I know about web security(SQL, XSS). Am comfortable with tools like DirBuster, sqlmap, ripping git from web, etc. I am comfortable with networking concepts like HTTP, TCP, UDP, IP. Have knowledge about IP Spoofing, packet sniffing, syn flooding. By knowledge I mean I know the internals as well, not just how to do them using tools. Regarding binary I can overflow a buffer by modifying return addresses, see stack using format string vulnerability, etc. But this only at a simple level. Have experienced with tools like gdb, objdump, IDA pro, etc.