Hacking_and_Penetration_Testing_with_Low_Power_Devices

Recommendations

Info

IEEE 802.11 wireless 127 The Alfa AWUS036H USB wireless adapter is one of the best supported options around. The Alfa uses a Realtek RTL8187 chipset. This adapter is fairly compact, supports transmission power of up to 1 W, and has a standard RP-SMA antenna connector. The Alfa will accept a wide range of antennae. The standard antenna that ships with the Alfa is a 5 dBi omnidirectional unit. Alfa also produces a 9 dBi omnidirectional antenna. The 9 dBi antenna is over 15 in. long, so keep that in mind if you need to conceal a device. If you need to extend the range further, a directional antenna such as the Y2415TC cantenna from SimpleWiFi (http://www.simplewifi.com/ wifi-antenna/) can be used. The SimpleWiFi Y2415TC has a measured gain of 14.3 dBi. The beam width is 31 degrees. If you point it in the right direction, SimpleWiFi claims a range of up to 3 miles provided there is not too much between you and the access point to attenuate the wireless signal. Some antenna options are shown in Figure 6.3. One possible downside of the Alfa adapter is that it only operates on the 2.4 GHz band. As a result, it cannot be used on 5 GHz only networks. Five gigahertz networks have a much shorter range than 2.4 GHz networks. The upside of using 5 GHz is that there are fewer competing signals to cause interference in this band. Due to the range issue, most networks support both bands or 2.4 GHz only. If you wish to use something other than the Alfa wireless adapter for wireless hacking, you are advised to consult the aircrack-ng compatibility list at http://air crack-ng.org/doku.php?id¼compatibility_drivers. The D-link DWL-G122 and Hawking HWUG1 are both somewhat small adapters on the aircrack-ng compatibility list. The DWL-G122 has an internal antenna. The HWUG1 has an RP-SMA adapter opening up the same antenna possibilities as the Alfa AWUS036H. Not every device needs a hacking-capable wireless adapter. Once the wireless network passwords have been obtained, most any wireless adapter will do. Adafruit sells several compact wireless adapters for the Beagle (http://www.adafruit.com/cat egory/75). An Internet search should reveal several other options. Be sure to get an adapter that is compatible with Linux. FIGURE 6.3 Wireless antenna options. The omnidirectional antennae are 5 and 9 dBi. The directional cantenna is a SimpleWiFi Y2415TC boasting 14.3 dBi gain and a 31 degree bandwidth.
128 CHAPTER 6 Input and output devices IEEE 802.15.4 WIRELESS You may not be familiar with IEEE 802.15.4 networking, also known as XBee networking (although this is technically a Digi brand name) or its extension to mesh networking, ZigBee. IEEE 802.15.4 like the more familiar Bluetooth is a personal area network (PAN) standard. Personal area networks are intended as short-range networks. The XBee modules sold by Digi operate over a range of frequencies. The original offerings operate in the 2.4 GHz band. Standard XBee modules have ranges of up to 300 feet with 1 mW of transmit power. Digi produces XBee-PRO devices with 63 mW of transmit power yielding ranges of up to one mile (1.6 km). XBee modules will be discussed in detail in the next chapter. For now, we will focus on the hardware necessary to implement IEEE 802.15.4 networking. All XBee modules utilize a standardized connection consisting of two parallel rows of ten 2.0 mm pitch header pins separated by 22.0 mm. Many devices manufactured in the United States utilize 0.1 in. (2.54 mm) spacing. Tenth inch spacing is so prevalent that most prototyping breadboards are built with 0.1 in. pitch. In part because of the nonstandard pin pitch, several XBee adapters are available. XBee adapters use UART (serial) lines for communication. XBee modules require as few as four connections (read, write, +3.3 V, and ground) to interface with another device. Not surprisingly, a number of USB to XBee adapters are available. Popular choices include SparkFun XBee Explorer (https://www.sparkfun.com/prod ucts/8687), Parallax XBee USB adapter (http://www.parallax.com/product/32400), and an adapter kit from Adafruit (https://www.adafruit.com/products/247). You will need at least one USB XBee adapter in order to program your XBee modems (more about this in the next chapter). USB adapters can also be used to connect an XBee modem to the Beagles as well. The downside of this is that when used on the BeagleBone, it will take the only USB port and you might need to use a USB hub if you are also using IEEE 802.11 networking. USB is the recommended method for connecting an XBee modem to the BeagleBoard-xM, however. The BeagleBoard-xM uses 1.8 V logic that must be converted to/from 3.3 V when connecting an XBee modem to the expansion headers. Another downside of the using a USB adapter is that the XBee sleep and reset lines are not available via USB. The reset line is used to restart a hung XBee modem. The XBees support several sleep modes. The most efficient method of putting modems to sleep is to apply 3.3 V to the sleep pin of the XBee device. Fortunately, there are other methods of putting the modems to sleep using commands that may be sent over the USB connection. Several adapter boards that convert the pin pitch to 0.1 in. are available. Many of these provide additional functionalitysuchastransmitand receivelights. Some alsoprovide power conversion to/from 5.0 and 3.3 V and protective buffers. Adafruit sells an adapter with a 3.3 V regulator, level shifters, activity and power lights, and a connector for an FTDI serial to USB cable (http://www.adafruit.com/products/126). Adafruit adapters directly connected to BeagleBones and a USB adapter are shown in Figure 6.4. Parallax makes an extremely basic adapter that only provides conversion to 0.1 in. pitch for less than $4 (http://www.parallax.com/product/32403). These
Page 2 and 3:
Hacking and Penetration Testing wit
Page 4 and 5:
Hacking and Penetration Testing wit
Page 6 and 7:
Dedicated to my favorite wife, my f
Page 8 and 9:
Contents Foreword..................
Page 10 and 11:
Contents ix Network Hubs and Switch
Page 12 and 13:
Foreword So I will start out this f
Page 14 and 15:
Author Biography Dr. Philip Polstra
Page 16 and 17:
Acknowledgments First and foremost,
Page 18 and 19:
CHAPTER Meet the deck 1 INFORMATION
Page 20 and 21:
The deck 3 FIGURE 1.1 Collection of
Page 22 and 23:
The deck 5 FIGURE 1.4 Fern WiFi Cra
Page 24 and 25:
The deck 7 MODES OF OPERATION One o
Page 26 and 27:
The deck 9 stores data only on a lo
Page 28 and 29:
Summary 11 I knew that The Deck, wh
Page 30 and 31:
CHAPTER Meet the beagles 2 INFORMAT
Page 32 and 33:
Texas instruments devices 15 FIGURE
Page 34 and 35:
Texas instruments devices 17 proces
Page 36 and 37:
Page 38 and 39:
Texas instruments devices 21 The AD
Page 40 and 41:
Texas instruments devices 23 WHY NO
Page 42 and 43:
Page 44 and 45:
CHAPTER Installing a base operating
Page 46 and 47:
Introduction 29 FIGURE 3.2 QNX smar
Page 48 and 49:
Introduction 31 FIGURE 3.4 Android
Page 50 and 51:
Introduction 33 (http://openembedde
Page 52 and 53:
Introduction 35 FIGURE 3.6 Arch Lin
Page 54 and 55:
Introduction 37 Sabayon In the phys
Page 56 and 57:
Introduction 39 Table 3.7 Fedora Pe
Page 58 and 59:
Introduction 41 tar xJf debian*.xz
Page 60 and 61:
Ubuntu options 43 supportive commun
Page 62 and 63:
Creating a microSD Card 45 Device t
Page 64 and 65:
Chapter 3 Appendix: digging deeper
Page 66 and 67:
Page 68 and 69:
Page 70 and 71:
Page 72 and 73:
CHAPTER Filling the toolbox 4 INFOR
Page 74 and 75:
Adding a graphical environment 57 b
Page 76 and 77:
Adding a graphical environment 59 W
Page 78 and 79:
Adding a graphical environment 61 t
Page 80 and 81:
Adding tools the easy way 63 The li
Page 82 and 83:
Adding tools the easy way 65 check_
Page 84 and 85:
Adding tools the easy way 67 echo -
Page 86 and 87:
Adding tools the hard way 69 # chec
Page 88 and 89:
Adding tools the hard way 71 descri
Page 90 and 91:
Adding tools the hard way 73 FIGURE
Page 92 and 93:
Adding tools the hard way 75 FIGURE
Page 94 and 95: Adding tools the hard way 77 FIGURE
Page 102 and 103: Adding tools the hard way 85 dl_src
Page 104 and 105: Starter set of tools 87 and possibl
Page 106 and 107: Starter set of tools 89 #get John w
Page 108 and 109: Starter set of tools 91 The company
Page 110 and 111: CHAPTER Powering The Deck 5 INFORMA
Page 112 and 113: Power requirements 95 the city and
Page 114 and 115: Power sources 97 WALL POWER When it
Page 116 and 117: Power sources 99 Thanks to commonly
Page 118 and 119: Power sources 101 Table 5.2 Duracel
Page 120 and 121: Reducing power consumption 103 REDU
Page 122 and 123: Penetration testing with a single b
Page 138 and 139: Summary 121 site. In-depth testing
Page 140 and 141: CHAPTER Input and output devices 6
Page 142 and 143: Display options 125 FIGURE 6.1 LCD7
Page 146 and 147: BeagleBone capes 129 FIGURE 6.4 UAR
Page 148 and 149: BeagleBone capes 131 pull-up resist
Page 150 and 151: BeagleBone capes 133 FIGURE 6.7 XBe
Page 152 and 153: BeagleBone capes 135 Newly created
Page 154 and 155: BeagleBone capes 137 Table 6.1 Cape
Page 156 and 157: BeagleBone capes 139 If you don’t
Page 158 and 159: Penetration testing with a single r
Page 170 and 171: Summary 153 if "done" in status.ite
Page 172 and 173: CHAPTER Building an army of devices
Page 174 and 175: Using IEEE 802.15.4 networking 157
Page 176 and 177: Configuring IEEE 802.15.4 modems 15
Page 184 and 185: Remote control the easy way 167 FIG
Page 186 and 187: Remote control via python 169 seria
Page 188 and 189: Remote control via python 171 impor
Page 190 and 191: Remote control via python 173 elif
Page 192 and 193: Remote control via python 175 dnum
Page 194 and 195:
Remote control via python 177 rc_na
Page 196 and 197:
Remote control via python 179 The M
Page 198 and 199:
Remote control via python 181 } [ "
Page 200 and 201:
Remote control via python 183 Merel
Page 202 and 203:
Saving power 185 on the modem. The
Page 204 and 205:
Adding security 187 a different cha
Page 206 and 207:
Expanding Your Reach 189 FIGURE 7.1
Page 208 and 209:
Penetration testing with multiple d
Page 210 and 211:
Page 212 and 213:
Page 214 and 215:
Page 216 and 217:
Page 218 and 219:
Page 220 and 221:
Summary 203 # if IP and MAC aren’
Page 222 and 223:
CHAPTER Keeping your army secret 8
Page 224 and 225:
Hiding devices 207 FIGURE 8.2 At fi
Page 226 and 227:
Hiding devices 209 FIGURE 8.4 Car d
Page 228 and 229:
Hiding devices 211 FIGURE 8.7 Wirel
Page 230 and 231:
Hiding devices 213 FIGURE 8.11 Unde
Page 232 and 233:
Hiding devices 215 FIGURE 8.14 Unde
Page 234 and 235:
FIGURE 8.17 Inside the Dalek Desk D
Page 236 and 237:
FIGURE 8.21 The haxtar. The haxtar
Page 238 and 239:
Installing devices 221 example, wea
Page 240 and 241:
CHAPTER Adding air support 9 INFORM
Page 242 and 243:
Building the AirDeck 225 Latte is s
Page 244 and 245:
Building the AirDeck 227 what you a
Page 246 and 247:
Using your aerial drone 229 Power i
Page 248 and 249:
Using your aerial drone 231 Install
Page 250 and 251:
Alternative aircraft 233 else { //
Page 252 and 253:
CHAPTER Future directions 10 INFORM
Page 254 and 255:
Closing thoughts 237 For reasons me
Page 256 and 257:
Index Note: Page numbers followed b
Page 258 and 259:
Index 241 configuration, 77-79, 83f
Page 260:
Index 243 Python scripts, 143-144 w
show all

Hacking_and_Penetration_Testing_with_Low_Power_Devices

Create successful ePaper yourself

Delete template?

Save as template?