Penetration testing tool masquerades as surge protector
Posted on 23 July 2012.
In the same way that a hardware keylogger may remain undetected by office workers, Power Pwn - a newly created piece of hardware resembling a power strip or surge protector that is actually a network-snooping device - might pass unnoticed until it's too late.


Developed by Pwnie Express, a Vermont-based start-up specializing in the creation penetration testing products, the Power Pwn will officially be unveiled this week at Black Hat USA 2012 and Defcon 20.

Preloaded with Debian 6, Metasploit, SET, Fast-Track, w3af, Kismet, Aircrack, SSLstrip, nmap, and a ton of other open source pentesting tools, the device covers the entire spectrum of a full-scale pentesting engagement, from the physical-layer to the application-layer.


Power Pwn has integrated WiFi and Bluetooth with a range of up to 1000 feet, onboard dual-Ethernet ports, a 16GB internal disk, an external 3G/GSM adapter, provides out-of-band SSH access over 3G/GSM cell networks, the ability for users to text in bash commands via SMS, a web-based administration console, stealth and passive recon modes, and more.

As it stands, the pentester can communicate with the device both via text messages or via the Internet.

A device like this might be created for penetration testers, but will surely also be used by hackers, as even it's hefty price tag ($1,295) is no longer a barrier for many of them.






Spotlight

Fighting malware, emerging threats and AI

Posted on 24 November 2014.  |  Liran Tancman is the CEO of CyActive, a predictive cyber security company. In this interview he talks about fighting malware, emerging threats, artificial intelligence and the cloud.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Tue, Nov 25th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //