Re: Penetration Test Hardware Vendor

From: Kyle Maxwell (krmaxwell_at_gmail.com)
Date: 05/12/05

  • Next message: Skander Ben Mansour: "Re: Penetration Test Hardware Vendor" 
    Date: Thu, 12 May 2005 09:52:26 -0500
To: pen-test@securityfocus.com

    On 5/12/05, amoeba <amoeba@amoebazone.com> wrote:
    > > -----Original Message-----
    > > From: Dan Berberich [mailto:dan.berberich@gmail.com]
    > > Sent: Tuesday, May 10, 2005 4:47 AM
    > > To: pen-test@securityfocus.com
    > > Subject: ISO: Penetration Test Hardware Vendor
    > >
    > > All - I'm looking to find if anyone makes specific hardware for
    > > penetration testing. Specifically a laptop. I already know that the 'more
    > > is the better' in configuring a COTS machine, but I'm looking to see if
    > > anyone makes one already 'tricked-out' so to say. I'm not looking for
    > > advice on specs, I can pretty much guess that (ie - as much RAM and
    > > fastest processor as you can squeeze into a tiny box, oh and the biggest
    > > HD possible, yeah and a 1600x1200 ...).
    > >
    >
    > It sounds like you mean you want a pre-installed OS with penetration testing
    > and auditing tools? You may want to look into some of the security-oriented
    > linux distros which may suit your needs. They would provide you with the
    > "tricked-out" tools and, in the case of the Live CD distros, wouldn't
    > necessarily need to replace your existing daily-use OS of choice. Some of
    > the more security-focused distributions are quite well put together with a
    > full complement of forensics, pen-test, and auditing tools.
    > Check out:
    >
    > http://distrowatch.com/search.php?category=Forensics&origin=All&basedon=All&
    > desktop=All&architecture=All&status=Active
    >
    > Also,
    >
    > http://biatchux.dmzs.com/ F.I.R.E - the Forensic and Incident Response
    > Environment Live CD distro.

    For live CDs for pen-testing, Security Focus has a recent article at
    http://securityfocus.com/columnists/323 that lists some more.

    I think the OP was talking about the hardware itself, though. Most any
    laptop will do, though I suggest a wireless card with a chipset that
    will work with the tools you want to use. RAM is useful in general,
    but I don't know that pen-testing has particular needs. CPU is nice if
    you're doing password cracking. In general, anything that will run
    your OS of choice (probably Linux or OpenBSD for this sort of
    application) will do what you need. I like Thinkpads because they've
    really reliable for me in the past, and the newer Dells seem to be a
    lot better, but YMMV. 

    -- 
Kyle Maxwell
http://caffeinatedsecurity.com
[krmaxwell@gmail.com]
  • Next message: Skander Ben Mansour: "Re: Penetration Test Hardware Vendor"

    Relevant Pages

    • RE: What is being a pen tester really like?
      ... security assessment and penetration ... pen-testing isn't exactly rocket science. ... What is being a pen tester really like? ... Download FREE whitepaper on how a managed service can help ...
      (Pen-Test)
    • RE: Pen-testing Internships?
      ... Subject: Pen-testing Internships? ... Concerned about Web Application Security? ... managed service or an enterprise software ... Download FREE whitepaper on how a managed ...
      (Pen-Test)
    • IIS 6.0 Web Admin Multiple vulnerabilities
      ... My first objective was to check the security in the IIS ... one vulnerability and some flaws ... You can check one of those XSS ... Is M$ paying for someone for pen-testing their ...
      (Bugtraq)
    • New SecurityFocus article: Phishing with Rachna Dhamija
      ... Generally not a pen-testing specific realm but interesting nonetheless. ... Has anyone ever leveraged phishing during pen-testing for human data-leakage/social engineering? ... Phishing with Rachna Dhamija ... co-author of the paper "Why Phishing Works" and creator of Dynamic Security Skins. ...
      (Pen-Test)
    • Re: Penetration Test Hardware Vendor
      ... The Register recently reviewed a list of security live-CDs: ... The review covers the following distributions: ... >It sounds like you mean you want a pre-installed OS with penetration testing ... >full complement of forensics, pen-test, and auditing tools. ...
      (Pen-Test)