Book Image

Penetration Testing with Raspberry Pi - Second Edition

By : Michael McPhee, Jason Beltrame
Book Image

Penetration Testing with Raspberry Pi - Second Edition

By: Michael McPhee, Jason Beltrame

Overview of this book

This book will show you how to utilize the latest credit card sized Raspberry Pi 3 and create a portable, low-cost hacking tool using Kali Linux 2. You’ll begin by installing and tuning Kali Linux 2 on Raspberry Pi 3 and then get started with penetration testing. You will be exposed to various network security scenarios such as wireless security, scanning network packets in order to detect any issues in the network, and capturing sensitive data. You will also learn how to plan and perform various attacks such as man-in-the-middle, password cracking, bypassing SSL encryption, compromising systems using various toolkits, and many more. Finally, you’ll see how to bypass security defenses and avoid detection, turn your Pi 3 into a honeypot, and develop a command and control system to manage a remotely-placed Raspberry Pi 3. By the end of this book you will be able to turn Raspberry Pi 3 into a hacking arsenal to leverage the most popular open source toolkit, Kali Linux 2.0.
Table of Contents (13 chapters)
Penetration Testing with Raspberry Pi - Second Edition
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface

Preparing for the penetration test


As we moved through Chapter 1, Choosing a Pen Test Platform, and Chapter 2, Preparing for Battle, we crafted a lean, mean, penetration testing machine. The Raspberry Pi 3 is a very capable platform on its own - with the extended SD card we have installed, we can even install the full Kali Linux distribution. This is a great option for training, but the real-world penetration testing demands will mean that we likely will deploy multiple sensors and orchestrate our testing from afar. In cases where more processing intensive tasking are concerned, we need to accept that the Raspberry Pi 3 cannot do this alone.

The platform isn't the only consideration. Much of what we need the Pi to do in our penetration test will hinge on what we are contracted to do, the scope of the effort, and the other tools we may employ to complete the job. Smaller penetration test scopes may be just fine with a single Pi communicating to a C&C server and doing most of the work on...