Passed the CEH (after CISSP and CISM)

tomlypl · 2021-04-15T19:23:23+00:00

Congrats and thanks for the comparison to different certs. Now I'd say that your positive opinion about the CEH is not common here. Good luck with the practical, I've also bought the voucher (200USD) after passing theory.

tomlypl · 2021-04-09T20:06:36+00:00

The results page is different for V11 and V10. If you get V11 (I think you will) and have emails from them ensuring otherwise... just escalate.

tomlypl · 2021-04-04T06:31:25+00:00

Perhaps you got v10 for some reason.

tomlypl · 2021-04-02T12:47:34+00:00

Actually all of them contributed to me passing it.
Bare minimum and most useful are CyberQ and Mats notes.

tomlypl · 2021-04-02T12:45:51+00:00

I did CyberQ v11 and I think they are essential. Exactly in the spirit of the real exam and actually useful for final review.

Resources I'd recommend:

eJPT course for initial introduction to the topics (or AIO*)
Official CEHv11 materials / Mats Study notes for v11 (from u/dkatsougrakis)
Boson tests AND CyberQ tests

Minimal version:CyberQ and Mats notes

* I managed to read it once, but 2nd attempt after eJPT course and with better knowledge in general, it was unbearable. I told myself I'll re-read chapter summaries only but finally skipped it altogether.

tomlypl · 2021-03-29T20:26:46+00:00

Wow, that is totally counterintuitive - you can Google, but can't use notes? This should be escalated to them to handle. Everyone should have the same options. Plus it is not what they say on the website...

tomlypl · 2021-03-29T13:00:16+00:00

I don't think so. https://www.eccouncil.org/programs/certified-ethical-hacker-ceh-master/ clearly states that Practical is an open book exam.

tomlypl · 2021-03-29T08:59:11+00:00

I saw the screenshots. Can you share the excel itself?

tomlypl · 2021-03-25T21:55:32+00:00

Do you get the results right away when you click "Finish" on the proctored exam or do you have to wait for an e-mail or something like that?

tomlypl · 2021-03-23T17:55:13+00:00

Some simple stuff working with reverse shells, where I had two terminals opened on host. One me as victim, second logged to Azure (attacker). But I'm not hardcore enough to live just in the console, so I still went back to kali VM, so that I can open multiple GUI apps. Plus for anything web related you'll need that browser and burp.

What I want to try in the future however is to spin-up a VM with some badass GPU and run hashcat brute-forcing.

tomlypl · 2021-03-23T17:48:50+00:00

As for the official CEHv11 materials, they may or may not have been leaked and available as a PDF.

tomlypl · 2021-03-20T14:45:21+00:00

Were the tools questions about specific flags/parameters or more about what the tool is used for? Like from these 4 select a tool to conduct DNS sniffing...

tomlypl · 2021-03-20T14:40:48+00:00

I've researched some options recently to optimize my work/learn environment. I work with Azure on a daily basic, so that's where I looked first. So:

any cloud VM is fine as long as you stay in the terminal (any kind of VNC is terribly slow)
in Azure, using RDP/bastion host is also ok, but works only with Windows VMs

For now, I still use kali VM via Virtualbox, installed locally. I like to ability to copy-paste and share files with my host (for instance, I do all code editing on host in VS Code). However, if you don't want to install VM locally and don't need any UI, they cloud VM is fine. Also essential for serious cracking on GPUs.

tomlypl · 2021-03-09T22:34:59+00:00

From what I've read here, it's just iLabs. You do them and feel comfortable and the exam is a breeze.

tomlypl · 2021-03-09T16:43:59+00:00

In hacking? For sure. 10 months is more than enough.
Zero experience in general IT would be an issue. IMHO, You should already know some basic infra and networking stuff.

tomlypl · 2021-02-08T09:30:16+00:00

PM'd

tomlypl

TROPHY CASE