Re: Pentest exams

[Marco Ivaldi <raptor () mediaservice net>]

On Thu, 24 Sep 2009, Scott wrote:

> Those are great points Curt. Proper methodology is a hugely important 
> area to learn and I didn't feel like I picked up on that during the OSCP 
> course.

[snip]

> Personally I'd take the GPEN if I could. Having both the GPEN and OSCP 
> would be a dynamic duo of pen testing certs.

Also, consider the professional certifications based on the OSSTMM, the
de facto methodology for performing security testing:

http://www.isecom.org/certification/opst.shtml
http://www.isecom.org/certification/opsa.shtml
http://www.isecom.org/certification/owse.shtml

Cheers,

--
Marco Ivaldi
Lead Security Analyst     Data Security Division
@ Mediaservice.net Srl    http://mediaservice.net/


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------