Ask HN: Get into computer security

Posted by newbie_hacker on Tuesday October 06, 2015 @05:37PM
from the ask-hn dept.

I've got a month free to do what all I want. I really want to dive into computer security. I already know the basics. What would you suggest I should do?

( 10 comments | 16 points | on HN )

Re:Ask HN: Get into computer security by TobbenTM on Tuesday October 06, 2015 @06:52PM (#10342984)

Go play some CTFs! https://microcorruption.com is amazing.

[ Parent | on HN ]

Re:Ask HN: Get into computer security by alltakendamned on Wednesday October 07, 2015 @05:47AM (#10345041)

OSCP certification: https://www.offensive-security.com/information-security-trai...

The lab is a lot of fun.

[ Parent | on HN ]

Re:Ask HN: Get into computer security by runjake on Wednesday October 07, 2015 @02:33PM (#10347953)

I'm unsure why you're being downvoted. This is (one of) the best answers given the OP's question.

The course is comprehensive and relatively inexpensive, although I recommend 90 days of lab time for the full effect.

[ Parent | on HN ]

Re:Ask HN: Get into computer security by tptacek on Wednesday October 07, 2015 @12:28PM (#10346961)

http://cryptopals.com

[ Parent | on HN ]

Re:Ask HN: Get into computer security by debacle on Wednesday October 07, 2015 @08:52AM (#10345653)

Hound 'tptacek to take you under his wing.

Alternately: http://www.amazon.com/lm/R2EN4JTQOCHNBA/ref=cm_lm_pthnk_view...

He (or Matasano?) also has an article somewhere outlining roughly what steps you need to take from programmer -> security expert, but it wasn't easily googleable.

[ Parent | on HN ]

Re:Ask HN: Get into computer security by sarciszewski on Wednesday October 07, 2015 @01:00PM (#10347219)

I maintain (curate, really) a list of resources on Github. Most of the content on the list was suggested by other folks in the community: https://github.com/paragonie/awesome-appsec

[ Parent | on HN ]

Re:Ask HN: Get into computer security by ptlab on Tuesday October 06, 2015 @05:54PM (#10342686)

Checkout https://pentesterlab.com/bootcamp and/or https://pentesterlab.com/exercises

[ Parent | on HN ]

Re:Ask HN: Get into computer security by vampire_dk on Wednesday October 07, 2015 @03:47PM (#10348525)

You can practice CTF challenges at https://backdoor.sdslabs.co/ :)

[ Parent | on HN ]

Re:Ask HN: Get into computer security by phaus on Tuesday October 06, 2015 @06:12PM (#10342777)

What area of security interests you and what do you mean by "I already know all of the basics?"

[ Parent | on HN ]

Re:Ask HN: Get into computer security by newbie_hacker on Wednesday October 07, 2015 @10:09AM (#10346074)

I know about web security(SQL, XSS). Am comfortable with tools like DirBuster, sqlmap, ripping git from web, etc. I am comfortable with networking concepts like HTTP, TCP, UDP, IP. Have knowledge about IP Spoofing, packet sniffing, syn flooding. By knowledge I mean I know the internals as well, not just how to do them using tools. Regarding binary I can overflow a buffer by modifying return addresses, see stack using format string vulnerability, etc. But this only at a simple level. Have experienced with tools like gdb, objdump, IDA pro, etc.

[ Parent | on HN ]