Penetration Testing mailing list archives

RE: Your opinion about online courses


From: "Shenk, Jerry A" <jshenk () decommunications com>
Date: Tue, 27 Oct 2009 17:08:34 -0400

Any course is gonna give you what you give it - I've been to some SANS
courses where people have obviously spent a fair amount of money to get
there but there are always a few people who get there late (very late)
and leave early...sometimes the same people.  I guess it takes a bit
more discipline to dedicate the time when you aren't in a class but it's
gonna take some time, one way or another.  You can't just put the books
under your pillow and get it through osmosis....but, you already said
all that;)

For the SANS courses, the on-line course and the in-class course is all
the same stuff.  Personally, I kindof like to be able to "go away" and
dedicate a week to it but, on the other hand, doing a couple hours at a
time gives me more time to spend in the lab.  When I do a week-long
course, I typically go back through the whole thing myself anyway.

I think the advantage of a "course" as opposed to on-line reading is
that the course is laid out to teach things in an order, building from
day to day or book to book.  I think it's fair to say that there is
nothing in any of these courses that can't be found on the internet
someplace but the problem is figuring it all out.  I know that I have
spent HOURS doing things that seemed like they should be so
simple....the course will help work you through that initial step
enabling you to get something working so that you can branch out from
that to do your own testing and experimentation.

BTW, I've alluded to the use of a lab - I think that's a big deal...just
reading a book doesn't really cover it...you need some hardware.
Virtual machines are great but you need some real hardware too...old
junk that somebody threw out will probably do just fine.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Alex Fiuvertiz
Sent: Tuesday, October 27, 2009 12:09 PM
To: pen-test () securityfocus com
Subject: Your opinion about online courses

EHLO,

What are your opinions about the online/on demand courses that are
offered by Offensive Security, SANS, etc?
I realize that it demands some kind of self-discipline when it comes
to dedicate time and so on, but besides that, is it just a waste of
money?
Is it better to spend the money on books and the time on reading and
nmap -iR ?

I also realize that a course led by an instructor gives you much more,
but this question is about the online courses.

Thank you for your reply

/ A.F

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review
Board

Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require
a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------


**DISCLAIMER
This e-mail message and any files transmitted with it are intended for the use of the individual or entity to which 
they are addressed and may contain information that is privileged, proprietary and confidential. If you are not the 
intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the 
message. If you have received this communication in error, please notify the sender and delete this e-mail message. The 
contents do not represent the opinion of D&E except to the extent that it relates to their official business.

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: