Security stuff - things that you need to learn, cause the other guys know.

CVE - Common Vulnerabilities and Exposures

Mitigation - dedicated machine, use live CD || does your bank work with my lynx browser?

Debugging / monitoring Tools

Rootkit detection

Hardening

ARP Poisoning

Stenography

##########################################################################
#
#   EXE to BAT converter Version 1.0                                     #
#   This will use the classic DEBUG method to HEX-encode an executable   #
#   into a batch script file. Enjoy.                                     #
#                                                                        #
#                                          rattle | awarenetwork | org   #
                                                                         #
##########################################################################
   
from sys import argv as a, exit, stdout
die = lambda x,n: stdout.write(x+'\n') or exit(n)

try: f,b = open(a[1],'rb'),open(a[2],'w')
except: die('[!] usage: exe2bat.py <exefile> <batchfile>',1);

FOOTER  = ''.join(map(lambda x:"%%E%% "+x+">>T\n",
 ["RCX","%X ","N T.BIN","WDS:0","Q"])) 
FOOTER += 'DEBUG<T 1>NUL\nMOVE T.BIN T.EXE 1>NUL 2>NUL\nT.EXE'

FC,CX = 0, f.seek(0,2) or f.tell()

if (CX > 0xFFFF): 
  f.close(); b.close()
  die('[!] filesize exceeds 64kb, quitting.',1);

f.seek(0,0)
b.write('@ECHO OFF\nSET E=ECHO\nDEL T 1>NUL 2>NUL\n')

for chunk in xrange(0x1000):
  t = f.read(16) or b.write(FOOTER%CX) or die("",0)
  if t.count('\0')==0x10: FC += 1
  else:
    if FC > 0:
      b.write('%%E%% FDS:%X L %X 00>>T\n'%((chunk-FC)*0x10,FC*0x10))
      FC = 0
    b.write('%%E%% EDS:%X '%(chunk*0x10))
    b.write(' '.join(map(lambda x:"%02X"%ord(x),t))+'>>T\n')

using prefetch to find secret files.

Programs built to crash

Black electrical tape

inaudible ultrasonic sounds slinging your data - unplug all your speakers...

oh, and using your monitor to broadcast in the AM band - better disconnect that monitor too.

Heartbleed - oh my.

- know your hardware
- know your network
- know your infrastructure
- know your physical security
- know your operating system
- know your tools
- know your employees
- know your programmers, testers, etc
- know your process
- know all your 3rd parties

Perl Cryto && random

hardware hackers