跟读练习: you need to learn HACKING RIGHT NOW!! // CEH (ethical hacking) - 通过视频学习英语口语

选择练习模式

每种模式都会打开全屏练习室。

378 句
如果句子过短或过长,请点击 Edit 进行调整。
1
Hey, I'm going to become a hacker.
2
I'm going from a noob to hacker and I'm documenting that process in this series.
3
This is actually video number one.
4
You need to learn, learn, learn hacking.
5
but how am I going to do it well
6
I'm going to start with the most popular IT certification for hacking the CEH
7
or the certified ethical hacker ethical hacker what is that we'll cover
8
that here in a moment within this video series
9
I'm going to document my entire process the first one being
10
will this CEH certification actually make me a hacker we'll see will it get me a job
11
I don't know we'll walk through that
12
and I'll show you everything like how I approached the study
13
process what am I gonna be using how long will it
14
take me how will I lab what will I do
15
when I feel stupid burnt out
16
and I can't do it anymore well I'll show you that too
17
and a huge shout out to IT pro TV who's sponsoring
18
this part of my journey I'm actually using their CH version 10 training is my primary learning source
19
so if you want to check them out
20
and see what else they have
21
which is pretty much everything in the IT training world I got a link below and a code network
22
Chuck you'll get 30 % off everything forever.
23
So check it out.
24
And throughout this process, I'll teach you what I'm learning, but just the fun stuff, not the boring stuff.
25
Let's be honest.
26
Every IT certification has boring stuff.
27
So I'll do my best to bring out the practical hacking knowledge
28
that I'm gaining from the CEH study and just kind of consider this as, you know, cliff notes for hacking.
29
Should be fun, but hold up a second.
30
Why am I becoming a hacker?
31
Shoot, what is a hacker?
32
And what's this whole ethical hacking thing?
33
In this video, we'll talk about that as well as everything else to do with the CEH, what it costs, how I'm approaching it.
34
Um, is it for you?
35
What kind of jobs can you get with this?
36
We'll talk about all that, but first hacking, what is it?
37
I don't have to explain hacking to most of you.
38
You know what it is.
39
You've probably been a victim of hacking.
40
You've had your identity stolen.
41
Your company has had malware.
42
Uh, your computer's had malware.
43
You hear about things in the news, data breaches, all kinds of stuff.
44
Hackers are everywhere and you know what they are, but they're not just this.
45
They're not just bad guys who are trying to break down the government or trying to kidnap you through the dark web.
46
Like they're not just that.
47
There are bad actors.
48
There are bad hackers out there, but there are good ones too.
49
The bad hackers are called black hat hackers.
50
The good hackers are called white hat hackers and are typically referred to as ethical hackers.
51
Now, as far as what they do, they have the same skill sets.
52
They have the skill set through a variety of technical skills to break into your network, to break into your computer,
53
to steal your data, to plant viruses, and they can have different skill sets.
54
They're not all the same.
55
You can have someone very strong in networking, someone very strong in systems or maybe a developer, a programmer.
56
But what's the same is they use those skills to break into your stuff.
57
But you might be wondering, well, if they have the same skill set, then what's the difference?
58
The difference is permission.
59
White hat hackers or ethical hackers have it.
60
Black hat does not have it.
61
Same skill set, same goals.
62
Just one is allowed to and one isn't.
63
But why in the world would a company let a hacker hack into their network?
64
That doesn't make any sense.
65
Well, let me kick a scenario to you real quick.
66
Let's say I start a company, a coffee company the best coffee company in the world
67
I've got web apps I've got servers I've got a network I've got all kinds of stuff
68
and I put in the best security in the world I've got firewalls on firewalls all Cisco
69
that new secure X thing they're talking about everything no one can break it do I actually know
70
that I mean I can sit around
71
and wait for a hacker to try to get in
72
and then see that happen and go yes they couldn't get in
73
or maybe they do get in
74
and I never know about it you see I'll never know how truly secure my network is
75
or how secure my web application is or whatever I'm using I'll never know unless I have someone test it.
76
And that's where an ethical hacker comes in.
77
It's a hacker that I'll hire and say, Hey, Mr. Hacker, can you come and try to break my network, please?
78
I think it's pretty good.
79
I don't think you can do it, but I want you to try and let me know if you can.
80
And they'll do it.
81
They'll go in, they'll try to break in.
82
And if they do break in, they're not going to steal your data.
83
They're not going to sell it on the dark web.
84
They're not going to take all your money.
85
What they'll do is I'll type up a nice, pretty report and say, here, you might want to fix this.
86
You might want to fix these holes.
87
I was able to get through these vulnerabilities that I was able to exploit.
88
And you'll pay them for that service.
89
They're often called penetration testers or pen testers.
90
And you'll pay for a pen test.
91
It's a very common thing in IT.
92
Moral of the story, be a white hat hacker.
93
Do not be a black hat hacker.
94
You get to have as much fun as the black hat hackers without going to jail.
95
It's perfect.
96
Win, win, win.
97
Now there is a middle ground, another kind of hacker.
98
It's called a gray hat hacker.
99
As you might expect, this is kind of a gray area.
100
I mean, not really when you think about it, but essentially they're like a black hat hacker in that they will hack without permission.
101
They'll break into your company without your explicit permission, but they don't have malicious intent.
102
And that's the main difference.
103
And maybe like you, when you're learning how to hack, you just want to test out your hacking skills.
104
So you go and try and hack a company without permission.
105
You don't have malicious intent, but it's still illegal.
106
So don't do that.
107
There are also great hat hackers who will hack into a company.
108
They won't steal data, but they'll let the company know, Hey, I found some vulnerabilities.
109
money please pay me so while they don't have malicious intent it's not exactly legal
110
and you shouldn't exactly do that now there's one type of hacker
111
that regardless how you feel about ethics is looked down upon
112
you should never be this type of hacker script kitties these are basically not hackers
113
they are a form of hackers officially
114
but they're not hackers what they'll do is they'll use legit hacking tools without understanding how they work
115
so you might download kali linux as a noob without knowing anything.
116
I'm guilty of that.
117
So I've been a script kitty.
118
You'll download the tool and use it without knowing what it's doing.
119
You don't understand networking.
120
You don't understand systems.
121
You don't understand the security vulnerabilities you're exploiting.
122
You're just clicking a button.
123
Don't be that guy.
124
Don't be that girl.
125
Don't be a script kitty.
126
Understand what you're doing.
127
Understand the technology.
128
That's the fun part.
129
That's the fun part is learning how it works.
130
Oh, so fun.
131
So don't, don't be that.
132
Join me in my journey and becoming a hacker and actually understanding what you're doing.
133
So come on, let's go.
134
Now, there are other types of hackers with different motivations.
135
You have like hacktivist.
136
These are people who like black hat hackers, hack without permission, but they have different intentions.
137
Like they may want to overthrow governments or overthrow companies that have bad morals in their opinion.
138
You might be familiar with one of those groups, anonymous.
139
They're kind of like vigilantes, like Batman.
140
Like they're heroes.
141
They're doing good things, but they're not legal.
142
Like if they they got caught, they would go to jail, but we often root for them.
143
Then you also have terrorists who legit use their skills like any other terrorist would.
144
You might have state -sponsored hackers,
145
meaning they might work for a government and they are using their skills to overthrow other governments or infiltrate other governments, to spy on other governments.
146
So it's all about your motivation.
147
Why are you doing it?
148
And I can only condone one, one particular type of hacking.
149
That's white hat hacking, ethical hacking.
150
It's what I'm becoming it's what you should become avoid the rest all right
151
now let's talk about the ceh the certified ethical hacker certification
152
it's put on by the ec council that's who runs this thing
153
and um it seems to be an intense certification
154
i love their tagline to beat a hacker you must think like a hacker corny
155
but i like it now one of the reasons
156
that the ceh is so popular is that it's dod 8570
157
and the new one 8124 compliant what does that mean it means
158
if you want to work for the government in cybersecurity or be a contractor in cybersecurity for the government,
159
you have to meet that DOD 8570 standard.
160
And the CEH is one of the certifications that will allow you to meet that standard.
161
So you get the certification, you're good.
162
But beyond that, I've got a huge beef with the CEH.
163
And that's the barrier to entry.
164
Not just anyone can walk in off the street and take this exam.
165
Before they'll even take your money and allow you to take the exam, you have to have at least two years of IT security experience.
166
And you have to verify that.
167
Like you have to actually apply for it.
168
You have to prove that you've worked in it security for two years
169
and you have to submit an application that costs a hundred bucks, non -refundable and doesn't go towards any other cost.
170
Just a hundred bucks.
171
You don't get it back.
172
And if you're not qualified, then that was it.
173
It's crazy.
174
Now there is another option option two, you can pay for their course, which at the time of this video is around $850,
175
which I know ain't cheap.
176
Uh, and as long as you verify that you've gone through the courseware, whether it's in person online,
177
self -paced, They'll allow you then to pay for the exam.
178
But boy, that exam is expensive.
179
My second beef with this exam.
180
While other certifications maybe will go for around $350, $400.
181
I mean, IT certification exams aren't cheap, but this one makes it a bit laughable.
182
If you want to go through Pearson VUE, it costs $1 ,199.
183
That's $1 ,199 for the exam.
184
No training material.
185
Now, you can schedule it through them, through the EC Council, and it's actually only 950 only 950
186
but wow that's expensive
187
so i really hope i pass the first time i hope you pass the first time
188
or your company's paying for it either way it's crazy right
189
but even with that price tag it's still one of the most popular hacking certifications out there
190
which is why i felt i needed to go down this path and at least explore this particular certification
191
see
192
if it actually does make me a hacker does it give me the skills
193
i need to maybe apply for a job and i'll actually get it
194
or will i actually have the hacking skills to do hacking like let's find
195
that out now i didn't make this very clear but it's an
196
or situation or have it experience or pay for their course
197
and then pay for the exam pearson view
198
or through the ec council now real quick there are two ceh certifications
199
which makes things a little bit confusing
200
but there is another one called the ceh practical
201
and actually here's a great chart um apparently you're supposed to take the C and D first, the certified network defender.
202
I'm going to skip that.
203
I know networking.
204
What we've been talking about so far is the C E H the base, and it's actually referred to as the C H ANSI.
205
And the main difference between the practical is that this is more, more theory, more of why are we hacking?
206
How are we hacking?
207
How does it work?
208
And there's practical stuff involved.
209
Like when you take the exam, there will be scenarios, practical scenarios, but in the practical exam itself, is as you would expect, much more practical.
210
You basically get 20 scenarios where it's real hacking.
211
They give you a situation where you have to hack and demonstrate your skills.
212
The prerequisite for this exam is that you have the CEH ANSI.
213
If you don't have that, then you are not taking that exam.
214
No, that's all I'm gonna say about that one.
215
I might go for it, I might not, I don't know.
216
We'll cross that bridge when we get there.
217
But let's get back to the CEH, which is now at version 10.
218
Now real quick, let's answer the question, are you ready for the CEH?
219
Meaning, do you have enough experience? because they want you to have two years of IT security experience before even attempting it.
220
That assumes that you have some knowledge before you attempt it.
221
But what do you really need to know?
222
Well, ITProTV covers that pretty well.
223
And who is CEHB10 targeted towards?
224
CEH is targeted toward the person who's been in the business a little while.
225
They've probably worked as an administrator in some way, shape or form, either in systems or networks or both,
226
maybe done a little bit of DevOps kind of thing,
227
but you do need to have a foundational knowledge of networks and systems ranging from Microsoft through Linux,
228
Apple, mobile platforms as well.
229
You don't want to come in this cold turkey.
230
People have done it, but they don't really recommend that
231
because of how much knowledge they assume that you'll have going into this exam.
232
But I'll sum it up here.
233
You'll want networking.
234
You want basic security knowledge, basic sysadmin knowledge.
235
This includes both
236
Linux and Windows, and then even scripting and programming.
237
Now, do you have to be an expert in all these things before you can even attempt a CEH?
238
No. Now, I would say if you got the A +, network plus, maybe CCNA, you dabbled in Python,
239
you messed with Linux, you're probably going to be okay.
240
But just know, if you come in cold without any previous IT experience, you might have a rough time.
241
You might have situations where you're studying and you have to go, Okay, time to put this down.
242
I need to go study some networking real quick because I don't know what they're talking about.
243
So I wouldn't consider this an entry -level certification, more intermediate, assuming that you have some previous IT experience.
244
All right, now for the fun stuff.
245
How am I going to study for this?
246
What am I using?
247
What's my approach?
248
Let's cover that.
249
Let's start with the tools first.
250
If you've watched my channel before, you know I always say you need a great video series,
251
a great book, and a great lab to tackle anything in IT.
252
Trust me, it works.
253
For video, I'm using ITProTV and their CEH version 10 training.
254
I've got it open right here.
255
So far, been fantastic.
256
And they cover everything you need to know for the CEH.
257
And by the way, they cover all other courses as well.
258
So check them out.
259
Link below.
260
For the book, I'm using, well, it's a CEH book.
261
And it's got a long title.
262
So I'm just going to put CEH book here.
263
But I'll show you real quick.
264
And I got a link below for this.
265
The CEH Certified Ethical Hacker All -in -One Exam Guide, 4th edition.
266
I'm using this.
267
You can buy it on Amazon.
268
Got a link below.
269
Or you can do what I do.
270
And I use O 'Reilly, which is a subscription service that gives you access to every IT book under the sun, which is fantastic.
271
I've got affiliate links below.
272
Affiliate, what does that mean?
273
It means that it doesn't cost you anything extra, but if you use my link,
274
it does give me a small little kickback and help support this channel.
275
Anyways, now for the lab, the most important part of any IT certification, what am I using?
276
I will also be using ITProTV.
277
They do have fantastic labs.
278
Let me show you real quick.
279
Here at my dashboard, I can jump on over to virtual labs and they have labs for everything, as you can see.
280
But then here we have CEH, which is what I want to see.
281
And Ethical Hacker version 10 labs.
282
And look at all these beautiful labs.
283
So let's say, for example, I wanted to jump in and do the footprinting and reconnaissance lab.
284
I'll launch my lab module.
285
I'll give you a feel for what it kind of looks like.
286
And just within a few seconds, I've got this entire lab I can play with like that.
287
I've got a Windows domain controller.
288
I've got a Windows 7 machine, another Windows server joined to that domain controller, another
289
Windows 7 machine.
290
And then I even have a Linux machine, which I believe is running Kali Linux.
291
And anytime you want, you just launch these labs and you have access to all these machines and you can play around.
292
Sure, you can build your own lab.
293
That's great.
294
I encourage you to do that.
295
But I love situations where they remove all barriers to you learning.
296
It's easy to let a simple issue as building a lab get in the way of learning.
297
If you can just launch something and be off to the races straight to learning, do that.
298
And I'll launch the Kali Linux server real quick to show you what it looks like.
299
It's the PLAB Kserver 01.
300
Let's do that.
301
Power on.
302
And bam, just like that, I've got Kali Linux.
303
No sweat.
304
And they give you a lab to walk through, which is really cool.
305
And then for bonus, if you have access to something like a practice exam,
306
that's always good to have to test where you are and how well you're doing with the study material.
307
I will be using one.
308
And as you might expect, it's going to be through, any guesses, ITProTV because they do have Kaplan practice exams built I'll show you real quick.
309
If I were to jump into my course here, launch practice test.
310
Bam, that easy.
311
In fact, while we're here, let's do a quick exam test.
312
Let's see what you got.
313
Which preliminary activity differentiates a penetration test performed by a white hat hacker and a gray hat hacker?
314
Put your answer below.
315
So you know what I'm using now.
316
What's my plan?
317
How do I plan to tackle the sucker?
318
I plan to complete this within 12 weeks at the most 15 weeks.
319
And I'll be making a video showing only the fun stuff every week.
320
Real quick, let's look at the exam objectives to.. show you what's coming up.
321
If I go to a course outline on the CEH, which aligns to the exam, we got 20 modules basically.
322
And I plan to try and tackle two modules each week, which normally would amount to,
323
you know, 10 weeks, but I fully understand that some modules might be huge.
324
Like system hacking could be massive.
325
Evading IDS firewalls and honeypots could be huge.
326
Hacking web applications.
327
So I'm giving myself enough time, but I'm super excited for pretty much all of these,
328
especially cloud computing stuff and hacking and wireless is always fun.
329
Let me know below what you're most excited to see.
330
I'm curious.
331
All right, so these are my tools.
332
This is my plan, and I'll document the entire process.
333
Everything from how I take my notes to the flashcards I use, which will be Anki, spaced repetition,
334
and I'll be using my good old Pomodoro method for my study sessions.
335
Now, the last thing I want to cover real quick is jobs.
336
What about jobs?
337
Are there security jobs, pen testing jobs, looking for people that have the CEH certification?
338
Let's go take a look.
339
Let's hop on Indeed .com real quick.
340
I'll search in Dallas, Texas, and I'll just search for CEH to see what comes up.
341
And bam, we've got 51 jobs, all looking for people that have the CEH certification.
342
Got some forensic stuff for the government, information security specialist, associate cybersecurity devsec ops engineer.
343
That one sounds really cool.
344
Let's look at that one real quick.
345
Very DevOps heavy.
346
Devsec ops, it's such a cool name, right?
347
Because you know it's going to be automation and it seems to be cloud focused as well.
348
It'll be the technical liaison between the enterprise security architect and the engineering teams.
349
What are the requirements?
350
They want a bachelor's degree, but you know, everyone does.
351
I wouldn't focus too much on that.
352
Zero to two years experience in security or just IT in general, not too shabby.
353
And then they want you to have AWS and or Azure experience, especially implementing security controls, man, what a cool, what a cool job.
354
Oh my gosh.
355
And of course they want you to have any one of these certifications down here.
356
Some of these I'm going to be going for like the OSCP and then here's CH and then, oh, look, GPEN, CISSP.
357
And that's cool.
358
I mean, these are jobs that, you know, aren't necessarily pen testing jobs, not really a job that'll hire you to hack somebody.
359
This is a job where you have hacking knowledge and you're helping the company stay secure.
360
You're implementing policies that have to do with the cloud and automation and DevOps.
361
How fun is that?
362
Oh my gosh.
363
So, Hey, do you want to join me?
364
Do you want to either just watch me become a hacker
365
or maybe you want to come along and try to become a hacker as well?
366
I think that last job thing we just saw demonstrates that,
367
you know, learning hacking doesn't mean you're going to become a hacker maybe just means that you help companies stay secure.
368
It might just be an asset to whatever job role you're in, whether you're a network engineer, a systems admin or whatever.
369
That's really cool.
370
So if you wanna join me, hit that subscribe button, hit that like button, hit that notification bell.
371
And if you wanna get started in IT or excel your career, check out ITProTV below.
372
Again, they're sponsoring my journey.
373
They're sponsoring this video as well as this whole series.
374
So huge shout out to them.
375
You get 30 % off with my link below or the code NetworkChuck.
376
Ooh, that's all I got.
377
Yeah, that's it.
378
I'll catch you guys later.

下载应用

流利口语所需的一切

AI 发音评分逐句打分
音标练习掌握每个音
词汇学习建立你的词库
词汇游戏边玩边学

同频道

FOR YOU

推荐视频

本课的词汇与口语要点

这节口语课以视频“you need to learn HACKING RIGHT NOW!! // CEH”为素材。 视频中反复出现的词有:hacker, ceh, hacking, exam, certification。 这段视频共有 378 个句子、3924 个单词可供跟读。 讲话部分时长为 17:59。 说话人语速较快,每分钟约 218 个词,会出现较多连读和弱读。 82% 的单词属于英语最常用的 3,000 词,其余的词建议在练习前先学一下。

视频中的重点词汇

视频中 15 个值得学习的单词,附发音和释义:

单词发音释义
examination 名词/ɪɡˌzæm.ɪˈneɪ.ʃən/檢查 /检查
certification 名词/ˌsɜː.tɪ.fɪˈkeɪ.ʃən/認證 /认证
ethical 形容词/ˈɛθɪkəl/道德的
practical 形容词/ˈpɹæk.tɪ.kəl/使用的, 實用 /实用
skill 名词/skɪl/技巧, 技能
steal 动词/stiːl/偷, 盜 /盗
script 名词/skɹɪpt/文章
scenario 名词/sɪˈnɛəɹioʊ/腳本 /脚本, 場景 /场景
sponsor 名词/ˈspɒn.səː/保證人 /保证人
module 名词/ˈmɑd͡ʒul/模塊 /模块
cloud 名词/ˈklaʊ̯d/йүн, 雲 /云
server 名词/ˈsɝvɚ/服務器 /服务器, 伺服器
gray 形容词/ɡɹeɪ/灰色
intent 名词/ɪnˈtɛnt/意圖 /意图
tackle 动词/ˈtækəl/鏟球 /铲球

视频中出现的短语动词

单词发音释义
come up 动词上來 /上来
go through 动词通過 /通过
break down 动词壞了 /坏了, 出故障
check out 动词退房
come along 动词陪伴, 陪同
get through 动词/ɡɛt ˈθɹu/度過 /度过
go down 动词下降, 下去

值得反复跟读的句子

视频中简短而完整的句子,可以直接用在日常对话里:

  • Why am I becoming a hacker?
  • What kind of jobs can you get with this?
  • We'll talk about all that, but first hacking, what is it?
  • Why are you doing it?
  • Meaning, do you have enough experience?

视频中的语法

说话人最常用的结构,并附上视频中的原话:

结构视频中的用法
现在完成时 have/has + 过去分词 — 过去发生但与现在仍有关联的事You've probably been · You've had · has had
定语从句 who / which + 从句 — 补充说明人或事物guys who are · people who like · CEH, which is
被动语态 be + 过去分词 — 强调发生了什么,而不是谁做的are called · is allowed · is looked

需要注意的发音

说话人用了 165 次缩略和弱读形式,例如 I'm, don't, I'll。请按听到的简短形式来说。

  • “th” 音: ethical /ˈɛθɪkəl/, overthrow /ˌoʊvɚˈθɹoʊ/, ethics /ˈɛθ.ɪks/
  • “sh” 和 “zh” 音: examination /ɪɡˌzæm.ɪˈneɪ.ʃən/, certification /ˌsɜː.tɪ.fɪˈkeɪ.ʃən/, malicious /məˈlɪʃəs/, motivation /ˈmoʊ.tə.veɪ.ʃən/, shout /ʃaʊt/
  • 长单词——注意重音位置: examination /ɪɡˌzæm.ɪˈneɪ.ʃən/, certification /ˌsɜː.tɪ.fɪˈkeɪ.ʃən/, vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, motivation /ˈmoʊ.tə.veɪ.ʃən/, affiliate /əˈfɪl.i.eɪt/

中文母语者容易读错的音:

  • /v/ — 不要读成 /w/,上齿轻触下唇: server /ˈsɝvɚ/, vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, overthrow /ˌoʊvɚˈθɹoʊ/, motivation /ˈmoʊ.tə.veɪ.ʃən/, verify /ˈvɛɹɪfaɪ/
  • 词尾辅音 — 要读清楚,后面不要加元音: lab /læːb/, script /skɹɪpt/, cloud /ˈklaʊ̯d/, intent /ɪnˈtɛnt/, malicious /məˈlɪʃəs/
  • /r/ 和 /l/ 的区别: practical /ˈpɹæk.tɪ.kəl/, vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, moral /ˈmoɹəl/, controller /kənˈtɹoʊlɚ/, necessarily /ˌnɛs.əˈsɛɹ.ə.li/

如何用这段视频练习

  1. 先完整听一遍视频,不要开口,记下不认识的单词。
  2. 先用 0.75 倍速逐句跟读,熟练之后再回到正常速度。
  3. 录下自己的声音并与原声对比,特别注意 examination, certification, ethical 这类单词。

什么是跟读法?

跟读法 (Shadowing) 是一种有科学依据的语言学习技巧,最初开发用于专业口译员的培训,并由多语言者Alexander Arguelles博士普及。这个方法简单而强大:您在听英语母语原声的同时立即大声重复——就像是一个延迟1-2秒紧跟说话者的影子。与被动听力或语法练习不同,跟读法强迫您的大脑和口腔肌肉同时处理并模仿真实的讲话模式。研究表明它能显着提高发音准确性,语调,节奏,连读,听力理解和口语流利度——使其成为雅思口语备考和真实英语交流最有效的方法之一。

影子跟读法: 阅读完整分步指南 →