BlackBeret wrote: »
You would be surprised. My first year at this company we had an unlimited training budget, only requirement was to stay for a year after passing whichever cert test. I hesitated to use it while others were taking 3-4 SANS courses.
scenicroute wrote: »
I was looking at GPEN course prices last night: $6000. Not sure how anyone affords that or what company would pay that much for employee training.
scenicroute wrote: »
Thanks for replies. I was looking at GPEN course prices last night: $6000. Not sure how anyone affords that or what company would pay that much for employee training. OSCP is definitely more affordable.
My work won't pay for GPEN, too expensive, but I would love to do any SANS course specially GPEN. I applied for work-study.. so I am waiting for my lucky number...
So it all depend on who pay
OSCP will give you basic information but expect to do a lot of hunting for information. It's much more geared towards experienced or hard headed people because you really have to keep moving and "try harder".
Ideally if you can, I would go through GPEN first to get a solid base. I've been through OSCP and SANS courses (not GPEN though) and I prefer the traditional approach to learn a new subject followed by advanced studies.
The big difference between the two is that GPEN is instruction and theory based. OSCP is lab based. GPEN will tell you how a port scanner works. tell you what all of the switches in Nmap do, situations where you might want to use one instead of another. OSCP will have you write a very basic port scanner, then make you use portscanners over and over again on a variety of different boxes, sometimes pivoting through other systems in various ways. You'll learn (the hard way) that when pivoting through the MSF SOCKS proxy you have to use a full connect scan, and only TCP connections are supported, etc. etc.
Wow, that's a nice deal.
Mostly Government and companies with deep pockets. I'll be taking my third SANS training course in two years, We were told earlier this year that were now limited to one SANS course every two years, but for some reason they added money to the training budget this year to encourage people to get training. So I'm taking advantage of it.
At least, that was the route I took ..
It's still a matter of a bit of luck to get selected, but it's worth a try ..
You get the course material, you get on-demand, will receive 2 test-exams as anybody else and the voucher for the exam .. certainly take a peek at the price ..
Agreed, you need to work for it, but you certainly will get an interesting experience in return