WastedTimes

[aiolos]

It can't get any easier than that...


A portable hacking device equipped with hundreds of exploits and an automated exploitation system will go on sale in the United States in October.

The wireless handheld, called Silica, is the latest product to be developed by Immunity, a Miami-based security company that sells penetration testing products and services.

An early version of Silica, which supports 802.11 (Wi-Fi) and Bluetooth wireless connections, has been fitted with more than 150 exploits from Immunity's Canvas product to allow security professionals to conduct pen tests while walking through office cubicles.

Penetration testing, or pen test, is used to evaluate the security of a computer system or network by simulating an attack by malicious hackers.

Pen testers typically assume the position of the attacker, carrying out active exploitation of known security flaws to search for weaknesses in the target system.

Instead of carrying around laptops through a target's office space, Immunity researcher Dave Aitel believes Silica can allow a pen-tester to perform testing while appearing to perform an innocuous behavior.

"[You can] tell Silica to scan every machine on every wireless network for file shares and download anything of interest to the device. Then just put it in your suit pocket and walk through your target's office space," Aitel said.

h__p://www.eweek.com/article2/0,1895,2003853,00.asp