Search Members Help

» Welcome Guest
[ Log In :: Register ]

Mini-ITX Boards Sale, Fanless BareBones Mini-ITX, Bootable 1G DSL USBs, 533MHz Fanless PC <-- SALE $200 each!
Get The Official Damn Small Linux Book. DSL Market , Great VPS hosting provided by Tektonic
Pages: (4) </ 1 2 [3] 4 >/

[ Track this topic :: Email this topic :: Print this topic ]

reply to topic new topic new poll
Topic: dsl for pen testers, pentesters< Next Oldest | Next Newest >
^thehatsrule^ Offline





Group: Members
Posts: 3275
Joined: July 2006
Posted: Dec. 01 2006,22:34 QUOTE

Oh, using qemu.  Different story altogether - should've guessed that when you wanted a "bigger" window.

Yes, hda is mounted with the DSL image.  hdb (not hab) is the virtual 60mb (default) image located in .../qemu/harddisk - it is NOT your physical drive.  There have been a couple other threads on this for some workarounds with qemu.  Note that by default this image is empty, therefore resulting in your mounting errors.

About networking, you may as well run network security tools on windows, because that will have native access to your network.
Back to top
Profile PM 
roberts Offline





Group: Members
Posts: 4983
Joined: Oct. 2003
Posted: Dec. 01 2006,22:44 QUOTE

As I suspected from the first post.
DSL as I implemented it in Qemu is a sandbox.
You are in a virtual machine with no access to the physical drives.
You will have a passthru network connection to use the browser using your pre-existing Windows network setup.

You can use advanced Qemu settings to play outside the sandbox.
Most of your questions are Qemu specific.

Try this link
http://www.h7.dion.ne.jp/~qemu-win


Edited by roberts on Dec. 01 2006,22:45
Back to top
Profile PM WEB 
Elc0chin0 Offline





Group: Members
Posts: 7
Joined: Nov. 2006
Posted: Dec. 04 2006,20:07 QUOTE

Thanks for the link. Too bad i don't understand Japanese.

So I understand now what you meant by DSL is a sandbox. But that's why I thought it could be used as a pen-testers tool. That's probably why I initially put this in the other area.

I've checked around the files looking for some of these tools and have haven't been able to find them.

Some of the things I can see this being used for is like forensic investigators looking at a suspects computer for evidence. If you have a search warrant and get the suspects permission you can do a limited amount of searching before you confiscate evidence.

The other is for a pen-tester who would be doing a quick down and dirty assessment. For instance, if a client asks what would it take for you to do an assessment of my company, I don't have a topology I don't have any schemeatics I don't have a clue where anything is, but I need to have some sort of vulnerability analysis or pen-test.

With a tool like this having a few nice tools loaded like, nc, nmap, metasploit, nessus, tcpdump, johntheripper, firewalk, Sleuthkit etc. you could set up a few quick scripts or run through a quick nmap scan, maybe a johntheripper or something to be able to assess what this might cost the client.

So, if the only way to get to the hd physically is to go through the network, that may not be the idea way to do any of this since we'd like to keep everything read only.

I just thought there may be another way to do this.

Thanks for the Japanese links though it kept me busy for a few hours.
Back to top
Profile PM 
^thehatsrule^ Offline





Group: Members
Posts: 3275
Joined: July 2006
Posted: Dec. 04 2006,20:52 QUOTE

It's in english...?  At least, as long as you don't click on the japanese link.

Well, you may just be limited by qemu's networking capabilities, not to mention to be restricted by the host environment.  You can directly boot natively into a linux livecd/liveusb/etc. for your needs, if you do not wish to use windows' tools.
Back to top
Profile PM 
roberts Offline





Group: Members
Posts: 4983
Joined: Oct. 2003
Posted: Dec. 04 2006,21:02 QUOTE

Gosh, when I click on the link I provided I see english.

You may want to check out the distro called INSERT.
INSERT was orginally based on DSL and I believe has many tools that you have mentioned. But again, INSERT is not embedded in Qemu and boots as a live CD. It is not a general desktop.
Back to top
Profile PM WEB 
15 replies since Nov. 29 2006,22:12 < Next Oldest | Next Newest >

[ Track this topic :: Email this topic :: Print this topic ]

Pages: (4) </ 1 2 [3] 4 >/
reply to topic new topic new poll
Quick Reply: dsl for pen testers

Do you wish to enable your signature for this post?
Do you wish to enable emoticons for this post?
Track this topic
View All Emoticons
View iB Code