PWNIE EXPRESS! This is hilarious, and real!

[Renegade]

A friend of mine shot me this link:

http://pwnieexpress.com/wireless.html

Pwn Plug Wireless

A commercial-grade wireless pentesting drop box.

:: Includes an external 1000mW USB ALFA
:: Karmetasploit Evil AP mode!
:: Auto-crack all WEP networks in range! (WEPbuster)
:: Maintains a covert, encrypted, firewall-busting backdoor into your target network [Details]
:: Includes "Plug UI" for simple web-based setup
:: Tunnels through application-aware firewalls & IPS
:: Sends an SMS message when SSH tunnel is activated
:: Preloaded with Ubuntu, Kismet, Aircrack-NG, WEPbuster, Karma, Metasploit, SET, Fasttrack, SSLstrip, nmap, dsniff, netcat, scapy, ettercap, medusa, & more!
:: Unpingable and no listening ports in stealth mode

Nice.

[KynloStephen66515]

o_0

[40hz]

Why am I a little skeptical about this?  

Maybe it's this:

[attach]

[zridling]

Kevin Mitnick is quoted. Isn't that the hacker that went to jail and is never allowed near the internet for life?

[40hz]

Kevin Mitnick is quoted. Isn't that the hacker that went to jail and is never allowed near the internet for life?

The same.

The lifetime ban on internet use got overturned by the courts following his release from prison. There are different stories as to why he was able to cut a deal. One rumor has it this deal got made in exchange for him not pursuing a civil rights case against the government for its questionable act of holding him in solitary confinement for something like most of a year because somebody convinced prison officials he would be able to start a nuclear war if he so much as sat in the same room with a telephone. Other stories cite the inconvenient fact (for prosecutors) that he already served 4 years in prison (on pre-trial detention) before his case even got to court. (Note: The US still had a functioning Bill of Rights back then. Today Kevin Mitnick would wind up being classified as an "enemy combatant" and disappear into some non-existent government detention facility where he would soon learn that there are no secrets to be kept from an angry government.  *Splash!!!*)

But he's since seen the error of his ways. Jail cells and solitary confinement can do that to ya! He now writes books, consults, and speaks publicly on computer security topics.

There really is a Mitnick Security Consulting LLC btw:

Mitnick Security Consulting, LLC is a full-service information security consulting firm. Founded by Kevin Mitnick, Mitnick Security Consulting offers a comprehensive range of services to help businesses protect their valuable assets. read more >>

I just wonder if that Pwnie testimonial is real.

[J-Mac]

I read his book, "The Art of Deception" and yes, he does have quite a few tall tales in it!

Jim

[40hz]

I read his book, "The Art of Deception" and yes, he does have quite a few tall tales in it!

Jim

+1! There's a whole lotta BS being slung around.

That's the problem when you deal with hackers and cybersecurity stories. Everybody - and I mean everybody - from the hackers, to the "white hats" - to the agents of the law enforcement community itself - all exaggerate wildly about the events and exploits they were involved with - along with the significance of what actually went down.

About the only thing you can count on is they all want to magnify their individual roles (and importance) in the eyes of their peers, their superiors, and the general public.

[pwnieexpress]

Hi!

I work for Pwnie Express and I just wanted to reach out into this community and address a couple things people said in this thread:

First of all, we are very small and so getting sudden exposure is certainly revealing the fact that we are a tiny startup which is a group of friends. Just gonna run through a few points in the thread above

Kevin Mitnick did buy a plug and that was a quote from him after he bought the plug. Before buying it he sent this tweet: https://twitter.com/#!/kevinmitnick/status/42370853526175744

Also, Mitnick did go to jail but he is out and we just saw him quite a bit ad Defcon 19 where we were vendors. We sold over 200 plugs and quite a few of the Pwn Phones -- a mobile pentesting platform build on the Nokia N900 platform..

The plug is indeed based on the Marvell Sheeva Plug hardware. We purchase the plugs from GlobalScale who manufactures them and then flash them with our own image (build on Ubuntu) with our own custom software.  We have been working on adding other grpahics besides just those from the manufacturer to the pages.

The domain was registered by a friend who is a webdeveloper when we were quite small. At some point in the future we will tranfer the domain registration to the LLC itself and make that information public. Good point tho!

Final point regarding our list of clients: the high profile clients we listed are indeed clients but they are hardware clients, not clients who we have provided infosec services to. In the case of Cisco we saw no reason not to list them because we are partnering with them in certain ways. At Black Hat Cisco gave out some of our PwnPhones as a prize for a contest at their vendor booth. Check out: http://blog.pwnieexpress.com/post/8974758207/black-hat-interview-with-cbs

Regarding the validity of our company you can search for Pwnie Express here : http://www.sec.state.vt.us/seek/keysrch.htm

If anyone has any other specific questions  (or skepticism!) please feel free to respond in this thread or reach out to use directly by emailing info {AT} pwnieexpress [dot] com

Thanks for your time!

The Pwnie Express Team

[Renegade]

@pwnieexpress - Thanks for dropping in and clearing up some of that. It's always good to have vendors give their $0.02.

Cheers!

[r0bert0]

another one

http://www.demyo.com/products/demyo-power-strip/