4 ms·

The idea seems great, but in first review I've read randomly I've found something that makes me wonder how valid are they - it's mentioning that Backtrack 5 R3

by tachion 14y ago

The idea seems great, but in first review I've read randomly I've found something that makes me wonder how valid are they - it's mentioning that Backtrack 5 R3 is now heavily out of date in the "Violent Python" review, while, according to Backtrack's website, its the latest version available.

DanBC 14y ago
(http://www.kali.org/news/kali-linux-whats-new/ http://www.kali.org/news/kali-linux-whats-new/)
iuguy 14y ago
Backtrack is about a year old which is a long time in security tool terms and people are being pushed towards Kali Linux[1], by the same authors. This isn't a pop at the author of violent python and it's a problem that affects anyone choosing a particular distro version. I should also add that to be fair, it's hard to write something like violent python in an agnostic way. [1] - http://www.kali.org/ http://www.kali.org/ __EDIT__: Perhaps I should've made this clear though, thanks for that. I'll update the review accordingly.
doktrin 14y ago
slight tangent : as a developer with little background in security, can someone help me understand the role of security specific distros in real world pen testing? In other words, what are some specific draws to using pre-rolled distros like Backtrack or Kali instead of configuring a standard Linux distro with the necessary tools? I would be much more inclined to tweak my Arch (or whatever) image rather than futz around inside a new environment.
- count 14y ago
  Laziness / efficiency. Some of the tools require specific kernel configurations/etc. to work properly (like wifi or bluetooth sniffers/fuzzers). These can sometimes be either a) tricky to install, b)hard to get to cooperate, or c) mutually exclusive. Backtrack et. al. save the security practitioner a bunch of time getting a ton of tools in place all at once that are (mostly) pre-vetted to not do anything stupid, and to work together. Beyond that, if you're doing it professionally, most folks I know use something like Backtrack to get a new device setup, and then heavily customize/modify it from there. If you're doing it...for fun, a bootable CD leaves no logs and can be used on any computer on any network without having to pre-install stuff.

by tachion 14y ago

DanBC 14y ago

(http://www.kali.org/news/kali-linux-whats-new/ http://www.kali.org/news/kali-linux-whats-new/)

iuguy 14y ago

Backtrack is about a year old which is a long time in security tool terms and people are being pushed towards Kali Linux[1], by the same authors. This isn't a pop at the author of violent python and it's a problem that affects anyone choosing a particular distro version. I should also add that to be fair, it's hard to write something like violent python in an agnostic way. [1] - http://www.kali.org/ http://www.kali.org/ __EDIT__: Perhaps I should've made this clear though, thanks for that. I'll update the review accordingly.

doktrin 14y ago

slight tangent : as a developer with little background in security, can someone help me understand the role of security specific distros in real world pen testing? In other words, what are some specific draws to using pre-rolled distros like Backtrack or Kali instead of configuring a standard Linux distro with the necessary tools? I would be much more inclined to tweak my Arch (or whatever) image rather than futz around inside a new environment.

count 14y ago
Laziness / efficiency. Some of the tools require specific kernel configurations/etc. to work properly (like wifi or bluetooth sniffers/fuzzers). These can sometimes be either a) tricky to install, b)hard to get to cooperate, or c) mutually exclusive. Backtrack et. al. save the security practitioner a bunch of time getting a ton of tools in place all at once that are (mostly) pre-vetted to not do anything stupid, and to work together. Beyond that, if you're doing it professionally, most folks I know use something like Backtrack to get a new device setup, and then heavily customize/modify it from there. If you're doing it...for fun, a bootable CD leaves no logs and can be used on any computer on any network without having to pre-install stuff.