RE: Self Studies - Pentesting

["Swaminathan, Balaji" <Balaji.Swaminathan () kla-tencor com>]

I second Wim. IMHO, CEH nowadays talk more from tools' perspective,
while OSCP roots from the concept/technology. 

But, I have another question from my end..? How about GPEN? Is it
something like you can start from it or is it an advanced one? I could
see many people coming with GSEC, GPEN of the late....! 


Regards,

Balaji Swaminathan .M


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Wim Remes
Sent: Tuesday, December 15, 2009 5:17 AM
To: Leandro Quibem Magnabosco
Cc: pen-test list
Subject: Re: Self Studies - Pentesting

Hi,

I don't know for CEH, but OSCP, imho is more of a catalyst to study
even more than what's covered in the course.  I would single out a
specific technology, find out how it is supposed
to work (RFCs are a good start), find out which tools are available to
make it do stuff that it isn't expected to do and go from there.
There's a lot of sources (academypro.com, securitytube.net, ...) that
you can use to kickstart your learning path.

Cheers,

Wim


On Mon, Dec 14, 2009 at 5:31 PM, Leandro Quibem Magnabosco
<leandro.magnabosco () fcdl-sc org br> wrote:
> Hi guys.
>
> Inspired by the thread "CEH or OSCP?" I started thinking... What can I
learn
> by myself?
>
>
> This courses/certs are pretty good and stuff, but they are not AT ALL
> sufficient for your entire career, of course.
> What would you study by yourself, considering that you already know
> everything on the CEH and OSCP certs?
> --
> Leandro Quibem Magnabosco.
------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review
Board
> Prove to peers and potential employers without a doubt that you can
actually
> do a proper penetration test. IACRB CPT and CEPT certs require a full
> practical examination in order to become certified.
> http://www.iacertification.org
------------------------------------------------------------------------
>



-- 
Wim Remes
Security Afficionado

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review
Board

Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require
a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------