Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 93 guests online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Hardware you should have during an onsite pentest?
EH-Net
May 26, 2012, 11:11:12 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Hardware you should have during an onsite pentest?  (Read 3357 times)
0 Members and 1 Guest are viewing this topic.
Eleven
Jr. Member
**
Online Online

Posts: 64


View Profile
« on: November 16, 2011, 12:49:41 PM »

Here's what I have so far that could be useful during an onsite pentest:

Pwn Plug
WAP
Hardware key loggers
Infected CDROM labeled something enticing like "layoffs"
Infected USB drive
Teensy USB HID Attack Vector from metasploit
Pen that records audio
Shredder that scans with OCR before shredding (heard about it, but haven't seen one)
Camera to take pictures of sticky notes, documents, etc.

Anything else you guys use?
« Last Edit: November 16, 2011, 07:11:53 PM by Eleven » Logged
chrisg
Guest
« Reply #1 on: November 19, 2011, 10:11:37 AM »

boot disk to change local admin passwords

something like the elcomsoft system recovery disk

http://www.elcomsoft.com/esr.html

Logged
Eleven
Jr. Member
**
Online Online

Posts: 64


View Profile
« Reply #2 on: November 19, 2011, 01:31:03 PM »

@ChrisG That's a good one, thanks!
Logged
Jamie.R
Hero Member
*****
Offline Offline

Posts: 626



View Profile WWW
« Reply #3 on: November 20, 2011, 05:24:44 AM »

Wireless card
Ethernet cable
Logged

OSWP | eCPPT | HackingDojo Nidan
www.jamierougive.co.uk
Eleven
Jr. Member
**
Online Online

Posts: 64


View Profile
« Reply #4 on: November 21, 2011, 07:32:40 AM »

I forgot about the Ethernet cable, thanks. Smiley

These aren't really technology, but useful:

Fake business cards
Briefcase to get stuff in or out
Clipboard to look like you're working on something
Logged
El33tsamurai
Full Member
***
Offline Offline

Posts: 180


View Profile
« Reply #5 on: November 21, 2011, 09:28:17 AM »

Locking picking set?
Logged

CCENT, A+, Network+, Security+
3xban
Sr. Member
****
Offline Offline

Posts: 373


View Profile
« Reply #6 on: November 21, 2011, 10:41:01 AM »

Locking picking set?

That isn't in your laptop bag?? Cheesy  If the scope for physical security is included, sure why not.
Logged

Certs: GCWN
eth3real
Sr. Member
****
Offline Offline

Posts: 295



View Profile WWW
« Reply #7 on: November 21, 2011, 10:55:30 AM »

That isn't in your laptop bag?? Cheesy  If the scope for physical security is included, sure why not.

I keep my lockpicks in my laptop bag. Tongue

Another thing I would add to the list, is a directional antenna with the wifi card. Very handy. Smiley
Logged

Put that in your pipe and grep it!
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 3917


Editor-In-Chief


View Profile WWW
« Reply #8 on: November 22, 2011, 10:23:15 AM »

Not all the stuff I have in my backpack, but here's a few suggestions.

1. HDD - USB adapter. Makes it easy to just pull a hard drive and copy stuff in a hurry. They're cheap:

http://www.newegg.com/Product/Product.aspx?Item=N82E16812156102

Or you can get an expensive one that dupes drives in a matter of minutes like this one:

http://www.logicube.com/products/hd_duplication/echo-plus.asp

Logicube even has devices for hard drive as well as mobile devices that are specifically made for forensics investigations. Kewl stuff.

2. I also like ChrisG's suggestion. I personally like Offline NT Password & Registry Editor:

http://www.pogostick.net/~pnh/ntpasswd/

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
El33tsamurai
Full Member
***
Offline Offline

Posts: 180


View Profile
« Reply #9 on: November 22, 2011, 12:19:16 PM »

Not all the stuff I have in my backpack, but here's a few suggestions.

1. HDD - USB adapter. Makes it easy to just pull a hard drive and copy stuff in a hurry. They're cheap:

http://www.newegg.com/Product/Product.aspx?Item=N82E16812156102

Or you can get an expensive one that dupes drives in a matter of minutes like this one:

http://www.logicube.com/products/hd_duplication/echo-plus.asp

Logicube even has devices for hard drive as well as mobile devices that are specifically made for forensics investigations. Kewl stuff.

2. I also like ChrisG's suggestion. I personally like Offline NT Password & Registry Editor:

http://www.pogostick.net/~pnh/ntpasswd/

Don

Don:

"Or you can get an expensive one that dupes drives in a matter of minutes like this one:"

http://www.logicube.com/products/hd_duplication/echo-plus.asp

Maybe get something like this for a give away :-D
Logged

CCENT, A+, Network+, Security+
hurtl0cker
Jr. Member
**
Offline Offline

Posts: 58



View Profile
« Reply #10 on: November 22, 2011, 10:01:44 PM »

I have never been on any professional pen test  Tongue
but let me add to the list..

Network hub or switch
Live CD's
Blank CD/DVD's
Power strip
Logged

“Knowing is not enough; we must apply. Willing is not enough: we must do.”
- Bruce Lee
Jamie.R
Hero Member
*****
Offline Offline

Posts: 626



View Profile WWW
« Reply #11 on: November 23, 2011, 10:25:33 AM »

I guess it also depends where you are going on site as some locations don't like you having usb or letting you leave with you HDD.
Logged

OSWP | eCPPT | HackingDojo Nidan
www.jamierougive.co.uk
hurtl0cker
Jr. Member
**
Offline Offline

Posts: 58



View Profile
« Reply #12 on: November 23, 2011, 10:44:00 AM »

I once had a faculty who was a professional Incident response handler, I had a chance to peep into his 'Jump bag' and they carry so much, things like screw drivers, spare screws and variety of hardware interfaces to connect to devices on site Smiley . And he used to say never steal from your own jump bag Cheesy
Logged

“Knowing is not enough; we must apply. Willing is not enough: we must do.”
- Bruce Lee
tturner
Sr. Member
****
Offline Offline

Posts: 329


View Profile WWW
« Reply #13 on: November 23, 2011, 03:16:00 PM »

I got the following idea from Joe Schorr's DerbyCon talk but http://www.valuepluspaper.com/ProductDetails.asp?ProductCode=OIC83200&Click=1867 is a great clipboard to use. It looks official and is a great way to hide other items you bring in or want to smuggle out.

*Edit*

Added talk

http://www.irongeek.com/i.php?page=videos/derbycon1/joe-schorr-rule-1-cardio-and-9-other-rules-to-keep-intruders-out
« Last Edit: November 23, 2011, 04:45:51 PM by tturner » Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GSEC, OPSE, CSWAE, VCP

Next 6 months: GCIH, CSTP, STI MSISE
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.221 seconds with 23 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.