Security Toolkit?

[AgentDarkApple]

Re: Security Toolkit?

On that same note, no one has brought up the issue of hardware.

Sorry... it's a MacBook that I got new last year. 2.4 GHz Intel core 2 duo processor. It only has 2GB of memory, which makes me a little uneasy about trying too much with it. I only have the stock airport card for it right now. I am thinking about getting a MacBook Pro next year with a faster processor and more RAM. I do need a new and better router, as all I have is an Airport Express that I got back in 2005. I just got a new car in April, so a lot of other purchases have had to wait

[xor]

Re: Security Toolkit?

Sir, I must protest. For my distro surely must be the superior of those in question.

http://verens.com/archives/2004/09/2...vs-everything/

“You had to do what with the seat?”

Always cracks me up. :-)

xor

[sintax_error]

Re: Security Toolkit?

I don't think I've ever seen that page. Beautiful.

[streaker69]

Re: Security Toolkit?

http://verens.com/archives/2004/09/2...vs-everything/

“You had to do what with the seat?”

Always cracks me up. :-)

xor

Obviously written by a Linux zealot, since they made no mention of needing to recompile the kernel after building your seat.

PS: WinME was the best OS ever written.

[Thorn]

Re: Security Toolkit?

PS: WinME was the best OS ever written.

Yeah, if you like having fits of suicidal depression.

[AgentDarkApple]

Re: Security Toolkit?

http://verens.com/archives/2004/09/2...vs-everything/

“You had to do what with the seat?”

Always cracks me up. :-)

xor

but I enjoy the in-flight movie...

[renderman]

Re: Security Toolkit?

Yeah, there's a few people around here who know Kismet well :)

The Backtrack cd's are the best bang since they have (just about) every tool you could ever need and most of the annoying crap with driver patches and library builds is already taken care of. I use it in some cases, but lately I have taken to building my toolkit manually mostly since I track svn versions of many things and dependency changes can cause havoc with a liveCD distro.

I think that Backtracks tool list if the best place to look as well as those commercial ones listed on sectools.org as xor posted.

[KernelConflag]

Re: Security Toolkit?

"...clean copies of Microsoft OS'es do to work on. "

Currently the MAPS subscription ($300) from Microsoft is offering the following OS & apps. :

Win Vista Business & Ultimate (32 & 64bit) x1 Lic.
Win 7 Pro x10 Lic. (yes 10) , Win 7 Ult, Win Server 2008 std (x86 & x64)(physical & virtual) (x2)
System Data Center Protection Manager '07, System Center Essentials '07
Exchange Server 2010 Std., Exchange Server '07, Office 2007 Ent
Office Project Pro'07 Office Visio Pro'07, Sharepoint Srvr'07(std & ent), SQL srvr std'08
Win SBS std(physical & virtual), ISA server 2007, Office Comm. Server '07, MS Dynamics CRM 4.0, Win Essential Bus. Srvr Mgt/Msng/Security, MS Office Communicator '07
Forefront Client, Map Point '09, Terminal Server CAL x10(user/connections)

[AgentDarkApple]

Re: Security Toolkit?

Yeah, there's a few people around here who know Kismet well :)

I pay attention ;)


Everybody, thanks for the suggestions! I am going to look into this stuff and see what works on my current laptop, but once I get the new MacBook Pro I will probably use this old one as a sad little target system. My husband wants a new computer too, so maybe I can add his current XP netbook into the mix.

[sintax_error]

Re: Security Toolkit?

I pay attention ;)

...once I get the new MacBook Pro I will probably use this old one as a sad little target system...

Older IBM Think Centre boxen work well for this. Cheap, easy to come by, and work well for a variety of purposes.

[hexjunkie]

Re: Security Toolkit?

Since Helix went subscription/pay for copy has anyone had any fun with DEFT?

Link: http://www.deftlinux.net/

[AgentDarkApple]

Re: Security Toolkit?

Since Helix went subscription/pay for copy has anyone had any fun with DEFT?

Link: http://www.deftlinux.net/

I have not heard of it until now, but thanks! I grabbed BackTrack4 and De-ICE, and I will try this too.

[Goatboy]

Re: Security Toolkit?

An alternative to De-Ice I've heard of is Damn Vulnerable Linux. Now, I've used De-Ice briefly and found it relatively informative to the beginner. Some of the clues are a little obvious at times, but it gets the concept across. The different "levels" are a good feature as well.

I haven't really done too much with DVL. I was about to yesterday, but our power went out and I just said "fuck it" and went to sleep. That said, has anyone here worked on/finished DVL? I've gotten somewhat mixed reviews on it, but those were mostly from people who had just tried it for 5 minutes and made a decision right then and there.

[RTKsbox35]

Re: Security Toolkit?

Hey here are some new ones, Pentoo is decent, not nearly as good as BackTrack but nonetheless something different. I personally really like cmd line linux and thus gravitate towards knoppixSTD which is great if you wanna do some reading and have a good VM or a machine that has a swap that can be mounted (works best this way). It has just about every tool in the open source world and fluxbox (which some people hate but I use for both Lin/Unix) makes it super versatile. The entire structure of the OS is run from root which is a tad bit dangerous being that its loaded with every tool and tool development platform that an intruder would need to really mess your machine up(It also requires a dual core processor to function optimally, which may or may not be a problem). Apart from offensive tools, it has built in honeypots, forensics tools, crypt, the classic vulnerability scanners and exploit crafters and a few that are kinda rare. It also has more firewall options than you would realistically need. That being said knoppix is not everyones choice but hey give it a try. I also tried nUbuntu.... for about 5 minuets, I personally would not suggest this product being that the alternatives are far superior and the concept of stripping down Ubuntu, building it back up, then basically making it like a Slax build is not my personal preference. Also the forum seems to lack admins, witness-able by the massive spammage. It does have a small fan base though. Helix is a good forensics tool as well, I also run the honeywall software from the Honeynet project for research (It is based off CentOS), pretty decent stuff IMO.

On a side note, STD on a school comp...kinda fun. Pure RAM-load rape.

[AgentDarkApple]

Re: Security Toolkit?

RTKsbox35, thanks. I have been trying random stuff in VMWare Fusion per suggestions in this thread. I am waiting it out to see if some new MacBook Pros are released in March, and once I have a more powerful processor and more RAM, I will likely do some more experimenting. I checked out the Knoppix STD site, and it definitely interests me.