RE: best Win2K based compact Pen Test tool set.?

Nope, he had .com, not .org. It'll work without the triple dub.

Knoppix (from knoppix.net and knopper.net) and Knoppix-std (knoppix-std.org) both have nessus installed. There's not much difference between the two if all you want to use is nessus, however, STD has a lot more goodies in it as well, so I'd definitely recommend it over plain knoppix for security work.

There's a fair amount of effort going into STD as far as identifying and adding more security tools (it doesn't have as many programs as FIRE does yet, but being based on knoppix, I think the underlying system is nicer). Additionally, other projects like a two-click snort/acid interface, and newbie-friendly documentation on security topics are being worked on. One of the goals of STD is to gather together a large amount of tools and introduce new people to them in an easy to use manner, as well as being a powerful toolbox for anyone who already is comfortable with the tools.

Both vanilla and std have some really nice features, like using an encrypted home directory mounted from a usb thumb drive, setting up a 'terminal server' (dhcpd, tftpd configured to allow automatic netbooting of other devices on the lan).

-- 
Jordan Wiens, CISSP
UF Network Incident Response Team
(352)392-2061

On Tue, 5 Aug 2003, Earl Sammons wrote:

> I think you forgot the dub-dub-dub in front ;P



---------------------------------------------------------------------------
----------------------------------------------------------------------------