4 ms·
slight tangent : as a developer with little background in security, can someone help me understand the role of security specific distros in real world pen testi
by doktrin 14y ago
slight tangent : as a developer with little background in security, can someone help me understand the role of security specific distros in real world pen testing?
In other words, what are some specific draws to using pre-rolled distros like Backtrack or Kali instead of configuring a standard Linux distro with the necessary tools? I would be much more inclined to tweak my Arch (or whatever) image rather than futz around inside a new environment.
- count 14y agoLaziness / efficiency. Some of the tools require specific kernel configurations/etc. to work properly (like wifi or bluetooth sniffers/fuzzers). These can sometimes be either a) tricky to install, b)hard to get to cooperate, or c) mutually exclusive. Backtrack et. al. save the security practitioner a bunch of time getting a ton of tools in place all at once that are (mostly) pre-vetted to not do anything stupid, and to work together. Beyond that, if you're doing it professionally, most folks I know use something like Backtrack to get a new device setup, and then heavily customize/modify it from there. If you're doing it...for fun, a bootable CD leaves no logs and can be used on any computer on any network without having to pre-install stuff.