Experten aus dem binsec-Universum
Is the exam hard? I would answer the question like this: Anyone who fails the DSB-TÜV exam after 4-5 days in a data protection officer course either really has very bad luck or simply was not paying attention at all during those days. From the sheer volume alone, you cannot…
Sometimes it can be that simple. I had gained an unprivileged reverse shell via netcat on a Linux host. Besides root, there was one other user. After I had invested several hours in privilege escalation via exploits to no avail, I was on the verge of giving up…
A reverse shell with netcat is unfortunately not interactive. As a result, tools such as sudo, mysql, su etc. are unusable or only usable to a limited extent. If Python is installed on the target system, a terminal can easily be simulated within the Netcat session:
My current status: 5x privileged access, 6x unprivileged access, DEV and IT network unlocked. It is dragging on a bit. The lab is enormous. Sometimes you have a good idea and a bit of luck, so a machine is rooted quickly. On other machines, though, you…
With the OSCP you can use your own lab panel to return servers to their original state (revert). Although you can only revert a limited number of servers per day, it is worth doing so before an attack. Other OSCP students…
My first tally: 1x Windows (privileged access) 5x Linux (unprivileged access) DEV lab unlocked I have read in many write-ups how steep the learning curve with the OSCP is and how extensive the course is. Now I can relate. It is also true that…
Recently I again accompanied the audit for a client and brought it to a successful close. I would like to take this opportunity to stress how important the right approach to the QSA is. In some (maybe many?) companies the QSA is seen as the enemy, he is the…
The documentation runs to several hundred pages and the video material lasts longer than 5min as well. Not to mention that the exercises in the documentation also take their time. Somewhat impatient, I then tried my hand directly at the lab. That was a mistake. I wasted several…
I signed up for the Penetration Testing with BackTrack (PWB) course, which - if successfully passed - concludes with the Offensive Security Certified Professional (OSCP) certification. After a master’s degree in security management and certifications such as CISSP, CISM…
After recently seeing yet another job ad for a penetration tester that demanded a CISSP certification, I would like to say a few words about it. The short version: the CISSP has nothing to do with penetration testing or ethical hacking. Absolutely nothing. In…