While looking at security tube I noticed that they had courses and certifications. I knew they had them but never really paid too much attention to it. There is a paid version and a community version. The community version provides the same videos as the paid version for free! Vivek has been kind enough to provide these to the security community in an effort “to provide quality yet free infosec education to one and all” I highly recommend these courses if you are looking to learn more about security or learn a scripting language.
The end of the year has been one of the most insane times of my life. I gave birth to two healthy baby boys! We survived dooms day AND the fiscal cliff. I have a few things I want to do while still on maternity leave. One hook up the momma mobile with a new stereo system. I also want learn python and get into some hardcore studying for my GPEN.
I have made it to week 36. This means the boys are due at any time. I am currently on maternity leave and very happy for it. I don’t have to focus on anything but me and the boys. I thought about making another blog to record my journey as a twin mom to be.. but then I changed my mind. I am way to scatter brained to do that lol.
I am always looking for ways to keep my skills up. I have found looking for challenge sites a way of doing that. Sometimes it can be very hard if you are newish to network security but don’t have a great lab to test your skills. Hacking-Lab is a great way of doing that.
I installed Backtrack 5R3 in VirtualBox. I have always used VMware and figured I would give it a try. It isn’t so bad. It has a lot of networking features I look forward to messing with. .
I am now 22 weeks pregnant with twin boys. I still need to work on my GPEN. I am also currently coming up with ideas to assist me in finally beating my fear into the group and learning how to code. I have chosen python for many reasons. For some reason I can figure out a program, it’s inner workings, but when it comes to developing.. well.. I would rather break it. :D.
James Lester & Joseph Tartaro: “Burp Suite: Informing the 99% of what the 1%’ers are knowingly taking advantage of
Burp Suite has created a name for itself as arguably one of the go-to weapons of choice for web application pentesters, but one of its best features is consistently being ignored: the ability to append or modify functionality through the use of burp extensions. Extensions as a feature have introduced users to numerious possibilities, and have given opportunities to easily develop functionality that’s necessary to complete required test related tasks. With all that is available through Burp extensibility, why have we not seen its users contribute functionality to the same degree as community driven projects such as MetaSploit or the Nmap Scriptability Engine? In this presentation, James Lester and Joseph Tartaro will debut their campaign, which focuses on building demand, support, and an overall desire around the creation of Burp extensions in the hope of bringing extensibility to the forfront of web application testing. As a team, James and Joseph will begin by outlining the current demand, capabilities, and limitations while introducing up to a dozen extensions they created that presently utilize all current accessible functionality within the extensibility suite. Along with the release of these extensions, a campaign will be presented to organize and develop an extension community that documents tool primers, lessons learned, and tips/tricks, along with hosting extensions and tools catered to Burp. As a team, Joseph and James will showcase the benefits to their approach, which include increased efficiency and a simplified way to write new scripts. During development of this talk, James and Joseph took into consideration that re-use is a key factor and development techniques were used to help test user adaptation. Something learned isn’t research until it’s shared, and they plan to put this statement to practice utilizing B-Sides as a perfect tool to help collect data, convey interests, and share results.
I took the SANS 560 course a few months back and have not been studying the way I wish I had.. carrying twins is not an easy task. Now that I am in my 2nd trimester I am able to focus more on gaining my GPEN before Sept. Today with a friends help I was able to understand what people were saying about indexing the books to assist me in learning and testing for the exam.