
"Best of ..." Webcast Series
Best Of Network Penetration Testing Tools - January 2009 pdf - January 2009, Whitehatworld Monthly Webcast with Paul Asadoorian, Larry Pesce, & John Strand. Topics: Nmap, Nessus,Metasploit, Pass-the-Hash, Hydra, Cain & Able, Core Impact
Best Of Web Application Penetration Testing Tools - April 2009 pdf - April 2009, Whitehatworld Monthly Webcast with Paul Asadoorian, Mick Douglas, & John Strand. Topics: Nikto, Webscarab, w3af, Firefox (Firebug, YSlow, TestGen4Web), Cenzic Hailstorm, Core IMPACT, Inguardians' Samurai
Zen & The Art Of An Internal Penetration Testing Program - June 2009 pdf -June 2009, Penetration Testing & Web Application Attacks Summit, Vegas
Zen & The Art Of An Internal Penetration Testing Program - Part II - April 2009 pdf - April 2009, Core Security Technologies Webcast. Topics: Tips and tools for Exploitation, Post-Exploitation, Reporting phases
Late Breaking Computer Attack Vectors - December 2008 pdf - December 2008, Whitehatworld Monthly Webcast. Topics: BotNet defense[Snort, ShadowServer.net], Top 5 Defensive Recommendations
Zen & The Art Of An Internal Penetration Testing Program - Part I - November 2008 pdf - November 2008, Core Security Technologies Webcast. Topics: Target Identification tools, Detecting hosts/services, Identifying Vulnerabilities
Late Breaking Computer Attack Vectors - October 2008 pdf - October 2008, Whitehatworld Monthly Webcast. Topics: MS08-067, autopwning, Keystroke recording research, By-passing AV
Late Breaking Computer Attack Vectors - September 2008 pdf - September 2008, Whitehatworld Monthly Webcast Topics: Nmap parsing, Botnet/SQL injection defense, Anti-theft tips
Late Breaking Computer Attack Vectors - August 2008 pdf - August 2008, Whitehatworld Monthly Webcast Topics: Post-exploit defense, Nmap research results, Social Network Defense
Late Breaking Computer Attack Vectors - July 2008 pdf - July 2008, Whitehatworld Monthly Webcast Topics: Securing OS X, Karma, Terry Childs case
Late Breaking Computer Attack Vectors - June 2008 pdf - June 2008, Whitehatworld Monthly Webcast Topics: IDS/IPS, Cisco Rootkits, VZN Business Data Report
Late Breaking Computer Attack Vectors - April 2008 pdf - April 2008, Whitehatworld Monthly Webcast Topics: Kiosk insecurity, Inside != Secure, Hacking desks, Auth Bypass, Daknets
Late Breaking Computer Attack Vectors - March 2008 pdf - March 2008, Whitehatworld Monthly Webcast Topics: Social Network Defense, Sneakernet Defense
Late Breaking Computer Attack Vectors - February 2008 pdf - February 2008, Whitehatworld Monthly Webcast Topics:Vendor shipped vulnerabilities, Security process management
Things That Go Bump In The Network - Embedded Device (In)Security pdf - January 2008 SANS New Orleans/SANS Webcast/REN-ISAC Webcast
Wireless Network Security - March 2006 pdf - March 2006, , Providence, RI
Vulnerability Summary - October 2005 pdf - October 2005, OSHEAN Shore Patrol Meeting
Paul's Top Ten Security Tips Courseware, Version 3.3 (Updated 07/2005) pdf - July 2005 - Brown University
Paul's Top Ten Security Tips Handout, Version 3.3 (Updated 07/2005) pdf - July 2005 - Brown University
Buying and Securing Your Computer - June 2005 pdf - June 2005, Brown University Staff Development Day
Buying and Securing Your Computer Handout - June 2005 pdf - June 2005, Brown University Staff Development Day
Vulnerability Summary - March 2005 pdf - March 2005, Brown University SysAdmin Group
Vulnerability Summary - January 2005 pdf - January 2005, Brown University SysAdmin Group
Vulnerability Summary - November/December 2004 pdf - December 2004, Brown University SysAdmin Group
Vulnerability Summary - October 2004 pdf - October 2004, Brown University SysAdmin Group
Paul's Top Ten Security Tips Courseware, Version 2.0 pdf - September 2004 - Brown University, February 2005 - ISACA New England Chapter
Vulnerability Summary - September 2004 pdf - September 2004, Brown University SysAdmin Group
3 Easy Steps To A Spyware-Free Computer pdf - September 2004, Brown University
Vulnerability Summary - August 2004 pdf - August 2004, Brown University SysAdmin Group
IE: Internet Exposure - Internet Explorer Vulnerabilities and What You Can do About Them pdf - OSHEAN Shore Patrol Meeting, July 8, 2004
Vulnerability Summary - June 2004 pdf - June 2004, Distributed Electronically to Brown Sysadmin Group presented at OSHEAN Shore Patrol Meeting, July 8, 2004
Buying and Securing Your Home Computer - June 2004 pdf - June 2004, Brown University Staff Development Day
Vulnerability Summary - May 2004 pdf - May 2004, Brown University SysAdmin Group
Vulnerability Summary - March 2004 pdf - March 2004, Brown University SysAdmin Group
Vulnerability Summary - February 2004 pdf - February 2004, Brown University SysAdmin Group
Vulnerability Summary - January 2004 pdf - January 2004, Brown University SysAdmin Group
Vulnerability Summary - October 2003 pdf - October 2003, Brown University SysAdmin Group
Automated Patching pdf - September 2003, Brown University SysAdmin Group
Vulnerability Summary - September 2003 pdf - September 2003, Brown University SysAdmin Group
#Owning Academia - Attacking and Exploiting University Networks pdf - September 22 2003, IVY+ Security Group Meeting, Brown University
Fun With Wireless and Firewalls pdf - August 19 2003, MIT Security Camp
Vulnerability Summary - June 2003 MISSING! Sorry... - June 2003, Brown University SysAdmin Group
Vulnerability Analysis Using Nessus pdf |html - May 2003, ISACA New England Chapter
Vulnerability Summary - April 2003 pdf |html - April 2003, Brown University SysAdmin Group
Firewall Tips & Tricks pdf | html- November 2002, Brown University SysAdmin Group
Adventures In Incident Handling pdf |html - August 2002, MIT Security Camp
Securing Microsoft IIS pdf |html - February 2002, Brown University SysAdmin Group
Introduction to IPsec pdf |html - July 2001, Brown University SysAdmin Group
Buffer Overflows - The TSIG Example pdf| html - May 2001, Follow-up presentation to the TSIG paper
- P2P Information Disclosure pdf -June 2009, PenTest Summit '09, Vegas
- Where to now? An adventure in GPS tracking pdf -March 2009, SANS NS2009 Orlando
- Document Metadata, the Silent Killer pdf -SANS NS2009 Orlando, Updated with even more content
- Late Breaking Computer Attack Vectors - January 2009 pdf -January 2009, Whitehatworld Monthly Webcast Topics: Cisco IOS Attacks, THC-Hydra, Twitter Password fail
- Late Breaking Computer Attack Vectors - November 2008 pdf - November 2008, Whitehatworld Monthly Webcast Topics: PDF & Javascript, Metasploit 3.2 updates, EXIFtool, WPA/TKIP cracking
- Late Breaking Computer Attack Vectors - May 2008 pdf - May 2008, Whitehatworld Monthly Webcast Topics: iPhone wipes, Trenchcoat Phlasher
- Document Metadata, the Silent Killer pdf - April 2008, OSHEAN Shore Patrol, DEFCON 16
- Hiding Rogue APs for "Penetration Testers" - a tongue in cheek, soldering iron in hand look at hiding rogues pdf - June 2008, SANS Pen-test Summit, Shmoocon 4, DEFCON 15 Wireless Village, DEFCON 16


