Silica -- a wireless hacking tool

4 of 10
  • 53778.jpg

    Penetration testing firm Immunity has started shipping Silica, a wireless handheld pen-testing device capable of finding -- and exploiting -- security vulnerabilities.

    The palm-sized PDA tucked away in Justine Aitel's pocketbook just might be the most scary device on display at this year's RSA security conference. [See Ryan Naraine's report.] Aitel is roaming the hallways here with Silica, a portable hacking device that can search for and join 802.11 (Wi-Fi) access points, scan other connections for open ports, and automatically launch code execution exploits from a built-in exploit platform.



    Silica is the brainchild of Aitel's Immunity Inc., a 10-employee penetration testing outfit operating out of Miami Beach, Florida. It runs a customized version of CANVAS, the company's flagship point-and-click attack tool that features hundreds of exploits, an automated exploitation system, and an exploit development framework.

    Caption by: Ryan Naraine

  • 53851.jpg

    Silica now runs on the Nokia 770 but Immunity plans to expand the range of supported devices.

    Caption by: Ryan Naraine

  • 53809.jpg

    Silica runs a customized installation of Debian/Linux running kernel 2.6.16 with preemptive scheduling.

    Caption by: Ryan Naraine

  • 53810.jpg

    Currently Silica supports 802.11 (Wi-Fi). The product roadmap calls for support for Bluetooth wireless connections and Ethernet via USB.

    Caption by: Ryan Naraine

  • 53768.png

    Once a network connection is established with a wireless access point, the user can use the touch-screen interface to launch Silica.

    Caption by: Ryan Naraine

  • 53769.png

    Silica scans for available Wi-Fi networks, then connects and starts scanning for vulnerable targets.

    Caption by: Ryan Naraine

  • 53770.png

    Available networks can be scanned in two modes -- Attack mode or the "prompt before scan" mode. Both can be enabled at the same time.

    Caption by: Ryan Naraine

  • 53771.png

    The user can manually confirm the use of "attack node," which fires exploits at vulnerable targets on the wireless network.

    Caption by: Ryan Naraine

  • 53776.png

    The application comes with a three-button user interface: Scan, Stop and Update.

    Caption by: Ryan Naraine

  • 53777.png

    A progress bar should display what is happening on the device. Optionally, the user may check the two bottom status boxes to find out more details about the scan.

    See also: Ryan Naraine's report from RSA 2007, Wi-Fi hacking, with a handheld PDA.

    Caption by: Ryan Naraine

4 of 10

Currently Silica supports 802.11 (Wi-Fi). The product roadmap calls for support for Bluetooth wireless connections and Ethernet via USB.

Caption by: Ryan Naraine

4 of 10

Related Topics:

Security TV Data Management CXO Data Centers

Related Galleries

    • 1 of 3

  • Apricorn Aegis Secure Key 3NXC

    The new Aegis Secure Key 3NXC builds on Apricorn's Secure Key 3z and Aegis Secure Key 3NX, taking the same proven form-factor and physical keypad, and adding something that users have ...