Ideas For Tech Segments?

[brian.almond at cheshire-it.com (Brian J. Almond)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

How about some real log management power with Linux and Zenoss. It's cross
platform its core product is completely open source and it's all python.

Brian Almond  



- -----Original Message-----
From: pauldotcom-bounces at mail.pauldotcom.com
[mailto:pauldotcom-bounces at mail.pauldotcom.com] On Behalf Of xgermx
Sent: Tuesday, October 21, 2008 5:06 PM
To: PaulDotCom Security Weekly Mailing List
Subject: Re: [Pauldotcom] Ideas For Tech Segments?

Sorry, only two more, I promise.
How about a segment on advanced netcat usage?
What about an Evading AV detection segment?

On Tue, Oct 21, 2008 at 3:51 PM, xgermx <xgermx at gmail.com> wrote:
> Also, I'd love to hear a tech segment on Yersinia.
>
>  Yersinia is a network tool designed to take advantage of some
> weakeness in different network protocols. It pretends to be a solid
> framework for analyzing and testing the deployed networks and systems.
>
> Currently, there are some network protocols implemented, but others
> are coming (tell us which one is your preferred). Attacks for the
> following network protocols are implemented (but of course you are
> free for implementing new ones):
>
>    * Spanning Tree Protocol (STP)
>    * Cisco Discovery Protocol (CDP)
>    * Dynamic Trunking Protocol (DTP)
>    * Dynamic Host Configuration Protocol (DHCP)
>    * Hot Standby Router Protocol (HSRP)
>    * IEEE 802.1Q
>    * IEEE 802.1X
>    * Inter-Switch Link Protocol (ISL)
>    * VLAN Trunking Protocol (VTP)
>
>
> http://www.yersinia.net/
>
> On Tue, Oct 21, 2008 at 3:40 PM, wishi <wishinet at googlemail.com> wrote:
> > Paul Asadoorian schrieb:
> > > So, Larry and I have this discussion every week. What should we be doing
> > > for tech segments?  I'd love to hear your thoughts, and hopefully we can
> > > make it happen.  So, suggest away!
> > >
> > > Cheers,
> > > Paul
> >
> > a segment I always like hearing about is security data visualization.
> > But that's very huge and not easy to
> > cover. Maybe you want to have a look at DAVIX
> > (http://davix.secviz.org/)? :)
> >
> >
> > Another interesting topic is: mobile phone pentesting - speaking of
> > smartphones, WiFi, and their TCP/IP and OS specifics.
> > I guess...
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.8.1 (Build 2523)
Charset: us-ascii

wsBVAwUBSP5q5NEyRFhGdzEQAQpf9Qf/W3uqexUHU+92RwHYQTWkvAQY4+F1q1BH
hKbMWF7j7nt2QC+P26c92D3BiCXX4DHdoq5XVkqejnu13VJ3uTyEd3nf2+9y/2o1
XP9Rw2zxLlEu1+f/FH73zg+xZ0X9cxd6NJTm8v0hb7Mny9rCPUqNXm3QfJPYw8g4
I2OhkwoTujXqlbi7UL8cLXWladpjkWHTFxMKhIuDsjbPIGq0XGnFeyl1VKPSpx4k
G0nBHZDLOmOSsPR/NvRGazNGu6HtZBwzu1xVqb6GcY/wgfjYTIF8zTm3jgXVELyu
0u/cL+0GsvnbBYAuI8HVLj6ZU+33jy3+0fxkDCXdgVNNUkqt9bGD+Q==
=oXO+
-----END PGP SIGNATURE-----