Re: Any caveats for linux under VMware, pen testing?

[Ben Timby <asp () webexc com>]

If you like Gentoo or Debian, you can get coLinux (cooperative linux) 
which will run as windows service and provide working Linux machine. 
Disk images are provided for the above distros. I use Gentoo in this 
capacity at work, and have been very impressed.

Be sure to configure your network by bridging the virtual NIC w/ your 
NIC. Use an appropriate editor for the xml config file. I would suggest 
Vim for Windows.

www.colinux.org

shannon () areawidetech com wrote:
> I'm considering running Linux from my XP pro laptop under a VMWare (workstation edition) session. Anyone out there w/ 
> experience using this setup that might have any tips / warnings / encouraging advice? This machine would be for pen testing, and 
> is definitely beefy enough to handle the load, if this is a good solution. I'd be running Nessus, and doing probing w/ nmap.
>
> My other alternative is to repurpose a machine from our lab, but the physical setup and reloading would take far more 
> time than the VMWare option, and would obviously be less flexible.
>
> So is anyone out there using this setup...? I heard rumors of problems related to direct hardware access (the NIC) for 
> wardiving purposes...?
>
> Thanks!
>
> -Shannon Kelley
>
> ------------------------------------------------------------------------------
> Ethical Hacking at the InfoSec Institute. All of our class sizes are
> guaranteed to be 12 students or less to facilitate one-on-one interaction
> with one of our expert instructors. Check out our Advanced Hacking course,
> learn to write exploits and attack security infrastructure. Attend a course
> taught by an expert instructor with years of in-the-field pen testing
> experience in our state of the art hacking lab. Master the skills of an
> Ethical Hacker to better assess the security of your organization.
>
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> -------------------------------------------------------------------------------

------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------