Re: HackFest Series: Roo HoneyNet LiveCD [& Conflicter Infec…

Top Page
Attachments:
Message as email
+ (text/plain)
+ (text/html)
+ (text/plain)
Delete this message
Reply to this message
Author: Dazed_75
Date:  
To: Main PLUG discussion list
Subject: Re: HackFest Series: Roo HoneyNet LiveCD [& Conflicter Infection Test from HoneyNet.org]
On Sun, May 3, 2009 at 2:35 PM, Lisa Kachold <>wrote:

> The Honeynet project (sponsoring 9 projects in Google's Summer of Code this
> year) has a really great LiveCD called Roo, that creates an immediate trap
> of magnificent proportions:
>
> https://projects.honeynet.org/honeywall/attachment/wiki/WikiStart/roo-1.4.hw-20090425114542.iso
>
> Roo, like Knoppix Tools on a USB key, is one of those must have items for
> everyone. Be careful however of the legal implications, which include
> liability (you built it insecure, knowingly - what is someone uses it as a
> jumping off place?), complicity, entrapment and more. If you are game, it's
> exceedingly fun; rather like a Cracker SimCity?
>
> Honeynet reverse engineers also built a very amusing "Eye Chart" for
> determining immediate infection with the worm:
> http://www.confickerworkinggroup.org/infection_test/cfeyechart.html



According to
http://www.confickerworkinggroup.org/wiki/pmwiki.php/Main/HomePage this was
created by Joe Stewart from SecureWorks. I just wondered if he is part of
what you referred to as "Honeynet reverse engineers"?

>
>
> www.obnosis.com (503)754-4452
> "Contradictions do not exist." A. Rand
>
> ---------------------------------------------------
> PLUG-discuss mailing list -
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>




--
Dazed_75 a.k.a. Larry
---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss