4 ms·

There's always value in a guided course, but everything on the outline can be found free online. Unless you need the structure, I'd save your money and use open

There's always value in a guided course, but everything on the outline can be found free online. Unless you need the structure, I'd save your money and use open learning materials.

trebor 13y ago
I'd suggest that if you know where these subjects can be found online, and since there are many who state that they don't have $1000, that you should post the links here. Those of us that wish to take the course by Cody will still do so.
- rmusser 13y ago
  vulnhub.com for vulnerable distributions. They have some distributions setup with WebApps designed for you to practice and learn various attack from.(I.e WebGOAT) OWASP(Open Web Application Security Project) OWASP Top Ten: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Proje... OWASP Testing Methodology manual: https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table_of_Contents https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table... OWASP Developer Guide: https://www.owasp.org/index.php/Category:OWASP_Guide_Project https://www.owasp.org/index.php/Category:OWASP_Guide_Project PTES(Penetration Testing Execution Standard): http://www.pentest-standard.org/index.php/Main_Page http://www.pentest-standard.org/index.php/Main_Page CTFs: overthewire.org Self-Promo: rmusser.net/infosec site full of information on various infosec topics. Going through right now and updating/increasing the quality of information.
- peterwwillis 13y ago
  https://www.owasp.org/index.php/OWASP_Appsec_Tutorial_Series http://www.lulu.com/spotlight/owasp https://www.owasp.org/index.php/Category:OWASP_Testing_Project https://www.owasp.org/index.php/Category:OWASP_LiveCD_Education_Project
- anExcitedBeast 13y ago
  These guys are right about OWASP - great resource. A great high value tutorial for password storage can be found here: http://crackstation.net/hashing-security.htm http://crackstation.net/hashing-security.htm Beyond that, it's all very searchable.
tptacek 13y ago
There is an enormous difference between reading about software security and actually trying to practice it.
- mpeg 13y ago
  But there's plenty of "practice targets" out there ;) Jokes aside, I'm sure there's still lots of wargame websites; there used to be some pretty good ones with a healthy mix of web/crackme/network challenges.

There's always value in a guided course, but everything on the outline can be found free online. Unless you need the structure, I'd save your money and use open learning materials.

trebor 13y ago

I'd suggest that if you know where these subjects can be found online, and since there are many who state that they don't have $1000, that you should post the links here. Those of us that wish to take the course by Cody will still do so.

rmusser 13y ago
vulnhub.com for vulnerable distributions. They have some distributions setup with WebApps designed for you to practice and learn various attack from.(I.e WebGOAT) OWASP(Open Web Application Security Project) OWASP Top Ten: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Proje... OWASP Testing Methodology manual: https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table_of_Contents https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table... OWASP Developer Guide: https://www.owasp.org/index.php/Category:OWASP_Guide_Project https://www.owasp.org/index.php/Category:OWASP_Guide_Project PTES(Penetration Testing Execution Standard): http://www.pentest-standard.org/index.php/Main_Page http://www.pentest-standard.org/index.php/Main_Page CTFs: overthewire.org Self-Promo: rmusser.net/infosec site full of information on various infosec topics. Going through right now and updating/increasing the quality of information.
peterwwillis 13y ago
https://www.owasp.org/index.php/OWASP_Appsec_Tutorial_Series http://www.lulu.com/spotlight/owasp https://www.owasp.org/index.php/Category:OWASP_Testing_Project https://www.owasp.org/index.php/Category:OWASP_LiveCD_Education_Project
anExcitedBeast 13y ago
These guys are right about OWASP - great resource. A great high value tutorial for password storage can be found here: http://crackstation.net/hashing-security.htm http://crackstation.net/hashing-security.htm Beyond that, it's all very searchable.

tptacek 13y ago

There is an enormous difference between reading about software security and actually trying to practice it.

mpeg 13y ago
But there's plenty of "practice targets" out there ;) Jokes aside, I'm sure there's still lots of wargame websites; there used to be some pretty good ones with a healthy mix of web/crackme/network challenges.