CCNA SECURITY - COOL STUFF 1

[maczen]

I am studying for the CCNA Security and wanted to share some of the good tools that I have recently run across for both Security/PenTesting and regular networking!

PacketTrap PT360
This is FREE but cost $700 a couple of months ago. They released the new Perspectives software and are using this as a tool to hook ya! Hey, it's good stuff and is used by Cisco, Microsoft and a ton of other guys! Just take a peek at the community page on their site for a list!

http://www.packettrap.com/product/pt360_free.aspx

You will click Try it now... once installed go to the help/about section and select get a pin.. You will receive a 20 year pin for FREE! They don't share your emaill addy either as I have used this on/off for the past 6 months!

BackTrack 3
This is a Linux Distro that focuses on PenTesting! This comes with a ton of software and is pretty much ready to go out of the box! This is the download link but just navigate back to the front page for more info!

http://www.remote-exploit.org/backtrack_download.html

nUbuntu
Same concept different distro! Will have to 'make install' some packages/applications! Come with Yersinia which I love! Currently reading the "What hacker's know about your switches" book! LoL

http://www.nubuntu.org/

Feel free to boot these from either a thumb drive or sandbox them! VirtualBox or VMWare! I like Sun's VB!

http://www.virtualbox.org/

http://www.vmware.com/

*If you run nUbuntu from within VirtualBox just choose Ubuntu as the OS type and it will install fine when you get to that point!

I will post more here soon!

B Haines
CCNA R&S, ETA FOI

 

[maczen]

I guess I should mention encryption! This stuff is on the C|EH (Certified Ethical Hacker) blueprint which I hope to do one day as well!

TrueCrypt
FREE Open-Source Encryption.. This is easy to use and really nice.. Bad guys would probably use this to encrypt a system like BackTrack on a thumb drive therefore maintaining 'plausible deniability' as there is no way to verify that there is an OS installed within a TrueCrypt encrypted partition! Anyway, really good for encrypting your financial stuff et. al. and for an intro into encryption and hashing!

http://www.truecrypt.org/

GPG (GnoPG)
Open Source and FREE.. This will allow you to encrypt important emails and the like! OS version of PGP.. it's also pretty straight forward.. Think TrueCrypt for email!

http://www.gnupg.org/

B Haines
CCNA R&S, ETA FOI

 

[maczen]

Here is a link to these guys' 10 best Pentesting CD distros! I can only vouch for BackTrack and nUbuntu (#'s 1 and 9)

http://www.darknet.org.uk/2006/03/10-best-security-live-cd-distros-pen-test-forensics-recovery/

If you find anything you like then PLEASE post it here as I am VERY interested! That is anything security related!

B Haines
CCNA R&S, ETA FOI

 

[maczen]

I am seriously trying to get out of here.. LoL But one more great site came to mind!

http://johnny.ihackstuff.com/

This guy maintains the Google Hacking Database! Lots of good info here for the pentesting types! Most of the pentesters books/blogs that I have read state that they start with a browser and a search engine (namely Google)!

B Haines
CCNA R&S, ETA FOI

 

[maczen]

This guy gives a better explanation of the iHackStuff site!

http://grownupgeek.com/blog-johnny-ihackstuff-the-google

The iHackStuff site is often bogged down so find a time that it is free for you and stick to that while studying it! Don't try to rip the site/database or you will probably get K-Lined! LoL

B Haines
CCNA R&S, ETA FOI

 

[gnlc]

maczen,
thanks for the links.
I would add

http://securitydistro.com/

where you can find an up to date list of "all" the security distro and their state active or inactive.
They've got also a tutorial section and a couple of interviews to the distro creators.

Don't forget

http://sectools.org/

and friends:

http://nmap.org/

http://seclists.org/

http://insecure.org/

 

[maczen]

Thank gnk!
Speaking of NMAP I received an awesome email today! Fyodor's NMAP book has finally been released! Cost is $33.71 on Amazon!

http://www.amazon.com/dp/0979958717?tag=secbks-20

I bought my copy and paid for 2-day shipping and it is estimated to arrive between the 23rd and the 29th. If you need it by Christmas then pay for the 1 day!!! Otherwise you can play with it while you're all hungover from New Years! LoL

Enjoy Guys!

B Haines
CCNA R&S, ETA FOI