RE: exposure to bootable Linux distros

["Jim Clark" <jclark () cmanet org>]

Am currently testing PLAK. So far greatly impressed.  It is a little
hard at first but the tools are phenominal.  FWIW.

-----Original Message-----
From: Chris Halverson [mailto:chris.halverson () encana com]
Sent: Thursday, March 04, 2004 9:20 AM
To: security-basics () securityfocus com
Subject: exposure to bootable Linux distros




Has anyone had exposure to Operator (built from Knoppix) or PHLAX?  I
haven't been able to download and try them but it was brought up in one
of my classes that I am taking.



What purposes do you pentest with these?  

External perimeter security, DMZ or internal?  

How would you block non-authorized users from utilizing these? (with the
exception of BIOS password protection and disabling the floppy, usb and
cdrom boot capabilities)

------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off 
any course! All of our class sizes are guaranteed to be 10 students or
less 
to facilitate one-on-one interaction with one of our expert instructors.

Attend a course taught by an expert instructor with years of
in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization.

Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------