Re: Using a Virtualized Pen Test Platform

[Robin Wood <dninja () gmail com>]

2009/11/9 0x0e.org <jcran () 0x0e org>:
> I'm going to throw another vote out there for virtualbox. I use it on top of
> ubuntu to virtualize windows, and it networks, suspends, and generally
> /works/ flawlessly. Make sure to download the version from sun (as opposes
> to the dpkg/apt repos) because it offers USB support, among other things.

I'll add my vote to virtualbox, I started using it when vmware server
started getting slow to start up.

It works really well for running on a headless box as it is really
easy to control by command line.

Robin

> jcran
>
> Sent from my iPod
>
> On Oct 24, 2009, at 11:08 PM, JoePete <joepete () joepete com> wrote:
>
> > On Tue, 2009-10-20 at 12:07 -0400, Jon Kibler wrote:
> > > For the past several months, I have been tinkering with using VMware
> > > Workstation
> > > as my base platform, so I can just switch VMs rather than having to
> > > reboot.
> >
> > In terms of virtualization, I would recommend giving Sun's VirtualBox a
> > look. It does a pretty job without the cost of VMware. But one problem
> > you do run into with pentesting is getting at the network hardware,
> > particularly any internal wireless card that you might use WLAN
> > cracking.
> >
> > --
> > JoePete
> >
> >
> > ------------------------------------------------------------------------
> > This list is sponsored by: Information Assurance Certification Review
> > Board
> >
> > Prove to peers and potential employers without a doubt that you can
> > actually do a proper penetration test. IACRB CPT and CEPT certs require a
> > full practical examination in order to become certified.
> >
> > http://www.iacertification.org
> > ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually
> do a proper penetration test. IACRB CPT and CEPT certs require a full
> practical examination in order to become certified.
> http://www.iacertification.org
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------