Penetration Testing with Raspberry Pi - Second Edition

Learn the art of building a low-cost, portable hacking arsenal using Raspberry Pi 3 and Kali Linux 2 About This Book • Quickly turn your Raspberry Pi 3 into a low-cost hacking tool using Kali Linux 2 • Protect your confidential data by deftly preventing various network security attacks • Use Raspberry Pi 3 as honeypots to warn you that hackers are on your wire Who This Book Is For If you are a computer enthusiast who wants to learn advanced hacking techniques using the Raspberry Pi 3 as your pentesting toolbox, then this book is for you. Prior knowledge of networking and Linux would be an advantage. What You Will Learn • Install and tune Kali Linux 2 on a Raspberry Pi 3 for hacking • Learn how to store and offload pentest data from the Raspberry Pi 3 • Plan and perform man-in-the-middle attacks and bypass advanced encryption techniques • Compromise systems using various exploits and tools using Kali Linux 2 • Bypass security defenses and remove data off a target network • Develop a command and control system to manage remotely placed Raspberry Pis • Turn a Raspberry Pi 3 into a honeypot to capture sensitive information In Detail This book will show you how to utilize the latest credit card sized Raspberry Pi 3 and create a portable, low-cost hacking tool using Kali Linux 2. You'll begin by installing and tuning Kali Linux 2 on Raspberry Pi 3 and then get started with penetration testing. You will be exposed to various network security scenarios such as wireless security, scanning network packets in order to detect any issues in the network, and capturing sensitive data. You will also learn how to plan and perform various attacks such as man-in-the-middle, password cracking, bypassing SSL encryption, compromising systems using various toolkits, and many more. Finally, you'll see how to bypass security defenses and avoid detection, turn your Pi 3 into a honeypot, and develop a command and control system to manage a remotely-placed Raspberry Pi 3. By the end of this book you will be able to turn Raspberry Pi 3 into a hacking arsenal to leverage the most popular open source toolkit, Kali Linux 2.0. Style and approach This concise and fast-paced guide will ensure you get hands-on with penetration testing right from the start. You will quickly install the powerful Kali Linux 2 on your Raspberry Pi 3 and then learn how to use and conduct fundamental penetration techniques and attacks. Cover Credits About the Authors About the Reviewers www.PacktPub.com Table of Contents Preface Chapter 1: Choosing a Pen Test Platform Hardware options and why the Pi Software option and why Kali Purchasing a Raspberry Pi Assembling a Raspberry Pi Installing Kali Linux Combining Kali Linux and the Raspberry Pi Cloning the Raspberry Pi SD card Avoiding common problems Summary Chapter 2: Preparing for Battle The Command and Control server Preparing for a penetration test Setting up the SSH service SSH default keys and management Reverse shell through SSH SSL tunnelling. StunnelServer Client ncat ptunnel and other techniques Using the GUI Transporting X via SSH VNC and RDP Overclocking Setting up the wireless interface Setting up the Bluetooth interface Setting up a 3G or 4G modem Wrapping it up with an example Chapter 3: Planning the Attack Understanding the Cyber or Intrusion Kill Chain Reconnaissance Weaponization Delivery Exploitation Installation Command and Control Actions Preparing for the penetration test Common tools for web, wired, and wireless attacks Mapping our tools to the Penetration test Kill Chain. Addition of non-standard tools to arsenalPositioning the Pi Summary Chapter 4: Explore the Target -- Recon and Weaponize Prospecting the target Network scanning Seeing and cracking Wi-Fi Obtaining the key Cracking the key Capturing and cracking passwords Online cracking Offline cracking Getting data to the Pi Physically inline option Software based approach arpspoof (Part of dsniff) Ettercap Wireshark dsniff Firewalk Tuning our network capture Scripting tcpdump for future access Web application hacks DotDotPwn Driftnet W3af Summary. Chapter 5: Taking Action -- Intrude and Exploit Using the Metasploit framework to exploit targets Getting Recon data into Metasploit Scoping vectors and launching attacks Rolling our own exploits Wrapping payloads Social engineering The Social-Engineer Toolkit Phishing with BeEF Executing man-in-the-middle attacks SSLstrip parasite6 Manipulating data Sniffing the network in Scapy Writing/reading PCAP files Creating/sending/receiving of packets Creating and sending malformed packets TCP SYN scan Rogue Access honeypot (revising and re-shooting) Easy-creds Bluetooth testing. BluelogBlueranger Btscanner Connecting to Bluetooth device using bluetoothctl Summary Chapter 6: Finishing the Attack -- Report and Withdraw Covering our tracks Wiping logs Masking our network footprint Using ProxyChains Clearing the data off the Raspberry Pi Developing reports Collecting and correlating testing data Creating screenshots Using ImageMagick GIMP, Screenshot, and Shutter Moving data Compressing files with Zip/Unzip Using File Roller Using split Summary Chapter 7: Alternative Pi Projects Diving into PwnPi Discovering Raspberry Pwn Investigating PwnBerry Pi. Annotation Learn the art of building a low-cost, portable hacking arsenal using Raspberry Pi 3 and Kali Linux 2About This Book Quickly turn your Raspberry Pi 3 into a low-cost hacking tool using Kali Linux 2 Protect your confidential data by deftly preventing various network security attacks Use Raspberry Pi 3 as honeypots to warn you that hackers are on your wireWho This Book Is ForIf you are a computer enthusiast who wants to learn advanced hacking techniques using the Raspberry Pi 3 as your pentesting toolbox, then this book is for you. Prior knowledge of networking and Linux would be an advantage. What You Will Learn Install and tune Kali Linux 2 on a Raspberry Pi 3 for hacking Learn how to store and offload pentest data from the Raspberry Pi 3 Plan and perform man-in-the-middle attacks and bypass advanced encryption techniques Compromise systems using various exploits and tools using Kali Linux 2 Bypass security defenses and remove data off a target network Develop a command and control system to manage remotely placed Raspberry Pis Turn a Raspberry Pi 3 into a honeypot to capture sensitive informationIn DetailThis book will show you how to utilize the latest credit card sized Raspberry Pi 3 and create a portable, low-cost hacking tool using Kali Linux 2. You'll begin by installing and tuning Kali Linux 2 on Raspberry Pi 3 and then get started with penetration testing. You will be exposed to various network security scenarios such as wireless security, scanning network packets in order to detect any issues in the network, and capturing sensitive data. You will also learn how to plan and perform various attacks such as man-in-the-middle, password cracking, bypassing SSL encryption, compromising systems using various toolkits, and many more. Finally, you'll see how to bypass security defenses and avoid detection, turn your Pi 3 into a honeypot, and develop a command and control system to manage a remotely-placed Raspberry Pi 3. By the end of this book you will be able to turn Raspberry Pi 3 into a hacking arsenal to leverage the most popular open source toolkit, Kali Linux 2.0. Style and approachThis concise and fast-paced guide will ensure you get hands-on with penetration testing right from the start. You will quickly install the powerful Kali Linux 2 on your Raspberry Pi 3 and then learn how to use and conduct fundamental penetration techniques and attacks About This BookQuickly turn your Raspberry Pi 3 into a low-cost hacking tool using Kali Linux 2Protect your confidential data by deftly preventing various network security attacksUse Raspberry Pi 3 as honeypots to warn you that hackers are on your wireWho This Book Is ForIf you are a computer enthusiast who wants to learn advanced hacking techniques using the Raspberry Pi 3 as your pentesting toolbox, then this book is for you. Prior knowledge of networking and Linux would be an advantage.What You Will LearnInstall and tune Kali Linux 2 on a Raspberry Pi 3 for hackingLearn how to store and offload pentest data from the Raspberry Pi 3Plan and perform man-in-the-middle attacks and bypass advanced encryption techniquesCompromise systems using various exploits and tools using Kali Linux 2Bypass security defenses and remove data off a target networkDevelop a command and control system to manage remotely placed Raspberry PisTurn a Raspberry Pi 3 into a honeypot to capture sensitive informationIn DetailWe will be leveraging the latest credit-card sized Raspberry Pi 3 and teach you how to create a portable, low cost hacking tool using Kali Linux 2.This book will start with installing and tuning Kali Linux 2 on Raspberry Pi 3 so that you can get started with penetration testing. You will be exposed to various network security scenarios, such as wireless security, scanning network packets in order to detect any issues in the network, and with capture sensitive data. You will also learn to plan and perform various attacks, such as man-in-the-middle, password cracking, bypassing SSL encryption, compromising systems using various toolkits, and many more. Finally, this book will teach you how to bypass security defenses, turn your Pi 3 into a honeypot, and develop a command and control system to remotely manage your placed Raspberry Pi 3.By the end of the book, you will be able to turn Raspberry Pi 3 into a hacking arsenal to leverage the most popular open source toolkit, Kali Linux 2.If you are a computer enthusiast who wants to learn advanced hacking techniques using the Raspberry Pi 3 as your pentesting toolbox, then this book is for you. Prior knowledge about networking would be an advantage.