-----------------------------------

aiolos

Thu 17 Aug, 2006


Portable wireless hacking device goes on sale

-----------------------------------

It can't get any easier than that.<b style="color:#FFA34F"></b>.<b style="color:#FFA34F"></b>.<b style="color:#FFA34F"></b> <b style="color:#FFA34F"></b> <b style="color:#FFA34F"></b>:wink:<b style="color:#FFA34F"></b> <b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
A portable hacking device equipped with hundreds of exploits and an automated exploitation system will go on sale in the United States in October.<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
The wireless handheld,<b style="color:#FFA34F"></b> called Silica,<b style="color:#FFA34F"></b> is the latest product to be developed by Immunity,<b style="color:#FFA34F"></b> a Miami-based security company that sells penetration testing products and services.<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
An early version of Silica,<b style="color:#FFA34F"></b> which supports 802.11 <b style="color:#FFA34F"></b>(Wi-Fi)<b style="color:#FFA34F"></b> and Bluetooth wireless connections,<b style="color:#FFA34F"></b> has been fitted with more than 150 exploits from Immunity's Canvas product to allow security professionals to conduct pen tests while walking through office cubicles.<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
Penetration testing,<b style="color:#FFA34F"></b> or pen test,<b style="color:#FFA34F"></b> is used to evaluate the security of a computer system or network by simulating an attack by malicious hackers.<b style="color:#FFA34F"></b> <b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
Pen testers typically assume the position of the attacker,<b style="color:#FFA34F"></b> carrying out active exploitation of known security flaws to search for weaknesses in the target system.<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
Instead of carrying around laptops through a target's office space,<b style="color:#FFA34F"></b> Immunity researcher Dave Aitel believes Silica can allow a pen-tester to perform testing while appearing to perform an innocuous behavior.<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>"<b style="color:#FFA34F"></b>[You can]<b style="color:#FFA34F"></b> tell Silica to scan every machine on every wireless network for file shares and download anything of interest to the device.<b style="color:#FFA34F"></b> Then just put it in your suit pocket and walk through your target's office space,<b style="color:#FFA34F"></b>"<b style="color:#FFA34F"></b> Aitel said.<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
<b style="color:#FFA34F"></b>
h__p:<b style="color:#FFA34F"></b>/<b style="color:#FFA34F"></b>/www.eweek.com/article2/0,1895,2003853,00.asp