Rogue Pi: A RPi Pentesting Dropbox

Rogue Pi

A pentesting dropbox is used to allow a pentester to remotely access and audit a network. The device is dropped onto a network, and then sets up a connection which allows remote access. As a final project, [Kalen] built the Rogue Pi, a pentesting dropbox based on the Raspberry Pi.

The Rogue Pi has a few features that make it helpful for pentesting. First off, it has a power on test that verifies that the installation onto the target network was successful. Since the install of a dropbox needs to be inconspicuous, this helps with getting the device setup without being detected. A LCD allows the user to see if the installation was successful without an additional computer or external display.

Once powered on, the device creates a reverse SSH tunnel, which provides remote access to the device. Using a reverse tunnel allows the device to get around the network’s firewall. Aircrack-ng has been included on the device to allow for wireless attacks, and a hidden SSID allows for wireless access if the wired network has issues. There is a long list of pentesting tools that have been built to run on the Pi.

Check out a video demonstration of the dropbox after the break.

Continue reading “Rogue Pi: A RPi Pentesting Dropbox”

Hacked Interactive R2D2 Controlled By Raspberry Pi

hacked-R2D2-controlled-by-raspberry-pi

Ah R2D2. Probably one of the most recognized little robots on the planet. There have to be a hundred different toys of R2 out there, but one of the more impressive is the 30th Anniversary Interactive edition. Complete with all kinds of bells and whistles, it’s about as realistic as they come. One Star Wars fan found himself in possession of a broken Interactive R2, and with his girlfriend’s birthday coming up, decided to do a little droid surgery to create the ultimate gift.

Giving Anakin a run for his money, all the controls for this R2 unit were custom built.  A Raspberry Pi running Rasbian acts as the brain. Facial recognition was implemented using OpenCV. Voice commands in either English or Chinese were made possible by PocketSphinx. Some of the other features he included are: message recording and playback, ultrasonic distance detection, motion detection, wifi, and a rechargeable battery. Many of those features were included in the original toy, but since this unit was broken, had to be rebuilt from scratch.

In the end, it must have impressed his girlfriend – she’s now his wife. Good work Jedi. Check out some build photos and a video demonstration after the break.

Continue reading “Hacked Interactive R2D2 Controlled By Raspberry Pi”

Hackaday Links: March 12, 2013

Thankfully saved from steampunkers

meter

[Chris] found a really cool pocket watch-style multimeter in a box of junk that was passed down from father to son. There aren’t any markings on it, so he’s looking for any information he can get on it. It’s a cool piece of vintage tech in any occasion; check out the pics he sent in below:

Here’s a fix for your illegal stuff

pi

[Don] ‘acquired’ one of those China-only Raspberry Pis, but after plugging it in, only the power light would stay on. The fix, apparently, is putting these three files in the /boot folder of a Red Pi SD card.

Not a pocket watch

meter

[Tom] picked up an old DC volt meter in an antiques shop. He quickly gutted it to make an analog meter display for his Raspberry Pi. There’s  a few status lights to remind [Tom] of something he hasn’t figured out yet. Bonus points for a cheap buck boost converter, though.

Smashing monitors? Really?

NESIT Hackerspace

The Meriden, CT hackerspace, the New England Society of Information and Technology, was vandalized last week. They’re dealing with some real punks here; their computers weren’t stolen, they were just smashed. NESIT is looking for donations (both money and equipment), so if you have a few monitors or old boxxen and live around there, consider donating them.

Help a guy out here.

survey

[Jonathan] is a real cool dude that’s working on his master’s thesis on ways to build a sustainable company through the development of open source hardware. He wants you to take a survey. How do we know he’s cool? He had something posted on HaD back when we had the old black and white and scotch tape images.

Using OpenCV With The Raspberry Pi

When we first heard of the Raspberry Pi we were elated that projects that once required a full-blown computer could now be done on a tiny, and cheap board running Linux. Unfortunately, we haven’t seen much in the way of using computer vision algorithms on the Raspi, but thanks to [Lentin] the world of OpenCV is now accessable to Raspberry Pi users everywhere.

[Lentin] didn’t feel like installing OpenCV from its source, a process that takes the better part of a day. Instead, he installed it using the synaptic package manager. After connecting a webcam, [Lentin] ssh’d into his Raspi and installed a face detection example script that comes with OpenCV.

It should be noted that [Lentin]’s install of OpenCV isn’t exactly fast, but for a lot of projects being able to update a face tracker five times a second is more than enough. Once the Raspberry Pi camera module is released the speed of face detection on a Raspi should increase dramatically, though, leading to even more useful computer vision builds with the Raspberry Pi.

Multibooting The Raspberry Pi

berryboot

Those of us have been dual booting Linux, Windows, and OS X operating systems for a while will be familiar with bootloaders such as GRUB and its ilk. Surprisingly, though, we haven’t seen a bootloader for the most popular computer of the last year – the Raspberry Pi. It makes sense to have a bootloader for the Raspberry Pi; with dozens of different distributions from Raspbian, Occidentalis, and a bunch of  more esoteric distros, we’re surprised we’re only just now seeing a proper bootloader for the Raspi.

Berryboot is extremely simple to install – just copy it onto a FAT formatted SD card and you can install multiple OSes on your Raspberry Pi. On booting, Berryboot shows a dialog box of all the installed operating systems, with new ones able to be installed over the internet from a Berryboot menu.

You can grab Berryboot over on the gits. Berryboot also works with those Allwinner A10 single board computers, but the Hackaday tip line hasn’t seen hide nor hair of those boards.

Hackaday Links: February 22, 2013

Playstation π

PS3

Yeah, it’s another home made Raspberry Pi case, but [Gabriel]’s Mini Playstation 3.14 is the bee’s knees. The enclosure was once a metal gift box originally intended for gift cards. With a few whacks of a Dremel, the world finally has a new PS3 that runs Linux.

Up there with The Secret Life of Machines

mechatronik

[Mattias] sent in a tip about a really cool TV show airing in Sweden. It’s called Mekatronik, and it’s basically the interesting parts of Mythbusters where [Jamie] and [Adam] build random cool stuff. It’s a Swedish language program, so if anyone would like to make some subs for the episodes, we’ll be more than happy to link to it again.

Web-based software defined radio

sdr

The amateur radio club at University of Twente in the Netherlands came up with something really cool: a web-based software defined radio.  So what, you ask? It’s just streaming audio or something over the Internet? Nope. You can actually control this SDR over the web.

We’re deeply sorry for turning the hardware turn to slag. Really, we are.

Junk box Tesla coil

tesla

[JJ] whipped up a homemade Tesla coil out of junk he had lying around. Basically, it’s a piece of PVC pipe, a tennis ball, and aluminum foil. Even the transformer was pulled from a long-forgotten project. [JJ] is getting some really good arcs, so we’ll call this a win.

Time circuits active

time

[Danilo] was invited to a costume party with a movie theme. He wanted something Back to the Future-is, so he whipped up a flux capacitor (translation). It’s based on a PIC12F675, with the microcontroller running a bit of code that flashes the LEDs just like the movie. Now on to the hoverboard project…

Pair Of Musical Hacks Use Sensor Arrays As Keyboards

sensor-driven-musical-keyboards

This pair of musical keyboard hacks both use light to detect inputs. The pair of tips came in on the same day, which sparks talk of consipiracy theory here at Hackaday. Something in the weather must influence what types of projects people take on because we frequently see trends like this one. Video of both projects is embedded after the jump.

On the left is a light-sensitive keyboard which [Kaziem] is showing off. In this image he’s rolling a marble around on the surface. As it passes over the Cadmium Sulfide sensors (which are arranged in the pattern of white and black keys from a piano keyboard) the instrument plays pitches based on the changing light levels. [Thanks Michael via Make]

To the right is [Lex’s] proximity sensor keyboard. It uses a half-dozen Infrared proximity sensor which pick up reflected light. He calls it a ‘quantised theremin’ and after seeing it in action we understand why. The overclocked Raspberry Pi playing the tones reacts differently based on distance from the keyboard itself, and hand alignment with the different sensors.

Continue reading “Pair Of Musical Hacks Use Sensor Arrays As Keyboards”