HackFest Series: Roo HoneyNet LiveCD [& Conflicter Infection Test from HoneyNet.org]

Dazed_75 lthielster at gmail.com
Mon May 4 09:06:40 MST 2009


On Sun, May 3, 2009 at 2:35 PM, Lisa Kachold <lisakachold at obnosis.com>wrote:

> The Honeynet project (sponsoring 9 projects in Google's Summer of Code this
> year) has a really great LiveCD called Roo, that creates an immediate trap
> of magnificent proportions:
>
> https://projects.honeynet.org/honeywall/attachment/wiki/WikiStart/roo-1.4.hw-20090425114542.iso
>
> Roo, like Knoppix Tools on a USB key, is one of those must have items for
> everyone.  Be careful however of the legal implications, which include
> liability (you built it insecure, knowingly - what is someone uses it as a
> jumping off place?), complicity, entrapment and more.  If you are game, it's
> exceedingly fun; rather like a Cracker SimCity?
>
> Honeynet reverse engineers also built a very amusing "Eye Chart" for
> determining immediate infection with the worm:
> http://www.confickerworkinggroup.org/infection_test/cfeyechart.html


 According to
http://www.confickerworkinggroup.org/wiki/pmwiki.php/Main/HomePage  this was
created by Joe Stewart from SecureWorks.  I just wondered if he is part of
what you referred to as "Honeynet reverse engineers"?

>
>
> www.obnosis.com (503)754-4452
> "Contradictions do not exist." A. Rand
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>



-- 
Dazed_75 a.k.a. Larry
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.PLUG.phoenix.az.us/pipermail/plug-discuss/attachments/20090504/8679a952/attachment.htm 


More information about the PLUG-discuss mailing list