Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Re: delving deeper

Subject: Re: delving deeper
Date: Mon, 20 Dec 2004 03:21:30 -0500
My favourite is whoppix, another knoppix variant that has a large body
of exploits included.

I'm actually emailing from Whoppix right now. Been playing with it
most of the night. Very well built and could be a pen-testers dream.
It's not setup like many of the other Knoppix distros (though it
reminds me of Knoppix-STD), as it doesn't have all the bells and
whistles. It's chocked FULL of pen-testing applications and exploits
however. Impressvie indeed.

I also noticed something odd... Whoppix seems to support my 1GB PQI
I-Stick (USB Flash drive) while Knoppix (v3.4 and v3.6) or Knoppix-STD
(0.1) don't. Whoppix is based on Knoppix v3.6, so go figure. I'm just
happy to have a 1GB home drive I can carry around. =)

--
Peace. ~G


On Wed, 15 Dec 2004 11:16:54 +1100, David Taylor
<David.Taylor@austrac.gov.au> wrote:
My favourite is whoppix, another knoppix variant that has a large body
of exploits included.

www.whoppix.net  And the site even has some nice demos to get you going
:)

Regards
David Taylor

-----Original Message-----
From: xyberpix [mailto:xyberpix@xyberpix.com]
Sent: Wednesday, 15 December 2004 4:00 AM
To: Chris Benedict
Cc: pen-test@securityfocus.com
Subject: Re: delving deeper

Hi Chris,

Go and download a copy of PHLAK(http://www.phlak.org), there's a load of
good docs on the disc, and some really good tools to get you going.
Above
it all it's Linux, so it should run on your machines.
Aside from that scour the net for anything pertaining to pen testing and
security, and read as much as you can possibly tollerate, it'll be worth
it in the end.

xyberpix

On Mon, 13 December, 2004 10:34 pm, Chris Benedict said:
Hi, I've been looking at security and penetration-testing for some
time now and would like to get further into it.  I'd like to learn
more about penetration-testing, forensics, techniques for network
exploration/mapping, web application security and incedent handling.
However I'm not really sure where to start, I looked at the OSSTMM and
it was above my head.

At the moment I have a very limited budget and only a few spare
low-end computers.  If it matters, I'm mainly running OpenBSD.  Are
there any particular books or other media that I should take a look
at?

Any thoughts or recommendations are welcomed and greatly appreciated.

-Chris Benedict


--
For security and Opensource news check out:
http://www.xyberpix.com


**********************************************************************
Please  note  that  your  email address  is known to  AUSTRAC  for the
purposes  of  communicating with you.  The information  transmitted in
this  e-mail is  for the  use of  the intended  recipient only and may
contain confidential and/or legally  privileged  material. If you have
received  this information  in error you must not disseminate, copy or
take  any  action on  it and we  request that you delete all copies of
this transmission together with attachments and notify the sender.

This footnote also confirms that this email message has been swept for
the presence of computer viruses.
**********************************************************************



<Prev in Thread] Current Thread [Next in Thread>