Open Source security tools

see post in certification forum

Hi Christian, please try and ask your question in one forum alone. I have removed the post in the certifications forum.. here is the original post content for people to answer

I just wanna get the forums opinion on what would be the best approach to learn open source security tools. I am studying cisco certs at the minute but wonder would it be important to supplement cisco with a linux cert. I have three theories on this:

1. Red Hat seems to very popular although maybe overkill and expensive.
2.Would a basic grounding such as Linux + or LPIC1 be sufficient to then start to learn how use open source security tools.
3. Would a course such as the cisco fundamentals in unix be better and less pressured than having to do a linux exam on top of cisco exams?

The cisco funamentals in unix does not seem to get a good review on amazon.

Sahir I what do you think?

on the post subject?

here's what I think:

1. Certifications from commercial vendors only aim to your pockets and their advertisement --Cisco's are more or less the only worthwhile IMHO.
2. Do not expect to actually learn enough from taking these certifications, only go for them if you think they will help you in finding a job.
3. Especially things such as unix stuff can be learnt much better if you take a different approach, install the operating system somewhere and experiment on your own. We are talking about free software, meaning that documentation and support -usually of the same quality- exists also plentiful and free. So the only tool needed is a web browser with access to the internet nearby and google, maybe a coffee cup and a cigar also.. But definitely no pressure at all..

Christiian... I would suggest you download a live-cd like knoppix-std.. from www.knoppix-std.org

or LAS from www.localareasecurity.com

or Auditor from www.remote-exploit.org/

These will give you a good start both with Linux, and of course with the open-source security tools..

As nske noted, there is no way to 'learn' these tools from a certification... the only way is through experimentation..
play around with the common ones, like nmap, nessus, snort, tripwire, ethereal, ettercap, kismet etc...


Thats the best way.


Cheers,