Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 48 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Hardware you should have during an onsite pentest?
EH-Net
May 18, 2013, 06:43:30 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Hardware you should have during an onsite pentest?  (Read 6910 times)
0 Members and 1 Guest are viewing this topic.
Eleven
Full Member
***
Offline Offline

Posts: 120


View Profile
« on: November 16, 2011, 12:49:41 PM »

Here's what I have so far that could be useful during an onsite pentest:

Pwn Plug
WAP
Hardware key loggers
Infected CDROM labeled something enticing like "layoffs"
Infected USB drive
Teensy USB HID Attack Vector from metasploit
Pen that records audio
Shredder that scans with OCR before shredding (heard about it, but haven't seen one)
Camera to take pictures of sticky notes, documents, etc.

Anything else you guys use?
« Last Edit: November 16, 2011, 07:11:53 PM by Eleven » Logged
chrisg
Guest
« Reply #1 on: November 19, 2011, 10:11:37 AM »

boot disk to change local admin passwords

something like the elcomsoft system recovery disk

http://www.elcomsoft.com/esr.html

Logged
Eleven
Full Member
***
Offline Offline

Posts: 120


View Profile
« Reply #2 on: November 19, 2011, 01:31:03 PM »

@ChrisG That's a good one, thanks!
Logged
millwalll
Guest
« Reply #3 on: November 20, 2011, 05:24:44 AM »

Wireless card
Ethernet cable
Logged
Eleven
Full Member
***
Offline Offline

Posts: 120


View Profile
« Reply #4 on: November 21, 2011, 07:32:40 AM »

I forgot about the Ethernet cable, thanks. Smiley

These aren't really technology, but useful:

Fake business cards
Briefcase to get stuff in or out
Clipboard to look like you're working on something
Logged
El33tsamurai
Full Member
***
Offline Offline

Posts: 192


View Profile
« Reply #5 on: November 21, 2011, 09:28:17 AM »

Locking picking set?
Logged

CCENT, A+, Network+, Security+
3xban
Hero Member
*****
Offline Offline

Posts: 605


View Profile WWW
« Reply #6 on: November 21, 2011, 10:41:01 AM »

Locking picking set?

That isn't in your laptop bag?? Cheesy  If the scope for physical security is included, sure why not.
Logged

Certs: GCWN
(@)Dewser
eth3real
Sr. Member
****
Offline Offline

Posts: 309



View Profile WWW
« Reply #7 on: November 21, 2011, 10:55:30 AM »

That isn't in your laptop bag?? Cheesy  If the scope for physical security is included, sure why not.

I keep my lockpicks in my laptop bag. Tongue

Another thing I would add to the list, is a directional antenna with the wifi card. Very handy. Smiley
Logged

Put that in your pipe and grep it!
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 4165


Editor-In-Chief


View Profile WWW
« Reply #8 on: November 22, 2011, 10:23:15 AM »

Not all the stuff I have in my backpack, but here's a few suggestions.

1. HDD - USB adapter. Makes it easy to just pull a hard drive and copy stuff in a hurry. They're cheap:

http://www.newegg.com/Product/Product.aspx?Item=N82E16812156102

Or you can get an expensive one that dupes drives in a matter of minutes like this one:

http://www.logicube.com/products/hd_duplication/echo-plus.asp

Logicube even has devices for hard drive as well as mobile devices that are specifically made for forensics investigations. Kewl stuff.

2. I also like ChrisG's suggestion. I personally like Offline NT Password & Registry Editor:

http://www.pogostick.net/~pnh/ntpasswd/

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
El33tsamurai
Full Member
***
Offline Offline

Posts: 192


View Profile
« Reply #9 on: November 22, 2011, 12:19:16 PM »

Not all the stuff I have in my backpack, but here's a few suggestions.

1. HDD - USB adapter. Makes it easy to just pull a hard drive and copy stuff in a hurry. They're cheap:

http://www.newegg.com/Product/Product.aspx?Item=N82E16812156102

Or you can get an expensive one that dupes drives in a matter of minutes like this one:

http://www.logicube.com/products/hd_duplication/echo-plus.asp

Logicube even has devices for hard drive as well as mobile devices that are specifically made for forensics investigations. Kewl stuff.

2. I also like ChrisG's suggestion. I personally like Offline NT Password & Registry Editor:

http://www.pogostick.net/~pnh/ntpasswd/

Don

Don:

"Or you can get an expensive one that dupes drives in a matter of minutes like this one:"

http://www.logicube.com/products/hd_duplication/echo-plus.asp

Maybe get something like this for a give away :-D
Logged

CCENT, A+, Network+, Security+
hurtl0cker
Jr. Member
**
Offline Offline

Posts: 73


View Profile
« Reply #10 on: November 22, 2011, 10:01:44 PM »

I have never been on any professional pen test  Tongue
but let me add to the list..

Network hub or switch
Live CD's
Blank CD/DVD's
Power strip
Logged

“Knowing is not enough; we must apply. Willing is not enough: we must do.”
- Bruce Lee
millwalll
Guest
« Reply #11 on: November 23, 2011, 10:25:33 AM »

I guess it also depends where you are going on site as some locations don't like you having usb or letting you leave with you HDD.
Logged
hurtl0cker
Jr. Member
**
Offline Offline

Posts: 73


View Profile
« Reply #12 on: November 23, 2011, 10:44:00 AM »

I once had a faculty who was a professional Incident response handler, I had a chance to peep into his 'Jump bag' and they carry so much, things like screw drivers, spare screws and variety of hardware interfaces to connect to devices on site Smiley . And he used to say never steal from your own jump bag Cheesy
Logged

“Knowing is not enough; we must apply. Willing is not enough: we must do.”
- Bruce Lee
tturner
Sr. Member
****
Offline Offline

Posts: 432


View Profile WWW
« Reply #13 on: November 23, 2011, 03:16:00 PM »

I got the following idea from Joe Schorr's DerbyCon talk but http://www.valuepluspaper.com/ProductDetails.asp?ProductCode=OIC83200&Click=1867 is a great clipboard to use. It looks official and is a great way to hide other items you bring in or want to smuggle out.

*Edit*

Added talk

http://www.irongeek.com/i.php?page=videos/derbycon1/joe-schorr-rule-1-cardio-and-9-other-rules-to-keep-intruders-out
« Last Edit: November 23, 2011, 04:45:51 PM by tturner » Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog  @tonylturner http://bsidesorlando.org
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.068 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.