.

My next purchase coolest pen test toys ever!

<<

R3B005t

Newbie
Newbie

Posts: 43

Joined: Wed Mar 09, 2011 9:03 am

Location: NVA/D.C.

Post Thu Apr 28, 2011 8:43 pm

My next purchase coolest pen test toys ever!

<<

lorddicranius

User avatar

Sr. Member
Sr. Member

Posts: 448

Joined: Thu Mar 03, 2011 3:54 am

Post Thu Apr 28, 2011 10:47 pm

Re: My next purchase coolest pen test toys ever!

There was so much chatter about those on twitter during Source Boston last week.  Looks like a fun little toy :)
GSEC, eCPPT, Sec+
<<

R3B005t

Newbie
Newbie

Posts: 43

Joined: Wed Mar 09, 2011 9:03 am

Location: NVA/D.C.

Post Fri Apr 29, 2011 6:04 am

Re: My next purchase coolest pen test toys ever!

Yeah Jason Street clued me in on them during source boston.  I have yet to make it out to a con gonna have to get my act together one of these days.
<<

hayabusa

User avatar

Hero Member
Hero Member

Posts: 1662

Joined: Mon Jan 29, 2007 2:59 pm

Post Fri Apr 29, 2011 7:36 am

Re: My next purchase coolest pen test toys ever!

Yeah, I was talking about pwnie's, recently, to the folks attending the CEH v7 launch class.  I'd planned to order a couple (still do,) but had to finish some extra-curricular stuff I've been working on, first.

But they definitely look promising.
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
<<

millwalll

Post Fri Apr 29, 2011 11:12 am

Re: My next purchase coolest pen test toys ever!

looks interesting but only in the USA :(
<<

sil

User avatar

Hero Member
Hero Member

Posts: 551

Joined: Thu Mar 20, 2008 8:01 am

Location: ::1

Post Fri Apr 29, 2011 11:45 am

Re: My next purchase coolest pen test toys ever!

Anything and everything is a tool. The reality of the neater tools is placement. It would be a difficult task deploying this tool in a corporate environment, not impossible, just difficult.

For the cost of this tool, I can get a netbook, "load it up", send it to a CFO as a present from a vendor who recommended him on LinkedIn, wait for him to plug it in whether at home or work... Instant and almost guaranteed pwnage. Fulfilling my SOW, game over. So a tool is a tool is a tool.

USB keys ... check, Netbook ... check ... Free iPad ... check These almost always pay off without the hassle of thinking about where to deploy plugs. Not to mention, companies believe it or not, are actually wising up. This means in an environment where NAC is deployed, you wasted money on a plug.
<<

hayabusa

User avatar

Hero Member
Hero Member

Posts: 1662

Joined: Mon Jan 29, 2007 2:59 pm

Post Fri Apr 29, 2011 7:21 pm

Re: My next purchase coolest pen test toys ever!

I'd agree, sil, for black / grey box.  One semi-exception - same exception for which I'm getting mine.  White box testing, where I'm tasked to see from the insiders' perspectives.  Yeah, I could deploy a laptop or machine, etc, but cheaper (shipping, if remote) and easier to just have them plug in a pwnie for me, and go about my business.

But again, I fully agree with you on the rest.  Just that there are times the little units do come in handy.  Believe it or not, I easily deployed a similarly 'modified' unit (non-pwnie, but another vendor's outlet pc, with my added code - and no, I don't work for pwnie) in a hospital, in a paid, black box test, too.  Amazing how easy to slap one in a spare network jack under a desk at the check-out / release desk, when they turn their back or go to the printer...  ;-). I have another similar gig coming up, so looking forward to testing out a real pwnie for this one.
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
<<

R3B005t

Newbie
Newbie

Posts: 43

Joined: Wed Mar 09, 2011 9:03 am

Location: NVA/D.C.

Post Sat Apr 30, 2011 11:37 am

Re: My next purchase coolest pen test toys ever!

Options Sil options, sending a netbook to someone in a corporate environment is a great plan and all and the free iPad is even better!  I'll give you that a small handful of companies are wising up and implementing NAC's these little guys are still great tools and one can never have too many tools in ones arsenal. 
<<

millwalll

Post Sun May 01, 2011 12:26 pm

Re: My next purchase coolest pen test toys ever!

I have Nokia n900 does anyone know where I can get the software to pwn it ? I have had search on Google but could not find ti anywhere.
<<

tturner

User avatar

Sr. Member
Sr. Member

Posts: 435

Joined: Thu Jun 26, 2008 4:50 pm

Post Thu May 05, 2011 6:35 am

Re: My next purchase coolest pen test toys ever!

I believe pwnieexpress will be releasing a free downloadable n900 image for existing n900 owners. Not sure on ETA but I got an email on it a few days ago.
Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, GSSP-JAVA, OPSE, CSWAE, CSTP, VCP

WIP: Vendor WAF stuff

http://sentinel24.com/blog @tonylturner http://bsidesorlando.org
<<

millwalll

Post Thu May 05, 2011 10:32 am

Re: My next purchase coolest pen test toys ever!

Thanks Tturner :P
<<

sil

User avatar

Hero Member
Hero Member

Posts: 551

Joined: Thu Mar 20, 2008 8:01 am

Location: ::1

Post Thu May 05, 2011 12:50 pm

Re: My next purchase coolest pen test toys ever!

tturner wrote:I believe pwnieexpress will be releasing a free downloadable n900 image for existing n900 owners. Not sure on ETA but I got an email on it a few days ago.


silica > *

http://www.zdnet.com/photos/silica-a-wi ... tool/53766
http://immunitysec.com/products-silica.shtml
<<

jsm725

User avatar

Newbie
Newbie

Posts: 36

Joined: Mon Mar 22, 2010 5:13 pm

Post Mon May 09, 2011 3:07 pm

Re: My next purchase coolest pen test toys ever!

Jamie.R wrote:looks interesting but only in the USA :(


They will ship international, you just need to email them.  ;)

http://pwnieexpress.com/faq.html
CISSP, PCI-QSA, OSWP

Return to Hardware

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software