The-DCNYC-Hacking-Meetup-Group- 22-July meeting

The-DCNYC-Hacking-Meetup-Group-announce@meetup.com

( from Marco ) Hi All,

This Wednesday (tomorrow) we have a great meetup with 2 powerful presentations, The first is Scapy... If you use nmap, hping, tcpdump, wireshark, tracert, icmp or any of your favorite tools chances are Scapy can replace it. Why learn so many tools and there flags when you can just use Scapy. We are also having R3L1k the creator of Fast Track he will give a small presentation and a demo. We also have alot of giveaways, anyone who RSVP's receives a free domain name and we will be raffling away alot of goodies like last month.

myinfo sources

These are the sites I check out frequently. It's a ton, so I'm moving more to pulling all of these that have rss into google reader. But the original sites are always a richer experience anyway, so listing them here. Bill Blunden has a great listing at belowgotham, organized by subject. I'll get around to doing that here. For now though.....

Risk
http://www.NIST.org/news.php
http://www.riskinfo.com/

---

Security

site
http://blogs.vmware.com/security/ ( VMware )
http://carnal0wnage.attackresearch.com/ ( Chris Gates )
http://lists.immunitysec.com/pipermail/dailydave/ ( "Daily Dave" by Dave Aitel )
http://datalossdb.org/
http://episteme.ca/ ( Mike Murray )
http://feeds.feedburner.com/techtarget/Searchsecurity/SecurityWire
http://googleonlinesecurity.blogspot.com/
http://ha.ckers.org/blog/ ( Robert 'rsnake' Hanson blog )
http://isc.sans.org/
http://metasploit.com/home/
http://packetstormsecurity.org/ ( propecia tool is here )
http://searchsecurity.techtarget.com
http://secunia.com/advisories/historic/
http://skeptikal.org/index.php ( mckt blog )
http://t-rob.net/wmq/ T.Robert Wyatt's MQ-Security Blog
http://taosecurity.blogspot.com/ (Richard Bejtlich )
http://thedigitalstandard.blogspot.com/ Chris Pogue ( co-Author w/Harlan Carvey )
http://vrt-sourcefire.blogspot.com/
http://windowsir.blogspot.com/ Windows Forensics
http://www.2600.com/
http://www.attackresearch.com/ (ValSmith )
http://www.cisco.com/en/US/products/products_security_advisories_listing.html
http://www.darknet.org.uk/
http://www.doxpara.com/ ( kaminsky's site )
http://www.exoticliability.com/
http://www.grc.com/securitynow.htm
http://www.matasano.com/log/
http://www.microsoft.com/technet/security/default.mspx
http://www.pauldotcom.com/ ( Paul Asadoorian )
http://www.rationalsurvivability.com/blog/ ( Chris Hoff's rants on Security. Good focus on Cloud Security, Virtualisation Security )
http://www.schneier.com/blog/
http://www.securityfocus.com/vulnerabilities
http://securitymetrics.org/
http://appsecstreetfighter.com/ ( SANS )
http://www.us-cert.gov/cas/alerts/
http://www.us-cert.gov/cas/techalerts/index.html
http://www.vmware.com/resources/techresources/cat/91,98 ( VMware Security White papers )
http://www.WindowSecurity.com/
http://news.zdnet.com/ ...Especially the ZeroDay Blog Security Metrics http://www.securitymetrics.org/content/Wiki.jsp ( SecurityMetrics.org) https://www.metricscenter.net/ ( MetricsCenter.net ) https://www.metricscenter.net/index.php/mc-catalog.html ( Public Catalogue ) http://www.sans.org/.../a_guide_to_security_metrics_55 ( SANS Metrics paper )