Printable View
the reason i like ngsec, is because it is free, and like i said, it's for yourself to see how much you've advanced, and although many questions probabely can be solved with google, the challenges can not, these are:
one windows app to crack,
one linux app to crack,
two sql injection pass throughs,
one data decipher,
don't know how you will google for that, if you do, please let me know, since it took me a lot of time solving them :D
so, yes i disagree, not totally, but still a bit :)
Wow... I honestly didn't expect so many responses to that question in such little time, lol :D
Thanks everyone :) I pretty much got the information I was looking for from this post, I appreciate it so much. Thanks again!
Kind of like how most MSCEs can't tell the difference between a Windows OS and an Ti-84 calculator?Quote:
Here is what I mean. I hand you a sheet of paper that says you are an ethical hacker. How does that sheet of paper prevent you from doing something unethical?
[ cha ching! ]
Oh it's late....
Hmmmmm, interesting. Would you like me to post the link to the forum where you pasted the exact problem solving questions asking people to analyze the code for you or would you like to reconsider your position? That is how you solved the problem dude.Quote:
don't know how you will google for that, if you do, please let me know, since it took me a lot of time solving them
so, yes i disagree, not totally, but still a bit
NGSEC gives you 24 hours to complete the bogus cert. That gives ample time on a busy forum for those who understand the code to solve it and provide you with the answers.
if you read the threads correctly, then you will find that there was indeed one i solved with a little help, but the other four i've solved myself, so i understand what you mean, but like i said, it's a good cert to see how far you are for yourself, and for me that meant having to ask how to change the things i did a little, so it worked for that challenge, but like i said, the other ones, i solved myself, without any help....
i indeed posted another thread for another challenge, cause i've found a strange hash, but this was my own stupid fault, since i had the rest of the text converted but not the hash, thats why the hash was strange to me, but noone helped me with that one...
[edit] but yes, you can post the challenges to get help, but this does not take away that it is a good possibility for yourself to see how much you've advanced, if this means that you need help with some challenge, that means that you need to learn more in that specific subject:[/edit]
You get help in classes or in study groups *before* the test, not while taking a test. Otherwise it defeats the purpose of taking it in the first place.Quote:
but yes, you can post the challenges to get help, but this does not take away that it is a good possibility for yourself to see how much you've advanced, if this means that you need help with some challenge, that means that you need to learn more in that specific subject
Also, what prevents me from signing up on the ngsec site as you or anyone else and then take the exam? Unauthenticated online "certs" are bogus. Period.
Tell you what. I have a ton of exams that I give people looking to move up in grade here at my facility. They are at the same skill level as the NGSEC questions. You have no internet access or contact of any kind to the outside world. How about taking one of these tests for me and I will retract all of my statements in this thread if you pass. What do ya say?
i would surely like that! there's only one but, we live about 4000 miles apart, how are we going to solve this??
I tink it would be a waist of time to cert it because there is not really an exact cert you would have to majar in a lot of things twords hacking which may be a waist of time especially since that is like a rare job from what i have herd
Actually its not as rare as you may think jr05linux comapny's hire "hackers" every day to break into their systems and tell them how they did it then fix it. Its called being a WhiteHat Hacker.
your right kryptonic, but he's right too, you'd have to master so many things, i doubt it will be possible to ever get a decent cert for it...
first of all you need knowledge of about everything,
second, it's a way of thinking, solving problems in manners normal people wouldn't think about ...
third, the biggest question, when is someone a hacker? is it when he is able to hack a website, when he is able to hack every website, or when he is able to hack everything, from phones to websites, from services to protocols, from network to stand-alone systems... i think this is the most important question... and i really doubt someone could make a decent cert for this :(
also because everything is changing so rapidly, for one thing, if an exploit is working this day ,it may be protected the next...
but i still think it is nice to talk about it :D