Digital Common Sense

I posted some thoughts on the N800 as a security tool perhaps an hour ago. But words spreads fast and Jonathan Greene quickly responded with what I’m sharing here via Twitter.

First, for those of you who think Twitter is a toy for chat, here’s an example of valuable, focused business information being shared very nearly at the speed of thought (to steal a concept from Bill Gates).

Here’s a preconfigured N800, built and ready to rock as a security assessment tool.

Immunity SILICA - Redefining Penetration Testing

Immunity SILICA is a hand-held penetration testing product that leverages Immunity CANVAS to provide a unique testing tool for networks. Currently it supports 802.11 (Wi-Fi). Support for Bluetooth wireless connections and Ethernet via USB is planned for the near future. Its slim, PDA-like profile allows the penetration tester to perform testing while behaving innocuously.

Example Use Cases:

• Tell SILICA to scan every machine on every wireless network for file shares and download anything of interest to the SILICA device. Then just put it in your suit pocket and walk through your target’s office space.
• Tell SILICA to actively penetrate any machines it can target.
• Mail SILICA to your target’s CEO, then let it turn on and hack anything it can as it sits on their desk.
• Use SILICA as you would CANVAS on your desktop - just smaller.

Because every penetration test is different, Immunity SILICA is highly customizable. Based on the Open Source Linux operating system and the pure Python Immunity CANVAS attack framework.
[Check the whole vendor write-up]

At $3600 list price, this isn’t for the faint of heart. On the flip side, if you want to hand a security professional a tool they’ll be running with a couple of hours later, this looks damn hard to beat.

Technorati Tags: Immunity, SILICA, infosec, Nokia N800, security assessment tool

Filed by Ken at 5:39 pm under InfoSec, Mobility & Handheld, Technology