Tag Info

New answers tagged

4

Another good one is http://exploit-exercises.com/ "exploit-exercises.com provides a variety of virtual machines, documentation and challenges that can be used to learn about a variety of computer security issues such as privilege escalation, vulnerability analysis, exploit development, debugging, reverse engineering, and general cyber security issues. "


5

I have to say, reading the program materials, I'm not surprised. As you say, the IT security field is very broad - and programming is only a very thin slice of it. If you love programming, and are looking for it to be the center point of your education and your work, then I'd offer the idea that what you're really looking for are courses in Software ...


1

Find the one that actually teaches you how to hack. Many courses focus on crypto and "security policy" topics instead of giving people hands-on experience. Breaking into things is much more paid and much more sought after in the current environment. This is what one uni does in Australia - ...


1

I'm not sure if I can tell you what school has a good information security program, but I think what you should probably look into is good computer science schools. I believe that in order to be a 'hacker' you have to be able to think like a hacker. Thinking like a hacker is easiest once you have learned the mechanics of the technology employed by your ...


12

I'd suggest in additiona to HamZa DzCyberDeV's answer: Pentester Labs exercises which are full VMs as well as full detailed walkthroughs etc. These are great for all skill levels and i've found them most useful.


23

There is quite a lot of them: Metasploitable: Currently there are 2 versions. Kioptrix: Currently 4 challenges. Hackademic: Apparently 2 VM, check 1 and 2. pWnOS: Currently 2 challenges. Standalone which you can install directly without VM, this is to hone your Webattack-Fu: OWASP WebGoat Damn Vulnerable Web Application Mutillidae


1

There are many security related certifications that are more technical than management related. These are some: CompTIA Security+ GIAC Security Essentials Certified Ethical Hacker (CEH) Security+ is a more "neutral" security cert in that it is vendor agnostic, unlike something like a VMware or Cisco certification. It focuses on cryptography and a broad ...


3

This question is subjective because it really does depend on the direction you want to go. My advice would be to go for the CISSP because it is a very broad and it would give you a survey of the different areas of security. ISO27001 is a standard and very focused around certain areas, you wouldn't lean that much. Plus, it's really, really boring. Not that ...



Top 50 recent answers are included