NAC RSS

How secure are your networks? Artio shines a new light on your network to reveal things no other solution can see. Built on our experience with network intrusion, this next-level detection system can identify threats previously kept under the radar. Detect NAC bypass, ghosting, MAC cloning, poisoning and more Artio is the first commercially-available solution to detect Ethernet ghosting / NAC bypass. Artio also detects network scans, partial ghosting / MAC theft, poisoning / MITM (Man-In-The-Middle) and more. Simple integration Artio is packaged as a standard 19" rack-mount unit (1U), with a short depth of only 230mm (including power connector).   Detection...

Once again this year, Swiss National Day celebrations were a great success, as well as the perfect opportunity to enjoy some family time. As always, we also enjoyed the various light shows offered by the city of Gland. The special discount we had last week was also a great opportunity to get some tools for cheap. So much so that by the end of the week the Basilisk had gone out of stock. A few more units have recently been added to the stock, so if you missed it then, this is your chance to get your hands on some...

It gives me immense joy to finally reveal what I've secretly been working on for the past months. I must admit it has been difficult to keep this to myself as I was progressing through the design and development of this new product. After many successful pentests using the Skunk gigabit switch as a way to bypass NAC (by spoofing the MAC address of a legitimate device and duplicating its traffic), I came to realize the value of this technique, which I started referring to as "ghosting". I started to understand I needed to design a device which would accomplish...

After reading many of your messages about the Skunk and its features, I was able to get a better understanding of what most users needed. I took some time the past few days to work on implementing the features that seemed to warrant the highest attention. So here it is (finally): version 1.2.0 of the Skunk firmware. In in this article I will try to present the changes brought along by this new update. A better command-line interface One of the key advantages of the Skunk is the simplicity with which it can be configured, simply by plugging in a...

The Skunk is a Gigabit Ethernet tap and switch. Use it as a basic switch whenever you need one, or use it to sniff packets at gigabit speeds. Or write a custom firmware to do something else entirely. That's right - the Skunk firmware is open-source, simple and built with the Dooba SDK. In fact, go check it out if you are interested: https://bitbucket.org/dooba_core/skunk. When it's time to sniff some packets, the Skunk is ready to go in a single command via USB - no fumbling with complex web interfaces and IP address configuration madness. Plug in the cables, enable sniffing and start...