Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Re: Windows Distro [summary]

Subject: Re: Windows Distro [summary]
Date: Tue, 15 Nov 2005 13:52:45 +0100
Eliah Kagan wrote:

Javier Fernandez-Sanguino wrote:

As for the Microsoft world, for one, have not seen any. The Windows
EULA forbids this kind of stuff so I don't believe you'll find it,
unless Microsoft himself develops a live-CD like or somebody risks
legal action from Microsoft by putting up a live-CD version of its OS.


Just a point of clarification here, the Windows EULA does not forbid
making a Windows LiveCD. If you make a Windows LiveCD and distribute
it, then that would violate the EULA and invite legal action from
Microsoft, just as if you distribute images of the Microsoft Windows
install disc, you're violating the EULA (or, if you haven't agreed to
the EULA, you're still violating Microsoft's copyright) and inviting
legal action from Microsoft.

(...)

This, and all the reasoning below is correct. Since the submitter requested information of Knoppix-like live-cds I just let him know that he will not find them available. You *can* make them through the use of Bart-PE like everybody else pointed out here, but you *cannot* distribute them. So, as a summary:

Q1: ¿Can I find security-oriented Windows-based Live-CD images like Knoppix STD or Auditor out there?

A: Not probable, if you do find them they are in violation of Microsoft's copyright and/or Windows' EULA. If you find any and use it you are violating those too.

Q2: ¿Can I make a security-oriented Live-CD based in the Windows OS similar to Knoppix (which is Debian-based) or Auditor (which is Knoppix based)?

A: Yes, you can use BartPE (http://www.nu2.nu/pebuilder/) or WinPE (http://www.microsoft.com/licensing/programs/sa/benefits/winpe.mspx) for this. You will need a legal copy of the Windows install disks and will need a separate license for every Live-CD copy you make and wish to run simultaneously.
There are also some limitations on what you can do, see http://www.nu2.nu/pebuilder/#legal


Q3: ¿Can I distribute the security-oriented Live-CD I made with BartPE for others to use?
A: No, see Q1


HTH

Javier

<Prev in Thread] Current Thread [Next in Thread>