cenrak

Product Security Testing

• IDA Pro and Decompilers Website
• Software Security Testing
• Introduction to Risk Analysis
• Introduction to Fuzzing
• The Art Of Software Security Assessment", by Mark Dowd, McDonald, Schuh, 2006
  • *Not on the recommended list, but a useful resource

Crypto

• *Not on the recommended lists, but I think SANS would be better off having students just work on these all day

cenrak

Moved to git repository: https://github.com/denji/golang-tls

Generate private key (.key)

# Key considerations for algorithm "RSA" ≥ 2048-bit
openssl genrsa -out server.key 2048

# Key considerations for algorithm "ECDSA" ≥ secp384r1
# List ECDSA the supported curves (openssl ecparam -list_curves)

cenrak

# -*- mode: ruby -*-
# vi: set ft=ruby :

# A weekend challenge:
# Configure server1 and/or server2 so `ping 10.0.1.102 -I eth1` on server1 shows server2's replies

Vagrant.configure("2") do |config|

  $script = <<-SCRIPT
  # In case for some network work!

cenrak

# -*- mode: ruby -*-
# vi: set ft=ruby :

# All Vagrant configuration is done below. The "2" in Vagrant.configure
# configures the configuration version (we support older styles for
# backwards compatibility). Please don't change it unless you know what
# you're doing.
Vagrant.configure("2") do |config|

  config.vm.define "foreman" do |foreman|

cenrak

$ curl -X GET http://getpagetitle.herokuapp.com/get_title?url=https://www.facebook.com/
{
  "return_code": 200, 
  "title": "Facebook - Log In or Sign Up", 
  "url": "https://www.facebook.com/"
}

cenrak

#!/usr/bin/env python

import sys

def permutations(input):
	possibilities = set()

	def _perm(prev, rem):
		if len(rem):
			for i in range(len(rem)):

cenrak

module AIO

  require 'nokogiri'
  require 'open-uri'

  class R

    class << self

      def class

cenrak

#include <iostream>

int main()

{

	int num = 0;
	int count = 0, sum = 0, i, j, p;

	char c;

cenrak

#/bin/bash

iptables --flush
service iptables save

service iptables stop
service iptables start

BIPS=`cat /tmp/blocked_ips.list`

cenrak

#/bin/bash

LIST=`cat ips.list`

for ip in $LIST
do
  scp blocked_ips.list $ip:/tmp
  ssh $ip "bash update-blocked-ips; rm -f /tmp/blocked_ips.list"
done