Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 16 guests and 2 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Pentesting Kit
Ethical Hacker Community Forums
November 23, 2008, 04:55:24 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1] 2   Go Down
  Print  
Author Topic: Pentesting Kit  (Read 4848 times)
0 Members and 1 Guest are viewing this topic.
eth3real
Full Member
***
Offline Offline

Posts: 130



View Profile
« on: March 17, 2008, 11:49:41 PM »

What do you guys keep in your pentesting/hacking kits? Mine isn't very much, and I want to add a few things to it.

This is what I keep in my kit:

Asus EeePC
USB DVD burner
USB HDD (120GB)
USB Flash drive (4GB)
BackTrack
Helix
Knoppix-STD
nUbuntu
The BBC LNX disc that came with the C|EH certificate Grin
A paperclip (for opening CD-ROM trays)
Screwdrivers
Lock picks (for computer cases with locks)
Flashlight
A notebook (you know, that analog thing that you can write in Wink)

Some of this stuff gets used more since I'm the network admin at work, but it's still part of my kit.

I'm looking forward to some good responses. Wink
Logged

Jess Hires
MCP, C|EH
RoleReversal
Sr. Member
****
Offline Offline

Posts: 457


View Profile WWW
« Reply #1 on: March 18, 2008, 03:52:57 AM »

eth3real,

pretty similar to my kit, only additions I have are:
  • Selection of tested Cat5 cables of varying lengths (Straight, cross- and roll-over)
  • Cable tester
  • RJ45 ends & crimping set
  • Plane ticket to Brazil for when the .... REALLY hits the fan Wink

I haven't passed the C|EH yet, is the BBC LNX any more useful than other pentest/audit distros?
Logged

A little bit of sanity:
http://www.infosanity.co.uk
iSmith
Full Member
***
Offline Offline

Posts: 156


Do or do not. There is no try. - Yoda


View Profile
« Reply #2 on: March 18, 2008, 06:07:46 AM »

i take it that since you have so much equipment, you are a pro pen tester, eth3real. Wink
Logged

In my eyes, your operating system is as solid as swiss cheese.
RoleReversal
Sr. Member
****
Offline Offline

Posts: 457


View Profile WWW
« Reply #3 on: March 18, 2008, 06:33:14 AM »

i take it that since you have so much equipment, you are a pro pen tester, eth3real. Wink

From experience a pentest kit will be relatively similar to an emergency jump bag of anyone who deals with critical systems/networks. Only difference is the general level of calmness during kit's use Wink

My equipment hasn't really changed during the migration from administration to auditing.
Logged

A little bit of sanity:
http://www.infosanity.co.uk
BillV
Hero Member
*****
Offline Offline

Posts: 862


View Profile
« Reply #4 on: March 18, 2008, 08:19:16 AM »

I haven't passed the C|EH yet, is the BBC LNX any more useful than other pentest/audit distros?

I think if you search for it, you can find somewhere on the web to download it. I don't think it's maintained any longer (and hasn't been for a while if I remember). I couldn't even get the copy that came with my CEH to boot up.
Logged
RoleReversal
Sr. Member
****
Offline Offline

Posts: 457


View Profile WWW
« Reply #5 on: March 18, 2008, 08:24:22 AM »

I think if you search for it, you can find somewhere on the web to download it. I don't think it's maintained any longer (and hasn't been for a while if I remember). I couldn't even get the copy that came with my CEH to boot up.

Cheers BillV,

guess that might answer my question without finding the download
Logged

A little bit of sanity:
http://www.infosanity.co.uk
pseud0
Full Member
***
Offline Offline

Posts: 139



View Profile
« Reply #6 on: March 18, 2008, 08:27:26 AM »

Just my 2 cents:
I don't really keep a mobility bag for pen testing other than my preloaded usb hard drive (dual boot win xp and BT3), the normal collection of live CD's, and the usb wireless adapter I use for wireless hacking.  The rationale for this is that the majority of our pen testing occurs from a lab which is already setup for our use.  I use the this stuff when we've been asked to do a pen test from within the client site.  Most of the items you guys have mentioned (cables, screwdrivers, etc) I have in my forensics toolkit from when I used to regularly serve search warrants.  It hasn't gotten much use in the last couple of years, but the things I've noticed that you're missing from that list are:
-a variety of power supply connectors and cords, these always seem to come up missing when you need them
-cables for connection to SATA/ATA/IDE/SCSI hard drives, again, always seem to come up missing when you need them
-external and internal floppy drive, you'd be surprised how often you'll need these on older systems and you can't always count on usb support
Logged

CISSP, CISM
eth3real
Full Member
***
Offline Offline

Posts: 130



View Profile
« Reply #7 on: March 18, 2008, 08:36:48 AM »

I haven't passed the C|EH yet, is the BBC LNX any more useful than other pentest/audit distros?
Nope. It is relatively useless, unless there is something great on there that I have yet to find. I keep it in there for fun. Grin

i take it that since you have so much equipment, you are a pro pen tester, eth3real. Wink
I am really not a very good pentester, it's just part of my everyday tools as the network admin at the office. You wouldn't believe how many times a hard drive fails on a server in another department, and they can't find the freaking key. Wink

From experience a pentest kit will be relatively similar to an emergency jump bag of anyone who deals with critical systems/networks. Only difference is the general level of calmness during kit's use Wink
Exactly. Smiley

Just my 2 cents:
I don't really keep a mobility bag for pen testing other than my preloaded usb hard drive (dual boot win xp and BT3), the normal collection of live CD's, and the usb wireless adapter I use for wireless hacking.
It's really just my laptop bag that I threw a few tools into. One of these days, when I am doing real pentesting, I will actually have a kit, separate from my laptop bag.

I actually do have a few things that I'm going to add to it:
Ethernet cable (I have oodles of it in the office)
USB IDE/MiniIDE/SATA adapter, with 5/12v power supply for Molex and SATA connectors.
« Last Edit: March 18, 2008, 08:47:24 AM by eth3real » Logged

Jess Hires
MCP, C|EH
Bogwitch
Newbie
*
Offline Offline

Posts: 48

Senno Ekto Gamat


View Profile
« Reply #8 on: March 18, 2008, 09:33:28 AM »

My Kit:
Dell D840 with 3x HDD caddies, 1xWin2K, 2x Linux HDDs. Laptop modded slightly to allow an external Wifi aerial.
2 x USB to IDE/ Mini IDE/ SATA connectors.
2 x 500GB 3 1/2 IDEs
1 Omni and 1 Cantenna directional aerial
1 PCMCIA SCSI card with adpaters from 50 way SCSI to SCA 80 way
1 3C589 NIC
2 x 10MB Fibre-CAT5 media converters
2 x 100MB Fibre-CAT5 media converters
2 x 1GB Fibre-CAT5 media converters
8 port Dell 2708 Power connect configured to repeat traffic on ports 1-4 onto port 8
various CAT5 cable
various Fibre optic cable
2 x BNC T-Pieces and some coax.
Mini USB mouse
Lock picks
Hacksaw
Jewellers screwdrivers
2 x No. 1 crosshead (posidrive) screwdriver.
Gerber knife
Wire strippers
Various USB connection leads
USB dvd burner
CD case with Installs and live CDs and a smattering of small capacity 2 1/2 HDDs, just in case.
Notebook
Mobile Phone and charger
Analogue 'butt' phone.
Various power leads, 4 way power strip.
RF video camera. RF audio transmitter. RF video receiver. RF audio receiver.
RS232 cable and breakout box.
Crocodile clips.

This all fits in my laptop bag except the directional Wifi aerial. The bag is VERY heavy when full. Smiley
Logged

CISSP, C|EH, C|HFI
RoleReversal
Sr. Member
****
Offline Offline

Posts: 457


View Profile WWW
« Reply #9 on: March 18, 2008, 09:37:04 AM »

Bogwitch,

don't fancy having to transfer your laptop bag around, but I've got to ask...
Hacksaw
Huh
Logged

A little bit of sanity:
http://www.infosanity.co.uk
pseud0
Full Member
***
Offline Offline

Posts: 139



View Profile
« Reply #10 on: March 18, 2008, 10:00:39 AM »

The hacksaw is for when he's on the road.  You know the story: you're in a hotel for a week while you're doing the pen test, you meet someone in the hotel bar, bring them back to the room, it goes badly, and the next morning you need to get handcuffs off your wrists and ankles.  We've all been there.  As for the aerial antenna, the big one we keep in our office is so big that we carry it around in a golf case. It was already here when I got hired, and I'm still trying to figure out how they put the business case together to convince management to pay for it.  I've seen it used all of once.
Logged

CISSP, CISM
RoleReversal
Sr. Member
****
Offline Offline

Posts: 457


View Profile WWW
« Reply #11 on: March 18, 2008, 10:04:20 AM »

The hacksaw is for when he's on the road.  You know the story: you're in a hotel for a week while you're doing the pen test, you meet someone in the hotel bar, bring them back to the room, it goes badly, and the next morning you need to get handcuffs off your wrists and ankles.  We've all been there.

That answers my question, guess I'm just too young and inexperienced to have come across that particular issue yet Wink
Logged

A little bit of sanity:
http://www.infosanity.co.uk
Bogwitch
Newbie
*
Offline Offline

Posts: 48

Senno Ekto Gamat


View Profile
« Reply #12 on: March 18, 2008, 10:05:49 AM »

Bogwitch,

don't fancy having to transfer your laptop bag around, but I've got to ask...
Hacksaw
Huh

It came just after the lockpicks.....

But I like the handcuffs idea!
Logged

CISSP, C|EH, C|HFI
eth3real
Full Member
***
Offline Offline

Posts: 130



View Profile
« Reply #13 on: March 18, 2008, 10:09:08 AM »

That is quite a kit.
A lot of that stuff I have in a toolbox in my trunk, but I don't really consider it part of my kit... Though, I definitely don't have a hacksaw in there.

I like the idea of a directional antenna, that is something I should think about getting.
Logged

Jess Hires
MCP, C|EH
eth3real
Full Member
***
Offline Offline

Posts: 130



View Profile
« Reply #14 on: March 18, 2008, 04:05:46 PM »

I think a tone generator and probe would also be a nice addition to this kit. We have one in the office, but it looks like my boss took it home for the week.

Some of this stuff, you really have to ask yourself "Okay, should this really go in my laptop bag, or should this stay in a toolbox in the trunk?"

Thanks for the great responses!
Logged

Jess Hires
MCP, C|EH
Pages: [1] 2   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.062 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.