Re: Penetration Test Hardware Vendor

From: Skander Ben Mansour (securityfocus@benmansour.net)
Date: Thu May 12 2005 - 10:53:45 EDT


('binary' encoding is not supported, stored as-is) In-Reply-To: <200505120547.j4C5lZv3031411@amoebazone.com>

Hello all,

Interestingly, The Register recently reviewed a list of security live-CDs :
http://www.theregister.co.uk/2005/05/07/live_cd_paradise/

The review covers the following distributions:

- Knoppix-STD (Cramming as many security tools as possible onto one CD)
  http://www.knoppix-std.org/
- Auditor (Security checking)
  http://new.remote-exploit.org/index.php/Auditor_main
- Helix (Incident response and forensics)
  http://www.e-fense.com/helix/
- INSERT (Security rescue and network analysis)
  http://www.inside-security.de/insert_en.html
- Whoppix (Penetration testing)
  http://www.whoppix.net/

A more comprehensive list of live CD is also maintained at:
http://www.frozentech.com/content/livecd.php
http://www.livecdlist.com/index.php?pick=All&showonly=security
http://www.livecdlist.com/index.php?pick=All&showonly=forensics

The great thing about live CDs is that, as someone mentionned in a previous email, you can carry them all with you and use the most appropriate one for each task (penetration testing, forensics, audit,...).
They normally use a recent Linux kernel and can run on most laptops.

Best Regards,

Skander Ben Mansour

---
http://www.benmansour.net/
>Dan,
>
>It sounds like you mean you want a pre-installed OS with penetration testing
>and auditing tools? You may want to look into some of the security-oriented
>linux distros which may suit your needs. They would provide you with the
>"tricked-out" tools and, in the case of the Live CD distros, wouldn't
>necessarily need to replace your existing daily-use OS of choice. Some of
>the more security-focused distributions are quite well put together with a
>full complement of forensics, pen-test, and auditing tools. 
>Check out:
>
>http://distrowatch.com/search.php?category=Forensics&origin=All&basedon=All&
>desktop=All&architecture=All&status=Active
>
>Also,
>
>http://biatchux.dmzs.com/ F.I.R.E - the Forensic and Incident Response
>Environment Live CD distro.
>
>HTH,
>Erin Carroll
>
>
>
>> -----Original Message-----
>> From: Dan Berberich [mailto:dan.berberich@gmail.com]
>> Sent: Tuesday, May 10, 2005 4:47 AM
>> To: pen-test@securityfocus.com
>> Subject: ISO: Penetration Test Hardware Vendor
>> 
>> All - I'm looking to find if anyone makes specific hardware for
>> penetration testing. Specifically a laptop. I already know that the 'more
>> is the better' in configuring a COTS machine, but I'm looking to see if
>> anyone makes one already 'tricked-out' so to say. I'm not looking for
>> advice on specs, I can pretty much guess that (ie - as much RAM and
>> fastest processor as you can squeeze into a tiny box, oh and the biggest
>> HD possible, yeah and a 1600x1200 ...).
>> 
>> Thanks in advance
>> Dan Berberich
>> dberberich/0x40csc/0x2ecom
>
>


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:20 EDT