Gebhard's Site

Here’s a nice 2x 15 minutes video tutorial for the basics of pentesting:

Part 1: http://www.ethicalhacker.net/content/view/227/24/

Part 2: http://www.ethicalhacker.net/content/view/238/24/

Here’s a video tutorial on using the Pass-The-Hash toolkit on Windows:

http://www.ethicalhacker.net/content/view/249/24/

Here is a description of the “Microsoft Office Isolated Conversion Environment” provided by Microsoft to create a safer environment working with MS Office files:

http://support.microsoft.com/kb/935865

Here is a nice list of websites which contain tests and content for improving hacking and pentesting skills:

http://ha.ckers.org/blog/20090406/hacking-without-all-the-jailtime/

SANS pointed out an interesting configuration issue concerning Apache and PHP which is especially important when dealing with user uploads:

http://isc.sans.org/diary.html?storyid=6139

A new version of “Parted Magic” is available for download:

http://partedmagic.com/download.html

Here you can find information on how to create media:

http://partedmagic.com/documentation/116-creating-the-media.html

Nice article from SANS:

“Elevator pitch for explaining security risks to executives” – http://isc.sans.org/diary.html?storyid=4528

Nice article from SANS:

“How to be Heard? 10 Tips.” – http://isc.sans.org/diary.html?storyid=6133

Nice article from SANS:

“SWOT matrix for describing security posture” – http://isc.sans.org/diary.html?storyid=4939