The Geek 100 Pt. 3: Attack and Defense

See the whole series: The Geek 100

This is a list of 100 basic things and skills every geek should have. I've broken this series up into five parts. Let's face it: a list of 100 things would be tedious to wade through. Over the rest of the week, look for twenty more skills to show up daily. The skills assume you have done it in the past and can remember how to do it right now (or, like a good Geek, you've jotted it down in one of your notebooks). Having it in your personal notebook is okay. Scrambling to the Internet means you don't have the skill. Yet...

Today, I focus more on physical security and infosec. Let's see how well you do!

Attack. Every geek should be able to:

1. ARP-poison a network segment
2. Bypass the Windows XP login screen without rebooting
3. Crack WEP
4. Enumerate all hosts and running services on a network
5. Identify the weakest point in almost any security scheme
   
6. Replay a TCP session
7. Scan for wireless networks
8. Spoof/Change your MAC address
9. Use a password cracking tool
10. Use lockpicking tools to open an inexpensive lock

Defense. Every geek should be able to:

1. Harden an operating system
   
2. Implement an IDS
3. Install burglar alarm sensors (motion, breakage, window, door)
   
4. Install CCTV cameras
5. Know where to find information on Common Vulnerabilities and Exposures
   
6. Lock down a wireless network
7. Re-key a lock cylinder
8. Set up a log analysis tool
9. Set up a packet filter or firewall
10. Set up a VPN (not just an SSH tunnel)
    

See the whole series: The Geek 100