Ideas For Tech Segments?

[rexykik at gmail.com (Karl Schuttler)]

Yes; I would like to hear a lot more about cleaning up tracks. Is it
just editing log files?

On Tue, Oct 21, 2008 at 11:22 PM, Justin Seitz <jms at bughunter.ca> wrote:
> Here's an idea:
>
> How about the forensic effects of a successful penetration? I never hear
> about what pen-testers do to cover their tracks, clean up, etc. Do
> pen-testers actually collect data forensics-style?
>
> JS
>
> Brian J. Almond wrote:
> > How about some real log management power with Linux and Zenoss. It's cross
> > platform its core product is completely open source and it's all python.
> >
> > Brian Almond
> >
> >
> >
> > -----Original Message-----
> > From: pauldotcom-bounces at mail.pauldotcom.com
> > [mailto:pauldotcom-bounces at mail.pauldotcom.com] On Behalf Of xgermx
> > Sent: Tuesday, October 21, 2008 5:06 PM
> > To: PaulDotCom Security Weekly Mailing List
> > Subject: Re: [Pauldotcom] Ideas For Tech Segments?
> >
> > Sorry, only two more, I promise.
> > How about a segment on advanced netcat usage?
> > What about an Evading AV detection segment?
> >
> > On Tue, Oct 21, 2008 at 3:51 PM, xgermx <xgermx at gmail.com> wrote:
> > > Also, I'd love to hear a tech segment on Yersinia.
> >
> > >  Yersinia is a network tool designed to take advantage of some
> > > weakeness in different network protocols. It pretends to be a solid
> > > framework for analyzing and testing the deployed networks and systems.
> >
> > > Currently, there are some network protocols implemented, but others
> > > are coming (tell us which one is your preferred). Attacks for the
> > > following network protocols are implemented (but of course you are
> > > free for implementing new ones):
> >
> > >    * Spanning Tree Protocol (STP)
> > >    * Cisco Discovery Protocol (CDP)
> > >    * Dynamic Trunking Protocol (DTP)
> > >    * Dynamic Host Configuration Protocol (DHCP)
> > >    * Hot Standby Router Protocol (HSRP)
> > >    * IEEE 802.1Q
> > >    * IEEE 802.1X
> > >    * Inter-Switch Link Protocol (ISL)
> > >    * VLAN Trunking Protocol (VTP)
> >
> >
> > > http://www.yersinia.net/
> >
> > > On Tue, Oct 21, 2008 at 3:40 PM, wishi <wishinet at googlemail.com> wrote:
> > > > Paul Asadoorian schrieb:
> > > > > So, Larry and I have this discussion every week. What should we be
> > doing
> > > > > for tech segments?  I'd love to hear your thoughts, and hopefully
> > we can
> > > > > make it happen.  So, suggest away!
> > > > >
> > > > > Cheers,
> > > > > Paul
> > > > a segment I always like hearing about is security data visualization.
> > > > But that's very huge and not easy to
> > > > cover. Maybe you want to have a look at DAVIX
> > > > (http://davix.secviz.org/)? :)
> > > >
> > > >
> > > > Another interesting topic is: mobile phone pentesting - speaking of
> > > > smartphones, WiFi, and their TCP/IP and OS specifics.
> > > > I guess...
> > > > _______________________________________________
> > > > Pauldotcom mailing list
> > > > Pauldotcom at mail.pauldotcom.com
> > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > Main Web Site: http://pauldotcom.com
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com