After the Exam: What's next?

Outrageous

Something that I've been pondering; how does an "ethical hacker" stay current? Are there communities? Resources? I know there's additional certs, but I'm mostly thinking of the tangible and practical.

roninkai

I'm working on CEH. And from my learning so far, it doesn't scratch the surface of what's out there. IMO, either go up the EC-Council chain (ECSA, LPT), or specialize with a tool to really get knowledgeable and expertise. CEH exposes you to say something like nMap, but it no way are you now an nMap pro. I recently made a list of "tool certifications" that would compliment a good pen testers skillset (WCNA, Metasploit Cert, Snort, etc). You can try Meetup for communities, or find a capture the flag event to try to conquer.

Mike7

After passing CEH, you need to maintain it via continual education. The requirement is 120 ECE

OM602

After CEH, CISSP might be a good idea.
If you want to continue in pentesting, try OSCP.
Apart from HR people, this cert is much more respected.

MitchRapp

Here ya go...

CEH>>>CHFI>>>ECSA>>>LPT Master
or
CEH>>>ECSA>>>LPT Master

ECSA is expert level and LPT Master is Advanced. My guess is the majority will fail LPT Master, though. Reworked and reconfigured, if you can conquer it, you are truly a Master.

cyberguypr

Step 1: Get a better/more advanced cert to wash off the CEH
Step 2: Let CEH expire

wayne_wonder

cyberguypr wrote: »

Step 1: Get a better/more advanced cert to wash off the CEH
Step 2: Let CEH expire

Have you let yours expire or do you still have it in your cv? I ask because you seem to hate it yet you have it!?

cyberguypr

Only have CEH and CHFI because they were requirements for my Masters. I seriously considered NOT doing the WGU MSISA because of this but reason prevailed.

wayne_wonder

Lol damn that's a serious hatred for the cert/company!