Shmoocon 10 and other things which occupy our time.

So a lot of things have been taking our time.  On September 10th my wife and I had our first child, but not to be out done in December Anton welcomed twins.  Despite the significant distractions, we have still been hard at work.

Although the 32 bit builds are broken, again, since it's Shmoocon 10 I'm making a quick little update release anyway.  If you are here competing in the Wireless CTF you already have access, but if you aren't, go on over to our download page and fetch the latest goodness and enjoy the hardened and default builds for 64 bit.

http://www.pentoo.ch/download/

Now I need to get back to fixing the wifi for all these damn attendees.  Have fun all ;-)

-Zero_Chaos and the Pentoo Linux team

Pentoo Status Update

Normally I try really hard to avoid posting anything personal on the official blog.  Most of the users simply don't care what I and the rest of the development team had for breakfast (I had Naked Double Berry juice), however, once in a blue moon something entertaining enough happens that it is worth sharing. Today is the birthday of the majority of the active developers. No, it's not Pentoo's birthday, that would be Jun 22nd, no, today is both my birthday and Anton's.  Lots of things draw open source groups together, common interests and goals, desire to learn and help others, and apparently shared birthdays.  Truely the birthday paradox (https://en.wikipedia.org/wiki/Birthday_problem) has been working overtime on this one, with only 3 active developers the odds of colliding birthdays is a bit astronomical.

Okay, I've blabbed about useless things for long enough, I bet you are all wondering wtf we are doing over here (too much cake, not enough code).  Despite Anton and I celebrating getting one year older, we have actually done a lot of work.  Some bugs have popped up in opencl and cuda which we are currently working out, however, for the most part, things are humming along very smoothly.  I expect RC2 to come out in May with updated cuda/opencl support and we are pushing hard on new features for the installer as well.

Stay tuned everyone, we are always working, even today while celebrating with cake ;-)

Thanks,
Zero_Chaos and the Pentoo Linux Team

PS> For once I'm not disabling comments so feel free to leave some personal notes, just keep bugs on the bug tracker where they belong please: https://code.google.com/p/pentoo/issues/list

Codename: Backtrack 6; Pentoo 2013.0 RC1.1 Release

NOT.  I just couldn't help myself.  By now I'm sure all of you have heard, BackTrack has been renamed to Kali and they are keeping everything tightly underwraps until their release sometime, no one will say when.  A lot of fuss has been going on that the Kali release is going to be March 9th (today), but since the Offensive Security guys swear that isn't true, I figured I'd give you all a treat to pass the many weeks of waiting for a functional Kali release.

Behold, Pentoo 2013.0 RC1.1 !

Jam packed with 3.7.5 kernel (pax hardened for 64 bit users) and built with a fully hardened toolchain (did someone say wireshark exploit?).  Time may have been passing, but we here at Pentoo have been anything but idle (you can check the svn history).  As usual, we have the latest tools and toys for all the good little pen-testers.  I simply couldn't list them all if I tried, so I'm not going to try.  Everything has its usual amount of spit and polish on it, except the layers seem to be building up.  This release comes with a shiny new installer with 200% more works!  Automatic and manual modes for normal partitioning and booting now work properly, and the installer is very fast (you know, as fast as we can copy all that data to your hard drive).

I could probably keep running my mouth but I know what you all want, the download link.  This time we are going to use the official download site at http://www.pentoo.ch/download/ .  You may notice a few exciting things related to this.  First and foremost, torrents are back.  I am now auto-generating a torrent file for every release and registering it with a tracker (kindly provided by Bitweasil of Cryptohaze fame) so you can all stop crying about downloading from the webserver I host on my 3g cell phone.  For those of you who cannot use a torrent, the normal download is still available, plus some brand new (and old) mirrors are being activated for use.  Syncing is going on as we speak (and our mirror over at Inerail is already seeding the torrent) and once mirrors are ready to go I'll add them to the download page and they will be available for future releases as well.

We have some really big plans for you all in the near future, so download Pentoo, hack all the things, report all the bugs, and together we are going to have an awesome 2013.  Thanks for your support, and have fun.

Just in case you actually read all that, here is the download link again as a reward for making it through.
http://www.pentoo.ch/download/

UPDATE: The main webserver is occasionally  unable to handle the load but our friends at Switch and Inerail have their mirrors up and running hosting the isos and the torrent files, get it while it's hot!

http://mirror.switch.ch/ftp/mirror/pentoo/
ftp://mirror.switch.ch/mirror/pentoo/

http://pentoo.east.us.mirror.inerail.net/
ftp://pentoo.east.us.mirror.inerail.net/pentoo/
http://pentoo.west.us.mirror.inerail.net/
ftp://pentoo.west.us.mirror.inerail.net/pentoo/

Be sure to get the 2013.0 RC1.1 release...it seems everyone else is.

Zero_Chaos and the Pentoo Linux Team

Pentoo Beta3 Release...mostly

Today during my presentation at BesidesDE we are releasing the 64 bit version of Beta3.  I couldn't be happier with this release, but today is a little bittersweet for me. As one giant ball of awesome, the Pentoo Linux team really isn't accustomed to failure, but every single 32 bit build I've done has resulted in complete failure.

Issues have ranged from horrifying and unexplained build failures, to building perfectly but being completely unbootable, through booting at 1983 speeds and every command simply returning "segfault".

That said, for those of you that don't have computers from 2003 will LOVE the updates in beta3.  The installer has been reworked so that it, ahem, works.  Additionally a number of tweaks to improve updating and system customization have been made. We have shiny new wifi drivers, shiny new video card drivers, and all your favorite password crackers updated and ready to rock out.

I've already begun picking up the pieces of my shattered 32 bit build and I promise all you people who got suckered into buying eeepcs that I have not given up.  Pentoo Linux does work fine on 32 bit (we have a number of users doing it now) but there is something wrong with the building of the iso that I will have to work out.

We at Pentoo Linux are very proud of this work, we hope that you enjoy using it as much as we did making it.

"The world belongs to those
who stand out from the rows
of wayward and misguided silent souls
History is shamed
By people laying blame
To everyone who doesn't feel the same"

Main site:
http://dev.pentoo.ch/~zero/isos/

Mirror:
http://grp.aircrack-ng.org/

Thanks,
Zero_Chaos and the Pentoo Linux Team

Update on Beta3

As many of you know I promised a new beta, with both 32 and 64 bit versions, in time for Bsides Delaware.  For those of you not in the know, that conference starts on Friday this week.  Well, I have good news and bad news.  I've spent the last few months very busy trying to kick out some special things to improve beta2 enough to call it beta3.

The first thing I realized that to accomplish anything worth doing, I was going to have to compile on something a little faster than my i5 laptop.  So, I spoke to a few friends about options, and finally settled on a a set of specs that DigitalPsyko wrote up for me.

After roughing out the plans for the computer I had to take a quick break and shoot down to Louisville Kentucky for Derbycon 2012.  If you have never been, it truly is the best conference ever and worth every bit of your time...and not just because they are silly enough to let me talk about whatever I want to.

This year I spoke about how the hacker community needs to get off their asses and contribute instead of just leaching, you can watch here and share with your favorite people who are always working on cool stuff and not sharing:

https://www.youtube.com/watch?v=c3bpN9eHe5o

After Derbycon finished, I got home and spent a few $$'s to build this:

The blue led fans came with the case and have been removed for better anti-gamer styling.

So once I had a cool little build box I started getting to work, only to find the incredibly crappy OCZ Revodrive PCI-e SSD failed. I've since replaced it twice and still have no working ssd for the box. Don't buy SSDs from OCZ, Newegg won't even refund my money because OCZ is such garbage they refuse to do anything at all now. Fortunately 64GB of RAM means I can put enough things in RAM that the old hdd I'm running off of for now.  A little embarassing to build a 32 core box and drop a random crappy spare 250GB hdd in it, but at least it got me building.

It's been a few weeks now with the new box, and let's just saying being able to build this many parallel processes means not only is it way faster to build, it's also way faster to fail... and boy how does it fail quickly.  So many parallel make bugs found, and bad dependencies, I've even managed to find a few filesystem bugs.

The good news is that this morning I tested a very functional amd64 build that I was going to call beta3, the bad news is that the corresponding x86 build couldn't even boot. In a day or two hopefully I'll resolve the issue with the 32 bit build and drop beta3 on all of you.  Until then enjoy my Derbycon 2.0 talk, and wish me luck.

Thanks,
Zero_Chaos

PS> Please don't try to comment on the blog, I really don't read it much.  We have a bug tracker and IRC where I and the rest of the team are very responsive.

Pentoo 2012.0 Beta2

It's my favorite time of year again, the really short lul between Defcon and Derbycon.  I've used my freetime to polish up all the bug reports from our Defcon Beta release and kick out a shiny new release. Many surprises await you, but I'm not building up a bugfix beta more than I already have.

New things: default hardened setup, torrent download

http://dev.pentoo.ch/~zero/isos/pentoo-x86_64-2012.0_beta2.torrent

Live to Hack, Hack to Live.  If my dedication isn't obvious, today is my Anniversary but here I am uploading betas, etc ;-)

You will not find a team of volunteers more dedicated than ours, so test the release and submit bugs so we can make it even better for you.

Bug Tracker:
https://code.google.com/p/pentoo/issues/list

Thanks,
Zero_Chaos and the Pentoo Team

Pentoo 2012.0 Defcon Beta

We are really doing it this time folks, we are really making a release.  Thanks to my whole team we are rocking brand new and shiny everything.

This beta was made in haste, during defcon, while holding my laptop and walking around the con while it was compiling.  I can't believe the poor thing didn't melt in the Vegas afternoon sun.

I'm not going to say much here, except please try it.  Download the iso, and don't waste your time telling us we are awesome (we already know that) or that we suck (go back to ubuntu).  Instead, if you are going to spend some time writing us an email, please tell us what is missing, and what is completely worthless to you.  we have included as many tools as possible in this release for all kinds of pen-testing, but I'm sure I've missed a few, and left a few old/crappy ones in and we need YOUR input to make Pentoo better.

No more putting off for tomorrow what you can hack today, begin the revolution:

http://dev.pentoo.ch/~zero/isos

-Zero_Chaos and the Pentoo Team

Arise from the ashes

We are still here folks, I know it's hard to believe.  There has been a lot of life keeping us busy, Grimmlin is now a proud husband and father (in that order and more than 9 months apart), and I am flying ~200 times a year for work. Many things have changed, we moved our bug tracker and svn (I still hate git) from pentoo.ch to googlecode, and we have significantly tightened our integration into gentoo.  About 6 weeks ago I was officially welcomed into the development team for Gentoo Linux, so my time has been evenly split between pushing critical packages and fixes up to Gentoo, and building live cds for development testing. Given the fact that I have never done anything like this, it has been a rough ride, especially since I've been building on my i5 laptop ;-) At HOPE I ran my mouth a little bit, and suggested I would have a public beta available for Defcon, which currently looks like it simply isn't going to happen.  Been a little too busy with fun things and not so fun things and just plain stuck on a few bugs which prevent the build from going properly.  None of these problems are major, and as such please stay tuned after Defcon.  Gentoo has promised a new release of a few things I need around July 30th so I should be able to kick out a nice public beta some time in August.

Just as a teaser, here are things which are already complete:

1.)New "pentoo" profiles which allow you to use hardened or not at your choice (who wants to be soft?)
2.)Full gpu cracking support for both cuda and opencl on both amd/ati and nvidia hardware including but not limited to pyrit, johntheripper, oclhashcat-plus, oclhashcat-lite
3.)Shiny 3.4.2 kernel (hardened or not)
4.)Full support for the ubertooth hardware (also added to kismet and wireshark)
5.)New radio category for sdr hacking for things like the rtl-sdr and Ettus USRP devices.
6.) 64 bit version (32 bit is a low priority until after the beta starts, sorry if your hardware is that old/crappy)

Things which are planned in a short order:

1.) Full arm support
2.)Openbts, for when hacking wifi just isn't cool enough to get the girl ;-)

Again, these are the short lists, the real changelog and planned features are mostly hiding in our >3000 commits in svn.  This will be a gem folks, if you have ever wanted a no-nonsense pen-testing distribution, this will be it.  Our aim is to be the rulers of this planet, even if only in our own minds.

See you soon, we will be talking again when we rock your work.

Sincerely,
Zero_Chaos and the entire Pentoo team

PS> I'm hiding out in Vegas in the Wireless Village at Defcon XX so stop by and let me know what's on your mind.

Pentoo installation made easy

It happened! The pentoo installer is finally here!
Jensp did an awesome work and ported the Arch linux installer to pentoo.


It is still in testing for now, but you are welcome to try it, I just did and can tell it's easy as pie.


The following is done from a booted pentoo-2009.0 livecd with the network already configured
First, sync your pentoo repo.
layman -s pentoo
Unmask the pentoo-installer
echo "=pentoo/pentoo-installer-0.1.3" >> /etc/portage/package.keywords/pentoo
Emerge the installer
emerge pentoo-installer
Just run it and follow the informations given by the menus
# pentoo-installer

Let us know what you think and if you encounter a bug, please report it on the trac development site.

Update: pentoo-installer has been stabilized, you don't need to unmask it

Migrate to official e17 repository

Hi there,

I migrated to the new enlightenment foundation library repository overlay.

The one provided from gentoo seems deprecated and if you like bleeding edge, go for efls' one.

Here is how to do it in 4 easy steps:

1. Add the EFL overlay http://trac.enlightenment.org/e/wiki/Gentoo
2. Unmerge the old e17 packages
3. Update the portage profile for e17
4. Install the new ones and reconfigure your desktop

So, for step 1, just follow the indications in the link or yet better, make it permanent in layman like so:

In /etc/layman/layman.cfg add the http://svn.enlightenment.org/svn/e/trunk/packaging/gentoo/Documentation/layman/overlays.xml url under the following line :

overlays : http://www.gentoo.org/proj/en/overlays/layman-global.txt

After that, run layman -L and layman -a efl.

Step 2, here's a list of packages you need to unmerge :

x11-plugins/e_modules-wlan x11-plugins/e_modules-calendar x11-plugins/e_modules-language x11-plugins/itask-ng x11-plugins/e_modules-bling x11-plugins/e_modules-net x11-plugins/e_modules-cpu x11-plugins/winlist_ng x11-plugins/e_modules-screenshot x11-plugins/extramenu x11-plugins/e_modules-mem x11-plugins/e_modules-weather x11-libs/esmart x11-libs/ecore x11-libs/e_dbus x11-libs/evas x11-misc/emprint x11-misc/entrance media-libs/edje media-libs/imlib2 x11-wm/enlightenment dev-libs/efreet dev-libs/eet dev-libs/embryo dev-libs/eina dev-libs/exml

Just use emerge -C with the above package list and you'll be good to go.

For step 3, if you want to use a specific snapshot of e17 (recommended) you need to get the portage env files from https://www.pentoo.ch/svn/livecd/trunk/portage/env and put it in /etc/portage. Check out our svn tree and copy our env files.

svn co https://www.pentoo.ch/svn/livecd/trunk/portage/env /var/svn/pentoo/portage/env

cp /var/svn/pentoo/portage/env /etc/portage/

You can update to a specific snapshot by following http://www.enlightenment.org/p.php?p=news and specify the specific revision inside those env files.

Step 4, use the method described on the official E17 gentoo guide and create a set like this:

cat > /etc/portage/sets/enlightenment << EOF
=app-text/epdf-9999
=dev-libs/ecore-9999
=dev-libs/e_dbus-9999
=dev-libs/eet-9999
=dev-libs/eina-9999
=dev-libs/embryo-9999
=dev-libs/efreet-9999
=media-libs/edje-9999
=media-libs/emotion-9999
=media-libs/ethumb-9999
=media-libs/evas-9999
=net-libs/exchange-9999
=x11-wm/enlightenment-9999
=enlightenment-base/e_module-notification-9999
=enlightenment-base/e_module-tclock-9999
=enlightenment-base/e_module-itask-ng-9999
EOF

Don't forget to also keywords the above list ** to be able to merge them!

You can now emerge/update enlightenment by doing:

layman -s efl && emerge -av $(cat /etc/portage/sets/enlightenment)

Also, you should set your use flags accordingly. A good and updated description of what to USE is at http://trac.enlightenment.org/e/wiki/Gentoo#Defineyouruseflags

Enjoy the newest e17 experience.

Pentoo recursivity

Well, sort of... This is the latest pentoo build, running pentoo in qemu using virt-manager.
We don't have kvm support yet, but this is planned.

It is running our latest 2.6.31 kernel and wifi is 2.6.27_rc7 with a bunch of patches.

The new release should be out by this week.

New Kernel for next release

So, we could have some patches for sqlzma in 2.6.31 and we got the new compat-wireless 2.6.32_rc5.

Our new kernel is not stable yet but once we can sort out all the minor issues we still have, we'll be making an updated version.

Anyway, they're all in our tree so ppl wanting to try it out can
layman -s pentoo

Cheers to jensp for helping out with the sqlzma patches.

Beta late than never

It's finally here!

We are releasing the beta version of both the 32 and the 64 bit version.
Here are the main features :

• Changes saving
• Enhanced cracking software
• NTLM/MD4/MD5 cuda bruteforcer
• WPA PSK rainbowtables generation accelerated through CUDA, STREAM or PADLOCK
• John The Ripper with MPI support allowing you to run it on all your local or remote cores
• Kernel 2.6.29 and wifi 2.6.31_rc4 with all the patches from Zero, including the freq patches for ath5k
• Tons of new tools
• Enlightenment DR17, built from SVN

You can put it on an USB STICK but it also fits on CD :-)

It's all available on http://www.pentoo.ch/

Cheers
Zero and Grimmlin

Cuda, Stream, MPI and Multiforcer...

Have you heard about those GPU cracking software ? Well, we did, and here is the outcome, after hacking a bit with the code, we provide you with some nice cuda, stream and padlock pyrit versions


Althought the card is a crappy nvidia mobile, we can see that it works fine. Well, it works at least :-) but here's better perfs on my ati 4850:


The latests patches for john does it all, we can finally load those slacking cores a bit

Oh, and what does Multiforcer stands for ?

:-) this time we promise, the beta is comming soon!

Grimmlin & ZC

Deadline approaching

There's been some sort of activity lately, and here is what's coming from it :
I moved all the services to a new server, and fixed a little bit of the web design. We're now settled to begin releasing.
I Updated our kernel to use the 2.6.28 sources along with aufs and sqlzma. Zero should be working on the wifi patches already.
We also plan on publishing our portage tree so ppl can benefit from our ebuilds and kernel sources.

We should come up with a beta release by the end of january. You can join us on irc if you want to check out alpha release and help us out.





BTW, here is what the future theme will look like

We're actually growing

Hi,

We've had a lot of troubles catching ourselves on the project, but I finally have some good and bad news.

The bad is that gentoo totally dropped unionfs from their genkernel tool.
The good is that I forked it and I've included some extra stuff:

• Moved to aufs
• Changes saving is supported from the kernel loading, before the system starts so you can completely customize it.
  
• You can create the file from within the boot-up so it's very easy to setup

That's it for the kernel/initrd generation...

People from LSO joined the project, so you can expect a really nice quality emerging from Pentoo, once it will be ready for takeoff.

Rumors, rumors... Zero told me that he's working on our custom 2.6.25 kernel...

If you want to help the project, you can catch us on irc://irc.freenode.net/#pentoo

That's it for now

Project status update

So as I said, we are _still_ working on pentoo and from the last couple of weeks, i can tell that :

- Catalyst building is working.
- Menu generation is somewhat working
- Move from unionfs to aufs is working
- I could get rid of QT (wouhou)
- There will be some very cool stuff in a future release. :)

Actually, the last test i ran made me a 563M (including portage tree!), letting some room for more tools, kernel and so on. I could even patch the kernel for lzm support but i don't feel like it need it atm.

Grimmlin

Our new todo list

Hi everyone,

It's been a while since we updated the project so here it is :

Since Zero and me broke the base system, we have to start over from scratch for the next pentoo version. It should be done entirely with catalyst.

Meanwhile, I'm migrating the server to a new host.

We have both a lot to do in real life at the moment but we _are_ willing to continue the development so don't worry, there will be a new version coming out.

Cheers
Grimmlin

Site maintenance

Hi there,

The site will be mostly unavailable tomorrow Saturday the 18 November from 8h30 am to 11h30 am GMT+1. We have some hardware and software maintenance scheduled on our server.

BTW, we are testing the new 2006.2 fat version and we're getting closer to a release so stay tunned.

New developer and progress

Recently, Zero_Chaos from aircrack-ng teamed up with us and joined the pentoo development effort.

He is literally making the kernel happy with all the wifi drivers and patches.

So, to update the previous statement, we were sleeping but he is now here to kick our asses and push pentoo to the max...