June 2012
10 posts
The Pwnie Express Blog has a new home!
Please checkout our new blog location, here: http://pwnieexpress.com/blogs/news
PaulDotCom: Interview with Pwnie Express CTO, Jon...
http://pauldotcom.com/wiki/index.php/Episode293
Pwn Plug Floor Models at Ace Hackware!
http://acehackware.com/products/pwn-plug-floor-model
Thanks to Taylor for hooking this up!
Using T-Mobile 4G "Pay by the day" with Pwn Plug...
T-Mobile’s 4G “Pay by the day” plan is the most flexible, convenient, affordable mobile broadband plan we’ve seen to date. For as little as $1 a day (with no contract) you get 4G data speeds and very decent coverage.
Here’s how to use this service with the Pwn Plug Elite/3G:
Call T-Mobile and order the T-Mobile Rocket 4G ($29) USB modem with the “Pay by the...
Using AT&T Dataconnect SIM cards with Pwn Plug...
The AT&T DataConnect Pass plan is a little-known, convenient way for customers (including non-AT&T customers) to buy prepaid 3G/4G mobile broadband data service for use with the Pwn Plug Elite/3G.
Here’s how to do it:
Pick up a (free) DataConnect Pass SIM card at any AT&T retail store. Note they’re not usually on the sales floor, so you’ll need to ask one of the...
Raspberry Pwn: A pentesting release for the...
Pwnie Express is happy to announce the initial release of Raspberry Pwn! Security enthusiasts can now easily turn their Raspberry Pi into a full-featured security penetration testing and auditing platform! This fully open-source release includes the following testing tools:
SET Fasttrack kismet aircrack-ng nmap dsniff netcat nikto xprobe scapy wireshark tcpdump ettercap hping3 medusa macchanger...
Pwn Plug Patch 1.1.1 Released
Due to a recent spike in the size of the Metasploit Framework (namely within lib/gemcache), Metasploit now requires over 500MB to operate. As the internal NAND flash disk on the Pwn Plug is only 512MB, we decided to bite the bullet and move the Metasploit directory (/opt/metasploit/msf3), and the /pentest folder along with it, to SD card.
Moving forward, you will need to have an SD card inserted...
Limited Supply of Floor Model Pwn Plugs Available!
We’ve got a limited supply of used plugs available. We’re selling them today from the site for $195. Grab one here!
PwnPlug 1.1 reviewed at The PowerBase
We love getting feedback on our products, and Tom Nardi over at the PowerBase blog has put together an excellent and comprehensive review of the PwnPlug 1.1 update, which was recently released.
Tom brings up many of the things that need work - building a community around the plug, making it easier to use, improving the update speed via debian packages, and a place for feature requests. We hear...
Introducing Jcran!
Hello Hello
My name is Jonathan Cran – Most folks know me by Jon or jcran. I’ve just joined the Pwnie Express team, and want to say thanks to everyone who’s reached out and wished us luck and offered to help. This community is a big part of what drives the entire team here.
There’s nothing quite like being at an early-stage startup. There’s tons to do, lots of...
May 2012
8 posts
Feature Suggestion Contest
The Feature Suggestion Contest continues. Enter your suggestions for new features for Pwnie Express products and if you submit the best suggestion of the week, we will send you a Pwnie Express shirt! Here’s how:
Feature requests should be tangible things like:
Add the latest version of XXXX tool
The XXXX script doesn’t properly handle arp-spoofing on a remote network
Add a...
New Pwn Plug source repository!
The new Pwn Plug release 1.1 source repository is now online! You can now:
Contribute your own Pwn Plug customizations (example: “Here’s a script that adds Bluetooth logging to Passive Recon”)
Submit feature requests (example: “Add ability to war dial via GSM modem”)
Report bugs (example: “Script X isn’t working in this particular environment”)
...
Pwn Plug 1.1 Community (Free) Edition Released!
Already own a Sheevaplug? Turn it into a Pwn Plug with the Pwn Plug 1.1 Community Edition!
Jon Cran joins Pwnie Express!
We’re VERY excited to announce Jon Cran from the Metasploit QA team as our new CTO and Software Lead! Welcome aboard Jon!!
http://pwnieexpress.com/about.html
Pwnie Express sponsors x-traction point at...
The most intense live-action security conference competition we’ve seen to date, including stealth, lockpicking, escape artistry, marksmanship, electronic countermeasures, cyber-warfare.. one component of which includes using a Pwn Plug for remote deactivation of the in-game physical security alarm system!
http://2012.confidence.org.pl/x-traction-point
...
Pwnie Express Update : May 2012
First off, another HUGE thanks to all of you! Pwnie Express wouldn’t be where it is today without your support. Pwn Plug Release 1.1 now available! Upgrade Here!
20-second boot up
OpenVPN & SSH-VPN support
802.11n, Bluetooth, and Zigbee support
Point-and-click SSH receiver (Backtrack) setup
Text-to-bash - text shell commands to your plug via SMS!
One-click Passive Recon, and much...
Pwn Plug 1.1 Update Guide by The Powerbase
Tom Nardi shares his Pwn Plug Release 1.1 upgrade experience - full Release 1.1 review coming soon! Thanks Tom!
http://www.thepowerbase.com/2012/05/pwn-plug-update-guide/
Pwn Plug Software Release 1.1 Now Available!
After much development, testing, and late night brainstorming, Pwn Plug software release 1.1 is now shipping on all new plug orders! And yes, our commercial customers can upgrade free of charge (click here).
This is a MAJOR release, including an entirely new Linux distro. Here’s just a sampling of the new feature set:
OS & performance improvements!
OS upgraded to Debian 6 (Squeeze)
...
April 2012
5 posts
Pwn Plug receives PC Magazine's "Editor's Choice"
PC Magazine: Pwn Plug receives “Editor’s Choice” - 4.5 stars!
Evolution Of Security: Interview With Pwnie...
Interview by Tom Nardi (The Powerbase): http://www.thepowerbase.com/2012/04/evolution-of-security-interview-with-pwnie-express-ceo-dave-porcello/
Pwn Plug Elite Review by The Powerbase
Tom Nardi just posted a tremendous review and some stellar photos of the Pwn Plug Elite on The Powerbase. Certainly the most comprehensive and well delivered reviews we’ve seen to date. Thanks Tom!
The Powerbase: Pandora’s Box: Pwn Plug Elite Review
Pwn Plug in April issue of Hakin9 Magazine
Gary Miliefsky praises the Pwn Plug as one of the highlights of RSA 2012 in Haking9 Magazine issue 04/2012: Cyber Warfare. Thanks Gary!
April PwnStar Contest
Follow us on Twiiter to win a Pwnie Express shirt. Each week we will tweet a question. At the end of the week we will review responses and award a shirt to the person who has answered the question most accurately and in the most timely manner. Questions and announcements of winners of the previous week will be tweeted each Monday morning.
March 2012
6 posts
Startup Watch: Keep your eye on Pwnie Express
CIO Magazine: Pwnie Express in “7 hot security companies to watch”
Mass High Tech: Pwnie Express in top “Five you should follow”
TechRepublic: Hack networks in style with Pwnie...
TechRepublic: http://www.techrepublic.com/blog/security/hack-networks-in-style-with-the-transparency-grenade-and-the-pwn-plug/7563
Thanks Patrick!
Toolsmith / ISSA: Pen Testing with Pwn Plug
Russ McRee (HolisticInfoSec.org) for reviewing the Pwn Plug for toolsmith and the ISSA Journal! Thanks Russ! Glad you enjoyed it! =)
http://holisticinfosec.org/toolsmith/pdf/march2012.pdf http://holisticinfosec.blogspot.com/2012/03/toolsmith-pen-testing-with-pwn-plug.html http://holisticinfosec.blogspot.com/2012/03/more-mayhem-with-pwn-plug.html
Pwnie Express receives Austrian representation via...
Post-RSA Press Release
Vermont Cyber Security Start-up Pwnie Express Returns from Exhibiting at 2012 RSA Conference Barre, VT – March 7, 2012 The world’s largest cyber security conference concluded last week in San Francisco. Attending and exhibiting for the first time, was Vermont start-up Pwnie Express. Pwnie Express, founded in Barre, Vermont in 2009, specializes in penetration cyber- security testing hardware....
Pwnie Express gets swarmed at RSA!
Wow. A sincere THANK YOU to everyone who took the time to visit our modest booth in the far reaches of the RSAC conference floor! We are truly inspired by your support and look forward to continue blowing minds throughout 2012!
Slashdot: Stealthy Pen Test Unit Plugs Directly Into 110 VAC Socket (Video)
Wired / Ars Technica: The Little White Box That Can Hack Your Network
PC Mag: Pwnie Express...
February 2012
7 posts
Stop by our booth at RSA to win a Pwn Plug Elite!
Drop your contact info into our “Pwn Box” at booth 2719 for a chance to win a Pwn Plug Elite!
Two ways to score a free Pwn Phone at RSA
1. Beat Jolly to the Cisco booth to pwn the SecureX challenge.
2. Beat Jolly to the Safelight Security booth and win one of their security challenges.
Note the common hurdle being Jolly. C’mon Jolly, does any one person really need 6 Pwn Phones? :]
Adding Bluetooth to the Pwn Plug
Ronin (Shadowcave) got this working at Shmoocon! Here are the steps:
apt-get install libfuse-dev libdbus-1-3 libdbus-1-dev obexftp libobexftp* libdbus-glib-1-2 libdbus-glib-1-dev obexfs python-gobject python-dbus bluez-hcidump
mkdir /var/pwnplug/bluetooth
cd /var/pwnplug/bluetooth
wget www.kernel.org/pub/linux/bluetooth/bluez-4.98.tar.gz
tar -zxvf bluez-4.98.tar.gz
cd bluez*
./configure...
Installing Ubertooth on the Pwn Phone
Thanks to Ronin at Shadowcave for putting this together!
http://www.hackfromacave.com/articles_and_adventures/ubertooth_pwnphone.html
Press trading with PenTest Magazine
We love the barter system.. and apparently it works for press too! =)
In exchange for several newsletter mentions and the such, PenTest magazine dropped our Pwn Plug into the latest “PenTest Regular” issue 02/2012. Thanks Olga!
http://pentestmag.com/pentest-regular-022012/
Video: Pwnie Express at ShmooCon 2012
http://securityorb.com/2012/02/dave-porcello-ceo-technical-lead-pwnie-express-discribes-products-shmoocon-2012/
Thanks Kellep!
Zigbee on the Pwnie Express!
Travis Goodspeed stopped by our booth at Shmoocon and got Zigbee sniffing working on the Pwn Plug (and the Pwn Phone!) using his GoodFET firmware! Not to be outdone, he then used this setup to illustrate Layer 1 Zigbee packet injection, based on his Shmoocon FireTalk “Remotely Exploiting the PHY Layer”. Total execution time: 16 minutes. =)
While Travis may be only the 3rd largest U.S....
January 2012
3 posts
Compass Security on "Simulated Industrial...
Compass Security discusses use of the Pwn Plug as “Simulated Industrial Espionage” : http://blog.csnc.ch/tag/pwn-plug/
Win a free Pwn Plug at Shmoocon!
Yeah! We’re donating over $2,000 in gear to be awarded as prizes for Shmoocon’s CTF (Ghost in the Shellcode), Hack Fortress, and Barcode Shmarcode! Because we all know there’s only one thing that tops winning Hack Fortress at Shmoocon.. and that’s winning Hack Fortress and going home with a free Pwn Plug Elite. See you there!
The OpenWRT-based MiniPwner
Looks like another drop box platform has hit the scene! Glad to finally see the drop box market gaining some traction. Can’t wait to get our hands on one!
December 2011
3 posts
20% Off all Pwn Plugs Through December!
And Pwn Phones too! Our way of saying “Thanks!” for a stellar first year in business. Stock up today for some holiday pwnage!
Thanks everyone! See you at Shmoocon! =)
Pwnie Express appoints all-star advisory board
Our new advisory board includes Alan Matthews (Rapid7), Ed Skoudis (SANS/InGuardians), and Rob Cheyne (SafeLight Security). Read more.
Pwn Plug Community Edition Released!
Already own a Sheevaplug? The Pwn Plug Community Edition image is now available free of charge! Download here!
Also - the Community Support Forum is now online!
October 2011
5 posts
Pwnie Express hits local VT press!
Ken Picard’s “Scaling the Firewall” featured in Vermont’s own Seven Days! Thanks Ken!
Pwn plug: Arme fatale!
And for our French-Canadian neighbors - don’t miss Michel Cusin’s upcoming Pwn Plug talk!
Pwnie Express on PaulDotCom!
Thanks to Paul and Jack Daniel for a stellar guest interview with Grep and Awk from Pwnie Express! Watch the video here.
Derbycon was a blast!
Congratulations to the winners of the CTF who received a Pwn Plug Elite! Be sure to catch Jayson Street’s creative uses of the Pwn Plug in his talk!
Pwnie Scripts & Reverse SSH over Tor!
Huge thanks to Sebastien at Security Generation for posting his Reverse SSH over Tor Pwn Plug mod, as well as his Pwnie scripts for automating Backtrack SSH listener setup!
August 2011
2 posts
Defcon 19 a huge success!
Thanks everyone!! We rocked our first major con and we couldn’t have done it without you! We didn’t sell all of our stock as we had hoped, but that means online ordering is back online earlier than expected! We were also able to donate plugs to EFF and Hackers for Charity!
Black Hat & Interview with CBS!
We were hit with a couple pleasant surprises on our way into Black Hat! Cisco was prizing out our Pwn Phones for their SecureX challenge, and CBS intercepted Awk’s Pwn Phone Arsenal talk for an interview about “Cell phone security”.
Yeah, we had a good chuckle as well. =)
July 2011
5 posts
