Hi,
My colleague has the support from our organisation to fund some courses and training into hacking. They did pay for CEH
- something I would not have recommended.
Unfortunately my colleague did not pass the exam although was not far off and has learnt a ton from reading and practicing by himself. So he's making good progress.
What courses would you recommend?
What certifications?
Not just OSCP, or pen testing, but general stuff?
I was thinking scripting, linux, eJPT,
SEC401: Security Essentials Bootcamp Style (GSEC)
SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling (GCIH)
The sans courses are only if there is the budget for it - not sure they'd stretch that far but worth a try.
My own belief is you can achieve more by self-learning and hacking away, trying things at home. But they want formal training and a "training roadmap"
Any thoughts?
ADDITIONALLY - I should have said in the original post that:
We both work in law enforcement. None of this is about how attractive the certifications would be to employers, it's about the knowledge. It's good to have a formal qualification from the learning though, as that goes onto a training/personal record.
Also, he is not trying to become "a hacker", it's more about wanting to learn more about that area, about offensive security, pen testing, about exploitation, etc...
