BuzzSaw wrote: » It's hard for me to understand what your experience level is. So you've been in security roles? If you are starting from scatch, I would recommend starting with something like Georgia's Pen Testing course on Cybrary, along with reading her book. I would also pick up something like the The Hacker Playbook - Read through those then try your hand at some of the VM's on Vulnhub Or ... If you have time and some money, I would recommend maybe going through something like eJPT Or ... you could just dive right now. If you have the money to buy 90 days worth of lab time its a good starting point. The course itself will not teach you everything you need to know. It will give you a loose outline, and your goal is to self-learn as much as possible. I read on here a lot about people spending months and month in preparing the take the course that is supposed to prepare you for the exam. As for the exam deadline, it's pretty loose. You have 90 days to take it AFTER your lab time expires. So, if you start with say, 60 days, and buy another 60 days, you would have a total of 210 days to take the exam I believe. If you were my little brother, I'd tell you to prep on some of the basics so you wont feel as lost when you start the course. I'd say you would want to be pretty comfortable with the following: - Networking (subnetting, ports, protocols, etc) - How operating systems work (Windows vs Linux especially) - A general understanding of how much exploits work (Buffer overflow vs smashing vs injection, etc ) - A good method of researching things ... trust me, you will be researching things on your own ... A LOT - Finally, you will want to be able to read code and scripting languages. DON'T LET THIS SCARE YOU - You don't have to be a master. You just need to be able to look at code and understand generally, what it's trying to do, what language it's written in, etc
BuzzSaw wrote: » It's hard for me to understand what your experience level is. So you've been in security roles? If you are starting from scatch, I would recommend starting with something like Georgia's Pen Testing course on Cybrary, along with reading her book. I would also pick up something like the The Hacker Playbook - Read through those then try your hand at some of the VM's on Vulnhub Hi Buzzsaw thanks for the recommendation for the Georgia course. I have just started this and definitely feels like a good starting place.
