September 3, 2014

Pwnie Express today announced the release of the latest version of its cutting edge Pwn Plug, the R3, an inconspicuous pentesting device whose drop box form factor provides unprecedented ease of use at remote locations at a fraction of the cost of traditional penetration testing solutions.

Pwnie Express is the only company to assess wired and wireless network security anywhere, on demand. Its Pwn Plug R3 is a next-generation penetration testing device in a portable, shippable, “Plug-and-Pwn” form factor. With onboard 802.11a/b/g/n wireless, external high-gain Bluetooth, 4G/GSM cellular, ruggedized case design, and greatly improved performance and reliability over its much-lauded R2 predecessor, the Pwn Plug R3 is the enterprise penetration tester’s dream tool.

This easy-to-deploy sensor can be remotely controlled over a covert Internet channel or a cellular data connection. Preconfigured, once plugged in and turned on, the Pwn Plug R3 will look to find a way to establish a persistent SSH connection between the device and its operator’s server—including a GSM-based 4G cellular data connection.

The R3 rounds out the Pwnie Express line of comprehensive vulnerability assessment and penetration testing solutions. The solutions include Pwn Pad 2014 and Pwn Phone, mobile form factors for the on-the-go tester, Pwn Plug R3 and its more powerful medium to large enterprise Pwn Pro counterpart, drop-box sensors used for remote testing, and Pwn Pulse software as a service (SaaS) solution for those organizations with multiple hard-to-reach distributed sites that require continuous monitoring and assessment.

“Our customers are constantly looking for ways to keep cost down and quality high. With the products at Pwnie Express we can cut travel costs to zero and still provide outstanding internal assessments. They have changed our business model and hopefully the whole business model for pentesters everywhere for the better,” said John Strand, senior security analyst/principal of Black Hills Information Security.

Product benefits:
o    Provides a cost-effective lightweight, non-intrusive and easy-to-deploy solution for remote locations
o    Preconfigured, doesn’t require onsite management
o    Extends on demand penetration beyond the headquarters to remote sites
o    Allows for easy anywhere drop box deployment
o    Increases frequency and scope of remote site assessments
o    Expands awareness of wired, wireless, BYOD and rogue devices across all sites
o    Addresses PCI DSS and HIPAA compliance requirements at remote sites
o    Greatly reduces travel and operational overhead required to do security testing

Core features include:
o    Onboard dual-band 802.11a/b/g/n wireless supporting packet injection & monitor mode
o    Onboard Bluetooth supporting device scanning & monitor mode
o    External 6-band (worldwide) 4G/GSM cellular USB adapter
o    Intel-based hardware delivers professional-grade performance & reliability
o    Onboard 802.11a/b/g/n wireless supporting packet injection & monitor mode
o    Onboard Bluetooth supporting device scanning & monitor mode
o    External unlocked 4G/GSM cellular adapter (SIM not included)
o    Runs Pwnix, a custom Debian distro based on Kali Linux
o    Over 100 OSS-based pentesting tools including Metasploit, SET, Kismet,
o    Aircrack-NG, SSLstrip, Nmap, Hydra, W3af, Scapy, Ettercap,
o    Bluetooth/VoIP/IPv6tools, and more
o    Simple web-based administration and in-product updates with “Pwnie UI“
o    One-click Evil AP & Passive Recon services
o    Persistent reverse-SSH access to your target network
o    6 unique covert channels for remote access through application-aware firewalls and IPS
o    Supports HTTP proxies, SSH-VPN, & OpenVPN
o    Out-of-band SSH access over 4G/GSM cell networks
o    Wired NAC/802.1x/RADIUS bypass capability
o    Unpingable and no listening ports in stealth mode
o    Local console access via HDMI

“It’s challenging for today’s globally-distributed organizations and consultants to assess the security of remote sites and branch offices. Today’s cyber criminals know this and are increasingly concentrating their efforts on these often-overlooked entry points,” said Dave Porcello, Pwnie Express CTO and Founder. “The Pwn Plug R3 helps these organizations and consultants gain deep visibility into these remote locations without physically traveling to each site, providing a cost-effective means to mitigate these attacks.”

Availability And Pricing
Pwn Plug R3 is generally available, priced at $995.

About Pwnie Express
Pwnie Express provides a simple and scalable asset discovery, vulnerability scanning, and penetration testing solutions for remote sites and all wireless spectrums. At its core are open source tools integrated on a smart platform available in a variety of form factors, which have helped thousands of enterprises worldwide get unprecedented real-time actionable insight into their distributed network infrastructure. The award-winning products are backed by the expertise of Pwnie Express Labs, the company’s security research arm. The company is headquartered in Boston, Massachusetts.