Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 51 guests and 1 member online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Hardwarearrow OS X as a Pentest Platform
EH-Net
May 24, 2012, 11:31:39 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: [1] 2   Go Down
  Print  
Author Topic: OS X as a Pentest Platform  (Read 16742 times)
0 Members and 1 Guest are viewing this topic.
SynJunkie
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« on: February 05, 2009, 03:14:20 PM »

Hi guys,

i've recently gotten hold of a macbook and i gotta say that i'm totally lovin it.  Now I have it running pretty well with kismet (yes that's kismet), nmap, metasploiot, ettercap etc... and all seems to be working well.

My question is, do any of you pentesters out there use a mac as your main pentest platform? or  through experience have you found it to not be as flexible as Linux?

i've done a little testing in the week that i've had it and it seems to be working well but I just wondered if theres a "gotcha" just waiting to happen.

Any thoughts on this would be great.

Cheers

Syn

p.s Has anyone read Johnny Long's book on OS X Hacking and if so was it any good?
Logged

----------------------------------
http://synjunkie.blogspot.com
geekyone
Full Member
***
Offline Offline

Posts: 177



View Profile
« Reply #1 on: February 05, 2009, 03:34:56 PM »

Well I don't use Mac but that's mostly because I am poor.  I think Ed Skoudis uses a Mac for pentesting though.
Logged

CISSP, CEH, GPEN, GCIH, GCFA
SynJunkie
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #2 on: February 05, 2009, 03:38:42 PM »

After getting the mac I too am poor, and my family are pretty hungry!
Logged

----------------------------------
http://synjunkie.blogspot.com
Malware
Newbie
*
Offline Offline

Posts: 1


View Profile
« Reply #3 on: February 05, 2009, 03:47:22 PM »

I use Mac to test, even tho I run linux on it, not its original Mac OS
Logged
SynJunkie
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #4 on: February 05, 2009, 04:20:26 PM »

Malware

Why do you choose linux rather than OS X, is it familiarity or a shortcoming with OS X as a pentest platform?
Logged

----------------------------------
http://synjunkie.blogspot.com
vijay2
Full Member
***
Offline Offline

Posts: 220


View Profile
« Reply #5 on: February 06, 2009, 10:44:42 AM »

The people I have seen who uses MAC run VMware Fusion and VMs for pentesting. OS X can be a lil bit difficult to get all your fav tools working.

VJ
Logged

GPEN GCFA GCIH CISSP CISA GSEC OSCP C|EH Security+
SynJunkie
Jr. Member
**
Offline Offline

Posts: 71


View Profile WWW
« Reply #6 on: February 12, 2009, 07:18:18 AM »

After setting up macports the apps i use seem to download and work pretty good.  But i an see myself having a Linux VM to hand just in case.

Rather than VM Fusion i opted for Parallels though, being a total Mac newb could you tell me if VM Fusion is preffered and why?

Cheers

Syn
Logged

----------------------------------
http://synjunkie.blogspot.com
vijay2
Full Member
***
Offline Offline

Posts: 220


View Profile
« Reply #7 on: February 12, 2009, 08:16:08 AM »

Fusion Vs Parallel, umm i might not be the right person to answer that, though I think its matter of prefference.

I think one of the key to success is to be very confortable with the tools you use for pentesting.

I like to go with Fusion because I am comfortable with Vmware and it give me the ability to move around my VMs easily from different Hosts ( PC /  MAC)

VJ
Logged

GPEN GCFA GCIH CISSP CISA GSEC OSCP C|EH Security+
Chan
Newbie
*
Offline Offline

Posts: 32


View Profile
« Reply #8 on: February 12, 2009, 11:58:48 AM »

I'm currently rocking a MBP. Mac Ports have most things, and I fall back to a Samurai/BT3 installation on VM Fusion if needed.

There's quite a Fusion Vs Parrallels argument on various different sites (also if it's a linux guest OS you're looking at, I've heard good things of VirtualBox) and with the current releases they're about neck and neck. I chose Fusion because of my familiarity with  VM products. There are some arguments about better video hardware acceleration, but if it that important go bootcamp and install whatever OS you want.

I've also got the OSX for Hackers book, it's good but it's starting to look a bit dated (there's a chapter on setting up kisMAC which is no longer needed as kismet works fine from ports), but if you're totally new to OSX it's worth a quick read.

I'm still with the "whatever you're most comfortable with" camp, I just happen to be comfortable with overpriced eyecandy Smiley
Logged

CCNA, 100m Swimming cert.
Thegmandrive
Newbie
*
Offline Offline

Posts: 40


View Profile
« Reply #9 on: February 17, 2009, 08:23:52 PM »

I love my Mac absolutely love it. I have a sweet setup, I have Mac Os X Server, Linux Red Hat, and Windows (I know, I know, it's a sin to have windows on my apple, Dont Ye Judge least ye be Judged... or something like that), All natively installed. I use Fusion for quick switching. For my wireless security testing I use AirCrack. I have a virtual machine I use just for that. I also have AirCrack installed on my Mac Via Macports but the linux version can do much more easier.

I have used both Parallels, and Fusion, I prefer Fusion.

I use Kismac NOT Kismet, to gather information about networks and import the findings into AirCrack, and use that to test my Wireless Security.

With a few easy work arounds, in my personal opinion, Macs are the way to go... If you can afford them of course... Im still paying for mine  Grin

Logged
DrivinTin
Jr. Member
**
Offline Offline

Posts: 51


Net+, Sec+, C|EH, ECSA, CISSP, CASP


View Profile
« Reply #10 on: March 14, 2009, 04:34:48 AM »

I also have a MacBook that i LOVE for pen testing.  The only thing i hated was i would have to reboot to BT to do packet injection, and a few other wireless tools, that is till i found this baby:

hxxps://shop.fon.com/FonShop/shop/US/ShopController?view=product&product=PRD-001

Currently going for $29, but you can find promos and codes all the time to get them for $5 or sometimes free!  And the antenna comes right off to put something a bit bigger on it.  Then you take it and put this firmware on it:

hxxp://fonerahacks.com/index.php/Tutorials-and-Guides/Flash-Legend-Firmware-to-Fonera.html

And now you have a little guy, that can do all kinds of fun things, running Airserv so that you can actually do the computing on your machine while the packets are grabbed via the Fon.  Man it works like a charm, and i even built a batter pack on mine out of 4 AAs so that I don't have to use a power adapter Smiley

Zac
Logged

Currently working on:
A UAV Project
Speaking and conferences
Thegmandrive
Newbie
*
Offline Offline

Posts: 40


View Profile
« Reply #11 on: April 07, 2009, 04:41:52 PM »

Sweeeeet, I'm going to have to try that.. its cheap enough Smiley Thanks for the info dude.
Logged
decrypt_keeper
Guest
« Reply #12 on: May 12, 2009, 07:15:16 PM »

I'd get a Mac just for their physical design, but I'd probably just end up wiping out OS X and running Linux 100%.
Logged
Ketchup
Hero Member
*****
Offline Offline

Posts: 1006



View Profile
« Reply #13 on: May 12, 2009, 09:29:40 PM »

I don't get how people use a system where you still cannot right-click on something and you have to hold option+clover+shift+f8+scratch_your_butt+power to reboot the thing.
Logged

~~~~~~~~~~~~~~
Ketchup
timmedin
Sr. Member
****
Offline Offline

Posts: 470



View Profile WWW
« Reply #14 on: May 14, 2009, 07:27:35 AM »

You can right click.
http://lifehacker.com/software/mac-tip/right+click-from-the-trackpad-323322.php

Also, the one button looking mouse also senses your finger and will allow you to right click if you enable the options (I forget where it is and I don't have one in front of me).
Logged

twitter.com/timmedin | http://blog.securitywhole.com
Pages: [1] 2   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.222 seconds with 23 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.