PwnieExpress Blog

The Pwnie Express Blog has a new home!

Sat, 23 Jun 2012 10:57:00 -0400

Please checkout our new blog location, here: http://pwnieexpress.com/blogs/news

PaulDotCom: Interview with Pwnie Express CTO, Jon Cran

Thu, 21 Jun 2012 18:54:27 -0400

http://pauldotcom.com/wiki/index.php/Episode293

Pwn Plug Floor Models at Ace Hackware!

Thu, 14 Jun 2012 14:23:39 -0400

http://acehackware.com/products/pwn-plug-floor-model

Thanks to Taylor for hooking this up!

Using T-Mobile 4G "Pay by the day" with Pwn Plug Elite

Thu, 14 Jun 2012 10:40:13 -0400

T-Mobile’s 4G “Pay by the day” plan is the most flexible, convenient, affordable mobile broadband plan we’ve seen to date. For as little as $1 a day (with no contract) you get 4G data speeds and very decent coverage.

Here’s how to use this service with the Pwn Plug Elite/3G:

Call T-Mobile and order the T-Mobile Rocket 4G ($29) USB modem with the “Pay by the day” plan (currently there is no way to order this modem and attach it to this plan through their shopping cart system).
Once you receive the Rocket 4G USB modem, follow the included instructions to activate the data service and purchase the amount of days you’d like to initially attach to your plan.
After confirming the data service is working on your Windows/Mac system, connect the Rocket 4G adapter to the Pwn Plug (make sure you’re running Pwn Plug Release 1.1).
Test the 3G Internet connection as follows:

          # pppd nodetach call tmobile &
          # route del default gw 0.0.0.0
          # route add default ppp0
          # ping google.com

That’s it! Note the “Pay by the day” service does NOT support SMS texting, so you won’t be able to send text messages or use the Text-to-Bash feature with this service.

- The Pwnie Express Team

Using AT&T Dataconnect SIM cards with Pwn Plug Elite

Thu, 14 Jun 2012 10:17:19 -0400

The AT&T DataConnect Pass plan is a little-known, convenient way for customers (including non-AT&T customers) to buy prepaid 3G/4G mobile broadband data service for use with the Pwn Plug Elite/3G.

Here’s how to do it:

Pick up a (free) DataConnect Pass SIM card at any AT&T retail store. Note they’re not usually on the sales floor, so you’ll need to ask one of the sales associates.
Activate the SIM card by following the steps here. The IMEI number is located on your USB GSM adapter, and the ICCID is the long number on the back of the SIM card.
Insert the SIM card into your GSM adapter, then connect the GSM adapter to the Pwn Plug.
The DataConnect Pass plan uses the APN “broadband”, so you’ll need to change the APN in the PPPd chat script:

# sed -i ‘s/wap.cingular/broadband/g’ /etc/ppp/peers/e160_chat

That’s it! You can now connect to the Internet via 3G following the usual steps in the Pwn Plug manual. Note the DataConnect Pass service does NOT support SMS texting, so you won’t be able to send text messages or use the Text-to-Bash feature with this service.

- The Pwnie Express Team

Raspberry Pwn: A pentesting release for the Raspberry Pi

Tue, 12 Jun 2012 15:08:00 -0400

Pwnie Express is happy to announce the initial release of Raspberry Pwn! Security enthusiasts can now easily turn their Raspberry Pi into a full-featured security penetration testing and auditing platform! This fully open-source release includes the following testing tools:

SET Fasttrack kismet aircrack-ng nmap dsniff netcat nikto xprobe scapy wireshark tcpdump ettercap hping3 medusa macchanger nbtscan john ptunnel p0f ngrep tcpflow openvpn iodine httptunnel cryptcat sipsak yersinia smbclient sslsniff tcptraceroute pbnj netdiscover netmask udptunnel dnstracer sslscan medusa ipcalc dnswalk socat onesixtyone tinyproxy dmitry fcrackzip ssldump fping ike-scan gpsd darkstat swaks arping tcpreplay sipcrack proxychains proxytunnel siege sqlmap wapiti skipfish w3af

Download your Raspberry Pwn here: https://github.com/pwnieexpress/Raspberry-Pwn

Special thanks to @zenofex for letting us borrow his Pi. Enjoy!

- The Pwnie Express Team

Pwn Plug Patch 1.1.1 Released

Mon, 11 Jun 2012 13:26:00 -0400

Due to a recent spike in the size of the Metasploit Framework (namely within lib/gemcache), Metasploit now requires over 500MB to operate. As the internal NAND flash disk on the Pwn Plug is only 512MB, we decided to bite the bullet and move the Metasploit directory (/opt/metasploit/msf3), and the /pentest folder along with it, to SD card.

Moving forward, you will need to have an SD card inserted into your Pwn Plug when utilizing these tools. The Plug UI, reverse shells, and any tools installed via aptitude will however continue to function without the SD card.

Pwn Plug patch 1.1.1 automatically makes this move for you and can be applied to your Pwn Plug as follows (these steps apply to both Community Edition and Commercial Edition Pwn Plugs):

1. Confirm you have Pwn Plug Release 1.1 installed before proceeding (if not, download it here):

# grep Release /etc/motd

2. Insert an SD card into your Pwn Plug with the card contacts facing UP. We recommend a 2GB or larger Class 10 SD card, such as the supported Transcend card shown here. Pwn Plug Elite users can use the 16GB SD card included with their plug.

3. Log into your plug via SSH or serial console and run the following commands to install the patch:

# wget http://pwnieexpress.com/support/pwnplug_patch_1.1.1.tar.gz
# tar zxvf pwnplug_patch_1.1.1.tar.gz
# ./pwnplug_patch_1.1.1.sh

After the patch is applied, the first reboot of your plug will result in a 1-2 minute pause during startup. This is a one-time delay while the system updates its inode tree for the SD card - subsequent reboots will return to the normal 20-30 second boot time.

Support for this patch is available through our support page. Thanks folks, and apologies for any inconvenience this may have caused!

- The Pwnie Express Team

Limited Supply of Floor Model Pwn Plugs Available!

Fri, 08 Jun 2012 19:19:52 -0400

We’ve got a limited supply of used plugs available. We’re selling them today from the site for $195. Grab one here!

PwnPlug 1.1 reviewed at The PowerBase

Tue, 05 Jun 2012 11:18:00 -0400

We love getting feedback on our products, and Tom Nardi over at the PowerBase blog has put together an excellent and comprehensive review of the PwnPlug 1.1 update, which was recently released.

Tom brings up many of the things that need work - building a community around the plug, making it easier to use, improving the update speed via debian packages, and a place for feature requests. We hear you, and we’re hard at work on these things.

As Tom mentions in the review, there’s a lot of fun new features in this release, including a Debian 6 base, updated base packages, Bluetooth support, Zigbee support, text-to-sms functionality, and much more.

Stay tuned!

Introducing Jcran!

Sun, 03 Jun 2012 11:51:28 -0400

Hello Hello

My name is Jonathan Cran – Most folks know me by Jon or jcran. I’ve just joined the Pwnie Express team, and want to say thanks to everyone who’s reached out and wished us luck and offered to help. This community is a big part of what drives the entire team here.

There’s nothing quite like being at an early-stage startup. There’s tons to do, lots of distractions, and if you need a resource, you gotta find / build it for yourself. That said, there’s so much excitement and fun to be had in an environment like this. This was my first week, and I spent the majority of it just getting a handle on the state of our infrastructure, reading about ARM / sheevaplugs, and planning our immediate next steps (Vegas) with the team.

You’ll be hearing a lot more from us in the next coming months. Dave and Mark have been heads down on building our next generation products and reaching out to customers to get their feedback. We’d love to hear from you if you have a specific use case that you’d like us to pay attention to. Also, our own Gabe Koss is working on an overhaul to the website that won’t make your eyes bleed. Exciting stuff!

jcran

Feature Suggestion Contest

Thu, 31 May 2012 12:04:00 -0400

The Feature Suggestion Contest continues. Enter your suggestions for new features for Pwnie Express products and if you submit the best suggestion of the week, we will send you a Pwnie Express shirt! Here’s how:

Feature requests should be tangible things like:

Add the latest version of XXXX tool
The XXXX script doesn’t properly handle arp-spoofing on a remote network
Add a script to automatically configure XXXX
Include my script which sets up metasploit to do XXXX
Can you provide more automation / documentation for the XXXX tool

Submit your requests here: https://github.com/pwnieexpress/Pwnplug-Source-Repository

To add a new feature request:

Visit the issues page
Select ‘New issue’
Enter your suggestion! No need to select a milestone, we’ll prioritize requests against milestones internally.

Winners will be announced each Wednesday.

New Pwn Plug source repository!

Wed, 30 May 2012 13:28:00 -0400

The new Pwn Plug release 1.1 source repository is now online! You can now:

Contribute your own Pwn Plug customizations (example: “Here’s a script that adds Bluetooth logging to Passive Recon”)

Submit feature requests (example: “Add ability to war dial via GSM modem”)

Report bugs (example: “Script X isn’t working in this particular environment”)

More community-building tools to come!

- The Pwnie Express Team

Pwn Plug 1.1 Community (Free) Edition Released!

Mon, 21 May 2012 13:16:04 -0400

Already own a Sheevaplug? Turn it into a Pwn Plug with the Pwn Plug 1.1 Community Edition!

Jon Cran joins Pwnie Express!

Mon, 21 May 2012 12:57:07 -0400

We’re VERY excited to announce Jon Cran from the Metasploit QA team as our new CTO and Software Lead! Welcome aboard Jon!!

http://pwnieexpress.com/about.html

Pwnie Express sponsors x-traction point at Confidence 2012

Mon, 21 May 2012 09:49:00 -0400

The most intense live-action security conference competition we’ve seen to date, including stealth, lockpicking, escape artistry, marksmanship, electronic countermeasures, cyber-warfare.. one component of which includes using a Pwn Plug for remote deactivation of the in-game physical security alarm system!

http://2012.confidence.org.pl/x-traction-point

http://2012.confidence.org.pl/sponsorzy

Pwnie Express Update : May 2012

Fri, 18 May 2012 14:46:04 -0400

First off, another HUGE thanks to all of you! Pwnie Express wouldn’t be where it is today without your support.

Pwn Plug Release 1.1 now available! Upgrade Here!

20-second boot up
OpenVPN & SSH-VPN support
802.11n, Bluetooth, and Zigbee support
Point-and-click SSH receiver (Backtrack) setup
Text-to-bash - text shell commands to your plug via SMS!
One-click Passive Recon, and much more

Recent Press!

Wired Magazine: The Little White Box That Can Hack Your Network
PC Magazine: Pwn Plug receives “Editor’s Choice”
Slashdot: Stealthy Pen Test Unit Plugs Directly Into 110 VAC Socket (Video)
CIO Magazine: 7 hot security companies to watch
The PowerBase: Evolution Of Security: Interview With Pwnie Express

Coming soon!

The PowerPwn: Wireless, Bluetooth, dual-Ethernet, and 16GB disk onboard!
The Pwn Plug Mini: Half the size of the Pwn Plug.. with identical specs!
These mind-blowing new products will be released at Defcon 20 in July!
Want to be an early adopter? Ask us about our pre-release program!

All for now! Thanks again folks!

Cordially,
The Pwnie Express Team

Pwn Plug 1.1 Update Guide by The Powerbase

Tue, 15 May 2012 11:35:00 -0400

Tom Nardi shares his Pwn Plug Release 1.1 upgrade experience - full Release 1.1 review coming soon! Thanks Tom!

http://www.thepowerbase.com/2012/05/pwn-plug-update-guide/

Pwn Plug Software Release 1.1 Now Available!

Thu, 10 May 2012 12:25:00 -0400

After much development, testing, and late night brainstorming, Pwn Plug software release 1.1 is now shipping on all new plug orders! And yes, our commercial customers can upgrade free of charge (click here).

This is a MAJOR release, including an entirely new Linux distro. Here’s just a sampling of the new feature set:

OS & performance improvements!

OS upgraded to Debian 6 (Squeeze)
20-second boot up
Faster file-system (UBIFS)

New tunneling features!

SSH Egress Buster
OpenVPN & SSH-VPN support
New covert channels (udptunnel, iodine, etc)
Support for authenticating HTTP proxies
More resilient tunnels (thanks Lance Honer!)

New Plug UI features!

Point-and-click SSH receiver (Backtrack) setup
One-click NAC Bypass (Elite models)
One-click Passive Recon
One-click Stealth Mode
One-click History Wipe

New wireless features!

Support for 802.11n and hundreds of new wireless devices
JP Ronin’s Bluetooth pentesting suite
Kismet new-core with Ubertooth support
Zigbee support (thanks Travis Goodspeed!)
4G cell network support (Elite models)
War dialing via GSM modem (Elite models)
SMS text-to-bash (Elite models) :

..and of course, more tools!

Over 50 new pentesting tools!
Web app testing tools, including w3af
Database/SQL testing tools
THC IPv6 toolkit
VoIP testing tools

A HUGE thanks to our customers and supporters! Your feedback and dedication has allowed us to create the most robust and reliable pentesting drop box on the planet!

Enjoy!

- The Pwnie Express team.

Pwn Plug receives PC Magazine's "Editor's Choice"

Sun, 29 Apr 2012 14:44:31 -0400

PC Magazine: Pwn Plug receives “Editor’s Choice” - 4.5 stars!

Evolution Of Security: Interview With Pwnie Express

Thu, 26 Apr 2012 20:52:52 -0400

Interview by Tom Nardi (The Powerbase): http://www.thepowerbase.com/2012/04/evolution-of-security-interview-with-pwnie-express-ceo-dave-porcello/