Once again this year, Swiss National Day celebrations were a great success, as well as the perfect opportunity to enjoy some family time. As always, we also enjoyed the various light shows offered by the city of Gland. The special discount we had last week was also a great opportunity to get some tools for cheap. So much so that by the end of the week the Basilisk had gone out of stock. A few more units have recently been added to the stock, so if you missed it then, this is your chance to get your hands on some...
It gives me immense joy to finally reveal what I've secretly been working on for the past months. I must admit it has been difficult to keep this to myself as I was progressing through the design and development of this new product. After many successful pentests using the Skunk gigabit switch as a way to bypass NAC (by spoofing the MAC address of a legitimate device and duplicating its traffic), I came to realize the value of this technique, which I started referring to as "ghosting". I started to understand I needed to design a device which would accomplish...
After reading many of your messages about the Skunk and its features, I was able to get a better understanding of what most users needed. I took some time the past few days to work on implementing the features that seemed to warrant the highest attention. So here it is (finally): version 1.2.0 of the Skunk firmware. In in this article I will try to present the changes brought along by this new update. A better command-line interface One of the key advantages of the Skunk is the simplicity with which it can be configured, simply by plugging in a...
I got tired of carrying a bunch of USB Ethernet dongles for my pentests. Whenever I need to connect to multiple networks, my laptop ends up looking like a degenerate squid monster. It was time to do something about this. Meet the Manifold The Manifold features three individual 10/100 Ethernet interfaces, each with its own MAC address. Connect to all the networks without turning your computer into a spaghetti creature! These are shipped with MAC addresses from the Ringtail Security prefix - read more about it here. Customizable by default As always, the STL files for the plastic case are...
Meet the Swiss pocket knife of network traffic inspection Netsplit is a passive Ethernet tap device, making it easy to sniff packets across Ethernet links. Place the Netsplit between two devices and monitor network traffic on the tap ports. This works by forcing the devices into 10/100 mode (prohibiting gigabit-speed comms) also known as "Fast Ethernet", which is well suited for passive monitoring. The two ports at the ends of the Netsplit are wired together normally as would a standard cable. However, their respective transmission lines are mirrored to the center "tap" ports. Because only the transmission lines are mirrored to...
- 3D print
- Swiss day