Tag Info

Hot answers tagged

39

I don't know a good reference to point to for further reading. Thus I will try to list a few time-wasters that I personally enjoy. In the following I will allow myself to differentiate between various styles of hacking competitions. I don't know if this is a canonical approach, but it will probably help explaining the differences between the ones I know: ...


39

IT in general, IT security in particular, is an area where you should always learn. When you do not want to learn any further, then it is time to retire. Therefore, you should already be eager to learn TCP/IP, and your question should be: "do I learn TCP/IP first, or is there something more urgent ?" Knowing the internals of TCP/IP is an invaluable tool for ...


27

There is quite a lot of them: Metasploitable: Currently there are 2 versions. Kioptrix: Currently 4 challenges. Hackademic: Apparently 2 VM, check 1 and 2. pWnOS: Currently 2 challenges. Standalone which you can install directly without VM, this is to hone your Webattack-Fu: OWASP WebGoat Damn Vulnerable Web Application Mutillidae


25

For conciseness, I'll only add two: OWASP's moderated blog - they aggregate quality posts from a lot of diverse security feeds, mostly around new attacks, vectors, etc. Microsoft's SDL blog, mostly focusing on remediation strategies, mitigation, threat modeling etc, and also once in a while a very open, honest analysis of discovered security flaws and the ...


25

Consider the usual risk management statement: Don't spend 1000$ to protect 100$ Now, it might just be a situation that the execs are not aware that what they want will cost 1000$; more likely that they just don't realize that they're only protecting 100$ worth. If that is the case, you could consider trying to implement methodology that will ...


25

Free options are few, but there are tons of videos and tutorials on specific attack vectors or products/tools. They will NOT make you a Penetration Tester, but they are free learning resources. Some decent options to start you off: MetaSploit Unleashed: Learn an exploitation framework SecurityTube: various videos covering a multitude of topics NMap: The ...


22

You could check out www.cccure.org - it was always the one I recommended folks go to when I used to teach CISSP. I have just checked it out and it has even more material than it did 5 years ago. It requires free registration, but then you have access to documentation and practice tests. (and good luck!)


21

None. Generally speaking, certifications in the security field, much like most other tech areas, are required only for entry-level positions (when you have no experience to speak of), senior positions (when you need the long signature), and government jobs (when you need to answer an RFP to work there). By themselves, none of these are a replacement for good ...


21

Interesting question. My thoughts on this are that obscuring information is helpful to security in many cases as it can force an attacker to generate more "noise" which can be detected. Where obscurity is a "bad thing" can be where the defender is relying on that obscurity as a critical control, and without that obscurity, the control fails. So in ...


18

i am going to list down a couple of resources i follow to keep up to date on security issues: Security Focus: you will find a slew of information on that website about vulnerabilities and all sorts of both general and specific topics related to security. it also hosts a slew of mailing lists dealing with different aspects of information security. Bruce ...


17

I'd suggest in additiona to HamZa DzCyberDeV's answer: Pentester Labs exercises which are full VMs as well as full detailed walkthroughs etc. These are great for all skill levels and i've found them most useful.


16

One of the things I've been most impressed by in the last few years is the new focus on security as being a balance between cost and risk. A security solution should not be implemented if the cost exceeds the risk of exploit, and both costs and risks can be hard to diagnose. The thing I like most about this core concept is that it basically mandates the ...


16

As someone who spends a lot of time listening to podcasts I'll rattle off a few I've found to be very enjoyable. Eurotrash Security Podcast Probably my favourite podcast as it's European albeit a bit light on technical content. News and chat based mainly. They cover a lot of the conferences which is good if you can't get to many (like me). The European ...


15

I am partial to the appsec side of penetration-testing. Hunting Security Bugs The Art of Software Security Assessment Secure Programming with Static Analysis Open-Source Fuzzing Tools Fuzzing for Software Security Testing and Quality Assurance Gray Hat Hacking, 3rd Edition Advanced Windows Debugging How to Break Software Seven Deadliest Web Application ...


15

This is great that you are doing so much learning on your own. You are on the right track. Your enthusiasm to learn on your own will put you a step above a lot of your competition. Kudos. My main advice would be: don't worry too much about planning out a path through all the material you want to learn. You don't need a carefully thought-out plan. ...


15

Yes, math is a tool and it can be useful in the realm of computer security. A fair amount of math is required to obtain a degree in Computer Science, and hackers prey on software developed by computer scientists. Algebra can be used to fool GPS, and detect doctored photographs. Computer Science theory is a branch of math and has applications to ...


14

For Reverse Engineering: The University of Helsinki in collaboration with F-Secure offer a course titled Malware Analysis and Antivirus Technologies which has the curriculum available online. For Secure Coding: CERT is always a good reference, especially for C & C++. They have a Secure Coding in C and C++ course at SEI @ CMU.


14

There's a couple of good ones in addition to DVL, that I've come across Metasploitable is designed for testing out some of Metasploits functionality. There's some good information on using it in the free Metasploit Unleashed course. There's also DVWA from a web applications perspective EDIT: Another good list I came across on a blog recently, has quite ...


14

Here are some of my favorite sites to follow (I use RSS for all of them): In-depth about binary numbers, with some recent security-relevant posts http://www.exploringbinary.com The SANS Internet Storm Center, for Internet security alerts http://isc.sans.edu InfoSec News list, for consolidated security news http://www.infosecnews.org/ SecurityNow podcast ...


14

There is no defined blueprint on what is the best language to learn. Therefor I would like to mention two good alternatives that I (and many otheres) think is a good languages to learn in computer security. LUA Explanation of Lua from wikipedia: Lua is a lightweight multi-paradigm programming language designed as a scripting language with "extensible ...


13

I really enjoyed Erickson's Hacking: The Art of Exploitation Fyodor's own Nmap Network Scanning I have also heard heard great things about, but haven't read yet, The Web Application Hacker's Handbook A Guide to Kernel Exploitation


12

That's a tough question to answer, because "Computer Security" is a very broad field-- If you are looking for just general computer security stuff, I would start following Richard Bejtlich, who has authored a couple very good network security & forensic books--But he also deals with the philosophical mindset of computer security--For instance, from the ...


12

I tend to start with http://secunia.com for vulns per-product or vendor, pick the CVE references up from there and then view the details on http://www.cvedetails.com


12

A typcial example of non-trivial buffer handling is the parsing of binary files (or network packets) that can contain arbitrary-length strings. (Is there any ASN.1 parser that didn't have buffer overflows bugs at some time?) For example, consider the format of textual data chunks in PNG files: The keyword and text string are separated by a zero byte ...


12

Vulnhub is a collection of vulnerable distributions along with walkthroughs contributed by the community. exploit-exercises.com provides a variety of virtual machines, documentation and challenges that can be used to learn about a variety of computer security issues such as privilege escalation, vulnerability analysis, exploit development, debugging, ...


11

Get a job in the IT industry - any job. Work a help desk if you have to because that still counts as experience and experience is what employers really want to see on a resume. Get your foot in the door. I know a lot of people (myself included) who got to where they are because of entry level jobs and working hard to prove their worth. Get involved in the ...


11

I've been really enjoying: http://exploit-exercises.com/ From their site: Nebula - Nebula covers a variety of simple and intermediate challenges that cover Linux privilege escalation, common scripting language issues, and file system race conditions. Protostar - Protostar introduces basic memory corruption issues such as buffer overflows, format strings ...


11

Sans has a Web Penetration Testing and Ethical Hacking: Capture the Flag class you might be interested at https://www.sans.org/security-training/web-penetration-testing-ethical-hacking-capture-flag-day-6-13632-cid There are some capture the flag sites that you might learn from using http://hax.tor.hu/ https://pwn0.com/ http://www.smashthestack.org/ ...


11

If you want to learn more about the security domain, blogs are not where I'd start. I'd start with classic books. Ross Anderson's Security Engineering is an absolute classic, a must-read for anyone in the business. Others may have other suggestions. As for blogs, here are a few suggestions: Schneier on Security Krebs on Security Freedom to Tinker Light ...



Only top voted, non community-wiki answers of a minimum length are eligible