New Linux distribution hits the streets: Damn Vulnerable Linux

[thewayne]

DVL is purposely made as insecure as possible by running old versions of software with known vulnerabilities. It's a tool for security researchers to see how exploits and privilege escalation works. I'm sure it'll also be very attractive for people running honey pots to study exploits.

Pretty cool! But what I'm wondering is that system updates on it will look like.

Download image is 1.8 gig.

http://www.damnvulnerablelinux.org/index.html

http://www.geek.com/articles/news/damn-vulnerable-linux-the-most-vulnerable-and-exploitable-operating-system-ever-20100717/

http://linux.slashdot.org/story/10/07/17/2136237/Damn-Vulnerable-Linux-mdash-Most-Vulnerable-Linux-Ever

Comments

[silveradept]

I'm guessing those new updates will install other vulnerable bits of software as their exploits and solutions are discovered, assuming someone on the distribution can capture a snapshot of the vulnerable process before it gets patched.