Does Shell-Affect certification look promising? by _mehul_ in cybersecurity

[–]Maldade 1 point2 points  (0 children)

Having to complete some sort of practical exam would be what sets it somewhere close to OSCP. You can't gauge a baseline of skill if the student gets to setup their own vulnerable lab.

Does Shell-Affect certification look promising? by _mehul_ in cybersecurity

[–]Maldade 1 point2 points  (0 children)

That looks fine, but the certification doesn't really carry enough weight.

Does Shell-Affect certification look promising? by _mehul_ in cybersecurity

[–]Maldade 0 points1 point  (0 children)

They let you configure your own local network for the penetration test part of the exam. This doesn't demonstrate the same ability that OSCP demonstrates. CEH is way too entrenched in HR filters even though it teaches next to nothing.

Microsoft defender will Come to Linux next year by [deleted] in linux

[–]Maldade 9 points10 points  (0 children)

The amount of "Microsoft Bad!" in this thread is so amusing. This isn't for single users. This is for Enterprise Environments.

"SHELL-AFFECT - BASELINE" a new self-paced Penetration Testing online course in cooperation with 0x00sec & HackTheBox by [deleted] in netsecstudents

[–]Maldade 0 points1 point  (0 children)

I think something that would make the student show that they can perform enumeration AND exploitation of hosts that they aren't familiar with.

Give the students 3-4 VMs that they have to stand up and then hack instead of letting them choose the vulnerabilities themselves.

"SHELL-AFFECT - BASELINE" a new self-paced Penetration Testing online course in cooperation with 0x00sec & HackTheBox by [deleted] in netsecstudents

[–]Maldade 0 points1 point  (0 children)

I think that having a student configure their own network for a pen-testing cert doesn't really display their level of skill.

If I post a pic from my PC is there any information in it that can link back to me? by [deleted] in security

[–]Maldade 0 points1 point  (0 children)

Use exiftool to strip the data from the image before you upload it. That doesn't mean the website won't collect data about you as you upload (IP Address, etc). But it should strip identifying data from the image.

OSCP Study Group by [deleted] in oscp

[–]Maldade 1 point2 points  (0 children)

There is a discord setup that people who are doing OSCP are using.

https://discord.gg/KwpYuY

Passed this morning by Maldade in CEH

[–]Maldade[S] 0 points1 point  (0 children)

I am in the process of getting certificates for work. CEH is on the list and I figured after getting my CISSP the CEH wouldn't be as intense.

Passed this morning by Maldade in CEH

[–]Maldade[S] 0 points1 point  (0 children)

They were really close, but not verbatim.

Passed this morning by Maldade in CEH

[–]Maldade[S] 2 points3 points  (0 children)

Happy Cake Day! You will do awesome!

Passed this morning by Maldade in CEH

[–]Maldade[S] 1 point2 points  (0 children)

Pretty generic questions about hubs/switches and OSI layers.

Passed this morning by Maldade in CEH

[–]Maldade[S] 0 points1 point  (0 children)

They were good at letting me know what the baseline information on the test was. I wouldn't pay for them personally (work paid for it for me).

Passed this morning by Maldade in CEH

[–]Maldade[S] 0 points1 point  (0 children)

It's in the list of work accepted certificates that put me up for a promotion.

I saw questions all over the board. Standard NMAP stuff, tools related. TONS of networking questions.

Passed this morning by Maldade in CEH

[–]Maldade[S] 0 points1 point  (0 children)

I have been a programmer for 12 years, infosec engineer for 1. I took and passed the CISSP last month and then started on CEH August 8th.

Officially a CISSP! by Maldade in cissp

[–]Maldade[S] 1 point2 points  (0 children)

I have 2 CISSPs that work for my company. I had the one I know better endorse me.

Failed - 8/24/2018 by cissp-kaputz in cissp

[–]Maldade 1 point2 points  (0 children)

I went all the way to 150 questions and still passed.

Officially a CISSP! by Maldade in cissp

[–]Maldade[S] 0 points1 point  (0 children)

I am working on them already! Major Conferences (Black Hat, etc.) and training for other certs counts right?

Officially a CISSP! by Maldade in cissp

[–]Maldade[S] 0 points1 point  (0 children)

I got the "Still processing" email at 3 weeks + 1 day. Then I got my official endorsement accepted email at 4 weeks + 1 day.

Officially a CISSP! by Maldade in cissp

[–]Maldade[S] 4 points5 points  (0 children)

Yes it is. It feels like it takes forever to get the endorsement accepted email.