RPi4 Generic Pentest Setup - eviltoast

A work in progress, but it is coming together. Added bettercap for automated wifi handshake capture and before I got some very simple tools to run via service files. Cable management is a bit annoying right now, but planning on putting everything in some sort of case.

The mini router is a glinet ar150 and I use it to connect to the ap so I can ssh to the RPi. This allows headless and also eliminates a need for a screen. A seperate AP like this connected via eth gives the most stable connection to the rpi. Next step is to get an aluminum case for the pi and its own power bank, but it is coming along.

  • jimmydoreisalefty@lemmus.org
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    1 year ago

    Awesome!

    ELI5 of your system and what it replaces or what system it improves?

    Troubles and interesting experiences this project has taught you?

    • Alex@infosec.pubOPM
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      1 year ago

      At the moment it runs the Kali RPi image, and I’ve been automating and scripting several different tasks. The need came from just needing a small device I could plug into a network and capture packets while having more capabilities of running a true linux distro, which devices like the packet squirell and openwrt lacked. Basically on a need to basis and whatnot, but this is not a hardware implant that gets left behind. I do have laptops and could use those, but I’ve found laptops a bit bulky and annoying at times while also possibly drawing more attention, especially by a kid wearing a hoodie. Also gave me the opportunity to use hardware I have lying around, which has been making me feel less of a hoarder (I really like hardware).

      I do plan on adding other scripts and service files for other tools, but at the moment it does what I need it to.

      I did use the wifi pineapple nano I had lying around as the AP and use the USB eth, but that proved to be very finicky with mostly power, and it just wasn’t as reliable as using the mini router and using rj45 eth. One of the challenges right now is cable management, but I think I’m going to try to solve that by creating a mini cable board out of plastic or wood. Hopefully, once I get the other parts I need, I can get a pelican case or similar and put everything in there.

      Probably will end up a bit bulkier than I would like, but this isn’t the RPi Zero W idea I have, which will be more compact than this one.

      EDIT: I chose Kali over other images because it had all the tools I needed and possibly wanted, all there in the repos and in metapackages. I could install everything on Debian, but if I want to set up a tool not in the repos that could cause problems, plus Kali is also configured to run the tools as optimized as possible.

      • jimmydoreisalefty@lemmus.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Awesome!

        I’ve done basic setups for pihole and other similar sytems, great to know what is possible with the hardware, when combined with other devices.

        Thank you for expanding on what your project is about!

  • luky@infosec.pub
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    nice project. did you document it anywhere? would like to read that if it exists. don’t worry if you don’t have it

      • luky@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        that would be cool. you could use it in your resume or present it as project you have done too. I just really like to read more about such projects and start building some stuff by myself some day too