The Pentester BluePrint: Starting a Career as an Ethical Hacker by Phillip L. Wylie & Kim Crawley

Author:Phillip L. Wylie & Kim Crawley [Wylie, Phillip L. & Crawley, Kim]
Language: eng
Format: epub
ISBN: 9781119684374
Publisher: Wiley
Published: 2020-11-24T00:00:00+00:00

Pentesting Certifications

You have options when it comes to pentesting, and some non-pentesting certifications could still be helpful for aspiring pentesters. Some certifications are well-known with pentesting while others are not. The well-known certifications are typically the ones with which human resources and management are familiar. These pentesting certifications are what we refer to as entry-level credentials.

Entry-Level Certifications

Certified Ethical Hacker

EC-Council's Certified Ethical Hacker (CEH) certification is one of the first ethical hacking certifications and probably one of the most useful ones for finding a job as a pentester. The CEH is a Department of Defense (DoD)–recognized certification, and it is part of the DoD Directive 8570 certifications. The CEH can be helpful in getting government contracts.

EC-Council prefers that you have two years of pentesting experience before taking the exam, but you can get a lot of that experience from simulating cyberattacks on virtual machines, virtualized networks, and your own devices, as described in Chapter 5, “Building a Pentesting Lab.” As of 2020, the current version of the CEH is v10. When taking the exam, you are given four hours to conduct your 125-question exam in a supervised environment and, at the time of this writing, it costs $1,199 USD to take. Here are the modules on the exam to get you started:

Introduction to Ethical Hacking

Footprinting and Reconnaissance

Scanning Networks

Enumeration

Vulnerability Analysis

System Hacking

Malware Threats

Sniffing

Social Engineering

Denial-of-Service

Session Hijacking

Evading IDS, Firewalls, and Honeypots

Hacking Web Servers

Hacking Web Applications

SQL Injection

Hacking Wireless Networks

Hacking Mobile Platforms

IoT Hacking

Cloud Computing

Cryptography

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.