RE: Using IPaqs or other handhelds as penetration devices

From: Don Weber (Donat_private)
Date: Thu May 16 2002 - 15:06:54 PDT

  • Next message: Max: "Re: Config cisco switches against arpspoofing"

    I have found portscan tools, theres even a winPcap version for winCE,
    <<--snipped from http://winpcap.polito.it/install/default.htm
    The CE version was tested successfully (not by us) on Compaq Pocket PC and
    HP Jornada.,
    <<--end of snip
    
    i did do some portscanning from an iPaq, it was extremely slow via CDPD
    connection, not sure how it would have performed on a wireless lan card.
    
    Don
    
    -----Original Message-----
    From: Johann van Duyn [mailto:Johann_van_Duynat_private]
    Sent: Thursday, May 16, 2002 2:19 AM
    To: pen-testat_private
    Subject: Using IPaqs or other handhelds as penetration devices
    
    
    
    
    Hi there...
    
    I was wondering whether any exploits or penetration tools exist that run on
    Compaq IPaq PDAs (running Windows CE or whatever they call it now), or any
    other handheld devices, for that matter. This is part risk analysis
    regarding the use of such devices, and part looking at using such a device
    for lightweight ad-hoc penetration or vulnerability testing.
    
    Thanks!
    
    -----------------------------------------
    Johann van Duyn, CISSP
    IT Risk and Security Manager: British American Tobacco South Africa
    Stellenbosch, South Africa
    Tel. +27 (21) 8883765
    Cel. +27 (82) 4588472
    Fax. +27 (21) 8838692
    E:mail: johann_van_duynat_private
    -----------------------------------------
    "... this leads you to assume that organization is an inherent property of
    the knowledge itself,
    and that disorder and chaos are simply irrelevant forces that threaten it
    from outside.
    
    In fact it's exactly the opposite.
    
    Order is simply a thin, perilous condition we try to impose on the basic
    reality of chaos..."
    
    
    --William Gaddis, JR
    
    Confidentiality Notice: The information in this document and
    attachments is confidential and may also be legally privileged.
    It is intended only for the use of the named recipient. Internet
    communications are not   secure and therefore British American
    Tobacco does not accept legal responsibility for the contents of
    this message. If you are not the intended recipient,please notify us
    immediately and then delete this document. Do not disclose the
    contents of this document to any other person, nor take any copies.
    Violation of this notice may be unlawful.
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Fri May 17 2002 - 16:46:25 PDT