Posts

How to capture a WPA handshake

Image
There are different methods for getting unauthorized access to a Wifi network. I will try to cover several ones, but in this post I will focus on capturing a WPA handshake for a subsequent dictionary or brute-force attack. Requirements Before getting started make sure you have the following: Raspberry Pi 3 running Kali Linux ( tutorial here ) Monitor-mode and Packet-injection capable wifi adapter PC Decent internet connection We'll be using the wifi adapter with the Raspberry Pi, controlling them with a PC via VNC ( tutorial here ). What is a WPA handshake? In simple words, a WPA handshake is used to authenticate a user with an AP (Access Point). To illustrate things, think of it as a literal handshake: if the client presents his hand but the AP doesn't, the handshake can't happen and authentication thus fails. Because the engineering behind a WPA handshake is not the main purpose of this guide, let's dive into our work. Discovering the target AP Th...

How to access your Pi remotely via VNC

Image
In my previous post I talked about setting up a headless Raspberry Pi configuration -- the real purpose of using a Pi as a pentesting tool. The first step in making our Pi portable is the installation and activation of a VNC (Virtual Network Computing) connection. I will be glad to answer any questions you might have after reading this guide. Requirements As always, verify that you have the necessary material: Raspberry Pi 3 running Kali Linux ( tutorial here ) Power adapter HDMI cable TV or monitor Decent internet connection Installing the VNC server on the Pi There are many VNC softwares but we'll be using TightVNC because it's simple to configure and compatible with most devices. In a terminal window on your Pi, type apt-get install tightvncserver to download the software. Once completed, type  tightvncserver to start the VNC service. You will be prompted to choose a password, note that it cannot exceed 8 characters. You will also be asked if you wan...

How to install Kali Linux on a Raspberry Pi 3

Image
The much-awaited tutorial. Here, you will learn step by step how to download and install the Kali Limux OS on a Raspberry Pi 3. Let's get started. First, make sure that you have everything necessary by checking this list: Raspberry Pi 3 Model B or B+ A computer A microSD card An HDMI cable A micro USB power adapter A USB keyboard A monitor A stable and decent Internet connection Note regarding the post: you can click on any image to enlarge it. I- Downloading Kali Linux Head to www.kali.org , go to Downloads and click on Kali ARM Images as follows: Then scroll down until you find the Raspberry Foundation section and download the first file in the table: Download the file and don't open it. Leave it as it is. II- Flashing Kali to the microSD card Head to www.etcher.io and download the software. Once done, run it: Click on Select image and choose the file you downloaded in step 1 (the Kali image). You should find it in the Downloads folder. Nex...

Unboxing the Raspberry Pi 3

Image
I have finally received my Raspberry Pi 3 Model B. Before talking about my intentions and potential uses with the Pi, let's open it and see what comes in the box: That was quick. No, there's nothing else than the Pi itself in the box. No cables, no adapter, no case, nothing. Straight to the point. Now into more interesting matters. Why did I want a Raspberry Pi? How can it help me in my work? I'll explain. A few months ago my friend had a project for which he needed to build a smart home model. To represent the smartphone-controlled lighting system, he used an Arduino circuit which let him turn the lights on via Bluetooth, on his phone. That's how I discovered -- and immediately loved -- programmable circuits. I made some research on the web and quickly found about the Raspberry Pi, a more powerful and versatile alternative to the Arduino. I was baffled by the work a good hacker can achieve with it. After reading a lot of documentation and viewing some vide...

My weapon of choice

Image
As you may already know, I already have a particular setup in mind for experimenting. I'll tell you what are my weapons of choice and explain why I picked them. Let's get right into it. Why did I choose the Raspberry Pi 3 Model B+? I'm a big fan of the Raspberry Pi computers. From the day I worked on a Pi Zero for a project, I love this platform. In short, it's cheap, compact, versatile and can be customized to unimaginable extents. The Pi 3 is a credit-card sized computer, consisting of just processors and ports on top of a circuit. The processor uses an AMD architecture. Storage is managed by a microSD card and there's 1GB of RAM. As for connections, there are 4 USB ports, an HDMI port, an 3.5mm audio jack, a microUSB port for power, and a very interesting 40-pin connector to attach various elements (like a camera). I've annotated the below image (from Google) so you can have a better idea of the Pi. Click on it to enlarge it: You might ask yourself...