Slashdot Mirror
Wi-Fi Penetration Tester In Your Pocket
00*789*00 writes "ZDNet has a story about the public launch of Immunity's Silica, a portable hacking device that can search for and join 802.11 (Wi-Fi) access points, scan other connections for open ports, and automatically launch code execution exploits from a built-in exploit platform."
I hope y'all don't mind if I won't keep a penetration tester in my back pocket, mmm'kay?
It was a joke! When you give me that look it was a joke.
is that a penetration tester in your pocket or are you happy to see me?
Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
\\sharedstuff\My Super Secret Incriminating Documents Conveniently Zipped For You.exe
For $3,600, I think it's way over priced. Use a laptop, or home brew a similar device with a mcuh cheaper Zaurus:
u sheader&page=zaurus/zaurusmain
http://www.irongeek.com/i.php?submenu=zaurus/zaur
... is leave dozens of wireless routers lying around, switched on, broadcasting trivially encrypted 'networks' to the surroundings - except not have anything connected to them. No internet, no servers, no ethernet cable, nothing.
The real network is hidden, strongly encrypted and using 802.11n. Beat that, hackers!
Tedious Bloggy Stuff - hooray?
...it was Dr. Fronk who said, "Well, I guess it pretty much can only be used for evil".
It's a $3600 Nokia WebPad with custom software on it.
Considering the new WebPads and all being available and supported (unlike the Zaurus...), I think I'll go with that instead...
I am not merely a "consumer" or a "taxpayer". I am a Citizen of the State of Texas
Post an article on slashdot with the words "penetrate" and "open ports" in the summary.
I don't care why you're posting AC
Gotta wonder about a picture of a chick with "penetration testing" as a caption.
God, I love IT.
I might know what I'm talkin' about, but then again, this is Slashdot...
Over the last year or so, I've considered writing an automated wireless network intrusion tool. It would:
You'd run it on a laptop that you'd carry in your backpack or in your car, on your way to/from work or just cruising around on a Sunday afternoon.
As such, it would be called the Transient Wireless Intrusion Tool, or TWIT. I just get a charge out of network security people writing about twits wandering around near the network.
I would think that the Digital Make everyone a Criminal Act would prevent a company from marketing a device like this...
I'd like to see someone program that for the OLPC laptop. I could easily envision a slashdotter transforming a simple educational device into a hightech potentially offensive military IT resource and giving it to 3rd world kids.
I remember something about this before. Yup, it was about Silica then too.
I posted a theory about sending one to yourself through the mail activated and with a GPS so that the postal delivery vehicle does your wardriving for you. I called it warsmailing. So far no results on Google of anyone attempting it using that term.
(Why do I keep being prompted to save a download of comments.pl when I Submit?)
Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
I already have a wife penetration tester in my pocket, thank you very much.
You should still keep your wifi open... a criminal needs to be in geographic proximity. wow. This is so much worse than someone on the other side of the country being able to break into your machine. Honestly, if we all keep our wifis open it'll be better in the long run. I don't know why it just will be i swear.
sometimes, nothing.
For a moment there, I thought I was going to have to implement spam filtering on my RSS feed from Slashdot.
It's the same bad joke over and over again until somebody post one of the following....
.... PROFIT!
"In Soviet Russia - Open Ports Penetrate You!"
or..."my back door is impenetrable YOU INSENSITIVE CLOD!!!"
or...perhaps a reference to a Beowulf cluster-f%@k
or...something ending in
then we all get sick of it.
A goal is a dream with a deadline
The take on this story SHOULD be that it's possible to have a small company choose embedded Linux to deploy innovative and interesting applications on. We could have chosen Windows Mobile, of course, but Linux was technically the better choice. That's the important part here. Open Source tools get you to market faster and cheaper.
I think, the $3600 device is nothing more, but a Nokia 770 (that is clear from the photos) runnig GUI for Kismet or some sort of other Wifi scanner.
;)
Good margin!
Just secure it for him yourself. When he suddenly can't access it because you've enabled WPA, he'll understand the importance of security.
(And if he gets upset with you, tell him "just be glad I didn't download a bunch of kiddy pr0n and try to hack the NSA with it!")
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
Where do I start with this thing?
The number of applications this device provides that are both legitimate and useful are near zero.
If you are legitimately authorized to do scans, why not do it with proper equipment? I used to warwalk all the time with an open laptop in plain view, and if anyone stopped me, I had a letter from the CIO in my hand.
If you want to truly test security are you gonna hand an idiot-proof device to some intern and tell them to push the pretty red button and run around with it? No, you are going to hire a security expert who will likely prefer proper tools.
From TFA: "...mostly from law enforcement agencies looking to do covert hacking on sensitive networks."
Whee! Illegal wiretapping! I'm sure that's kosher. If you have a warrant, then you shouldn't have any problems. See above. (Oops, I forgot that's 'legal' now. Oh well.)
Also from TFA: "It's aimed at the non-technical user interested in doing drive-by pen-tests. You start it, run a scan, connect, run your exploit, get an HTML report of what was done."
No responsible pentester runs around with surreptitious devices in 'fuck you' mode on production networks. It's a quick ticket to being fired, sued and/or arrested. Pen testing and vulnerability testing is done under strict Rules of Engagement which rarely include secondary exploitation anymore. Most organizations want you to be as hands-off and low-impact as possible. Detect a possible vulnerability, record it, and move on. If they want you to eliminate false positives and/or verify a particular vulnerability later, then you do it carefully. Cutesy shit like grabbing files, printing "OWNZORED" on network printers and AllYourBase.txt in \root is the mark of amateurs.
Nothing to see here. It's a cool toy, but if you want to do this kind of stuff on a real network, hire a real security company.
The only useful thing I see here is that the barrier to entry for wireless shenanigans has just fallen to the floor and organizations had better start ditching WEP and WPA/WPA2 and moving to 802.1X/EAP/EAPOL.
My buddy secured his neighbor's WAP on accident. He thought he was configuring his own.
The neighbor was confused when told that his router now had a WEP key in place.