Ask HN: Get into computer security

https://news.ycombinator.com/item?id=10342597

by newbie_hacker • 11 years ago

16 10 11 years ago

news.ycombinator.com

I've got a month free to do what all I want. I really want to dive into computer security. I already know the basics. What would you suggest I should do?

ptlab• 11 years ago

Checkout https://pentesterlab.com/bootcamp and/or https://pentesterlab.com/exercises

phaus• 11 years ago

What area of security interests you and what do you mean by "I already know all of the basics?"

newbie_hacker• 11 years ago

I know about web security(SQL, XSS). Am comfortable with tools like DirBuster, sqlmap, ripping git from web, etc. I am comfortable with networking concepts like HTTP, TCP, UDP, IP. Have knowledge about IP Spoofing, packet sniffing, syn flooding. By knowledge I mean I know the internals as well, not just how to do them using tools. Regarding binary I can overflow a buffer by modifying return addresses, see stack using format string vulnerability, etc. But this only at a simple level. Have experienced with tools like gdb, objdump, IDA pro, etc.

TobbenTM• 11 years ago

Go play some CTFs! https://microcorruption.com is amazing.

alltakendamned• 11 years ago

OSCP certification: https://www.offensive-security.com/information-security-trai...

The lab is a lot of fun.

runjake• 11 years ago

I'm unsure why you're being downvoted. This is (one of) the best answers given the OP's question.

The course is comprehensive and relatively inexpensive, although I recommend 90 days of lab time for the full effect.

debacle• 11 years ago

Hound 'tptacek to take you under his wing.

Alternately: http://www.amazon.com/lm/R2EN4JTQOCHNBA/ref=cm_lm_pthnk_view...

He (or Matasano?) also has an article somewhere outlining roughly what steps you need to take from programmer -> security expert, but it wasn't easily googleable.

tptacek• 11 years ago

http://cryptopals.com

sarciszewski• 11 years ago

I maintain (curate, really) a list of resources on Github. Most of the content on the list was suggested by other folks in the community: https://github.com/paragonie/awesome-appsec

vampire_dk• 11 years ago

You can practice CTF challenges at https://backdoor.sdslabs.co/ :)

Ask HN: Get into computer security

Related Stories