EvilZone

In my environment we are deploying nothing but thinclients with a locked down version of Win 7 using a write filter. (They refuse to use a Linux distro ) We then allow our users to connect using VMWare Horizon View to a floating pool. These pools of course are locked down. Every time the user logs out of the machine and log back in they get a brand new machine from the master image replica. Their documents are still there due to persona management however I strongly recommend them to save everything they can on their Horizon Data folders which acts as a cloud service but also prevents something from going missing and resides on our network. We then use Thinapp so everything is run in sandboxes anyways so very little is ever actually installed on the virtual desktop. Your best bet Kulv would be to do something similar while VDI can be a pain in the ass and expensive to set up it works very well and shines in situations like this. Since we are still deploying VDI those with thickclients are using TrendMicro AV and we have content filtering, email scanning, and spam filtering through Symantec which seems to do the trick for the most part with lots of user education(even though they still can do some pretty dumb things.)

1> Logic
2> SET (Social Engineering ToolKit)
3> Maltego
4> Nmap
5> Ettercap
6> A good text editor
7> Custom Wordlists
9> Hydra
10>  Aircrack

I would love to help by giving you our reports from the audit we had recently that shows some common things. Unfortunately being a financial organization I can not do that

After I "attack" a computer I install a simple virus made with (dont hate) notepad. Erases the entire HDD including System32 folder. Thus, there would be nothing to link back to you, and even if they could link it back to you, the computer will never boot again without installing a new HDD. At every angle, they fail.

Wow. That  was either the best troll post I have ever read or something beyond my comprehension. I do not even know where to begin but I think Ande pretty much took care of what anyone if anyone was going to say something about this post.

I thought Wireshark could not sniff however encrypted passwords such as https or ssl. Though I hear ettercap can indeed sniff ssl/https: passwords by just changing a rem in the conf file.

But he made a valid point "People found out about piratebay when it was on the news moreso than before." The media blows something up and then all of a sudden everyone is all over it. It happens all the time its like when Firesheep made headlines and then all of a sudden everyone was downloading it (only to be patched later on).

No. Backtrack from a VM does not have access to onboard hardware, except for USB thingies, so using a USB wifi dongle would be good.

What they said . You are better off running backtrack I have found either as a dual boot or a live cd so you can crack networks. VM's are great for setting up personal labs but not for cracking wifi.