maybe it is a good idea to add the Citrix ICA client, behind the present rdp and vnc clients?
FYI... With the new version of Knoppix, kismet 2.6 works great!!!
maybe it is a good idea to add the Citrix ICA client, behind the present rdp and vnc clients?
Don't forget the NTFS tools. It can come in handy to be able to use ntfsresize.
What are the NTFS tools? Please list them here and I'll try to include them.
They are available at http://linux-ntfs.sourceforge.net/.
Some of them are experimental, but they are fairly small in size, so it's worth including as many as possible.
Don't forget to install the chkrootkit tools as well. These would be very useful to me.
Anyone still interested on this ?
I guess I will be picking up on this to create my own security/forensic/etc tool kit.
But it would be nice to get some help
Like suggestion on how to add modules easily. I think morphix is a nice idea but I would like to use the standard Knoppix release as there seem to be a lot of updates on drivers, etc.
All I need is to make a standard list of apps to remove (eg open office, kde organizer, etc) to make way for the security modules/packages.
Any comments?
Thanks!
I still have the remaster I did that contains the packages I listed in the 2nd posting of this thread. I have been meaning to post it with BitTorrent but have not yet. I would actually like to remaster it with the latest 3.2 but .... gotta find the time.
I built a re-master of Knoppix 3.2 with as many of the "Top 75" list at insecure.org as I could....
All I did was do an apt-get install on all the packages by name. So, only the latest version with Debian packages out there were installed. Next revision, perhaps I will put some effort into the apps. I put the real effort into actually doing the re-mastering.
I took regular Knoppix and removed the foreign KDE locales (afterall *I* am American, everything should be the way *I* want it. ). This gave me more than enough space to add:
Snort (with default rules)
dsniff
whisker
John The Ripper
Nikto
nbtscan
Xprobe2
Ngrep
THC-Amap
Nemesis
fragroute
fping
TCPtraceroute
tcpreplay
--------------------------------------------
Knoppix 3.2 already included:
Nessus
Ethereal
Netcat
tcpdump
hping2
ettercap
openssh
Kismet
airsnort
GPG
Perl
OpenSSL
lsof
hunt
stunnel
The Coroner's Toolkit
arpwatch
dig
The rest of the Top 75 were either for Windows, were not "free", were not available as Debian packages or didn't really apply to a LiveCD distro (like firewalls, other OSes, etc).
I am more than happy to share the end result. I just don't have a fat enough pipe to share the iso out on my own network. Perhaps soon I will, and perhaps by then I'll have made the re-master even better.
Mike
PS: Thanks to the Knopper team for the AWESOME distro.
I also have a customization like this nearly done: Knoppix-STD (security tools distribution). It includes tools organized as follows (a lot of these come with Knoppix by default):
cracker: john with custom dictionary and AFS,NTLM,MySQL patches
crypto: openssl, gnupg, stunnel, etc
firewall: iptables & gtkiptables
forensics: sleuthkit, autopsy, fenris
honeypot: honeyd, labrea
ids: snort, aide, syslog
net-utils: etherape, ntop, cheops, arpwatch, etc
pen-test: many many pen test tools
servers: dns, irc, xinetd, apache, cryptcat, samba, etc.
sniffers & assemblers: ethereal, tcpdump, ngrep, netsed, paketto, ettercap, etc.
vuln-test: amap, nmap, nessus, snot, hping2, chkrootkit. nbtscan, etc.
wireless: airsnort, kismet, wavemon, wardrive, patched orinoco
hardly a complete list, but you get the idea. I'm trying to score some hosting now. I'll post a general announcement and to this thread when it's up. I'm hoping to have it up by June 1st.
A-Tech 8GB DDR3 1600 PC3-12800 Laptop SODIMM 204-Pin Memory RAM PC3L DDR3L 1x 8G
$13.99
Samsung 16GB 2Rx4 PC4-2133P DDR4-17000 1.2V RDIMM ECC Registered Server Memory
$16.29
HyperX FURY DDR3 8GB 16GB 32GB 1600 MHz PC3-12800 Desktop RAM Memory DIMM 240pin
$12.90
A-Tech 16GB 2 x 8GB PC3-12800 Laptop SODIMM DDR3 1600 Memory RAM PC3L 16G DDR3L
$27.98
A-Tech 8GB PC3-12800 Desktop DDR3 1600 MHz Non ECC 240-Pin DIMM Memory RAM 1x 8G
$13.99
8GB PC3L-12800S 1600MHz SODIMM DDR3 RAM | Grade A
$12.00
Kingston HyperX FURY DDR3 8GB 16GB 32G 1600 1866 1333 Desktop Memory RAM DIMM
$13.25
Samsung 16GB (2x8GB) PC3L-12800S Lap Top Memory RAM
$20.00
A-Tech 256GB 4x 64GB 4Rx4 PC4-19200 ECC Load Reduced LRDIMM Server Memory RAM
$287.96
Samsung 64GB 4DRx4 PC4-2400 LRDIMM DDR4-19200 ECC Load Reduced Server Memory RAM
$71.99