Thanks so much for your help Guys! 🙂

@daniel-lowrie87
for instance I have a client that his company called abc.com and if I want to scan over the internet a specific IPs that belong to a company abc.com thier internal network is it possible .
sinerio that could be happaned that my client want to to know if from outside some can attack.
I know that this case it's half work because mosts of the attacks occure from inside for several reason eployee that got fired or his boss made him anger and he want a revange.
but I'm looking from the outside because this case most of the people think that the probability to occurs is the highest one.
finally the job has to be done and I want to having a deal with more companies.
For now I just building myself to work as self empoyed in this field.

Hello @daniel-lowrie87 - thank you so much for your answer! The Metasploitable2 I found on the videos and some of the scans, but forgot about the other two - for sure will help to add to the "stock" of vulnerable devices!

Thank you again for your time and excellent details on the CEH course!

@Taylor-Armstrong , I hope all is well. Short answer here to your question, but feel free to be in touch directly if you would like to discuss further.

While it is hard to say definitively, as CompTIA does not publish specific guidance that indicates one way or the other, it is fair to assume that it would be very hard to pass an exam that has Performance Based Questions without getting some of them right.

The PBQ's/scenarios are tied to exam objectives, as are ALL of the questions in some way. The PBQ's/scenarios are usually tied to exam objective sections that start with "Given a scenario..."

My direct e-mail is: adam@itpro.tv

Good luck !!!

Cheers,

Adam

@daniel-lowrie87
Daniel - many, MANY thanks! (I'm watching you and Wes right now CySA+) I'm a "Noob" so my questions might be confusing. I have Kali set-up on Oracle's "Virtual Box" on my laptop. I've tried downloading the "bee-box" on that but again, no go. I believe my problem is not understanding, "...configure that VM on a private/host-only virtual network"...
Anyway, thank you again for your response, I will try the link you sent...because...well, just maybe...

Hi @Stephen-Ott ,
Which version you take depends on your personal timelines and comfort with the various domains. In the 2022 CISM, the domains will remain largely the same, with some language variation. However, questions will be weighted more heavily in favor of infosec programs and incident management. The 2019 exam expires on May 31st.

If you need to earn the CISM by June, the 2019 CISM course in ITProTV remains relevant and a good preparation resource https://app.itpro.tv/course/cism-2019/overview-cism-2019 . You can begin, or continue your preparation.

The conventional wisdom on exam prep is that if you have already started preparing for an exam, don't stop. If you can be ready to sit the 2019 exam before it expires, continue your preparation. If you do not feel that timeline is realistic, the good news is that exam registration is good for 12 months. Depending on when you registered (if you have registered yet to sit the exam already) you are afforded a good amount of time to work with the new materials.

Greetings, @ronnie-finkel

From the Nmap book about Zombie/Idle scans...

"Idle scan, as it has become known, allows for completely blind port scanning. Attackers can actually scan a target without sending a single packet to the target from their own IP address! Instead, a clever side-channel attack allows for the scan to be bounced off a dumb “zombie host”. Intrusion detection system (IDS) reports will finger the innocent zombie as the attacker."

You can learn more at...

https://nmap.org/book/idlescan.html

I hope that helps!
Daniel

@daniel-lowrie87 thanks

It's from pasting in the forum. In my key file are no newlines.

After some contemplation of this issue I found the following article
how-to-convert-openssh-to-ssh2

Might be that I have to convert it somehow to a standard ssh format in order to log into the machine.

ssh-keygen -e -f path/to/opensshprivate.key > path/to/ssh2privatekey/ssh2privatekey

So I tried to use the formula mentioned in the article to no avail.

ssh-keygen -e-f /home/user/id_rsa > /home/user/standardsshkey.txt
Load key "/home/user/id_rsa": invalid format

Guess the Meta machine at HTB keeps the user flag heavily guarded...

Hi Ronnie,

Labs are only available on the Premium plans, yes. If you have any further questions about upgrading your account, please chat in to our support team via the orange chat bubble on the site.

Tom M
ITProTV Member Services

@ronnie-finkel,

You must apply for eligibility to sit for the exam;

https://cert.eccouncil.org/Exam-Eligibility-Form.html

Then the guidelines are found here (if you studied on your own or via itpro.tv) :

Select Option 1 or Option 2 after visiting below:

https://cert.eccouncil.org/application-process-eligibility.html

you will see the Exam Voucher Price & Store Link section so you can purchase the voucher and see all the details about sitting for the exam there too.

Hi @Kenneth-Bittala ,
To answer your question, as subject matter experts and trainers we work closely with Practice labs in designing our content creation roadmap. We make recommendations based on what we are seeing in the industry and what we think will create a powerful learning experience. That said, requests are amplified when put together! In short, when member requests meet with edutainer recommendations, ideas more readily rise for consideration. Thank you for putting in the request with Practice Labs!

Ahh, VirtualBox makes this kind of thing a bit more difficult than it needs to be.

Try following this guide to get you working.

https://null-byte.wonderhowto.com/forum/wifi-hacking-attach-usb-wireless-adapter-with-virtual-box-0324433/

I hope that works!

Daniel

@andrew-silvera,

We do not have plans for it but you can submit this a course request via our site's chat bubble. This will be the official way to get it submitted and logged for review. thanks for being a member.

Yes, I get now the use of encryption with the Private key. Appreciate you answering quickly. Cheers.

Hey Justin, great question and yes I would recommend getting a study guide as it will help to backfill additional information to help you be successful on the exam.

Thanks for the info @Marc-Neugebauer

Let's start with something easy.

-sL simply lists targets to scan, but doesn't actually scan anything. SInce you used an IP range, you're seeing the list of IPs in that range and some of them are reporting the entries you made for those virtual machines in your /etc/hosts file

Now, to Misdirection...

If you have the Misdirection VM connected to your Bridged network, then your home router/AP would be the device that assigned the IP (unless you are using some other DHCP server).

That being the case, you should be able to login to your router/AP and see the IP assignments (most of these types of devices have a section so you can see IP assignment).

Look for the IP that is assigned to the Misdirection MAC address and you should be good.

If that doesn't work, then it is possible that the VM isn't getting an IP via DHCP. This is something that is very frustrating, but happens from time to time (speaking from experience). If that's the case you can look at walkthroughs for login creds and so you can login to the VM locally and fix the networking issues.

I hope that helps,
Daniel

@daniel-lowrie87 Thanks helps a lot i was wondering if it was a subnet problem. Though the website issue distracted me.

@angie Hi! Yes it is that exam. I saw the course was from 2021 but was hesitant about the practice exam itself as it was citing textbooks that are dated. But thank you for the information! I'll keep practicing.