o Flooding
o Spoofing
o Protocol malformations
o Reflections and amplifications
o Scanning, fingerprinting and enumeration
o Manual vs. Automated spidering
o Credential harvesting
o Resource mapping
o Error based information disclosure
o Brute-force logins and passwords
o Password hashes and password dictionaries
o Custom dictionaries and password complexity
o Bypass authentication mechanisms
o Bypass session management
o Bypass OS user and fs permissions
o Bypass security software
o cmd OS injections
o data-store injections
o file injections (XML, json, etc)
o remote file and resource inclusion
o injecting web clients (browsers)
o injecting client applications (office, pdf, etc)
o Buffer, stack and heap overflows
o Browser and plugin exploitation
o Code execution

•  What is defense all about
  o IP blacklists
  o Anti-malware defenses
  o URL filtering (… and ad blocking too)
  o Block mail SPAM and spoofs
  o Application firewalls (proxies and reverse-proxies, WAFs, DB-fw)
  o IDS/IPS/HIPS
  o NAC
  o Firewalls and access-lists
  o Application whitelisting
  o Application firewalls (positive proxies and reverse-proxies)
  o strong passphrases
  o certificates
  o cryptography
  o multi-factor authentication
  o permissions and the ‘need to know’ rule
  o admins (locale & domain) and roots
  o audit
  o patch operating systems and applications
  o perform vulnerability scans
  o harden OS and application configurations
  o maintain a ‘master’ system image bank
  o backup and disaster recovery
  o keep detailed logs and network traffic captures
  o Honeypots and decoys
  o Exploit mitigation tools
  o Centralized log collection and analysis (aka SIEM)
  o Network/host-based anomaly detection
  o Heuristic A/V and HIPS
  o New profession: security analyst
  o User education
  o Skill assessment and training (of security teams)
  o Secure coding for developers
  o Penetration test