Re: Skills needed to become a Security Expert and Penetration Tester?

[Richard Thomas <austindad () gmail com>]

Chip,

Commendable activities and intent, but where are the activities that
will teach you security and penetration testing?  There is nothing
there which indicates any training in technique, methodology or
concepts relevant to the security field.  This is crucial to the
proper practice of security.  Look at csrc.nist.gov and osstmm.org for
appropriate reference material.  You might also investigate
appropriate certifications.

Richard Thomas

On Fri, Apr 24, 2009 at 5:47 AM, Chip Panarchy <forumanarchy () gmail com> wrote:
> Hello
>
> There was a nice link with information on this which I found a while
> ago, does anyone still have the link?
>
> To learn all skills required to be a Security Expert and Penetration
> Tester I plan on;
>
> - Learning C++
> - Creating my own Linux Distribution (security-orientated LiveCD)
> - Creating my own Windows Distribution (security-orientated,
> non-distributed, PE type, LiveCD)
> - Creating my own Mac Distribution (security orientated,
> non-distributed, LiveCD/DVD)
> - Continue to subscribe to this mailing-list (pen-test & security-basics)
>
> Are there any other skills which I should be aiming to acquire?
>
> Would really appreciate any advice.
>
> Thanks in advance,
>
> Chip D. Panarchy
>
> PS: I currently reside as a full-time IT Support Analyst, and have
> held my job for a fortnight. Plan on working there for quite a while,
> and in my spare time training myself for the IT Security field.
>
> ------------------------------------------------------------------------
> This list is sponsored by: InfoSec Institute
>
> Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class.
> Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
> Penetration Tester exams, taught by an expert with years of real pen testing experience.
>
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Tired of using other people's tools? Why not learn how to write your own exploits? 
InfoSec Institute's Advanced Ethical Hacking class teaches you how to write stack and heap buffer overflow exploits for 
Windows and Linux. Gain your Certified Expert Penetration Tester (CEPT) cert as well. 

http://www.infosecinstitute.com/courses/advanced_ethical_hacking_training.html
------------------------------------------------------------------------