Knoppix STD 0.1
 security tools distribution

The good stuff first

Knowing that a tool exists is the first step to mastering it, so I created a specific directory for each set of tools under /usr/bin. Most of them simply contain scripts or symlinks. Each tool set also has its own KDE menu. Tools are grouped as follows:

Authentication
/usr/bin/auth/

Cracker
/usr/bin/cracker/

Encryption
/usr/bin/crypto/

Forensics
/usr/bin/forensics/

Firewall
/usr/bin/fw/

Honeypots
/usr/bin/honeypot/

IDS
/usr/bin/ids/

Network Utilities
/usr/bin/net-utils/

Penetration Tools
/usr/bin/pen-test/

Way too many to list. All the usual suspects. dsniff toolkit, much THC, ADM, Gobbles, RFP, nmrc, teso, irpas routing tools, brute force tools, buffer overflows, dns spoofing, man in the middle, tcp/ip hijacking, denial of service... Includes exploits for cve-2002-0392, cve-2001-0241, can-2002-1337, can-2002-0656, can-2003-0109. There is some overlap into Vuln-test tools. These tools are meant to test IDS systems and to learn how exploits in the wild are used and written. Be very careful and read /usr/bin/pen-test/rtfm/dont-be-a-dick.README before using any of these. You are entirely responsible for your own actions.

When source code was available you'll find it under /usr/bin/pen-test/src/. Speaking of which: To all you coders:  Thanks for all the hard work. To everyone else: coders that release source are not your enemy.

Servers
/usr/bin/servers

Packet Sniffers and Assemblers
/usr/bin/sniff/

Vulnerability Assessment
/usr/bin/vuln-test/

Wireless tools
/usr/bin/wireless/

heal thyself

Each tool set also contains a rtfm/ directory with READMEs and docs for the apps. Most rtfm/ directories will have an STD-directory.README file. START HERE. You won't get far without going through this directory. Don't forget 'man command'.

the rest

This distribution is just a customized and updated version of Knoppix 3.2 3-30-03-BETA. It's been customized with an emphasis on information security tools. Hence, Security Tools Distribution, STD (yeah, I know). I primarily removed the games, KOffice, and abiword. I'll remove more as needed for new security tools. You should find most of your favorite knoppix apps under the Utilities menu. Even though there are multiple windows managers available in Knoppix, you'll find most of the tools in STD are command line. So why have a GUI at all? 13373r's use command line! Yeah, ok, whatever. ctl-alt-f2 will make you happy.

I had several goals in putting this together. I wanted a portable, bootable security toolkit, but I also set STD up as a teaching aid for people interested security. Sometimes just installation is the biggest obstacle, especially when you can't dedicate a machine for just "playing around". So STD is a great place to learn these tools and the concepts behind them. Everything is pre-installed on a temporary OS. When you realize their use and utility perhaps you'll be more willing to go through the pains of installation for something more permanent. (which isn't to say that STD can't be used for permanent installations.)

misc

Mozilla and Konqueror are pre-populated with security related bookmarks.

No, there is no root password. Try "sudo cmd" or "sudo su root" or just type in "rootme".

Thanks to everyone on www.knoppix.net,Klaus Knopper (!!!!!), and everyone that realizes the strange fact that that the art of keeping secrets can't be a secret itself.

Send any stupid STD tricks, comments, suggestions, requests, flames to: t1ck_t0ck@knoppix-std.org

homepage: http://www.knoppix-std.org
forum: http://forum.knoppix-std.org