Ideas For Tech Segments?

[paul at pauldotcom.com (Paul Asadoorian)]

Excellent!  Keep them coming. A few notes:

- I like the idea of doing a tech segment on log analysis on the cheap.
 I've always been a big fan of collecting via syslog to a UNIX host,
then using bash/perl/<insert favorite language here> to parse and alert.
 I've been meaning to play around with SWATCH again too.

- We did a tech segment on evading AV:
http://pauldotcom.com/wiki/index.php/Episode125#Tech_Segment:_Bypassing_Anti-Virus_Software_The_Script-Kiddie_Way

- We've talked about bluetooth quite a bit, but never did a tech segment
on it that I could find.  I thought we did a video on it, but it was an
episode that will forever be lost in the archives.

Keep em' coming!

Cheers,
Paul

xgermx wrote:
> Sorry, only two more, I promise.
> How about a segment on advanced netcat usage?
> What about an Evading AV detection segment?
>
> On Tue, Oct 21, 2008 at 3:51 PM, xgermx <xgermx at gmail.com> wrote:
> > Also, I'd love to hear a tech segment on Yersinia.
> >
> >  Yersinia is a network tool designed to take advantage of some
> > weakeness in different network protocols. It pretends to be a solid
> > framework for analyzing and testing the deployed networks and systems.
> >
> > Currently, there are some network protocols implemented, but others
> > are coming (tell us which one is your preferred). Attacks for the
> > following network protocols are implemented (but of course you are
> > free for implementing new ones):
> >
> >    * Spanning Tree Protocol (STP)
> >    * Cisco Discovery Protocol (CDP)
> >    * Dynamic Trunking Protocol (DTP)
> >    * Dynamic Host Configuration Protocol (DHCP)
> >    * Hot Standby Router Protocol (HSRP)
> >    * IEEE 802.1Q
> >    * IEEE 802.1X
> >    * Inter-Switch Link Protocol (ISL)
> >    * VLAN Trunking Protocol (VTP)
> >
> >
> > http://www.yersinia.net/
> >
> > On Tue, Oct 21, 2008 at 3:40 PM, wishi <wishinet at googlemail.com> wrote:
> > > Paul Asadoorian schrieb:
> > > > So, Larry and I have this discussion every week. What should we be doing
> > > > for tech segments?  I'd love to hear your thoughts, and hopefully we can
> > > > make it happen.  So, suggest away!
> > > >
> > > > Cheers,
> > > > Paul
> > > a segment I always like hearing about is security data visualization.
> > > But that's very huge and not easy to
> > > cover. Maybe you want to have a look at DAVIX
> > > (http://davix.secviz.org/)? :)
> > >
> > >
> > > Another interesting topic is: mobile phone pentesting - speaking of
> > > smartphones, WiFi, and their TCP/IP and OS specifics.
> > > I guess...
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom at mail.pauldotcom.com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com

-- 
Paul Asadoorian
PaulDotCom Enterprises
Web: http://pauldotcom.com
Phone: 401.829.9552

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 257 bytes
Desc: OpenPGP digital signature
Url : http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20081021/aff6bcfb/attachment.pgp