Becoming pentester

bsdbandit

OK im looking to become a penetration tester i've been working in the IT since 2003 i have experience with solaris/linux and some perl and python i currently have my network + and security + and im sitting for part2 of my linux + exam on monday. after that i plan on getting the following certifications


1. SCSA (Solaris 10 sys admin cert)
2. RHCSA
3. RHCE
4. CEH
5. MCP (microsoft cert)


My question is am i on the right track to becoming a pentester

Bl8ckr0uter

Look here:

http://www.techexams.net/forums/security-certifications/28593-security-certification-where-start.html

http://www.techexams.net/forums/ec-council-ceh-chfi/35544-so-you-want-take-ceh-read.html

Lizano

A while back I asked about elearnsecurity.com and people had good stuff to say about them. The price seems fair.

http://www.techexams.net/forums/general-certification/56709-elearnsecurity.html

I got a promotion at my job since I opened that thread and have not had the time to take the course (Wow, it´s been a year already!) , but hopefully I will be getting to it before December.

certnerd

Just be careful not to get too wound up in the complex networking and application based exploits and then do no testing of the physical security, waste management and staff training etc.

Most Pen testers are frankly crap. Even the standards they work to are crap.

Very few look at things such as the ability to get the AC in the comms room to fail. Ability to create a power failure. Can I phone the companies IT support team and fool them into reseting a password. Can I walk in and out of the building with a switch under my arm. Can i plug an AP into the network undetected. Can i plug a keylogger into PCs undetected. etc etc

The CEH isn't very good at the deep technical stuff, but one or two of the thousands of modules do at least point out that security isn't just about having a firewall.

If you are in the UK. www.networkacademy.co.uk advertise CEH at £750