*disclaimer* Although the attacks are illegal and break the "ethical grey hat" rules of no disclosure.../*disclaimer*

When you preach this is an imminent risk, you need to be prepared, for God's sake please listen to me and then those risks are realized, it does make you feel a little better.

With groups like Wiki-leaks, Anonymous and LulzSec popping up in the news almost everyday, I wanted to get a feel from the ethical hacking community on what we see as their role. Do they help? Do they hurt?

On one hand they help me sell work. My clients see this stuff on the news and might decide to get serious about stuff I have been pitching. They are forcing companies to deal with security issues.

On the other hand, what they are doing is illegal and might make people who don't understand the nuances between white, grey and black hat hacking turn against us altogether. If I start getting FBI agents knocking on my lab door because I am running a legitimate external scans on a range of client IP's, my prices are going up.

What do you think eh-net?

I have been trying using the script that was posted, but I have run into some issues due to my lack of bash script understanding.

Issue 1: Backtrack 5 doesn't have the airpwn tool so no wep_keygen command
Issue 2: Backtrack 4 is working, but wep_keygen isn't creating the WEP keys correctly, I am getting an error about the WEP key being fed into Airdecap not being the correct length. I think the script is just grabbing the wrong thing, by I don't have time to fix it because...
Issue 3: I am supposed to be working...

They will ship international, you just need to email them. 

http://pwnieexpress.com/faq.html

Saw the episode last night. I forced myself to watch the whole thing. I would be surprised if it made it past one more episode. The acting is poor, the dialogue is lame and pretty dirty at some points, and the tech talk is mind numbingly inaccurate. So sad...

A new RUaNinja Challenge?   

Jealous, but congrats non-the-less. 

Just got approval from my company to take PWB + OSCP. 

Trying to decide whether or not to sign up for one starting in early April. I have a vacation scheduled for late May / early June and I don't know whether it would be wasting valuable lab time (got approved for 90 days) or a well needed break. Any thoughts?

So this brings up an interesting question. Yes we could do this to speed up the process of cracking WPA/WPA2, but should we do this?

What are the implications of giving client information to a third party that doesn't have a contractual obligation to the client? What type of agreement are you making with WPACrack before you hand over a .pcap of client data?

+1 for Helix, Encase and FTK imager. Encase can get expensive depending on what flavor you want.