Re: Penetration Test Hardware Vendor

[Skander Ben Mansour <securityfocus () benmansour net>]

In-Reply-To: <200505120547.j4C5lZv3031411 () amoebazone com>

Hello all,

Interestingly, The Register recently reviewed a list of security live-CDs :
http://www.theregister.co.uk/2005/05/07/live_cd_paradise/

The review covers the following distributions:

- Knoppix-STD (Cramming as many security tools as possible onto one CD)
  http://www.knoppix-std.org/
- Auditor (Security checking)
  http://new.remote-exploit.org/index.php/Auditor_main
- Helix (Incident response and forensics)
  http://www.e-fense.com/helix/
- INSERT (Security rescue and network analysis)
  http://www.inside-security.de/insert_en.html
- Whoppix (Penetration testing)
  http://www.whoppix.net/

A more comprehensive list of live CD is also maintained at:
http://www.frozentech.com/content/livecd.php
http://www.livecdlist.com/index.php?pick=All&showonly=security
http://www.livecdlist.com/index.php?pick=All&showonly=forensics

The great thing about live CDs is that, as someone mentionned in a previous email, you can carry them all with you and 
use the most appropriate one for each task (penetration testing, forensics, audit,...).
They normally use a recent Linux kernel and can run on most laptops.

Best Regards,

Skander Ben Mansour
---
http://www.benmansour.net/



> Dan,
>
> It sounds like you mean you want a pre-installed OS with penetration testing
> and auditing tools? You may want to look into some of the security-oriented
> linux distros which may suit your needs. They would provide you with the
> "tricked-out" tools and, in the case of the Live CD distros, wouldn't
> necessarily need to replace your existing daily-use OS of choice. Some of
> the more security-focused distributions are quite well put together with a
> full complement of forensics, pen-test, and auditing tools. 
> Check out:
>
> http://distrowatch.com/search.php?category=Forensics&origin=All&basedon=All&;
> desktop=All&architecture=All&status=Active
>
> Also,
>
> http://biatchux.dmzs.com/ F.I.R.E - the Forensic and Incident Response
> Environment Live CD distro.
>
> HTH,
> Erin Carroll
>
>
>
> > -----Original Message-----
> > From: Dan Berberich [mailto:dan.berberich () gmail com]
> > Sent: Tuesday, May 10, 2005 4:47 AM
> > To: pen-test () securityfocus com
> > Subject: ISO: Penetration Test Hardware Vendor
> >
> > All - I'm looking to find if anyone makes specific hardware for
> > penetration testing. Specifically a laptop. I already know that the 'more
> > is the better' in configuring a COTS machine, but I'm looking to see if
> > anyone makes one already 'tricked-out' so to say. I'm not looking for
> > advice on specs, I can pretty much guess that (ie - as much RAM and
> > fastest processor as you can squeeze into a tiny box, oh and the biggest
> > HD possible, yeah and a 1600x1200 ...).
> >
> > Thanks in advance
> > Dan Berberich
> > dberberich/0x40csc/0x2ecom