Certified Ethical Hacker Exam

[Havran228]

Hi, I don't want to start a new thread.. is CISA certificate any goodin real world? it cost a LOT of money to get it, so it better be good.. They say it's accepted all across the EU, but what about the US? they also require like 5 years of experience before applying to certificate, how am I supposed to get the experience when I want to get ccertificate to get a job in the first place.. thanx for answers..

[RTKsbox35]

Re: Certified Ethical Hacker Exam

Yes please do not take the exam, I bought some cheap study supplies for ceh in Thailand (thank god), bear in mind that the material itself is the exact same as the software sold in the U.S just at overseas pricing(it wasn't pirated just priced accordingly, the pirated versions of the cds have audio less tutorials and are missing most of the files). It's not that the subject matter is not worth studying, its more that the official cd's I received contained so much illegal content (the tutorials cover stuff like shell scripts and vulnerability scanning, whereas the cds contain hundreds of files for producing every bot, batch virus generator, generic trojan generation kit, tools for pirating software from major companies... including financial firms which makes no sense). Where in a legitimet penetration test would you need to assemble one of 20 bots and use it to orchestrate a ddos attack? For the bot to have any power you would have to be using it the way it is meant to be used.... illegally. Even though I studied for that test, I am going to go down the ccna route, this is after speaking with several of my professors who have all held positions with software firms in the past and stated that "I should either just go in as a free lance uncertified hacker and allow my skills to speak for themselves (assuming I was talented enough and the firm had the capabilities to deal with this type of hire) or get a certification that did not include the word hacker". The first statment caught me as strange esp since the prof was an ex microsoft employee who said that the company did have protocols for the situation and that the protocols did not entail a formal certification of any sort. Anyways I am young and manage to use what skills I have (I use this word lightly) and make money doing free lance stuff while going to school and hopefully grabbing a cert or two soon (need to schedule testing). Sincerely do not take the test, the unanimous response was that it was either not recognized or regarded as shady by "white-gloved" institutions.
Good Luck with everything.

[erehwon]

Re: Certified Ethical Hacker Exam

Has anyone else recently received an invite to "Hacker Halted"... some retarded conference in Miami from the CEH crew? I don't know how they got my email address, and their message has so many fake URLs and such that Thunderbird thought it was a scam message. (All URLs are wrapped through RS6 Email Marketing Solutions)

God, i totally wonder if it would be possible to Outerzone these people and host our own con with loads of big names in the industry at a hotel across the street or something where we just Bar Con the whole time.

I have been getting their e-mails and notes from their "Senior Marketing Executive" about sponsoring their event. I'm sorry if your sponsorship mails addresses you the same way I get Nigerian 419 mail...

Greetings and I trust this mail finds you well.

The purpose of me writing is to explore various mutually beneficial partnership opportunities with your end.

...and doesn't list the dates of the conference anywhere in the e-mail, then there is something really wrong here.

Even looking at their website has me confused when the conference is, the graphics say September 20-25, the text on the site says September 20-24, hell I'm curious where they had the website done, one of the tabs on the main page says Live Trainings.

I have no clue from their webpage where this is being held at besides Miami Florida, there is nothing on the mainpage suggesting its being held anywhere but maybe one of Miami's many excellent beaches, you have to really dig around for that information, it might be held at the Miami Hilton Downtown from looking at the floorplan for Exhibitors in the .pdf

So, Bar Con! Hotels.com lists the Marriott Miami Biscayne Bay as a half star better, $30 cheaper than the lowest average daily rate ($20 cheaper than Hacker Halted's special rate) and 0.1 miles from the Miami Hilton Downtown, but a down economy, don't expect to see me down there in September.

[valkyrie]

Re: Certified Ethical Hacker Exam

Im taking the Network+ in about a month and although i havent really studied for it I definitley see a bigger focus on security in it, according to Comptia 11% of the exam is Network Security. Also just curious but is the CCSP at all valuble, im sure its specific to what you are doing but i dont know how respected it is.

CISSP is management focused, CCSP is operationally focused. As far as certifications go, both are relevant to many companies. I have both.

Regards,

valkyrie
__________________________________________________ __
sapere aude

[facon12]

Re: Certified Ethical Hacker Exam

I know this is really old, and this isn't related to why the thread was necro'd, but the 2009 Network+ objectives has a larger focus on security..

Im taking the Network+ in about a month and although i havent really studied for it I definitley see a bigger focus on security in it, according to Comptia 11% of the exam is Network Security. Also just curious but is the CCSP at all valuble, im sure its specific to what you are doing but i dont know how respected it is.

[Deviant Ollam]

Re: Certified Ethical Hacker Exam

I got the same email on March 30th.

Yeap, that's when mine arrived. I've had it filed under "crap to think about when i got back home from recent travels" and finally got around to doing a forum search, since i was pretty certain that people had talked about these bozos before.

[g3k_]

Re: Certified Ethical Hacker Exam

Ya, the Networking+ and Security+ certifications actually have some traction in the operations side of the security house.

I know this is really old, and this isn't related to why the thread was necro'd, but the 2009 Network+ objectives has a larger focus on security.

Also, I get fliers in the mail all the time at work for that sort of nonsense. A coworker of mine got his CEH the same week I went to Defcon last year and he felt slighted, like I learned more things just absorbing Defcon then he did taking his few day crash course for CEH in West Palm.

[theprez98]

Re: Certified Ethical Hacker Exam

Has anyone else recently received an invite to "Hacker Halted"... some retarded conference in Miami from the CEH crew? I don't know how they got my email address, and their message has so many fake URLs and such that Thunderbird thought it was a scam message. (All URLs are wrapped through RS6 Email Marketing Solutions)

I got the same email on March 30th.

[Haxd4x]

Re: Certified Ethical Hacker Exam

Yeh, if you get full marks on the test instead of an A, you get "~Pwn3d by <name here>~"

[Deviant Ollam]

Re: Certified Ethical Hacker Exam

Don't know if this deserves its own thread (since the last post here was a bit old, but having these comments tied to my post here are a good thing for anyone wanting to play catch-up as they read) but i'm just curious...

Has anyone else recently received an invite to "Hacker Halted"... some retarded conference in Miami from the CEH crew? I don't know how they got my email address, and their message has so many fake URLs and such that Thunderbird thought it was a scam message. (All URLs are wrapped through RS6 Email Marketing Solutions)

EC-Council to Host The World's Largest Reunion of Certified Ethical Hackers

Miami will witness the biggest ever ethical hackers reunion party organized by the creators of the world renowned Certified Ethical Hacker program, in conjunction with the Hacker Halted USA 2009 Conference.

Albuquerque, New Mexico - To be held from September 20 - 24 at the Hilton Miami Downtown, overseeing Biscayne Bay and the stunning downtown skyline, Hacker Halted USA 2009 is set to be the perfect platform for information security professionals to enhance knowledge and exchange views, as well as network with other security professionals globally. It is also touted to be the largest reunion event of Certified Ethical Hackers from all over the world.

Hacker Halted USA 2009 is proud to have world renowned security experts comprising the likes of Howard Schmidt, Dave Litchfield, Ira Winkler, Michael Malin, Iftach Ian Amit, Mark Harris, Pamela Fusco, Jeff Bardin, Daniel Hoffman, Peter Berghammer, Trey Ford, James Aquilina, Tom Bowers, Ron Gula, Gunter Ollman, Greg Hoglund, among others, present intriguing and thought provoking security topics such as Threats and Countermeasures, Virtualization Security, Computer Forensics and Investigations, Application Security and Secure Coding, Malware and Botnets, Business Continuity and Disaster Recovery.

Leonard Chin, the Conference Director said, "Even with the bleak economic outlook, information security can never take a back seat. We are sparing no efforts to put up a world-class event to advocate increased awareness towards information security. We will live up to our promise to deliver one of the most informative and educational conferences that drives both the decision makers and the technical communities." He further adds, "We will also host the first ever reunion party for our community of Certified Ethical Hackers, made up by members across 60 countries, in Miami."

This information security event in Miami will also see the launch of the Hacker Halted | Academy. Recognizing the growing demands for quality information security trainings and education, EC-Council has put together some of the most sought after technical training & certification classes offered by top training companies and led by well-respected instructors, all under one roof. In addition to EC-Council certifications, exam preparatory classes for CISSP, CISM, CISA, NSA IAM/IEM, ISO27001 will also be offered. These and various other hands on technical training classes will be offered by the likes of EC-Council, Global Knowledge, NetCom IT, Insyte Training, CCCure.org, NGS Software, Foundstone, Aspect Security, Intrepidus Group, InterNetwork Defense. Hacker Halted | Academy will unequivocally be the destination for any information security professionals who wish to obtain necessary certifications or cutting edge technical skills.

Since 2004, the global series of Hacker Halted has been successfully organized in many cities including Myrtle Beach, Dubai, Singapore, Kuala Lumpur, Taipei and Tokyo. With Miami being the 14th in the series, other cities slated to host the event in 2009 are Seoul, Hyderabad and Kuala Lumpur. The objective of the global series of Hacker Halted conferences is to raise international awareness towards increased education and ethics in Information Security

God, i totally wonder if it would be possible to Outerzone these people and host our own con with loads of big names in the industry at a hotel across the street or something where we just Bar Con the whole time.

[converge]

Re: Certified Ethical Hacker Exam

bear in mind that security+ is a retardly subjective exam and you're probably better off spending time and effort on cissp if you're series about infosec

[noid]

Re: Certified Ethical Hacker Exam

Ya, the Networking+ and Security+ certifications actually have some traction in the operations side of the security house. You can't go wrong with things like the CCNA cert. I personally despise the CISSP certification, but it at least has some name recognition with HR. As your career progresses things like the CISM, CISA, GIAC, PMP, etc. become useful depending on what focus your career takes. CISA and GIAC would be good if you head into the world of architecture and engineering. CISM and PMP are good if you are a manager like me.

[hmind]

Re: Certified Ethical Hacker Exam

Alright so i guess ill just not worry about that cert then, thanks :) I feel a bit like a noob now... But anyway, thanks for all the great info and ill look into what you guys suggested. Interestingly I have been to a class for Networking + (just went for the class with a family member to check it out, no credits :( ) and it seemed interesting although that class was recapping on website security certificates and public-private keys, it was nice to be in a room full of people who understood what I was talking about the other half of the time :)

Thanks again,
hmind

[shrdlu]

Re: Certified Ethical Hacker Exam

Nice article :) Well I kinda figured that, but the cert may look good on the college resume... I don't know, i might as well take it and use it when its appropriate, I paid for the course.

I recommend strongly that you do not throw good money after bad. Some certifications are a wash, and some will actually count against you. CCNA, sure. CISSP, absolutely. Those are both good (for your resume, that is). Certifications such as CEH will only count against you. If someone actually *knows* what it is, they'll round file your resume in a heartbeat (I would). If they don't, the word "hacker" is the only thing they're going to see, and you'll *still* get tossed.

Btw, I did not learn "how to hack" from the course, I learned all that the hard way (via the web). I'm aware all the contents are basically "script-kiddy" stuff and I also believe the cert stuff is a bunch of crap (ever since I saw my friend get the "Microsoft Word" certification =P ), but I wonder if colleges really think that or they would take it as "proof" of that knowledge...

Times have changed, I suppose. Learning "how to hack" from the web just doesn't seem like much, to me. Take things apart. Put them back together. Stop and look at everything around you. I'm pretty old school, and I suspect that you might want to spend some time contributing to some OSS software, or quietly hanging out on various security mailing lists, before worrying about getting CERTs (or not).

[Ridirich]

Re: Certified Ethical Hacker Exam

I've gotta agree with Noid.

Focus on getting your certifications in the specific areas you're going into. The security community is vast.

I, for example work a video game company deterring cheaters who use programs to obtain items in games illegally or access other player's accounts. To get this position I had to get certs in the languages that the game was written in, as well as obtain a few network certifications. Luckily these were offered and paid for by my company. Note that I had been volunteering my time with them for 4 years, administrating their in-game chat before they offered me this position and I was learning on my own at that time as well.

We have other guys in this forum who work for ISPs, Spyware/Virus/Trojan/etc removal companies, Network Administrators for major companies and freelancers in here as well. Most likely they will say the same thing I am: Obtain the certs, make a good resume and try to get your foot in the door of companies that interest you. Be prepared for them to put you somewhere boring before you get the job you want from them too.

My suggestion is get A+, Networking+, CCNA and CWNA. That should make you pretty well-rounded and get your foot in the door of a company.

Good luck.