Penetration testing tool masquerades as surge protector
Posted on 23 July 2012.
In the same way that a hardware keylogger may remain undetected by office workers, Power Pwn - a newly created piece of hardware resembling a power strip or surge protector that is actually a network-snooping device - might pass unnoticed until it's too late.


Developed by Pwnie Express, a Vermont-based start-up specializing in the creation penetration testing products, the Power Pwn will officially be unveiled this week at Black Hat USA 2012 and Defcon 20.

Preloaded with Debian 6, Metasploit, SET, Fast-Track, w3af, Kismet, Aircrack, SSLstrip, nmap, and a ton of other open source pentesting tools, the device covers the entire spectrum of a full-scale pentesting engagement, from the physical-layer to the application-layer.


Power Pwn has integrated WiFi and Bluetooth with a range of up to 1000 feet, onboard dual-Ethernet ports, a 16GB internal disk, an external 3G/GSM adapter, provides out-of-band SSH access over 3G/GSM cell networks, the ability for users to text in bash commands via SMS, a web-based administration console, stealth and passive recon modes, and more.

As it stands, the pentester can communicate with the device both via text messages or via the Internet.

A device like this might be created for penetration testers, but will surely also be used by hackers, as even it's hefty price tag ($1,295) is no longer a barrier for many of them.






Spotlight

Behavioral analysis and information security

Posted on 22 September 2014.  |  In this interview, Kevin Watkins, Chief Architect at Appthority, talks about the benefits of using behavioral analysis in information security and how behavioral analysis can influence the evolution of security technologies.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Tue, Sep 23rd
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //