Network Security Laptop

Hey Guys and Gals,
I am trying toset up my laptop to be a mobile network security/monitoring tool. Im loading it with network discovery tools, password crackers (just in case i need to do that), wireless wep crackers (for my clients who forget their WEPs) a sniffer to track chaotic traffic from virii and adware, etc. and pretty much any other tools that may prove useful in one way or another either in testing for security of webpages, nodes ona network, or just about anything related to computer security.

So far I have installed:

Solarwinds enterprise edition
nmap
SamSpade
Ethereal
Sniffer
MIB network inspector
Network Stumbler
Getif
Cain
Brutus
IP Network Browser
LanPortScan
SuperScan4
and downloaded a bunch of wordlists for dictionary attacks as well as common username lists.

any suggestions on what else I should add. Im looking for some more wireless tools. I think Im going to mess with airsnort or wepcrack. I also want to take a look at linkferret. HAs anyone had some decent experience with these tools. I need something that it reliable becasue although speed is an issue, Id rather it work correctly. (hehe i get paid by the hour for mostof my work, so im not in a rush, lol)

EDIT**
Sorry, I forgot to mention that this is a win2k laptop, freeware is perferred, but if the software is really good, and comes with high recomendations I could probably get my boss to pick up a copy, or atleast get the trial.

Hey,

Nice idea that laptop.

I always found the tools like Dameware or Hyena very handy to have , easy to connect to servers and remotely check the processes running (and being able to kill them if you cannot connect to the server for some reason) or start a service which isn't running anymore without connecting to the server.
Offcourse it always installs some files to the server so you have to consider that.

The other tools you mention (airsnort and wepcrack) I don't have experience with so can't help you there.

Also a tool I like to use is ZOC , I like it because it gives you nice SSH , TN3270 , multiple sessions , logging and scripting possibilties.

There are probably more tools which I use but can't see which ones right now ..will post them if I find them useable.

/Edit ..This tool is also very nice : LC 5 , very good to recover passwords /Edit

Hope this is helpfull,

Greetz,
C.

I'd check out GFI Languard.

Quote:

---

I forgot to mention that this is a win2k laptop

---

No need to mention it, we could tell because you are missing the good linux tools. ;)

crazy - I was looking at laptops yesterday for the exact same reason. No one sells any without the windows OS around here. But I guess for maximum flexibility in a portable fashion a dual booting system would be useful.

Definitely add airsnort and download some howto's for each and store them offline in case you are dealing with a DoS situation and can't get web access. Also keep a copy on CD so you can install them on machines as needed.

I would stick a hex editor on there and a good freeware calculator.

Quote:

---

Originally posted here by RoadClosed
No need to mention it, we could tell because you are missing the good linux tools. ;)
<snip>
I would stick a hex editor on there and a good freeware calculator.

---

No doubt... don't you mean freeware subnet-calculator?

You know what i prefer to do? I leave the last portion of the drive formatted in FAT32, and I keep a few live linux cd's with me. Helix, Ultimate Boot CD w/ Insert, NST, etc. Why be constrained by windows? Have the best of both. The live cd OS's may not run as fast off the CD as they would off the drive, but I figure the point of a notebook security system is portability, not speed or power.

/edit/
Sorry...the REASON i leave the last portion FAT32 is it gives me a place to easily write files and data to, if I've booted one of the live cd's. I know NTFS support has come a long way in Linux, but it can still be problematic depending on the distro, and FAT32 is easy.

Quote:

---

don't you mean freeware subnet-calculator

---

You got it.

NmapWin can also come in handy for port scanning. Moreover its free.
http://nmapwin.sourceforge.net/

Also you can get some freeware tools from Foundstone labs.

-Joseph

Quote:

---

Originally posted here by RoadClosed
No need to mention it, we could tell because you are missing the good linux tools. ;)

crazy - I was looking at laptops yesterday for the exact same reason. No one sells any without the windows OS around here. But I guess for maximum flexibility in a portable fashion a dual booting system would be useful.

Definitely add airsnort and download some howto's for each and store them offline in case you are dealing with a DoS situation and can't get web access. Also keep a copy on CD so you can install them on machines as needed.

I would stick a hex editor on there and a good freeware calculator.

---

Das Walmart Super Cwappy Linux/Lindpire Laptop

to OP: aren't some of the tools just duplcating features/functionality/information gathering for you?

...I'd download the Knoppix-STD .iso and burn the cd so I'd have some linux options.

Quote:

---

Originally posted here by brokencrow
...I'd download the Knoppix-STD .iso and burn the cd so I'd have some linux options.

---

They are similar but Auditor
is a good one to have as well.

SGS

*offtopic*

Thanks Jebo, I never looked at walmart. I should mention I hate wallyworld. Everytime I go there I feel like punching the unending drone of idiotic automaton humanoids. I don't think I have ever looked at their electronics outside of the X-box isle. Lindows? I thought MS sued them? Not a bad price for a lappy I might add.

yup. M$ sued them for calling themselves Lindows. So they changed their product name to Linspire. The Walmart laptop is quite cheap, but what you get for it as far as hardware is quite low end as well. Still, it could work quite nice as a security auditing laptop only.

wow thanks for all the suggestions. SOlarwinds has a very good subnet calc on it. I also carry my boot CDs with me. I carry Knoppix and WinPE. any other tools you all have tried and found useful?

don't forget vmware and your whoppix, auditor and knoppix-std .iso's!
Then you can use all your linux tools on that box while using the windows tools.

I have my laptop setup to dual boot xp pro and FC3.
On the xp pro side, I have vmware with the live cd linux distros.

I use daemon tools to mount the .iso's so I don't have to carry the cds.
Or, you can tell VMWare to just capture the .iso image. Your choice.

One downside to using the live distros in vmware... you can't use the wireless tools (at least... I can't get them to work). Even if you really are connected via wireless... vmware will only use it as a wired card.

Thanks Phish, I was tyring to figure out how to get those nice distros to run from the box without having to boot from them.

well, I added airsnort (after about an hour of messing around with the blasted thing trying to get it to work) and l0phtCrack 5. Also installed daemon tools, and Im waiting for Auditor bootable-cd iso to download so I can get that working.

any more ideas? other good security based bootable cds, not just forensics for the computer you are bottingon. this thing is turning into a lean mean security auditing machine.



EDIT****

o0o0oo0000 found this nifty site while searching for boot cds.

http://www.frozentech.com/content/livecd.php

Ok I finished downloading the ISo and have it mounted, but how do I get it to run on top of windows 2000? Do I need a seperate program? if so which one would you recomend?


EDIT** ok I figured it out. I loaded MS virtual PC, loaded an old DOS OS to use minimal system resources then have it boot from the virtual cd drive with the auditor ISO mounted. W00t!

The one I like from the Live CD's is this one Whoppix .
Also because there site is professional and has nice demos where you can see it working , there's a nice demo about Wireless WEP attack.

They claim to be the White Hat Knoppix version ..kinda funny ...but the distro is nice ..have been playing with it for a short time now and I like the interface.

Anyway that's my opinion offcourse.

This site has a list with forensic tools ..maybe you can find some things of interest between them.

Gr33tz,

C.

If the laptop has enough juice why not run any of the knoppix distros in a MS Virtual PC or Vmware window? I use P.H.L.A.K. :: [P]rofessional [H]ackers [L]inux [A]ssault [K]it inside an MS Virtual PC shell. It incorporates all of the forensic, assessment and recon tools including Kismet for wireless.

Practically the only scanner you'll ever need: eEye's Retina. ;)

The only security scanner I know to have actually discovered new vulnerabilities, plus it prints out nice reports.

cheers,

catch

I do run virtual PC on the box, with linux distros.