An iPhone would have to be connected to the network through WiFi. If you're doing penetration testing in the enterprise space, it's unlikely that you're able to

An iPhone would have to be connected to the network through WiFi. If you're doing penetration testing in the enterprise space, it's unlikely that you're able to connect to their core network through WiFi. I do network consulting for a medium-large business ($300 mil market cap) that I consider to be pretty typical from a network security standpoint. They focus on securing their edge-facing access points, and thus they don't allow any access to their core networks through WiFi. It's all VLAN'd off in a DMZ. An iPhone would only be useful if you could penetrate their firewall at the DMZ... but then you might as well just attack from an internet facing point. This device is a lot more dangerous, as it connects to an Ethernet port. Unsecured Ethernet ports are a lot easier to come by in most businesses. I've only ever worked with one company that secured their Ethernet network at such a low level (802.1X), and they were a very, very large multi-national corporation with a big manufacturing segment. They had to secure at the Ethernet layer as a matter of certification for the products they manufacture. Very few companies go through the trouble of implementing security at the Ethernet layer because of the expense and trouble involved.