Language Selection

English French German Italian Portuguese Spanish

Pwned again: An exclusive look at Pwnie Express’ newest hack-in-a-box

Filed under
Linux
Hardware

Tomorrow at the Black Hat security conference in Las Vegas, the Pwnie Express will officially unleash Pwn Plug R2, the next generation in its arsenal of penetration testing and hacking hardware. Ars got an exclusive rundown in advance on the device from Dave Porcello, founder and CEO of Pwnie Express.

The new Pwn Plug looks less like a DC power supply plug—the form factor of its predecessor—and more like a small Wi-Fi access point or router. But inside, it's really a Linux-powered NSA-in-a-box, providing white hat hackers and corporate network security professionals a "drop box" system that can be remotely controlled over a covert Internet channel or a cellular data connection.

"Some people will use these for physical penetration tests," Porcello said. "They can go into a bank branch or a retail store, or even a corp office, and pretend to be a telecom technician or someone from the power company or whatever and drop it under someone's desk, or in a wiring closet, or behind a printer." And for other applications, such as corporate security auditing, Porcello said, "it's just as useful to send to remote sites without having to travel—a corporate security manager can just ship a box out to a retail store and have a store manager or branch manager just plug it in."

rest here




More in Tux Machines

Scribbleton Has a Ton of Potential

Scribbleton is a very infant -- as in alpha -- release of an innovative note-taking app for Linux that provides cross-platform access with Windows and Apple computers. It creates a personal wiki for storing everything from quick notes to detailed checklists to outlines. It creates links between pages in Scribbleton. Think of this as an easy-to-use database to create links between words, phrases and pages. You can just as easily use Scribbleton to store snippets or volumes of text and quickly locate cross-referenced information. Read more

Apache Storm is ready for prime time

What do you do when you have terabytes and more of data and you want to work it with in real time? Well, one solution is to turn to Apache Storm. Read more

Linux Foundation Announces Major Network Functions Virtualization Project

The project is launching with thirty-eight founding companies, including many of the largest IT companies in the world. Importantly, they include not only cloud and service infrastructure vendors, but telecom service providers, developers and end users as well. (Disclosure: my firm and I represent the Linux Foundation and OPNFV). Read more

AMD Catalyst 14.9 Linux Driver Is Out, Release Disappoints, as Usual

The AMD developers have announced that a new Catalyst 14.9 Linux driver is now out and that it brings support for a couple of new operating systems and a few bug fixes. New AMD Linux drivers don't arrive as often as the community wants or needs them and the company doesn't have the best track record in the open source world. As it stands right now, there are two kinds of drivers available to Linux users, one that's open source and another one that's proprietary. Catalyst 14.9 is made by AMD and provides better functionality than the open source one, but it doesn't get updated too often. Read more