skills, but the word "networking" never even appeared!

    i understand that to be a "hacker", like many of you want to play, you must know code and know it well. it is great to be able to exploit what is in front of you and conjure up your own vulnerabilities, but don't you think it is good to know the network you are attacking or even the protocol!?

    i guess if you wish to spend all day coding local exploits, then you don't have to delve into knowing about network fundamentals, but if you wish to go at this on a remote level, i would hope many of you would feel the importance of at least learning about the services, network designs, etc you plan on manipulating off of

    maybe i think differently than most, but for me, "hacking" has always involved knowing code and knowing networking on at least an intermediate level. they go hand in hand (especially as a pen-tester)
  • said:


    i scanned this thread and i found something lacking. maybe it's just me, but i noticed everyone is so eager to advance their programming skills, but the word "networking" never even appeared!

    i understand that to be a "hacker", like many of you want to play, you must know code and know it well. it is great to be able to exploit what is in front of you and conjure up your own vulnerabilities, but don't you think it is good to know the network you are attacking or even the protocol!?

    i guess if you wish to spend all day coding local exploits, then you don't have to delve into knowing about network fundamentals, but if you wish to go at this on a remote level, i would hope many of you would feel the importance of at least learning about the services, network designs, etc you plan on manipulating off of

    maybe i think differently than most, but for me, "hacking" has always involved knowing code and knowing networking on at least an intermediate level. they go hand in hand (especially as a pen-tester)



    I agree. I already have a couple networking books I plan to read soon.
  • "Oreilly TCP/IP Illustrated Vol 1" would be first on my list to start off w/
  • Sh3llc0d3
    Posts: 1,910
    ...well I have 3/4 years of ethical hacking mainly focusing on networking ahead of me to play about with ethernet cables, cisco routers and networking theory so I won't go over-board just yet lol :).

    I think it's good seeing people wanting to improve programming knowledge personally as elsewhere programming is one area many people fail to bother. As long as a button activates an attack they're not bothered.

    Knowing networking is pretty much a given to be honest, I talk to people in the mindset that they already know a bit of networking, probably wrong of my to do so but hey.
  • Xin
    Posts: 3,251
    I agree with the networking part to an extent, however to write most remote exploits you only need very basic knowledge of networking.
    Xin
  • undead
    Posts: 822
    exactly like you xinapse ;)
  • Xin
    Posts: 3,251
    said:


    exactly like you xinapse ;)



    What you mean exactly like me?
    Xin
  • undead
    Posts: 822
    said:


    said:


    exactly like you xinapse ;)



    What you mean exactly like me?


    my aims... :)