Local Area Security Linux LiveCD
An anonymous reader writes "LocalAreaSecurity.com has released a new version of their live-CD Linux distribution for information security professionals. It contains over 200 security tools including all the usual suspects (Nmap, Nessus, etc.) as well as many other great tools less well known. The ISO images are meant to be burned on 185MB and 210MB miniCDs which they update around twice a month. L.A.S. also publishes many papers on how to use the tools as well as research docs on *nix security. Their latest papers include: Securing Mambo Open Source CMS, Doing More With Less: Nessus, and L.A.S. Security Tool Review and Howto: kismet."
Their web server's so secure, I can't access it!!
This is for the security of your network, not just that computer. WITH those tools, COMES the security -- even Windows has its share of security tools.
I wonder how this will fare against Knoppix STD? Knoppix, as the world knows, is an awesome LiveCD distro of Linux that comes with an assortment of tools. This... just seems to come with a lot more. I guess it just matters about that user-friendliest though, as an Elite Linux user could boot up with Slackware CD 2, the LiveCD and do just as much or more. But yet, Slackware is as user friendly as a rabid wolf.
"Instant gratification takes too long." - Carrie Fisher
I think the key difference is that this is a White Hat tool, while PHLAK is meant for people weariing Black Hats...
Some other good Security LiveCD distros are Knoppix STD and P.H.L.A.K. But I mainly use Knoppix (which also has kismet and nmap), and when I want speed, SLAX is very good.
HTTP Current 185MB Version | Current 210MB Version| Download Directory
FTP Current 185MB Version | Current 210MB Version| Download Directory
Please try to use a geographically closer mirror:
http://chefax.fe.up.pt/mirrors/las/ -HTTP Portugal
ftp://chefax.fe.up.pt/pub/mirrors/las/ -FTP Portugal
http://ftp.lug.udel.edu/pub/iso-images/LAS -HTTP US Delaware
ftp://ftp.lug.udel.edu/pub/iso-images/LAS -FTP US Delaware
http://www.mednor.net/ftp/pub/mirrors/las/ -HTTP US California
ftp://ftp.mednor.net/pub/mirrors/las/ -FTP US California
Not all mirrors are up at this time. We remove mirrors periodically from the list that are not updated but re-add them once updated.
MD5sWe are currently seeking additional mirrors in Europe and Asia.
L.A.S.0.5-185MB MD5:543fe2f42472f73cdba8378d9cb58579
L.A.S. 0.5-210MB MD5: bc3a9ba8afcb99ff3e549b5d8d0b22a8
There is no
Linux operating system . . . . . . . [PASS]
210mb download . . . . . . . . . . . [PASS]
News posted on Slashdot . . . . . . [PASS]
Insufficient mirrors . . . . . . . . [PASS]
Setting new record for shortest slashdotting time . .
I wonder if people are becoming less distro-religous since most distros seem to work well. anyway, after reading distrowatch for a while you'll no doubt become a distro-tart and try all out 101 live cd's like L.A.S.
rd
I was going to reply to this with something witty since I work for Best Buy as an In-Store Technician, and use Linux LiveCDs on a daily basis...
I have never had customers complain about the speed of it, but more about cool it is to run directly from CD and rescue their files.
I hope everybody knows that the creator of nmap is a criminal, and used his port scanner tool for illegal purposes.
Uh, huh.
When Phil Zimmerman released PGP, he underwent a three-year investigation by the FBI.
I not care in the least what either Phil or Fyodor did (especially when Fyodor was tracking down a harasser). They produce excellent software, which is their only interaction with me.
There is a lot of content on Slashdot that could be considered libel. If every person guilty of libel on Slashdot was ignored, we'd have an awfully quiet forum.
May we never see th
And thus, I want a copy. As others have joked, by the very definition of a "skript kiddie" (unskilled cracker dependent on the tools of others), something like this is way out of their league. But I assume you might have meant, "People who do illegal things to computers who could use such a convenient CD where all the free tools online are in one place."
Well, they are going to do use it, whether it's wrong or not, and if LAS doesn't do it, someone else will (and has). And I want the same tools to test my firewalls and stuff to make SURE that it's hard to break into my network. Nothing will ever be hack-proof, but if you can make it hard for illegal entry, the crook will look elsewhere for something easier. And tools like these give me the same tools the crooks have, and the advantage I have is that I don't need time to "sniff" for anything to deduce which items to crack, since I already know what machines are senistive. I can just use an Ethereal capture pointed at an IP or MAC and see what it's sending out. Try and hack my own wireless connection with Kismet. And so on.
It's all in intent, and how you use it. I use tools like thse to trace stray DHCP servers, look for illegal Kazaa use, or find out who's trying to hack my firewall.
A prybar is not illegal. Forcing open a loose door on property you don't own or beating someone to death with it is illegal. But you don't see people banning prybars at Home Depot.
There is now an official tracker:
http://onyx.chattanoogastate.edu:6970/