Finished the official CEH book... what next?

[unsupported]

I just finished the official CEH book. Along with choosing a video series I am going to want to read another book before I take the test. First, what video series would you recommend? And what book would you recommend? I would hate to waste my companies money on junk.

Thanks.

[unsupported]

I borrowed a friends CBT nuggets and hated it! The guy sounds like a used car salesman and I did not like his view that all ethical hackers are gray hats, because white hats MUST expoit vulnerabilities and test tools against servers which we do not have permission to do so. Which is complete BS. It's called setting up a lab.

I settled on Career Academy's video training. It's gotten good reviews from what I can tell.

I still need a second book choice. I do not know if I want to go with a book which is specific to CEH, like the CEH Exam Prep, or go with something like Hacking Exposed, which I read was a good book.

Any help would be appreciated. I feel like I am talking to myself here.

[unsupported]

Ok, I will continue to talk to myself.

I've gotten into the Career Academy series, which I like a lot. I have been writing notes and will attempt some labs when it is done. Then I will read another book or two. I am thinking about the Michael Gregg book, and re-reading the official CEH book.

I feel so comfortable with the material, I do not want to overlook the obvious.

[jr-gladiator]

Hi,

Did you attempt the CEH exam? I've started collecting information on CEH. It will be great if you could share your experience.

1. I'm CISSP, but new to hacking. I would like to learn from scratch and not just pass this exam. Where should I start?

2. Since I can't attend the full time training, I'm looking for self pace trainings. I had also come across this video based training. CCCure is also offering that with lesser price. Is it worth spending money? Did you learn any new stuff?

Thanks for your earlier postings.

Best Regards,
jr-gladiator, CISSP

[cdupuis]

Good day Jr-Gladiator,

There are many ways you can learn depending on what your goals are.

If you wish to become a CEH in the future I would definitively recommend the self learn package offered at:

https://www.cccure.com/cart/products/Certified-Ethical-Hacker-CEH-v.6-CBT-EC%252dCouncil-Endorsed.html

It is one of the rare product that is endorsed by the EC-Council. Which means that you will be allowed to take the exam at any prometric center once you have completed the package. Most of the tutorial offered out there are not recognized.

The package is taught by Wayne Burke who is someone with a huge amount of intimate knowledge related to hacking. Wayne IS a tester, he is not someone who does CBT's and teaching only. He is an active pen tester.

As it was mentioned, you must build a strong foundation first. This will include OS knowledge, networking knowledge, DB knowledge, Wireless Knowledge, etc...

At that point I would also recommend that you setup a lab and you do practice what you have learned against your own targets. It is like a carpenter, you learn by doing.

Do not expect to learn everything in one month, it is a lifelong learning path. The more you know, the more you know that you don't know.

However, it is a VERY interesting field that is expanding and there is lots of challenges which makes this really interesting.

I wish you all the best

Take care

Clement

[dickinsonsk]

unsupported, there are other out here but we are mostly lurking. I will try to spread the word about this forum on other forums. I finished CISSP and have started CEH study. My plan is to read several books and develop my lab at home (7 computers, XP, Server 2003, Ubuntu, Win98 (my 4 year old preschooler's computer! she wants to be like her daddy.). I have been downloading tools and playing with them.

[WanaBeHacker]

I have the materials and Wayne Burke mentions a 300 page guide that you can get, but when you got to his site and ask were it is, they tell you that you must pay for it. After paying a lot of money for the CEH course material and then to be gouged by Wayne Burke and company is not right.

[cdupuis]

This is a new book that was published by Steven Defino and Barry Kaufman.

The book is a good read and it was written by peopel who in fact are security testers. The previous book was written by someone who had almost no real life experience, this one is a lot better and I recommend it for your studies.

I know both authors personally and they are let me tell you that Steven is a really great teacher who knows how to explain complex thing in simple tersm and he produce a nice guide offered at fair price.

See more details at:

http://www.amazon.com/Official-Certified-Ethical-Hacker-Review/dp/1435488539/ref=sr_1_1?ie=UTF8&s=books&qid=1265384621&sr=8-1

Take care

Clement

[ghee22]