WiFiWart Linux Pentesting Device Gets First PCBs

July 3, 2021 by Tom Nardi 15 Comments

When we last checked in on the WiFiWart, an ambitious project to scratch-build a Linux powered penetration testing drop box small enough to be disguised as a standard phone charger, it was still in the early planning phases. In fact, the whole thing was little more than an idea. But we had a hunch that [Walker] was tenacious enough see the project through to reality, and now less than two months later, we’re happy to report that not only have the first prototype PCBs been assembled, but a community of like minded individuals is being built up around this exciting open source project.

Now before you get too excited, we should probably say that the prototypes didn’t actually work. Even worse, the precious Magic Smoke was released from the board’s Allwinner A33 ARM SoC when a pin only rated for 2.75 V was inadvertently fed 3.3 V. The culprit? Somehow [Walker] says he mistakenly ordered a 3.3 V regulator even though he had the appropriate 2.5 V model down in the Bill of Materials. A bummer to be sure, but that’s what prototypes are for.

Even though [Walker] wasn’t able to fire the board up, the fact that they even got produced shows just how much progress has been made in a relatively short amount of time. A lot of thought went into how the 1 GB DDR3 RAM would get connected to the A33, which includes a brief overview of how you do automatic trace length matching in KiCad. He’s also locked in component selections, such as the RTL8188CUS WiFi module, that were still being contemplated as of our last update.

Multiple boards make better use of vertical space.

Towards the end of the post, he even discusses the ultimate layout of the board, as the one he’s currently working on is just a functional prototype and would never actually fit inside of a phone charger. It sounds like the plan is to make use of the vertical real estate within the plastic enclosure of the charger, rather than trying to cram everything into a two dimensional design.

Want to get in on the fun, or just stay updated as [Walker] embarks on this epic journey? Perhaps you’d be interested in joining the recently formed Open Source Security Hardware Discord server he’s spun up. Whether you’ve got input on the design, or just want to hang out and watch the WiFiWart get developed, we’re sure he’d be happy to have you stop by.

The first post about this project got quite a response from Hackaday readers, and for good reason. While many in the hacking and making scene only have a passing interest in the security side of things, we all love our little little Linux boards. Especially ones that are being developed in the open.

Putting An Ultra-Tiny Linux Board In A Phone Charger…Eventually

May 6, 2021 by Tom Nardi 67 Comments

Among security professionals, a “drop box” is a device that can be covertly installed at a target location and phone home over the Internet, providing a back door into what might be an otherwise secure network. We’ve seen both commercial and DIY versions of this concept, and as you might expect, one of the main goals is to make the device look as inconspicuous as possible. Which is why [Walker] is hoping to build one into a standard USB wall charger.

This project is still in the early stages, but we like what we see so far. [Walker] aims to make this a 100% free and open source device, starting from the tools he’s using to produce the CAD files all the way up to the firmware the final hardware will run. With none of the currently available single-board computers (SBCs) meeting his list of requirements, the first step is to build a miniature Linux machine that’s got enough processing power to run useful security tools locally. Obviously such a board would be of great interest to the larger hacker and maker community.

The RTL8188CUS is likely to get integrated later on.

So far, [Walker] has decided on his primary components and is working on a larger development board before really going all-in on the miniaturization process. As of right now he’s planning on using the Allwinner A33 to power the board, a sub-$10 USD chipset most commonly seen in low-cost Android tablets.

The A33 boasts a quad-core Cortex-A7 clocked at 1.2 GHz, and offers USB, I2C, and SPI interfaces for expansion. It will be paired with 1 GB of DDR3 RAM, and an SD card to hold the operating system. Naturally a device like this will need WiFi, but until [Walker] can decide on which chip to use, the plan is to just use a USB wireless adapter. The Realtek RTL8188CUS is a strong contender, as the fact that it comes in both USB and module versions should make its eventual integration seamless.

Even if you’re not interested in the idea of hiding security appliances inside of everyday objects, this project is a fascinating glimpse into the process of creating your own custom Linux board. Whether you’re looking to put into a wall wart or a drone, it’s pretty incredible to think we’ve reached the point where an individual can spin up their own miniature SBC.

Teardown Of A (Relatively) Cheap Thermal Camera

November 7, 2018 by Tom Nardi 32 Comments

The cost of tools and test equipment has largely been on the downward trend for years, making it now more affordable than ever to get into the hacking and making scene. This is particularly visible with something like the venerable oscilloscope: a piece of equipment that was near unobtainium for the home hacker a decade ago, you can now get digital pocket scope for as little as $20 USD. But there are still pieces of gear which haven’t quite hit the sort of prices we’d like to see.

A perfect example are thermal imaging cameras. The cheap ones are usually so low resolution they might as well just be thermometers, but the higher resolution ones can cost thousands. [Rob Scott] recently wrote in to tell us about a very promising middle ground, the HTI HT-A1. But he didn’t just point it out to us, he also tore it down and laid its internal’s bare for our entertainment. Now that’s our kind of introduction.

[Rob] walks us through the disassembly of the device, which is made unnecessarily difficult due to the fact that half the screws are hidden under a glued on screen bezel. That means a heat gun, a thin tool, and patience are in order if you want to get inside the device. It’s bad enough they use these kinds of construction techniques on modern smartphones, but at least they’re so thin that we can understand the reasoning. Why this chunky thing needs to resort to such measures is beyond us.

Eventually he cracks the HT-A1 open and is greeted with a single double-sided PCB. The top side is pretty much bare except for the buttons and the LCD display, and the flip side is largely just a breakout for a quad-core Allwinner A33 daughterboard. [Rob] theorizes this is to keep costs down by allowing reuse of the modular A33 board on other devices. Given the A33’s use in so many cheap tablets, it’s also possible HTI simply purchased these daughterboards as a drop-in component and designed their own board around it.

There’s not much else inside the HT-A1 beyond the rechargeable battery pack and thermal camera, both attached to the device’s rear panel. [Rob] noticed that the date on the thermal camera PCB is a full two years older than the date on the main PCB, leading one to wonder if HTI might have gotten a good deal on a bunch of these slightly outdated sensors and spun up a whole device around them.

The HT-A1 is high enough resolution that you can actually pick out individual components on a PCB, and at $400 USD is approaching a reasonable price point for the individual hacker. Which is not to say it’s cheap, but at least you get a useful tool for your money. We wouldn’t suggest you buy this device on a whim, but if you do a lot of diagnostic work, it might pay for itself after a couple repairs.

If that’s still a little too rich for your blood, we’ve covered a handful of DIY options which might better fit your budget.

Continue reading “Teardown Of A (Relatively) Cheap Thermal Camera” →