Roll Your Own Pentest Distro

Presented at SAINTCON 2019, Oct. 25, 2019, 11 a.m. (60 minutes).

What do you do when you're tired of spinning up a Kali instance that's not customized to your liking, or you want a system that's built for more long-term use, not just a one off pentest? Security consultants, especially pentesters, use a lot of specific tools and have many different requirements. With a standard Ubuntu or Fedora install it can take a lot of time to install all those tools manually and setup configurations. Images can become outdated quickly, or you may have varying hardware and disk sizes you need to be able to get installs done on. It gets a lot more difficult if you want the process to be repeatable. Fortunately, there are tools and scripts to help with this process. In this talk I will be going over the tools, scripts, virtual environments, containers, and other methods I've found that help to streamline the process to go from a reliable and standard Linux distribution to having all the tools you need installed and working, including tools from Git repositories, as well as all your customizations.


Presenters:

  • Corey Batiuk - LMG Security
    Corey Batiuk is LMG Security's Pentest Team Lead and has been working in technology over 10 years. Corey has wide experience in testing, including: Internal and External Penetration Testing, Mobile Application Security Assessments, Web Application Security Assessments, Wireless Security Assessments, Social Engineering Testing, and Threat Hunting. Prior to that he worked as an engineer for a managed service provider. Corey graduated with honors from the University of Montana with a bachelor's degree in Psychology and a minor in Sociology.

Links:

Similar Presentations: