Smart-phone for pentester

[Gleb Paharenko]

Hi!

Could you advice a modern smart-phone suitable for pen-tester
(wardriving, nmap, metasploit, password crackers, full disk
encryption, etc.).
I'm looking to nokia n900, but it is a bit old. Nor iphone 4 or
android seems suitable :-(

--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Gmail]

iPhone 4 has lots of tools available if you jailbreak, not bad at all, Maybe check out the neopwn, not sure if the project is ongoing but I remember it being geared straight towards pentesters
Phil

Sent from my iPhone 4

Post by Gleb Paharenko
Hi!
Could you advice a modern smart-phone suitable for pen-tester
(wardriving, nmap, metasploit, password crackers, full disk
encryption, etc.).
I'm looking to nokia n900, but it is a bit old. Nor iphone 4 or
android seems suitable :-(
--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Stefan]

Nokia N900 is the most open platform and prone for pentest (and many
other tasks) of all smartphones in the market. Example of tools:

http://www.metasploit.com/redmine/projects/framework/wiki/Install_N900

and, in fact, you could run an entire distro inside its own Maemo (if
you don't feel like tweaking with Nokia's Linux distro on that phone):

http://phonespot.wordpress.com/2010/06/15/doing-things-differently-easy-debian-on-nokia-n900/

... you get the point :)
***Stefan Mititelu
http://twitter.com/netfortius
http://www.linkedin.com/in/netfortius

Post by Gmail
iPhone 4 has lots of tools available if you jailbreak, not bad at all, Maybe check out the neopwn, not sure if the project is ongoing but I remember it being geared straight towards pentesters
Phil
Sent from my iPhone 4

Post by Gleb Paharenko
Hi!
Could you advice a modern smart-phone suitable for pen-tester
(wardriving, nmap, metasploit, password crackers, full disk
encryption, etc.).
I'm looking to nokia n900, but it is a bit old. Nor iphone 4 or
android seems suitable :-(
--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Kevin L. Shaw, CISSP, GCIH]

I've heard of Metasploit and Nmap on Android; I don't remember if rooting was required. There are a couple cool wifi discovery apps for Android out there, I use them cursorily on C&A engagements. Having used BackTrack 4 on an Asus Netbook with 2 GB RAM; and not being overly pleased with performance; I feel you need better resources than those a mobile may provide.
--
Kevin L. Shaw, CISSP, GCIH, GPEN
Sent from my Android

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Rajesh Kumar]

Hi everyone,
After going through the discussion I've a couple
of questions to raise
1) Is it possible to test USSD based applications using these devices/OS.
2) How do you capture or tamper data sent using GPS

Regards
Rajesh

On Mon, Oct 11, 2010 at 7:13 AM, Kevin L. Shaw, CISSP, GCIH

Post by Kevin L. Shaw, CISSP, GCIH
I've heard of Metasploit and Nmap on Android; I don't remember if rooting was required. There are a couple cool wifi discovery apps for Android out there, I use them cursorily on C&A engagements. Having used BackTrack 4 on an Asus Netbook with 2 GB RAM; and not being overly pleased with performance; I feel you need better resources than those a mobile may provide.
--
Kevin L. Shaw,  CISSP, GCIH, GPEN
Sent from my Android
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[The Doctor]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Post by Kevin L. Shaw, CISSP, GCIH
I've heard of Metasploit and Nmap on Android; I don't remember if
rooting was required. There are a couple cool wifi discovery apps
for Android out there, I use them cursorily on C&A engagements.

I have used Wifi Analyzer (from the Android Store) a bit; it is okay but
a bit lacking if you are used to something like Kismet. There is also
an application called WiGLE WiFi in the Appstore which is supposed to be
a more featureful wireless auditing application; I have it installed but
have not yet tried it.

Post by Kevin L. Shaw, CISSP, GCIH
Having used BackTrack 4 on an Asus Netbook with 2 GB RAM; and not
being overly pleased with performance; I feel you need better

Installed or from a USB device? That made a difference on my EeePC 900.

Post by Kevin L. Shaw, CISSP, GCIH
resources than those a mobile may provide.

I am inclined to agree with you on this; mobile phones are not designed
to provide the kind of processing power that laptops and netbooks are.
Their power cells were also not really designed to provide lots of power
for long periods of time (say, when running CPU intensive applications).

- --

The Doctor [412/724/301/703]

PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1
WWW: http://drwho.virtadpt.net/

On the Internet, nobody knows you're an AGI.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkzAc18ACgkQO9j/K4B7F8ERagCfXMYGyGOCLjVATYpEoCYKjo1Q
BsQAnjkKdCUcFWxasHageA07nGlO0/fJ
=gSM4
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Ivan .]

Anyone remember the Sharp Zaurus?

http://en.wikipedia.org/wiki/Sharp_Zaurus
http://www.irongeek.com/i.php?submenu=zaurus/zaurusheader&page=zaurus/zaurusmain
http://webcache.googleusercontent.com/search?q=cache:BMXmCO7k24wJ:www.irongeek.com/i.php%3Fsubmenu%3Dzaurus/zaurusheader%26page%3Dzaurus/zaurusmain+iron+geek+sharp+zarus&cd=1&hl=en&ct=clnk&gl=au&client=firefox-a

I did much the same with a nokia n800

I had that badboy running, nmap, kismet, hping, dsniff and a few other
goodies with no issues on processing power or alike. So I don't see
why these new smartphones would have any issues with 1GHz processors
and 512MB RAM ..

cheers
Ivan

Post by The Doctor
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Post by Kevin L. Shaw, CISSP, GCIH
I've heard of Metasploit and Nmap on Android; I don't remember if
rooting was required. There are a couple cool wifi discovery apps
for Android out there, I use them cursorily on C&A engagements.

I have used Wifi Analyzer (from the Android Store) a bit; it is okay but
a bit lacking if you are used to something like Kismet.  There is also
an application called WiGLE WiFi in the Appstore which is supposed to be
a more featureful wireless auditing application; I have it installed but
have not yet tried it.

Post by Kevin L. Shaw, CISSP, GCIH
Having used BackTrack 4 on an Asus Netbook with 2 GB RAM; and not
being overly pleased with performance; I feel you need better

Installed or from a USB device?  That made a difference on my EeePC 900.

Post by Kevin L. Shaw, CISSP, GCIH
resources than those a mobile may provide.

I am inclined to agree with you on this; mobile phones are not designed
to provide the kind of processing power that laptops and netbooks are.
Their power cells were also not really designed to provide lots of power
for long periods of time (say, when running CPU intensive applications).
- --
The Doctor [412/724/301/703]
PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F  DD89 3BD8 FF2B 807B 17C1
WWW: http://drwho.virtadpt.net/
On the Internet, nobody knows you're an AGI.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkzAc18ACgkQO9j/K4B7F8ERagCfXMYGyGOCLjVATYpEoCYKjo1Q
BsQAnjkKdCUcFWxasHageA07nGlO0/fJ
=gSM4
-----END PGP SIGNATURE-----
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Chip Panarchy]

I have an HTC Touch Pro2 running Android, Windows Mobile & Rhobuntu.

The Rhobuntu I have even running an mySQL server! :O

Highly recommend the Touch Pro2, excellent keyboard, decent battery
life... oh, did I mention I can touch-type on it?

Definitely worth getting

Panarchy

Post by Ivan .
Anyone remember the Sharp Zaurus?
http://en.wikipedia.org/wiki/Sharp_Zaurus
http://www.irongeek.com/i.php?submenu=zaurus/zaurusheader&page=zaurus/zaurusmain
http://webcache.googleusercontent.com/search?q=cache:BMXmCO7k24wJ:www.irongeek.com/i.php%3Fsubmenu%3Dzaurus/zaurusheader%26page%3Dzaurus/zaurusmain+iron+geek+sharp+zarus&cd=1&hl=en&ct=clnk&gl=au&client=firefox-a
I did much the same with a nokia n800
I had that badboy running, nmap, kismet, hping, dsniff and a few other
goodies with no issues on processing power or alike. So I don't see
why these new smartphones would have any issues with 1GHz processors
and 512MB RAM ..
cheers
Ivan

Post by The Doctor
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Post by Kevin L. Shaw, CISSP, GCIH
I've heard of Metasploit and Nmap on Android; I don't remember if
rooting was required. There are a couple cool wifi discovery apps
for Android out there, I use them cursorily on C&A engagements.

I have used Wifi Analyzer (from the Android Store) a bit; it is okay but
a bit lacking if you are used to something like Kismet.  There is also
an application called WiGLE WiFi in the Appstore which is supposed to be
a more featureful wireless auditing application; I have it installed but
have not yet tried it.

Post by Kevin L. Shaw, CISSP, GCIH
Having used BackTrack 4 on an Asus Netbook with 2 GB RAM; and not
being overly pleased with performance; I feel you need better

Installed or from a USB device?  That made a difference on my EeePC 900.

Post by Kevin L. Shaw, CISSP, GCIH
resources than those a mobile may provide.

I am inclined to agree with you on this; mobile phones are not designed
to provide the kind of processing power that laptops and netbooks are.
Their power cells were also not really designed to provide lots of power
for long periods of time (say, when running CPU intensive applications).
- --
The Doctor [412/724/301/703]
PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F  DD89 3BD8 FF2B 807B 17C1
WWW: http://drwho.virtadpt.net/
On the Internet, nobody knows you're an AGI.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkzAc18ACgkQO9j/K4B7F8ERagCfXMYGyGOCLjVATYpEoCYKjo1Q
BsQAnjkKdCUcFWxasHageA07nGlO0/fJ
=gSM4
-----END PGP SIGNATURE-----
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Saif El Sherei]

There are some network tools and port scanners for iphone 4, but the most intresting one is zscan which states it has vulnerability scanning and service identification i downloaded it but it doesnt seem to work. I will try to get it to work then will feed you back.

Reagrds,

Saif el sherei

OSCP

Sent from my iPhone

Post by Ivan .
Anyone remember the Sharp Zaurus?
http://en.wikipedia.org/wiki/Sharp_Zaurus
http://www.irongeek.com/i.php?submenu=zaurus/zaurusheader&page=zaurus/zaurusmain
http://webcache.googleusercontent.com/search?q=cache:BMXmCO7k24wJ:www.irongeek.com/i.php%3Fsubmenu%3Dzaurus/zaurusheader%26page%3Dzaurus/zaurusmain+iron+geek+sharp+zarus&cd=1&hl=en&ct=clnk&gl=au&client=firefox-a
I did much the same with a nokia n800
I had that badboy running, nmap, kismet, hping, dsniff and a few other
goodies with no issues on processing power or alike. So I don't see
why these new smartphones would have any issues with 1GHz processors
and 512MB RAM ..
cheers
Ivan

Post by The Doctor
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Post by Kevin L. Shaw, CISSP, GCIH
I've heard of Metasploit and Nmap on Android; I don't remember if
rooting was required. There are a couple cool wifi discovery apps
for Android out there, I use them cursorily on C&A engagements.

I have used Wifi Analyzer (from the Android Store) a bit; it is okay but
a bit lacking if you are used to something like Kismet. There is also
an application called WiGLE WiFi in the Appstore which is supposed to be
a more featureful wireless auditing application; I have it installed but
have not yet tried it.

Post by Kevin L. Shaw, CISSP, GCIH
Having used BackTrack 4 on an Asus Netbook with 2 GB RAM; and not
being overly pleased with performance; I feel you need better

Installed or from a USB device? That made a difference on my EeePC 900.

Post by Kevin L. Shaw, CISSP, GCIH
resources than those a mobile may provide.

I am inclined to agree with you on this; mobile phones are not designed
to provide the kind of processing power that laptops and netbooks are.
Their power cells were also not really designed to provide lots of power
for long periods of time (say, when running CPU intensive applications).
- --
The Doctor [412/724/301/703]
PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1
WWW: http://drwho.virtadpt.net/
On the Internet, nobody knows you're an AGI.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkzAc18ACgkQO9j/K4B7F8ERagCfXMYGyGOCLjVATYpEoCYKjo1Q
BsQAnjkKdCUcFWxasHageA07nGlO0/fJ
=gSM4
-----END PGP SIGNATURE-----
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Saif El Sherei]

I got metasploit 3.4, nmap, python, netcat, and ruby running on my iphone 4 thats most of what i need for a pentest.

Sent from my iPhone

Regards,

Saif
OSCP

Post by Saif El Sherei
There are some network tools and port scanners for iphone 4, but the most intresting one is zscan which states it has vulnerability scanning and service identification i downloaded it but it doesnt seem to work. I will try to get it to work then will feed you back.
Reagrds,
Saif el sherei
OSCP
Sent from my iPhone

Post by Ivan .
Anyone remember the Sharp Zaurus?
http://en.wikipedia.org/wiki/Sharp_Zaurus
http://www.irongeek.com/i.php?submenu=zaurus/zaurusheader&page=zaurus/zaurusmain
http://webcache.googleusercontent.com/search?q=cache:BMXmCO7k24wJ:www.irongeek.com/i.php%3Fsubmenu%3Dzaurus/zaurusheader%26page%3Dzaurus/zaurusmain+iron+geek+sharp+zarus&cd=1&hl=en&ct=clnk&gl=au&client=firefox-a
I did much the same with a nokia n800
I had that badboy running, nmap, kismet, hping, dsniff and a few other
goodies with no issues on processing power or alike. So I don't see
why these new smartphones would have any issues with 1GHz processors
and 512MB RAM ..
cheers
Ivan

Post by The Doctor
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Post by Kevin L. Shaw, CISSP, GCIH
I've heard of Metasploit and Nmap on Android; I don't remember if
rooting was required. There are a couple cool wifi discovery apps
for Android out there, I use them cursorily on C&A engagements.

I have used Wifi Analyzer (from the Android Store) a bit; it is okay but
a bit lacking if you are used to something like Kismet. There is also
an application called WiGLE WiFi in the Appstore which is supposed to be
a more featureful wireless auditing application; I have it installed but
have not yet tried it.

Post by Kevin L. Shaw, CISSP, GCIH
Having used BackTrack 4 on an Asus Netbook with 2 GB RAM; and not
being overly pleased with performance; I feel you need better

Installed or from a USB device? That made a difference on my EeePC 900.

Post by Kevin L. Shaw, CISSP, GCIH
resources than those a mobile may provide.

I am inclined to agree with you on this; mobile phones are not designed
to provide the kind of processing power that laptops and netbooks are.
Their power cells were also not really designed to provide lots of power
for long periods of time (say, when running CPU intensive applications).
- --
The Doctor [412/724/301/703]
PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1
WWW: http://drwho.virtadpt.net/
On the Internet, nobody knows you're an AGI.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkzAc18ACgkQO9j/K4B7F8ERagCfXMYGyGOCLjVATYpEoCYKjo1Q
BsQAnjkKdCUcFWxasHageA07nGlO0/fJ
=gSM4
-----END PGP SIGNATURE-----
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Christopher A. Jarosz]

YEP, I have the 6500 Zaurus and KISMET really rocks on it. The problem is
that the Zaurus OS only supports 802.11b. You can see 802.11g, but it's has
issues with anything stronger than WEP. Forget 802.11n. I tried with
little luck. BUT KISMAC works very well....

Date: Fri, 22 Oct 2010 15:52:34 +1100
Subject: Re: Smart-phone for pentester
Resent-Date: Thu, 21 Oct 2010 23:45:48 -0600 (MDT)
Anyone remember the Sharp Zaurus?
http://en.wikipedia.org/wiki/Sharp_Zaurus
http://www.irongeek.com/i.php?submenu=zaurus/zaurusheader&page=zaurus/zaurusma
in
http://webcache.googleusercontent.com/search?q=cache:BMXmCO7k24wJ:www.irongeek
.com/i.php%3Fsubmenu%3Dzaurus/zaurusheader%26page%3Dzaurus/zaurusmain+iron+gee
k+sharp+zarus&cd=1&hl=en&ct=clnk&gl=au&client=firefox-a
I did much the same with a nokia n800
I had that badboy running, nmap, kismet, hping, dsniff and a few other
goodies with no issues on processing power or alike. So I don't see
why these new smartphones would have any issues with 1GHz processors
and 512MB RAM ..
cheers
Ivan

Post by The Doctor
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Post by Kevin L. Shaw, CISSP, GCIH
I've heard of Metasploit and Nmap on Android; I don't remember if
rooting was required. There are a couple cool wifi discovery apps
for Android out there, I use them cursorily on C&A engagements.

I have used Wifi Analyzer (from the Android Store) a bit; it is okay but
a bit lacking if you are used to something like Kismet.  There is also
an application called WiGLE WiFi in the Appstore which is supposed to be
a more featureful wireless auditing application; I have it installed but
have not yet tried it.

Post by Kevin L. Shaw, CISSP, GCIH
Having used BackTrack 4 on an Asus Netbook with 2 GB RAM; and not
being overly pleased with performance; I feel you need better

Installed or from a USB device?  That made a difference on my EeePC 900.

Post by Kevin L. Shaw, CISSP, GCIH
resources than those a mobile may provide.

I am inclined to agree with you on this; mobile phones are not designed
to provide the kind of processing power that laptops and netbooks are.
Their power cells were also not really designed to provide lots of power
for long periods of time (say, when running CPU intensive applications).
- --
The Doctor [412/724/301/703]
PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F  DD89 3BD8 FF2B 807B 17C1
WWW: http://drwho.virtadpt.net/
On the Internet, nobody knows you're an AGI.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkzAc18ACgkQO9j/K4B7F8ERagCfXMYGyGOCLjVATYpEoCYKjo1Q
BsQAnjkKdCUcFWxasHageA07nGlO0/fJ
=gSM4
-----END PGP SIGNATURE-----
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually
do a proper penetration test. IACRB CPT and CEPT certs require a full
practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually
do a proper penetration test. IACRB CPT and CEPT certs require a full
practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[The Doctor]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Post by Ivan .
Anyone remember the Sharp Zaurus?

I still have one, I think a 5500, but have not used it in a half-decade
or so. One of Sharp's firmware updates completely changed the internal
file formats (from CSV to binary-only) and thus I could no longer sync
it on my Linux or BSD machines; rather than re-type everything I gave up
on it and started shopping for a smartphone.

Post by Ivan .
I had that badboy running, nmap, kismet, hping, dsniff and a few other

It was ideal for running Kismet at the time; it was also nice to have a
CompactFlash wireless interface for that PDA.

Post by Ivan .
goodies with no issues on processing power or alike. So I don't see why
these new smartphones would have any issues with 1GHz processors and 512MB
RAM ..

Running the CPUs on smart phones constantly (in particular, the Android
phones mentioned in this thread) drains the batteries fast. My HTC
Hero's went flat after an hour of war-walking with Wifi Analyzer; a
friend who had an iPod Touch running WiFiFoFum on the same war-walking
jaunt reported that his power cells lasted only a bit longer.

- --

The Doctor [412/724/301/703]

PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1
WWW: http://drwho.virtadpt.net/

The meek will inherit the Earth; the rest of us will go to the stars.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkzBqZ8ACgkQO9j/K4B7F8E1VACZAdtCinGL8Eni3/JQxo2gI2BX
PScAoKh9RvtExqgjfu7I+jLsHUte6MNx
=aMr1
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Stephen]

Hi Gleb, the N900 is not really that old (end of 2009 from memory), and
is still quite a powerful device. The power kernel allows you to
overclock it, and the 32GB of internal storage does allow you to carry
quite a few apps around with you. The SDK environment from Nokia allows
you to theoretically cross-compile any app you choose to run on the
N900. I've successfully run a number of security testing apps on it,
including Nmap and Metasploit, and I know that Kismet and Aircrack both
function on it (at least to a reasonable degree), and you have the
ability to record GPS info obviously as well. I'd leave password
cracking software to more powerful servers, but it is possible to
install on the N900. I have one, and aside from the approx. 16 hours @
usage battery life, I'd definitely recommend one for the job. Thanks,

[Charles Timko]

Gleb,

I know that Darren from Hak5 used his Droid phone to do use the aircrack-ng
suite (if I remember correctly).

Charles Timko

-----Original Message-----
From: ***@securityfocus.com [mailto:***@securityfocus.com] On
Behalf Of Gleb Paharenko
Sent: Sunday, October 10, 2010 4:29 PM
To: pen-***@securityfocus.com
Subject: Smart-phone for pentester

Hi!

Could you advice a modern smart-phone suitable for pen-tester (wardriving,
nmap, metasploit, password crackers, full disk encryption, etc.).
I'm looking to nokia n900, but it is a bit old. Nor iphone 4 or android
seems suitable :-(

--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually
do a proper penetration test. IACRB CPT and CEPT certs require a full
practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[TAS]

There was some talk also discussed at defcon 16 I guess, you can dig the archives on the website. iPhone 4 should be OK.

Post by Gleb Paharenko
Hi!
Could you advice a modern smart-phone suitable for pen-tester
(wardriving, nmap, metasploit, password crackers, full disk
encryption, etc.).
I'm looking to nokia n900, but it is a bit old. Nor iphone 4 or
android seems suitable :-(
--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Thomas d'Otreppe]

If you're interested doing wireless stuff, then get the N900. I can
tell you that Aircrack-ng works well with the internal wireless card
(capture and injection).

Thomas

Post by TAS
There was some talk also discussed at defcon 16 I guess, you can dig the archives on the website. iPhone 4 should be OK.

Post by Gleb Paharenko
Hi!
Could you advice a modern smart-phone suitable for pen-tester
(wardriving, nmap, metasploit, password crackers, full disk
encryption, etc.).
I'm looking to nokia n900, but it is a bit old. Nor iphone 4 or
android seems suitable :-(
--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Shawn Merdinger]

Hi Gleb,

Post by Gleb Paharenko
Could you advice a modern smart-phone suitable for pen-tester
I'm looking to nokia n900, but it is a bit old.

while the N900 might not meet the "shiny new hotness" test, it is a
formidable platform. fwiw, i'm in the midst of a series of blog posts
entitled "Weaponizing the Nokia N900"

https://www.infosecisland.com/blogview/8056-Weaponizing-the-Nokia-N900-Part-2.html
https://www.infosecisland.com/blogview/5640-Weaponizing-the-Nokia-N900-Part-1.html

cheers,
--scm

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Adrian J Milanoski]

Sorry forgot plain text my bad.

I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.

Good luck.

Regards,
Adrian

Post by Gleb Paharenko
Hi!
Could you advice a modern smart-phone suitable for pen-tester
(wardriving, nmap, metasploit, password crackers, full disk
encryption, etc.).
I'm looking to nokia n900, but it is a bit old. Nor iphone 4 or
android seems suitable :-(
--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Curt Purdy]

OK, you want to tell us how in the heck you got a full-blown *NIX app
like Metasploit to run on iphone? Needless to say it is jailbroken,
but do you have a link to step-by-step? Are you using something like
Cydia?

Also, any recommendations from the list on the best WIFI analyzer for
iphone out there? My one and only real complaint to Jobs, is his
banning these apps. Really dumb, Steve.

Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA


On Tue, Oct 12, 2010 at 6:01 AM, Adrian J Milanoski

Post by Adrian J Milanoski
Sorry forgot plain text my bad.
I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.
Good luck.
Regards,
Adrian

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[SD List]

Hi guys,

Here is a pentest PDA hardware i knew about some years before. As far as i
can remember, i wrote a review about it in January 2007. At this time, the
tool was called TigerSuite.

I dont know if it is still maintained or not ? .. all in all, here is the
link http://www.tigertools.net/tiger_suite_pda.htm

However, i'm not sure if it can handle newest tools as Metasploit or Nmap.
See at the screenshots, looks like "Bill & Ted BOGUS adventure". Oldie i
mean.

I also do remember a handheld called Silica from Immunity. But when look
upon it, i stick to this page
http://www.immunityinc.com/products-silica.shtml

Regards

N.

Post by Curt Purdy
OK, you want to tell us how in the heck you got a full-blown *NIX app
like Metasploit to run on iphone? Needless to say it is jailbroken,
but do you have a link to step-by-step? Are you using something like
Cydia?
Also, any recommendations from the list on the best WIFI analyzer for
iphone out there? My one and only real complaint to Jobs, is his
banning these apps. Really dumb, Steve.
Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA
On Tue, Oct 12, 2010 at 6:01 AM, Adrian J Milanoski

Post by Adrian J Milanoski
Sorry forgot plain text my bad.
I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.
Good luck.
Regards,
Adrian

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require a
full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Gmail]

Both packages are in Cydia, click install and done, nothing special at all

Sent from my iPhone 4

Post by Curt Purdy
OK, you want to tell us how in the heck you got a full-blown *NIX app
like Metasploit to run on iphone? Needless to say it is jailbroken,
but do you have a link to step-by-step? Are you using something like
Cydia?
Also, any recommendations from the list on the best WIFI analyzer for
iphone out there? My one and only real complaint to Jobs, is his
banning these apps. Really dumb, Steve.
Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA
On Tue, Oct 12, 2010 at 6:01 AM, Adrian J Milanoski

Post by Adrian J Milanoski
Sorry forgot plain text my bad.
I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.
Good luck.
Regards,
Adrian

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Enis Sahin]

Hi Curt,

Metasploit have been available on iPhone since 2008 as far as I
remember. Also it resurfaced recently unless you've heard about it:
http://www.offensive-security.com/offsec/metasploit-3-4-and-set-on-iphone-4/

Cheers.
Enis

Post by Curt Purdy
OK, you want to tell us how in the heck you got a full-blown *NIX app
like Metasploit to run on iphone? Needless to say it is jailbroken,
but do you have a link to step-by-step? Are you using something like
Cydia?
Also, any recommendations from the list on the best WIFI analyzer for
iphone out there? My one and only real complaint to Jobs, is his
banning these apps. Really dumb, Steve.
Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA
On Tue, Oct 12, 2010 at 6:01 AM, Adrian J Milanoski

Post by Adrian J Milanoski
Sorry forgot plain text my bad.
I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.
Good luck.
Regards,
Adrian

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Adrian J Milanoski]

Hey Curt,

I was honestly just browsing and was curious one day.

I used Cydia on my jail broken iPhone and searched for metasploit and
nmap and installed them both. I must say thought it is a bit difficult
to use just do to the fact that it is an iPhone and screen size is
limited, but none the less it works.

As for a WiFi analyzer I use a App called WiFiFoFum pretty cool app.
You should check it out.

Good luck.

Regards,
Adrian

Post by Curt Purdy
OK, you want to tell us how in the heck you got a full-blown *NIX app
like Metasploit to run on iphone? Needless to say it is jailbroken,
but do you have a link to step-by-step? Are you using something like
Cydia?
Also, any recommendations from the list on the best WIFI analyzer for
iphone out there? My one and only real complaint to Jobs, is his
banning these apps. Really dumb, Steve.
Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA
On Tue, Oct 12, 2010 at 6:01 AM, Adrian J Milanoski

Post by Adrian J Milanoski
Sorry forgot plain text my bad.
I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.
Good luck.
Regards,
Adrian

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Gleb Paharenko]

What is better n900 or android phone for bluesnarfing, bluejacking?
I'm suppose that in case standard linux packages for bluetooth hacking
work on n900, than it wins, doesn't it?

Thank you every one.
I'm currently looking more and more towards n900. However I'm shine
 - weak battery
 - Resistive touchscreen
 - less application than in Apple Store and Android Store (however I'm
not sure if this is true :)
Does battery and resistive screen do not make you uncomfortable?

Post by Adrian J Milanoski
Hey Curt,
I was honestly just browsing and was curious one day.
I used Cydia on my jail broken iPhone and searched for metasploit and
nmap and installed them both. I must say thought it is a bit difficult
to use just do to the fact that it is an iPhone and screen size is
limited, but none the less it works.
As for a WiFi analyzer I use a App called WiFiFoFum pretty cool app.
You should check it out.
Good luck.
Regards,
Adrian

Post by Curt Purdy
OK, you want to tell us how in the heck you got a full-blown *NIX app
like Metasploit to run on iphone? Needless to say it is jailbroken,
but do you have a link to step-by-step? Are you using something like
Cydia?
Also, any recommendations from the list on the best WIFI analyzer for
iphone out there? My one and only real complaint to Jobs, is his
banning these apps. Really dumb, Steve.
Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA
On Tue, Oct 12, 2010 at 6:01 AM, Adrian J Milanoski

Post by Adrian J Milanoski
Sorry forgot plain text my bad.
I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.
Good luck.
Regards,
Adrian

--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko

--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Gleb Paharenko]

Thank you every one.

I'm currently looking more and more towards n900. However I'm shine
with the following:
- weak battery
- Resistive touchscreen
- less application than in Apple Store and Android Store (however I'm
not sure if this is true :)

Does battery and resistive screen do not make you uncomfortable?

Post by Adrian J Milanoski
Hey Curt,
I was honestly just browsing and was curious one day.
I used Cydia on my jail broken iPhone and searched for metasploit and
nmap and installed them both. I must say thought it is a bit difficult
to use just do to the fact that it is an iPhone and screen size is
limited, but none the less it works.
As for a WiFi analyzer I use a App called WiFiFoFum pretty cool app.
You should check it out.
Good luck.
Regards,
Adrian

Post by Curt Purdy
OK, you want to tell us how in the heck you got a full-blown *NIX app
like Metasploit to run on iphone? Needless to say it is jailbroken,
but do you have a link to step-by-step? Are you using something like
Cydia?
Also, any recommendations from the list on the best WIFI analyzer for
iphone out there? My one and only real complaint to Jobs, is his
banning these apps. Really dumb, Steve.
Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA
On Tue, Oct 12, 2010 at 6:01 AM, Adrian J Milanoski

Post by Adrian J Milanoski
Sorry forgot plain text my bad.
I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.
Good luck.
Regards,
Adrian

--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Adrian J Milanoski]

Just go with an Android or iPhone there is much more support for them
and users. So, if you have an issue chances are that someone else has
already tried it some where at some point.

Just a thought. Good luck with it all mate.


Thanks,
Adrian
_________________
Sent from my iPhone

Thank you every one.
I'm currently looking more and more towards n900. However I'm shine
- weak battery
- Resistive touchscreen
- less application than in Apple Store and Android Store (however I'm
not sure if this is true :)
Does battery and resistive screen do not make you uncomfortable?

Post by Adrian J Milanoski
Hey Curt,
I was honestly just browsing and was curious one day.
I used Cydia on my jail broken iPhone and searched for metasploit and
nmap and installed them both. I must say thought it is a bit
difficult
to use just do to the fact that it is an iPhone and screen size is
limited, but none the less it works.
As for a WiFi analyzer I use a App called WiFiFoFum pretty cool app.
You should check it out.
Good luck.
Regards,
Adrian

Post by Curt Purdy
OK, you want to tell us how in the heck you got a full-blown *NIX app
like Metasploit to run on iphone? Needless to say it is jailbroken,
but do you have a link to step-by-step? Are you using something like
Cydia?
Also, any recommendations from the list on the best WIFI analyzer for
iphone out there? My one and only real complaint to Jobs, is his
banning these apps. Really dumb, Steve.
Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA
On Tue, Oct 12, 2010 at 6:01 AM, Adrian J Milanoski

Post by Adrian J Milanoski
Sorry forgot plain text my bad.
I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.
Good luck.
Regards,
Adrian

--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko
---
---------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification
Review Board
Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs
require a full practical examination in order to become certified.
http://www.iacertification.org
---
---------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[Dan Boughton]

Battery life as an issue? I don't care whose device it is. It's a smart phone. Plan on connecting it to a car charger or your computer whenever it's not on your ear. Nature of the beast.

Sent from my iPhone

Thank you every one.
I'm currently looking more and more towards n900. However I'm shine
- weak battery
- Resistive touchscreen
- less application than in Apple Store and Android Store (however I'm
not sure if this is true :)
Does battery and resistive screen do not make you uncomfortable?

Post by Adrian J Milanoski
Hey Curt,
I was honestly just browsing and was curious one day.
I used Cydia on my jail broken iPhone and searched for metasploit and
nmap and installed them both. I must say thought it is a bit difficult
to use just do to the fact that it is an iPhone and screen size is
limited, but none the less it works.
As for a WiFi analyzer I use a App called WiFiFoFum pretty cool app.
You should check it out.
Good luck.
Regards,
Adrian

Post by Curt Purdy
OK, you want to tell us how in the heck you got a full-blown *NIX app
like Metasploit to run on iphone? Needless to say it is jailbroken,
but do you have a link to step-by-step? Are you using something like
Cydia?
Also, any recommendations from the list on the best WIFI analyzer for
iphone out there? My one and only real complaint to Jobs, is his
banning these apps. Really dumb, Steve.
Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA
On Tue, Oct 12, 2010 at 6:01 AM, Adrian J Milanoski

Post by Adrian J Milanoski
Sorry forgot plain text my bad.
I have a iPhone 3GS and have Metasploit and nmap installed on it.
Haven't tried aircrack-ng on it but I would assume since it is unix
based it would work.
Good luck.
Regards,
Adrian

--
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko
[phone]
skype: gpaharenko
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------