Thursday, August 31, 2006
Attack builds
After some messing around with a bunch of OSes and bootable pen testing CD's I have settled on a configuration for my attack builds.
On my Dell I went for Windows 2003 Server Standard Edition. There are bunch of really cool things about using W2K3, including raw sockets, built in HTTP, SMTP and FTP servers. Speed has actually been better than my corporate build on the same hardware. Found a nice web site which tells you how to convert W2K3 to a workstation including XP themes and system restore. http://www.msfn.org/win2k3/
And after several Linux OSes on the new Toshiba Portege I went back to Gentoo. Gentoo was noticeably faster than the runner up Ubuntu, but Ubuntu was prettier, so I ripped the Ubuntu theme into Gentoo. Gentoo was also the only mainstream Linux that had the most pen test attack tools in the main source tree. So updating my tools is as simple as emerge --update world.
On my Dell I went for Windows 2003 Server Standard Edition. There are bunch of really cool things about using W2K3, including raw sockets, built in HTTP, SMTP and FTP servers. Speed has actually been better than my corporate build on the same hardware. Found a nice web site which tells you how to convert W2K3 to a workstation including XP themes and system restore. http://www.msfn.org/win2k3/
And after several Linux OSes on the new Toshiba Portege I went back to Gentoo. Gentoo was noticeably faster than the runner up Ubuntu, but Ubuntu was prettier, so I ripped the Ubuntu theme into Gentoo. Gentoo was also the only mainstream Linux that had the most pen test attack tools in the main source tree. So updating my tools is as simple as emerge --update world.
