Re: Bootable Nmap virtual network CD

[Eddie <eddie () blocked org>]

Fyodor wrote:

> On Wed, Nov 12, 2003 at 04:20:33PM -0600, Stu Green wrote:
>
> > Fyodor,
> > Such an iso exists:
> > http://knoppix-std.org
>
>
> That might be a good place to start.  But it will surely need some
> customization.  For example:
>
> o http://knoppix-std.org/tools.html mentions "Nmap 3.10".  If that is
>   what they are really using in the latest version, it needs to be
>   updated to 3.48.  You might be able to convince them to do this so
>   that all knoppix-std users will benefit.
>
> o Their version of honeyd might have to be updated as well
>
> o Presumably they don't have the virtual network we have been
>   discussing.  That will take quite a bit of configuration and setup
>   work.
>
> o They say "many network services can be started with but a click on
>   the menu and many of those services have known vulnerabilities." at
>   http://www.knoppix-std.org/faq.html .  If we are going to start any of
>   these services, we should probably upgrade them to a secure version
>   first.
>
> Do people generally agree with the idea of basing this on knoppix-std,
> or do you have better suggestions?
>
> Cheers,
> -F
>
> ---------------------------------------------------------------------
> For help using this (nmap-writers) mailing list, send a blank email to 
> nmap-writers-help () insecure org .


If no one else is volunteering, I will try to rough out a knoppix ISO in 
the next couple weeks.  I will need to strip some applications out of 
the ISO (OpenOffice, etc.) but I will try to leave X in, so nmap-fe can 
be used in addition to the command line.  Are there any additional tools 
which should be on the ISO?  I know nessus is on the Knoppix cd already, 
is there going to be a  chapter/section on nmap and nessus?

Also, is there consensus yet on how many machines would be needed? While 
I think it may be most helpful to focus on a couple machines for most of 
the examples, I can imagine a chapter on "shotgun" scanning.

I don't need the answer to that question right away, since additional 
machines will be easy to add, I would just like to get people thinking.

Eddie


---------------------------------------------------------------------
For help using this (nmap-writers) mailing list, send a blank email to 
nmap-writers-help () insecure org .