James Bond Style Hacking Gadgets
Yesterdays fantasy is todays reality. Below are some devices with suggestions on how they might be used.
At less than $200 these USB GPS devices could be hidden in a car, handbag, manbag (you know you carry one Dooley!) or laptop case. Fully integrated into Google Earth you can plot the trail as soon as you have recovered the device (this if course is the current problems).
Along with some others over margarita’s we once thought it would be funny to stick a device in a stuffed toy and get a random teenage girl to give it to a Hollywood star at a public appearance. I bet within five mins it would be in the trash can at the back of the venue. On a serious note if these were planted in security consultants laptop bags and the data cross referenced with blog postings about types of vulnerabilities or Google search histories I bet we might see some red faces.
The Fit PC is the size of a paperback, completely silent and will run Windows or Linux. Perfect for hiding in that wiring closet or under that datacenter floor. It draws only 5 watts of power and at $300 with a good laptop battery could be a reasonable disposable zombie sending intel back to base.
Of course Mikey doesn’t want a pony for Christmas, he wants Silica from Dave Aitels company Immunity.
“Immunity SILICA is a hand-held penetration testing product that leverages Immunity CANVAS to provide a unique testing tool for networks. Currently it supports 802.11 (Wi-Fi) and Bluetooth, and Ethernet via USB is planned for the near future. Its slim, PDA-like profile allows the penetration tester to perform testing while behaving innocuously.”
Installing a Windows LSP will likely trigger all but the most crude anti-spyware solutions. Not a problem. Drop a keylogger like KeyGhost on the wire. It has an internal flash chip so you can record about 2 million characters when you go back and recover it.
What are your favorite gadgets?
August 13, 2007 at 2:07 pm
Silica looks awesome, and I’ve been drooling over it for a while now. That price tag, though, man that’s a tough one. That’s a gaming rig and a good laptop in price!
I really like those first two, and I’ve added them to my To Buy list. The USB stick is just a bit scary, and the FitPC would be perfect as a quick plug-in rogue WAP (I assume it can do a USB adapter) or sniffer/monitor.
Just to add something, I really like MetaGeek’s Wi-Spy wireless spectrum analyzer. It nicely shows wireless interference and frequency saturation. If they weren’t illegal state-side, I’d love to get my hands on a wifi jammer, really just as a way to demonstrate that wireless should not be relied upon and they can be disrupted quite easily either through active flooding of the spectrum or simply a cheap jammer stuck underneath a desk. I’d love to combine the two to see if a jammer is stronger in a spectrum analyzer the closer you get to it…
August 13, 2007 at 5:43 pm
My birthday’s only in a month, so save up a couple of paychecks and help out a poor, starving CISO. =)
August 13, 2007 at 7:32 pm
@LonerVamp - you could always buy an nokia umpc and put metasploit or similar on it. i’d be more interested in putting tinfoil hat linux on one tho
August 13, 2007 at 9:15 pm
If you’re interested in Yesterday’s Fantasy (work safe - really!), and you’re in the Washington DC area, you can delightfully waste an afternoon at the International Spy Museum. James Bond car, tiny cameras, listening devices, all very cool.
http://www.spymuseum.org/
My mistake was to try to go through it in 2 hours, so had to rush past some good stuff.
August 13, 2007 at 11:40 pm
Seriously, the Spy Museum is good but it’s also a local joke: the one good museum in DC that isn’t free. =)
I know the rest of you are probably going to cry yourself to sleep tonight for me. It’s OK, I’ll get over it eventually.