Slashdot Mirror
Local Area Security Linux 0.4a
Anonymous Coward writes "Local Area Security Linux is a small 'live CD' distribution based on Knoppix that aims at being less than 185MB so it will fit on a MiniCD. It is now 107MB with FluxBox as the window manager. It contains about 100 security (forensics, penetration testing, firewall, intrusion detection, etc.) tools including Ethereal and Nessus. See a screenshot here."
That's really strange.. this was supposed to be posted to a different story.
Enjoy!
So is this a security or hacking cd? Seems like some good tools to me.
Can you ping me now?... Good!
How do you deal with the weekly Nessus plugin updates? Do you have to d/l and burn a new disk every week or two?
Sounds like futuristic porno rather than Unix security.
Sorry. That was not funny and clearly off-topic. Mod me down :-(
Gives a new meaning to moderators on crack and not reading the article doesn't it ?
I dont know it realy looks like a toy to throw in and boot up some lab machine without leaving many traces. Most people I can think that need this allready have linux on a laptop for this function or are running windows equivialants.
Maybe it's a good giveaway for consultants to throw a little knoledge at the clients let them get scared and then do a real audit?
No sir I dont like it.
...All on 1 miniCD. That sounds very convenient.
I request that the next feature to develop is an option where you just wave or shake the miniCD at the computer to remedy any problems. This would alleviate the hassle of putting the miniCD into the tray and running it.
I am a big fan of easy to use diagnostics/repair utilities. This sounds very good, and with just this one final tweaking, I think it will be perfect.
Slashdot Syndrome: the sudden, extreme urge to correct someone in order to validate one's self.
Now, how many tools like this do you see for a windows, or any closed source environment. Its tools like these that keep linux away from crap like this balster worm. Linux isn't perfect, but it learns from its mistakes, thats what makes it superior to and closed source software
-=You might be a geek if your computer is worth more than your car=-
Live CDs like knoppix are all very lovely but when's the day that I can roll out my own live CDs without TOO much effort? Just select the packages you want, kernel, drivers, etc, wait as the program churns out a nice ISO for you which you can burn to a CD and voila, insta-Linux! Now that would seriously rock as you can simply modify all the basics as you see fit and can easily alter the whole deal for bugfixes.
Hate me!
We need a modification of the robots.txt file standards to indicate that major pages like slashdot should not link here.
Knoppix-STD has been out for over 2 months. Lame.
Some script kidie downloaded this new fangled "security-disguised" Linux distro called L.A.S. He then used it to scan for exploits on slashdot.org and made posts get routed to different stories.
He then screamed: | 4|V| l337. j00 s|-|0ulD ph34r m3.
Overall, this is a great new window manager, that will perform well on lower end machines.
::::: New Mirrors Added! :::::
N .i so -The Netherlands
4 a_ MAIN.iso -India/Asian Pacific
A IN .iso -USA
3 b. iso
s o
S ER V.iso
3 b_ SECSERV.iso
E CS ERV.iso
L.A.S. 0.4a Main with FluxBox MD5: 0939d7294035b5246bedbce1085bb1e1
http://lightning.chem.tue.nl/las/l.a.s_0.4a_MAI
http://sarovar.org/mirrors/knoppix-las/l.a.s_0.
http://psifertex.nerdc.ufl.edu/iso/l.a.s_0.4a_M
L.A.S. 0.3b Main MD5: f47150d2458c78169a65458bcf8ebf96
http://lightning.chem.tue.nl/las/l.a.s_0.3b.iso
http://sarovar.org/mirrors/knoppix-las/l.a.s_0.
http://psifertex.nerdc.ufl.edu/iso/l.a.s_0.3b.i
L.A.S. 0.3b SECSERV MD5: ff412734492e39d1d084ced556a47493
http://lightning.chem.tue.nl/las/l.a.s_0.3b_SEC
http://sarovar.org/mirrors/knoppix-las/l.a.s_0.
http://psifertex.nerdc.ufl.edu/iso/l.a.s_0.3b_S
I'm getting to really love these things. If it's got ssh, scp, ethereal, port scanner, and a few other goodies, this thing's gonna rock.
Karma: Chameleon (mostly due to the fact that you come and go).
I have a script on my box that puts the eth0 interface down and back up every 3 minutes to break the connection of any evil pirate who might haNO CARRIER
"A door is what a dog is perpetually on the wrong side of" - Ogden Nash
How about an version that you can (easily) put on an USB flash memory card and boot from there?
This sounds a LOT like F.I.R.E. (http://fire.dmzs.com) which I've found to be extremely useful, and highly recommend for forensics, pen testing, and other practical security efforts.
I've been wondering about this as well. I would like to see an online generic kernel/package distributor offer a system where I could select, say from a series of menus, the packages I would like (possibly with custom tweaks) and have an iso/s generated just for me to download. The processor and bandwidth requirements of this pipedream are probably too cost prohibitive right now for a free system. If you would like to see a demo of a similar system (for graphics rendering) check out cooltext.com.
Why did they choose MS win95 default aqua as a background color? BLUUUAAAAAHHHHHHHH!!!!!!!
In the real world, you don't always have permission to take a box down to perform forensics. Rebooting == downtime. Booting into Linux from a CD to inspect == downtime. When you *are* granted permission to take down a box for forensics analysis (you have to get permission in a search warrant for this, or permission from the company that wants you to investigate, but this is rarely feasable), you'll probably be working for a large firm that can afford forensics tools that cost tons of cash and do much more advanced forensics analysis than the forensics software for Linux.
This sounds more like another goodies CD for people to mess around with at school. Or perhaps something to give people Linux demos with. Who knows. I wouldn't market it as a forensics tool, though.
www.sitetronics.com/wordpress
Yet Another D??? Linux Distro....
Haven't we already got enough?
And what is this Coroner's toolkit thingy? Something for the morgue? What does it have to do with Linux?
And forget this Lazarus thingy-- if you want religion, get Jesux.
Oh, and more more thing. My pen writes fine. No need to test it.
(for the humor impaired-- if you didn't get it, forget it)
LedgerSMB: Open source Accounting/ERP
they may be secure but it seems they weren't ready for /. - can't resolve already :S
I've left to find myself. If you happen to see me, please, keep me there until I return.
Well, as I see it, with Knoppix (and derivatives) you get almost everything you need. If not you can always apt-get what you need as it's based on Debian. Not exactly what you want, but it's easily customizable from this viewpoint.
zWhat would an EWOULDBLOCK block, if an EWOULDBLOCK could block would? -- me
I always save my last mod point to mod up a good troll. You people are too serious.
Someone earlier said companies cannot afford downtime. True but in most corporate enviroments there are plenty of boxes to take over the job of the hacked box most times and in the event that there's no backup most serious hackings will require the downtime anyways to investigate and fix the issue.
Can you imagine if a credit card database was hacked and they said just bring it back up?
Yeah, so I don't own a Powerbook, but does anyone really use mini-CDs?
5...4...3...2...1...
SCO has just accused them of patent infringement.
It seems our host in Argentina didn't like all the bandwidth we were using even though we get 20GB a month not including ftp traffic. If anyone wants to donate some hosting we'd appreciate it. . .
-J-
was when I clicked on the link to the screenshot only to be presented with a 444 error:
"You do not have permission to access the requested file on this server."
Wow, when it comes to security, these folks aren't kidding around! It's so secure, you can't even look at the images it serves! Now THAT'S tight!
Newer mini-CDs now fit up to 210Meg, FYI.
And they have R/W versions, as well. Nifty!
I always thought something like these would make great floppy replacements, but it looks like USB flash drives are gonna do that first. That's OK - solid state storage rawks, and their capacity is already well over that of even the 210Meg CD-R(/W) mini-CDs.
Here's to hoping they come out with FireWire '2' (IEEE1394.b) flash drives! *cheers*
You should be able to customize what is on the knoppix cd fairly easy already. If you look at the Knoppix cheatcodes, for manipulating hardware detection, there is a note in there about remastering the cd:
:)
If you wish to remaster the CD, please don't forget to specify
-b KNOPPIX/boot.img
for the german version of the bootfloppy, or
-b KNOPPIX/boot-en.img
for the english version, as option to mkisofs. Otherwise your CD
won't be bootable. The directory KNOPPIX, containig the compressed
filesystem file "KNOPPIX", must be located in the top level
directory of the CD.
So, just take the knoppix ISO, copy to disk and modify away. Then use mkisofs with the -b flag to make your new custom ISO.
Why would I want to use an unoptimized version of each of these security tools when I could speed up their operation by at least 10%?
It just makes imminently more sense to only have source on your CD. What's the use of binary packaged security tools that could have buffer overflow vulnerabilities of their own, that I could not first examine before using.
i wonder if fyodor can use this to hack sdem's computer
I walk around with that in my pocket until a rent-a-cop, or paranoid faculty member, at college sees me with it and, after inspecting it, accuses me of trying to hack into the college computer system. After all, its like carrying around a lockpick set, at least to some people.
what do you need a screen shot for? It's fucking Linux.
http://www.knoppix-std.org/.
-- PhoneBoy
The views expressed herein are not necessarily those of anyone, including the poster.
I used to use an old floppy based distro called Trinux. On about 3 floppies I had X server + GUI web browser and some network tools to do some testing. I think it was flown as a security tool distro but I used it mainly for network troubleshooting. Still ahve the floppies but I think the site and distro have died.
Anyone know what I'm talking about?
*DrugCheese rants*
L.A.S. 0.4a MAIN with FluxBox
Description: This is the alpha version of 0.4 with FluxBox added along with more tools.
MD5: 0939d7294035b5246bedbce1085bb1e1
Version: 0.4a | Filesize: 107.29 MB
Added on: 11-Aug-2003
Homepage | Details
HTH
...is mouse support (2-button touchpad or USB wheelmouse) for a Sony VAIO PCG-GRZ610. It boots but I can't do jack with it.
I tried both: boot: knoppix wheelmouse & knoppix usbmouse
Nothing seemed to work. Also, I can't seem to get the initial config script to reload to change some other settings. Any suggestions, please...
At the Nessus site:
"A security scanner is a software which will audit remotely a given network and determine whether bad guys (aka 'crackers') may break into it, or misuse it in some way."
It fails to mention that Nessus maintains a database of all security violations that can be parsed by Hackers in the know.
WAAAHAAAHAAA... (cough) (cough) (cough)
come on fhqwhgads
Well done! You've managed to remain completely on topic while providing insightful and funny content. I do hope that other /. posters will follow this excellent example of a great post! Well done! My hat is off to you! Keep up the good work!
The many buttons on your mouse have confused you. Buy a Mac.
what makes a (distro's) cd "live?"
i sell illegal drugs
the problem is most PCs are not yet equipped with the cd-bluetooth karmic storage drives...
I'm typing this right now in the "Links" browser. It's fast, it looks good, it has most of the tools I use (Nessus, Ethereal, XMMS, Firebird). I might just mod this and carry it with me instead of using other people's machines when I'm doing diagnostics. It picked up my wireless correctly and everything.
Have fun with this one, kids.
***
Well use your imagination, imagination, imagination. How about portable development environments? e.g. Java, Web, Perl, Eclipse, Smalltalk, etc. Or portable server environments. e.g. Web, LDAP, JBoss, Samba, Proxy, E-Commerce, Blogs, etc. A portable gaming disk, with all the dependencies wrapped up. e.g. gaming clients, and servers with the possability to put updated drivers on a USB pen drive. Complete presentation/demo disks. e.g. go beyound powerpoint, and have full interactivity with the real thing. Word-processing extrodinare. e.g. Lyx, OpenOffice, DocBook, etc. Financial whiz. Throw in proprietary software and your posabilities go up. e.g Portable CAD station, Graphics workstation. Remember DVDs open up possabilities that the CDs don't. Make a couple of all the above, and place it on your site. Offer support and you can make some nice money. Or start a small company that puts any of the above on small form-factor hardware, with easy to use interface (or just remotely manage it all from your location, as part of support).
BTW Someone needs to extend this to other platforms. They want to have fun too.
you're using your auto-configured, no-vpn wireless connection as a security platform? looks like your tools are ahead of your mindset :)
Why is it flame-bait when someone states an obvious fact? I have no problem with jews or any other religion/group of people - but more and more I am finding it hard not to be an anti-semite. As the parent poster pointed out, why do the Jews never learn?
It seems to me that everyone that answers a question by invoking God (Allah etc..) you are sentencing yourself and your children to death. Doesn't the fact that deaths caused by religious fundamentalism out number any disease (plaque, aids etc..)combined click in the mind of the most logic challenge that this is not the correct path? Doesn't murdering people - at all - tell you that you are as wrong as the murderers you are fighting?
Want peace? Remove god from the equation and you'll be on the short path (not there, but almost - you need to establish secular morality first)
no, I didn't forget the AC button, I truly believe what I say, mod me the way you like, but I speak truth.
ymmv
I got a shell running, but there seems to be no man command and no documentation for some things in the menu, like the TinyIRC client. Obviously since I'm posting this from the running ISO there must be a web browser, but I had never used "links" before, so it was not easy to find. How I find the security tools supposedly built into this I have no idea. I did get a GUI ethereal running by bringing up a shell and typing in ethereal, but I just don't know what else is here (and what isn't).
By the way, I have network issues when booting Knoppix on this computer, so I booted this ISO with the "Knoppix expert" option. Or at least I tried to. Although it prompted me for the boot option, it ignored it after I typed it in.
I'm an American. I love this country and the freedoms that we used to have.
One thing you can do is to install the Live CD to a hard drive to get a permanant installation. While this may seem counter productive for a Live CD, I've found it to be really useful. I'm currently using the Knoppix Security Tools Distribution as a "desktop" OS... :-) Knoppix 3.2 (what both these distros are based on) includes a really useful script to install the Live CD to the hard drive. It's the easiest way I've found so far to get a Debian testing/unstable system installed and running - with X configured correctly the first time! That, in addition to having tons of great security tools preinstalled and configured makes for one sweet network-workstation-on-steroids.
...of course, I'm in charge of security where I work, so using this as a desktop OS may get you fired from _your_ work... :)
g00r00?
If they're trying to offer a secure server Linux distro, you'd think they'd run their webserver on that instead of OpenBSD.
Sig!
Blatantly copying-and-pasting from LocalAreaSecurity.com (which is apparently back up on a 400 MHz box, 96 MB RAM, on a T1). I recommend BitTorrent, but if you're gonna use mirrors, here's a bigger list: ::::: New Mirrors Added! :::::
http://chefax.fe.up.pt/mirrors/las/ -HTTP Portugal
ftp://chefax.fe.up.pt/pub/mirrors/las/ FTP Portugal
ftp://ftp.ntua.gr/pub/linux/las/ -FTP Greece
http://ftp.ntua.gr/pub/linux/las/ -HTTP Greece
http://ftp.lug.udel.edu/pub/iso-images/LAS -US Delaware
ftp://ftp.lug.udel.edu/pub/iso-images/LAS -US Delaware ::::: DOWNLOAD :::::
L.A.S. 0.4a Main with FluxBox MD5: 0939d7294035b5246bedbce1085bb1e1
http://lightning.chem.tue.nl/las/l.a.s_0.4a_MAIN.i so -The Netherlands
http://sarovar.org/mirrors/knoppix-las/l.a.s_0.4a_ MAIN.iso -India/Asian Pacific
http://psifertex.nerdc.ufl.edu/iso/l.a.s_0.4a_MAIN .iso -USA
L.A.S. 0.3b Main MD5: f47150d2458c78169a65458bcf8ebf96
http://lightning.chem.tue.nl/las/l.a.s_0.3b.iso
http://sarovar.org/mirrors/knoppix-las/l.a.s_0.3b. iso
http://psifertex.nerdc.ufl.edu/iso/l.a.s_0.3b.iso
L.A.S. 0.3b SECSERV MD5: ff412734492e39d1d084ced556a47493
http://lightning.chem.tue.nl/las/l.a.s_0.3b_SECSER V.iso
http://sarovar.org/mirrors/knoppix-las/l.a.s_0.3b_ SECSERV.iso
http://psifertex.nerdc.ufl.edu/iso/l.a.s_0.3b_SECS ERV.iso
________________________________________________
suwain_2
Ack, should have previewd first. ::::: New Mirrors Added! :::::
A S -US Delaware ::::: DOWNLOAD :::::
N .i so -The Netherlands
4 a_ MAIN.iso -India/Asian Pacific
A IN .iso -USA
3 b. iso
s o
S ER V.iso
3 b_ SECSERV.iso
E CS ERV.iso
http://chefax.fe.up.pt/mirrors/las/ -HTTP Portugal
ftp://chefax.fe.up.pt/pub/mirrors/las/ FTP Portugal
ftp://ftp.ntua.gr/pub/linux/las/ -FTP Greece
http://ftp.ntua.gr/pub/linux/las/ -HTTP Greece
http://ftp.lug.udel.edu/pub/iso-images/LAS -US Delaware
ftp://ftp.lug.udel.edu/pub/iso-images/L
L.A.S. 0.4a Main with FluxBox MD5: 0939d7294035b5246bedbce1085bb1e1
http://lightning.chem.tue.nl/las/l.a.s_0.4a_MAI
http://sarovar.org/mirrors/knoppix-las/l.a.s_0.
http://psifertex.nerdc.ufl.edu/iso/l.a.s_0.4a_M
L.A.S. 0.3b Main MD5: f47150d2458c78169a65458bcf8ebf96
http://lightning.chem.tue.nl/las/l.a.s_0.3b.iso
http://sarovar.org/mirrors/knoppix-las/l.a.s_0.
http://psifertex.nerdc.ufl.edu/iso/l.a.s_0.3b.i
L.A.S. 0.3b SECSERV MD5: ff412734492e39d1d084ced556a47493
http://lightning.chem.tue.nl/las/l.a.s_0.3b_SEC
http://sarovar.org/mirrors/knoppix-las/l.a.s_0.
http://psifertex.nerdc.ufl.edu/iso/l.a.s_0.3b_S
________________________________________________
suwain_2
I downloaded (via bittorrent), and burned an ISO, booting it on my laptop, figuring it'd be a great combo. But whenever I try to boot it, I get this error:
WARNING: Autodetection seems to hang, please check your computers [sic] BIOS settings. Please check.
It pauses for a bit (minutes), does some stuff (seemingly with success), and finally gets into an infinite loop of trying to use my CD, with these errors:
hdc: status error: status=0x20 { Device Fault } ide-sci: Strange, packet command initiated yet DRQ isn't asserted hdc: ATAPI reset complete
It repeats this infinitely. What's going on, and how can I stop it?
________________________________________________
suwain_2
Cool. Thanks
I think this is can be a great tool for learning different tools and techniques like computer forensics. Not all schools have the cash to go out and buy the big name Forensics utilities. Neither does local law enforcement for that matter. They can go download it to CD, through it in, and boom instant forensics analysis, without having to go through the red tape or budget hassles of buying an expensive package.
It can't That's why we have windows...
Doesn't the the job correctly, complains alot and flips out at least 1ce a month!
- lures men by trying to look good on the outside
- is damn expansive to maintain and requires a lot of time
- can not be possibly understood
Also, mounting writable media is a good way to pass infections between your machines. Much safer not to do that.
Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
ive gotten rh8 on a 1.2g. it might have even been a 1.0g, im not sure. took me forever, tho. talk about package dependency nightmares, good lord. i have vowed never to try that again
i sell illegal drugs