Page 1 of 3 123 LastLast
Results 1 to 10 of 21

Thread: New Auditor Live CD Released

  1. #1
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323

    New Auditor Live CD Released

    http://new.remote-exploit.org/index.php/Auditor_main

    The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working environment, so that the build-up of know-how and remote support is made easier. Even during the planning and development stages, our target was to achieve an excellent user-friendliness combined with an optimal toolset. Professional open-source programs offer you a complete toolset to analyse your safety, byte for byte. In order to become quickly proficient within the Auditor security collection, the menu structure is supported by recognised phases of a security check. (Foot-printing, analysis, scanning, wireless, brute-forcing, cracking). By this means, you instinctively find the right tool for the appropriate task. In addition to the approx. 300 tools, the Auditor security collection contains further background information regarding the standard configuration and passwords, as well as word lists from many different areas and languages with approx. 64 million entries. Current productivity tools such as web browser, editors and graphic tools allow you to create or edit texts and pictures for reports, directly within the Auditor security platform. Many tools were adapted, newly developed or converted from other system platforms, in order to make as many current auditing tools available as possible on one CD-ROM. Tools like Wellenreiter and Kismet were equipped with an automatic hardware identification, thus avoiding irritating and annoying configuration of the wireless cards.
    I've played with an earlier version of this and was quite pleased. Once I get this down we'll see how much they've improved it since the last time I mucked about.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  2. #2
    Senior Member
    Join Date
    May 2003
    Posts
    1,199
    The older one is my favorite live cd, thanks for posting this.
    Everyone is going to die, I am just as good of a reason as any.

    http://think-smarter.blogspot.com

  3. #3
    AO Senior Cow-beller
    Moderator
    zencoder's Avatar
    Join Date
    Dec 2004
    Location
    Mountain standard tribe.
    Posts
    1,177
    I have a couple small points to quibble over...

    Current productivity tools such as web browser, editors and graphic tools allow you to create or edit texts and pictures for reports, directly within the Auditor security platform. Many tools were adapted, newly developed or converted from other system platforms, in order to make as many current auditing tools available as possible on one CD-ROM. Tools like Wellenreiter and Kismet were equipped with an automatic hardware identification, thus avoiding irritating and annoying configuration of the wireless cards.
    Why on earth do you need to create graphics and 'looky pretty' images for a report from your live linux auditing tool cd?!?!? I'm sorry, that is completely inappropriate for a strict auditing toolkit. The web browser I can see, if you need to go look up information online. The editors are obvious...you ALWAYS need a text editor if you are worth your salt with a *NIX distro.

    Also...do we really need Kismet and Wellenreiter? I supposed, I could see how one would say "It's an auditing live linux distro, so why NOT have wireless auditing tools." I think the word 'audit' is being thrown around too loosely. Sorry, I might be a bit harsh, but it seems like we have a whole slew of live linux tools being developed for all sorts of security uses, and most are incomplete (i.e. beta, never in a finished state), too highly specialized, or so jam full filled with crap that isn't necessary.

    I could be off base; this is a knee jerk reaction to this statement. I'll go read some more and see, but my BS-o-meter went off when I read this blurb.
    "Data is not necessarily information. Information does not necessarily lead to knowledge. And knowledge is not always sufficient to discover truth and breed wisdom." --Spaf
    Anyone who is capable of getting themselves made president should on no account be allowed to do the job. --Douglas Adams (1952-2001)
    "...people find it far easier to forgive others for being wrong than being right." - Albus Percival Wulfric Brian Dumbledore

  4. #4
    Well... what if you find dirty pics on the host machine? I know with scanned docs a tool like photoshop would be good to pull off signatures with contrasting and such... but I know what you mean. Even with typical distributions I don't need 15 different GUI's for text editing.

    And why wouldn't you want wireless auditing tools?

  5. #5
    Senior Member
    Join Date
    May 2003
    Posts
    1,199
    Auditor is a great live distro. So what if they throw in a bunch of extra crap, its making it more versitile. What if you are suing the tool for data recovery rather than auditing security (which I have done) these tools will allow you to idnetify a file easier. also lets you get more specific with chosing what files you need to recover. And it doesnt hurt anyone to have extra stuff on a cd.

    Zen youre saying some of the tools are too specialized? I like that. Im nuts over fun tools and have things that do one thing and one thing only, but if they do that one thing better then all the other tools then its ok by me. Look at cwshreadder. its made for removing coolweb searchbars., look at all the tools that are made to remove a single virus. my point is when I know what the problem is Id much rather use a specialized tool that will fix that and only that then wait for a prgram to look for things I know are not broken. It saves me time and in return saves my clients and my company money becasue im not wasting my time removing something stupid when I could be working on a higher paid job.
    Everyone is going to die, I am just as good of a reason as any.

    http://think-smarter.blogspot.com

  6. #6
    Senior Member
    Join Date
    Dec 2004
    Posts
    137
    Originally posted here by zencoder
    Why on earth do you need to create graphics and 'looky pretty' images for a report from your live linux auditing tool cd?!?!?
    Hi. Because your boss will respond quite well to pretty reports and give you more money to buy fancier and more expensive security tools. (Well, my bosses get very impressed by pretty reports with graphs and diagrams and it works quite well for me).

    To OP, thank you for the heads up. I will try the new CD today.

  7. #7
    Senior Member
    Join Date
    Mar 2004
    Location
    Colorado
    Posts
    421
    Originally posted here by Soda_Popinsky
    Well... what if you find dirty pics on the host machine? I know with scanned docs a tool like photoshop would be good to pull off signatures with contrasting and such....

    And why wouldn't you want wireless auditing tools?
    hehe speaking of..

    recently fired an account manager and when we went over his machine found some nudies of
    some of his "net" girlfriends.

    you don't want to know what was found in the folder labeled "me"......uuuuuggghhhhh!!!

    but we love our work right....

  8. #8
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323
    you don't want to know what was found in the folder labeled "me"......uuuuuggghhhhh!!!
    Oh man. That's just TMI!!! ICK!
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  9. #9
    Thanks for the post, MsMittens. I now have another tool in the arsenal!

  10. #10
    AO Senior Cow-beller
    Moderator
    zencoder's Avatar
    Join Date
    Dec 2004
    Location
    Mountain standard tribe.
    Posts
    1,177
    rowdy_yates
    I think you missed the emphasis in my statement (since I didn't add it). Yes, you need the graphics prog's for image manipulation, but why the hell do they need to be on the AUDITOR CD?!?!? Are you going to do all your work, analysis, and report generation from the AUDITOR CD on the suspect system? That's asinine, and bad practice.

    ---

    I can see the points some of you are making, and I *do* like the specialization of tools...but that's the point...if this is a specialized auditing tool, then it should be an AUDITING tool.

    Anyway, it's just me $0.02 worth. After checking the site it looks intriguing enough that I'm downloading the ISO to give it a shot.

    The whole thing just kind of struck my like the flower vase in the new VW Bettle. People were talking about that like it was a selling point. What a ****ing joke. It's a nice edition IF YOU LIKE THAT SORT OF THING, but it has absolutely nothing to do with whether VW has made a good automobile.
    "Data is not necessarily information. Information does not necessarily lead to knowledge. And knowledge is not always sufficient to discover truth and breed wisdom." --Spaf
    Anyone who is capable of getting themselves made president should on no account be allowed to do the job. --Douglas Adams (1952-2001)
    "...people find it far easier to forgive others for being wrong than being right." - Albus Percival Wulfric Brian Dumbledore

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •