Sometimes, during security audits, we may encounter a situation where everything is being managed correctly. In other words security patches, policies, network segmentation, antivirus, and user awareness, to name just a few measures, are being applied properly. That’s when, in order to continue the analysis from the perspective of a security researcher or consultant, social engineering and a number of other tools, some of which we will look at in this post, start to play more importance, being perhaps the only ones that can allow an attacker to penetrate the target system. The tools in question are mainly pieces of hardware designed for security research or projects.

When evaluating prospective InfoSec candidates, employers frequently look to certification as an important measure of excellence and commitment to quality. We examined five InfoSec certifications we consider to be leaders in the field of information security today:

• Raspberry Pi 3
• WiFi Pineapple*
• Alfa Network Board*
• Rubber Ducky*
• LAN Turtle*
• HackRF
• Ubertooth
• Proxmark3 Kit
• Lockpicks
• Keylogger

Redback will offer local, national, and international participants a casual and social learning environment designed to present a “holistic” security view, as well as the opportunity to network with peers and fellow enthusiasts in a relaxed setting.