Pen-Testing and CEH Practice Labs Reccommendations

---

Hello Mr. Lowrie, I thoroughly enjoyed you course on “Practical Pentesting: featuring Brad Stine”. Bringing in real-world guests like this coupled with the teaching chemistry was excellent!

I would like to ask for some guidance on the above topic? Basically, within the Practice Labs curriculum, it is difficult to navigate through the duplication and overlap between security lab content. Other certification labs I have completed (Net+ and CCENT) have not really lived up to my previous experiences (Cisco Net Academy, LOD and NETLAB). Therefore, I really would like to know what you would consider your most meaningful Practice Labs ITPro TV has for pen-tester students?

Greetings, @FLM

My favorite way of getting hands-on is through building my own labs via virtualization. This has the added benefit of getting you comfortable with setting up virtual machines as well as configuring environments that are purpose-built for learning ethical hacking (beebox, dvwa, mutilidae, juiceshop, metasploitable, and CTFs from places like Vulnhub.com).

I hope that helps.

Daniel

Yes indeed that is very helpful, I will definitely explore those options!

I was also trying to determine what are your recommended Practice Labs that ITProTV has to offer.

I was also curious about your guitar rig and what your favorite guitarists are? I am more of a jazz/rock/fusion player and occasional acoustic.

So glad to hear that was helpful, @FLM

I'm not a jazz/rock/fusion player, but I am huge fan of Tom Quayle, Martin Miller, and Guthrie Govan. I also love guys like Josh Smith, Ariel Posen, Joe Bonamassa, Joey Landreth, Mateus Asato, the list goes on :)

I am a blues/rock/metal player so my main influences there are Eddie Van Halen and Mark Tremonti. These guys influenced not only my playing, but also my rig. I have two rigs currently. One that I used a lot when I was a gigging musician and one now that allows me to have a great sound at bedroom, but also would work for small venue gigs.

I'm running all Peavey amps. Rig1 is a wet/dry setup consisting of a 6505+ and XXL. The 6505+ is running through a Marshall 1960B cab with Celestion G12T75 speakers and the XXL is a 2x12 combo running the stock Sheffield speakers. A couple of years ago I went fully digital for effects and so I'm using a Zoom G3n in the effects loop of the XXL for delay, pitch-detune, compression, and phaser.

My other rig is a wet/dry setup consisting of a Vypyr 100 Pro and a Vypyr VIP 2. These are both 1x12 combo modeling amps. I run the VIP 2 as the dry on the 6505 model and the Pro 100 is on the 3120 model with delay and reverb. I've got another Zoom G3n doing pitch-detune, compression, and phaser in the Pro 100's effects loop.

Guitars are PRS USA made Tremonti signature, Sterling JP150 with Seymour Duncan JB/Jazz set with a push/pull for single-coil tones, and PRS SE Singlecut are my main axes. Got a few others too, but those are my go-to axes.

Well that was probably an overshare, but you hit one of my favorite topics. Love to hear what rig you're running and we've got to get Wes in on this too.

Cheers,
Daniel

Wow! You are the man! I can't touch your full-tilt rig. I am green with envy. I gotta do some research on your musicians.

I am currently in the market for a class-A amp or gonna experiment and just build my own. I currently have 3 guitars. One humble Yamaha classical. An Ibanez fat jazz body with custom Duncans (basically the JB that was wired for Holdsworth tone in bridge pos) and a Seth Lover in the neck. My real prize is a custom Warmoth, hand-picked the woods (White Korina back with a Tiger Maple top; everything is just too much detail to post. I worked with a luthier on the assembly and custom modifications (a real luthier not the Guitar Center type). Apart from the multiple sounds like an PRS, I had the Graph-Tech Ghost system installed and jack-in to the Roland GR-55 synth. Oh yes, whammy bar included. Full loaded endless fun with the techy stuff but also jammin with friends.

@FLM I bet that Warmoth is gorgeous! That is definitely a piece to be proud of!

Most definitely.

I am eagerly looking forward to your Security+ SY0-006 course. I know that you are meticulous in your work and can't wait to see the final production!

In addition to your other Cybersecurity projects, have you entertained the CWNP certification for CWSP (Certified Wireless Security Professional) as another possible course?