.

Hardware you should have during an onsite pentest?

<<

Eleven

User avatar

Full Member
Full Member

Posts: 121

Joined: Thu Nov 10, 2011 6:47 pm

Post Wed Nov 16, 2011 1:49 pm

Hardware you should have during an onsite pentest?

Here's what I have so far that could be useful during an onsite pentest:

Pwn Plug
WAP
Hardware key loggers
Infected CDROM labeled something enticing like "layoffs"
Infected USB drive
Teensy USB HID Attack Vector from metasploit
Pen that records audio
Shredder that scans with OCR before shredding (heard about it, but haven't seen one)
Camera to take pictures of sticky notes, documents, etc.

Anything else you guys use?
Last edited by Eleven on Wed Nov 16, 2011 8:11 pm, edited 1 time in total.
<<

chrisg

Post Sat Nov 19, 2011 11:11 am

Re: Hardware you should have during an onsite pentest?

boot disk to change local admin passwords

something like the elcomsoft system recovery disk

http://www.elcomsoft.com/esr.html
<<

Eleven

User avatar

Full Member
Full Member

Posts: 121

Joined: Thu Nov 10, 2011 6:47 pm

Post Sat Nov 19, 2011 2:31 pm

Re: Hardware you should have during an onsite pentest?

@ChrisG That's a good one, thanks!
<<

millwalll

Post Sun Nov 20, 2011 6:24 am

Re: Hardware you should have during an onsite pentest?

Wireless card
Ethernet cable
<<

Eleven

User avatar

Full Member
Full Member

Posts: 121

Joined: Thu Nov 10, 2011 6:47 pm

Post Mon Nov 21, 2011 8:32 am

Re: Hardware you should have during an onsite pentest?

I forgot about the Ethernet cable, thanks. :)

These aren't really technology, but useful:

Fake business cards
Briefcase to get stuff in or out
Clipboard to look like you're working on something
<<

El33tsamurai

User avatar

Full Member
Full Member

Posts: 219

Joined: Sat Feb 03, 2007 4:01 pm

Post Mon Nov 21, 2011 10:28 am

Re: Hardware you should have during an onsite pentest?

Locking picking set?
CCENT, A+, Network+, Security+
<<

Triban

User avatar

Hero Member
Hero Member

Posts: 620

Joined: Fri Feb 19, 2010 4:17 pm

Post Mon Nov 21, 2011 11:41 am

Re: Hardware you should have during an onsite pentest?

El33tsamurai wrote:Locking picking set?


That isn't in your laptop bag?? :D  If the scope for physical security is included, sure why not.
Certs: GCWN
(@)Dewser
<<

eth3real

User avatar

Sr. Member
Sr. Member

Posts: 309

Joined: Wed Feb 27, 2008 10:35 am

Location: US

Post Mon Nov 21, 2011 11:55 am

Re: Hardware you should have during an onsite pentest?

3xban wrote:That isn't in your laptop bag?? :D  If the scope for physical security is included, sure why not.


I keep my lockpicks in my laptop bag. :P

Another thing I would add to the list, is a directional antenna with the wifi card. Very handy. :)
Put that in your pipe and grep it!
<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Tue Nov 22, 2011 11:23 am

Re: Hardware you should have during an onsite pentest?

Not all the stuff I have in my backpack, but here's a few suggestions.

1. HDD - USB adapter. Makes it easy to just pull a hard drive and copy stuff in a hurry. They're cheap:

http://www.newegg.com/Product/Product.a ... 6812156102

Or you can get an expensive one that dupes drives in a matter of minutes like this one:

http://www.logicube.com/products/hd_dup ... o-plus.asp

Logicube even has devices for hard drive as well as mobile devices that are specifically made for forensics investigations. Kewl stuff.

2. I also like ChrisG's suggestion. I personally like Offline NT Password & Registry Editor:

http://www.pogostick.net/~pnh/ntpasswd/

Don
CISSP, MCSE, CSTA, Security+ SME
<<

El33tsamurai

User avatar

Full Member
Full Member

Posts: 219

Joined: Sat Feb 03, 2007 4:01 pm

Post Tue Nov 22, 2011 1:19 pm

Re: Hardware you should have during an onsite pentest?

don wrote:Not all the stuff I have in my backpack, but here's a few suggestions.

1. HDD - USB adapter. Makes it easy to just pull a hard drive and copy stuff in a hurry. They're cheap:

http://www.newegg.com/Product/Product.a ... 6812156102

Or you can get an expensive one that dupes drives in a matter of minutes like this one:

http://www.logicube.com/products/hd_dup ... o-plus.asp

Logicube even has devices for hard drive as well as mobile devices that are specifically made for forensics investigations. Kewl stuff.

2. I also like ChrisG's suggestion. I personally like Offline NT Password & Registry Editor:

http://www.pogostick.net/~pnh/ntpasswd/

Don


Don:

"Or you can get an expensive one that dupes drives in a matter of minutes like this one:"

http://www.logicube.com/products/hd_duplication/echo-plus.asp

Maybe get something like this for a give away :-D
CCENT, A+, Network+, Security+
<<

hurtl0cker

User avatar

Jr. Member
Jr. Member

Posts: 73

Joined: Thu Nov 18, 2010 10:09 am

Location: WWW

Post Tue Nov 22, 2011 11:01 pm

Re: Hardware you should have during an onsite pentest?

I have never been on any professional pen test  :P
but let me add to the list..

Network hub or switch
Live CD's
Blank CD/DVD's
Power strip
“Knowing is not enough; we must apply. Willing is not enough: we must do.”
- Bruce Lee
<<

millwalll

Post Wed Nov 23, 2011 11:25 am

Re: Hardware you should have during an onsite pentest?

I guess it also depends where you are going on site as some locations don't like you having usb or letting you leave with you HDD.
<<

hurtl0cker

User avatar

Jr. Member
Jr. Member

Posts: 73

Joined: Thu Nov 18, 2010 10:09 am

Location: WWW

Post Wed Nov 23, 2011 11:44 am

Re: Hardware you should have during an onsite pentest?

I once had a faculty who was a professional Incident response handler, I had a chance to peep into his 'Jump bag' and they carry so much, things like screw drivers, spare screws and variety of hardware interfaces to connect to devices on site :) . And he used to say never steal from your own jump bag :D
“Knowing is not enough; we must apply. Willing is not enough: we must do.”
- Bruce Lee
<<

tturner

User avatar

Sr. Member
Sr. Member

Posts: 435

Joined: Thu Jun 26, 2008 4:50 pm

Post Wed Nov 23, 2011 4:16 pm

Re: Hardware you should have during an onsite pentest?

I got the following idea from Joe Schorr's DerbyCon talk but http://www.valuepluspaper.com/ProductDe ... Click=1867 is a great clipboard to use. It looks official and is a great way to hide other items you bring in or want to smuggle out.

*Edit*

Added talk

http://www.irongeek.com/i.php?page=vide ... ruders-out
Last edited by tturner on Wed Nov 23, 2011 5:45 pm, edited 1 time in total.
Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, GSSP-JAVA, OPSE, CSWAE, CSTP, VCP

WIP: Vendor WAF stuff

http://sentinel24.com/blog @tonylturner http://bsidesorlando.org

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 2 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software