Hacking with Metasploit on a Nokia N800

Summary:Earlier this month at the RSA conference, I got a chance to see a demo of Immunity's Silica, a $3600 handheld devide that can search for and join 802.11 (Wi-Fi) access points, scan other connections for open ports, and automatically launch code execution exploits from a built-in exploit platform.

Earlier this month at the RSA conference, I got a chance to see a demo of Immunity's Silica, a $3600 handheld devide that can search for and join 802.11 (Wi-Fi) access points, scan other connections for open ports, and automatically launch code execution exploits from a built-in exploit platform.

Now comes word from David Maynor that, for the cost of a new Nokia N800 Tablet PC ($399 new), pen testers can use the Metasploit point-and-click attack tool in the most covert manner.

Using a free utility from Maemo.org and a custom-built Ruby package, Maynor found that it was pretty easy to get Metasploit running on the Nokia N800.

"Its not as fast as a laptop but it's still pretty quick," Maynor said, explaining that he was able to break into a Windows 2000 SP4 server using a Metasploit exploit.

He said the six-hour battery life of the device makes it perfect for covert security auditing. "You can turn it on, toss it in a backpack, and just let it gather data," Maynor explained.

"You can turn it [the Nokia N800] into a Metasploit/Bluetooth/Wi-Fi auditing device in a few hours. Just copy Metasploit on to your memory card and you're ready to go."

Metasploit running on Nokia N800 Tablet PC

Metasploit running on the Nokia N800

Topics: Security, Nokia

About

Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues. He is currently security evangelist at Kaspersky Lab, an anti-malware company with operations around the globe. He is taking a leadership role in developing the company's online community initiative around secure content managem... Full Bio

zdnet_core.socialButton.googleLabel Contact Disclosure

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.