Book Image

Penetration Testing with Raspberry Pi - Second Edition

By : Michael McPhee, Jason Beltrame
Book Image

Penetration Testing with Raspberry Pi - Second Edition

By: Michael McPhee, Jason Beltrame

Overview of this book

This book will show you how to utilize the latest credit card sized Raspberry Pi 3 and create a portable, low-cost hacking tool using Kali Linux 2. You’ll begin by installing and tuning Kali Linux 2 on Raspberry Pi 3 and then get started with penetration testing. You will be exposed to various network security scenarios such as wireless security, scanning network packets in order to detect any issues in the network, and capturing sensitive data. You will also learn how to plan and perform various attacks such as man-in-the-middle, password cracking, bypassing SSL encryption, compromising systems using various toolkits, and many more. Finally, you’ll see how to bypass security defenses and avoid detection, turn your Pi 3 into a honeypot, and develop a command and control system to manage a remotely-placed Raspberry Pi 3. By the end of this book you will be able to turn Raspberry Pi 3 into a hacking arsenal to leverage the most popular open source toolkit, Kali Linux 2.0.
Table of Contents (13 chapters)
Penetration Testing with Raspberry Pi - Second Edition
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface

Common tools for web, wired, and wireless attacks


The folks at https://www.kali.org/ and Offensive Security (the team responsible for Kali and its predecessor, Backtrack Linux) have made Kali one of the most versatile distributions. In addition to providing flavors for a staggering number of platforms and architectures, they made it simple for us to pick and choose subsets of the full distribution for our needs. The base image for ARM platforms (such as the Pi) include a pretty small subset of applications, and it is likely that we will need a few more to meet our goals. These subsets of tools, called metapackages, help us quickly grab the software packages and their dependencies for the job. The more pertinent metapackages to our work can be seen in the following image:

Other metapackages (GPU, Forensics, PWTools, VoIP, and SDR) do exist, but are of limited use in our penetration testing use case. These tool sets would more likely be enlisted on our C&C server or a more fully-featured...