jzencovich | # 1 | 2007-10-22, 20:58 | Report

I'm currently in the planning stages of a new project: Blackbriar.

It's been a while now that I've been wanting to use my tablet as a Security/Penetration testing platform (in addition to regular browsing, music...). There are some programs here and there (Kismet somewhere, aircrack somewhere else, dsniff over there...), but nothing in a unified and COMPLETE manner.

My goal for this project is to create a unified platform containing as many of the main desktop security tools (including wireshark, nessus, john, the metasploit framework...) into a single package, a single application.

Blackbriar is a unified Security penetration testing platform geared towards the security novice AND pro. Sort of like a Backtrack Equivalent from Tablets.

I'm also planning on rewriting some GUIs for some of the respective tools specifically for Blackbriar, such as Nmap and Metasploit.

-------

Basically, the way it would work would be you launch Blackbriar, and from there depending on your needs you would launch other applications:

Blackbriar >> Debuggers >> IDA
Blackbriar >> Network >> Sniffing >> Wireshark
Blackbriar >> Passwords >> John

The Blackbriar UI would be a lot more.... innovative ( ) and hopefully won't be broken down into just categories.

Any ideas would be welcome. I have a specific envisionment for the final project, but any input or coding help would be greatly appreciated. Also, I'm no genius at licensing, but most of the good Security tools are GPLed so I don't think I'll have a problem in that reguard.

Comments? Suggestions? Ideas?

ColdFusion | # 2 | 2007-10-22, 21:16 | Report

That's a cool project!

Good luck!

zanglang | # 3 | 2007-10-23, 07:42 | Report

Nice idea. I've just finished writing a Kismet GUI in PyGTK for a semester report and was going to release it as a new project on Garage, but yours sounds much promising. Do you have more plans on how Briar works?

Rocketman | # 4 | 2007-10-23, 08:26 | Report

One persistent problem with using various security testing applications on the N800 has been that the wireless driver doesn't seem to support packet injection. I am not sure if anything has changed with the N810, given their similarities.

BOFH | # 5 | 2007-10-23, 08:56 | Report

Great news, this is what I bought my N800 for in the first place.

*/ Do you need any pre-alpha testers..,¿ */

---

Last edited by BOFH; 2007-10-23 at 08:58.

ddalex | # 6 | 2007-10-23, 09:11 | Report

Great idea. I had the idea of making some scripts to automate aircrack / dsniff with flite reporting so you could just walk around with the tablet in pocket and earphone to monitor how the script is happily doing automate sniffing

I'll be happy to help on this project, I'll request to join on garage.maemo.org

barry99705 | # 7 | 2007-10-23, 17:13 | Report

You mean like kismet with flite?

jzencovich | # 8 | 2007-10-23, 23:40 | Report

@zanglang:
Your project sounds promising, I'd be interested in trying it out when it comes out

I'm still working out ideas, initially I was thinking I would compile all the sources of all the different tools into a single massive binary that could do everything. That's probably not such a good idea in retrospect

Right now I'm thinking of the core "Blackbriar" binary would act more as a launcher of sorts. All the security tools will have their own binaries which can be executed standalone in their respective subdirectories. Blackbriar itself could function as a launcher/environment

You launch Blackbriar, browse for the tool you're looking for.... nmap, find it and click on it. Nmap's code is loaded into Blackbriar (perhaps as a module of sorts) and Blackbriar magically turns into nmap (gui/terminal or both). Once you're done with nmap and you "quit" it, you are returned to Blackbriar to launch the next tool you need.

This could allow various variables to be shared between the different tools part of Blackbriar. For example, an IP address. You enter it once in the Blackbriar menu, and from then on every app you open will have that ip address as the default for that session.

Target: 127.0.0.1
Launch nmap, click Scan... results are port 3, 4, and 5 open.
Close nmap
Open Metasploit, search for exploit, those that affect ports 3, 4, or 5 are immediately displayed, with 127.0.0.1 as the target.
[...]

Something to that degree. I'm still working on the details, and I would LOVE more than anything to have this become a community project. If you guys have suggestions, or ideas, or criticism: go for it!

@Rocketman:
I was thinking about the issues with the wireless drivers, and If I recall there is some source code for the N800's wi drivers somewhere. If enough people helped out, it would be more than feasible to try to code the functionality, though I don't think I could do it.

@BOFH:
Like I said, I'm still planning all this stuff out. If you want to help test that's cool. If you want to help code, that's cool too.

@ddalex:
I was thinking of something along the same lines. There is a similar project on the Backtrack forums, but the author is only releasing a watered down version of it for "fear of misuse"... Glad not everyone thinks that way.

Any help I can get I'll take

--------------------------

Thanks for the replies guys, I really appreciate the support. I would have replied sooner, but my net connection has been down all day :-/

--Jon

black-is-4-eternity | # 9 | 2008-12-04, 00:53 | Report

where is this project now? still in the planning stages???