Researcher Creates Handheld Hacking Tool

Kickball Notches writes "Immunity's Dave Aitel plans to start selling a portable hacking device equipped with hundreds of exploits. The wireless handheld, called Silica, comes equipped with more than 150 exploits from Canvas and an automated exploitation system that allows simulated hacking attacks from the palm of your hand. It supports 802.11 (Wi-Fi) and Bluetooth wireless connections and is based on Linux."

So... it's a Zaurus running a pen-testing toolkit?

[Lxy]

The article doesn't specify details, but it sounds like what you can do with a Sharp Zaurus. You need to be selective, but you can get linux running with something like metasploit without too much effort. This unit's got more RAM and disk I'm sure, but it's hardly revolutionary.

Re:Proximity is no problem.

[SatanicPuppy]

Couple of weeks? For a wifi enabled hand held device? Where the hell do you buy your batteries?!?

Unless it gets hooked up to some kind of battery array, I think we can safely peg the window for this thing at 24 hours at the extreme outside, though it's probably less than 12.

Now, depending on how smart it is, you could have it come up for 5 or 10 minutes at a certain time when you know something good will be available (e.g The boss syncs his pda), but it would have to be some cron-esque computer scheduled job, and I'm not sure why any environment (other than maybe a retail environment) would be running a regular job across wireless.

I think it'd be much more effective for the old Delivery Guy trick; something to keep in your pocket while you wander through the office, looking for someone to deliver your package to...Though I don't know how it is in other places, but where I work everything gets signed for in front, and a guard brings you your package. Of course, we don't use wireless either, so that's two for two.

Next up: Windows version

[xtaski]

Next they'll have a Windows version: it will come preloaded with 150 viruses, worms, and network security tools. Just put it in your shirt pocket, walk through your office and infect coworkers' PCs.

Re:this could be bad for security

[pete6677]

Nah, they'll just ban these devices from the office, thinking that will keep the network secure.