Hacking_and_Penetration_Testing_with_Low_Power_Devices

Recommendations

Info

Texas instruments devices 23 WHY NOT USE... All open hardware is not created equal When speaking to people about The Deck at conferences around the world, I am often asked “Why didn’t you use ?” Most often, the other board is the Raspberry Pi, which incidentally is not open-source. The short answer is that the Pi is not the best fit for our situation. Read on if you want to know more. The Pi is not as powerful as the BeagleBone Black. In fact, the original BeagleBone, which predates the Pi, was also more powerful. The BeagleBone Black uses a modern Cortex-A8 processor running at 1 GHz. The Pi uses a Broadcom BCM2835 chip operating at a leisurely 700 MHz. The Pi lacks the horsepower to effectively run some of the beefier penetration testing applications such as Metasploit. While Texas Instruments freely releases information on their processor chips, Broadcom requires a nondisclosure agreement if you want details on how to use their chips. The Broadcom chip uses an older ARM6 instruction set, which is not well supported. This limits the operating systems available for the Pi. In particular, Ubuntu is not available for the Pi. As described in the next chapter, The Deck is based on Ubuntu. The Pi is not as mature as the Beagle family. The original BeagleBoard has been shipping since 2008. The BeagleBone was in consumer’s hands a full half year before the Pi. Even a year after the launch of the Pi, buying devices in quantity was still an issue. By contrast, I was able to purchase multiple BeagleBone Blacks a week after the board was released without waiting months to receive them. While price is not a primary concern when building penetration testing hardware, a complete system based on the Pi would be more expensive than one based on the BeagleBone Black. The difference in list price between these two boards quickly vanishes when cases, USB cables, power supplies, and expansion boards are purchased. Additionally, most vendors offer quantity discounts when buying multiple BeagleBone Blacks. The Pi provides at most 17 GPIO lines (just slightly more than the Arduino). Compare this to 66 GPIO lines found in the BeagleBone boards. The Pi uses fragile pins, which requires you to purchase a ribbon cable to attach any hardware to the board. Contrast this with the BeagleBone’s rugged headers, which allow you to connect capes right on top of the board. The BeagleBone lends itself better to compact (and more reliable) designs. Despite providing less processing power, the Pi seems to require more electrical power than the BeagleBone Black. Because they don’t run the same software, it can be difficult to do meaningful comparisons of power consumption for each device. That said, the power consumption of the Pi appears to be 150-200% of the BeagleBone Black in empirical tests (such as this one entitled “Raspberry Pi (model B) power consumption, low voltage test” published on May 19, 2013 (http://www.youtube.com/watch?v¼4a_OCg9UZbo)). Since we are interested in creating battery-powered devices, the BeagleBone Black is a clear winner in this category. By now, it should be clear that the Raspberry Pi is a less than ideal solution for building our penetration testing devices. As of this writing, several experimental ports of The Deck to other ARM-based systems are in progress. These will be evaluated for official inclusion. See the official website (http://philpolstra.com) and/or my blog (http://polstra.org) for the latest updates on these ports. The BeagleBone Black has 2 GB of eMMC nonvolatile storage (as of this writing, there is discussion of expanding this to 4 GB in later revisions). Ångstr€om Linux comes installed on the eMMC (it was recently announced that Debian Linux will soon ship with new boards). Access to the eMMC is 8 bits as opposed to 4 bits for the microSD card reader. The fact that the eMMC configuration is known
24 CHAPTER 2 Meet the beagles (as opposed to something that must be discovered when a microSD card is inserted) allows eMMC access to be optimized. For these reasons, significant performance improvements may be realized when using eMMC instead of a microSD card for the root filesystem. Unfortunately, in our case, The Deck with its 6 GB plus root filesystem is much too large to be stored on the eMMC. One of the most noticeable additions to the BeagleBone Black is HDMI video via a microHDMI connector. HDMI support is provided by a NXP TDA19988 HDMI framer. The BeagleBone Black supports resolutions up to 19201080. By default, the BeagleBone Black will use the highest compatible resolution reported by the EDID process. For this reason, it is important to connect and power up the monitor before booting the BeagleBone Black. Unlike the BeagleBoard-xM, the full HDMI specification, including audio, is supported. Only resolutions specified in the Consumer Electronics Association (CEA) standards support audio. Because every HD television supports these resolutions, you should have no problem finding a display for your BeagleBone Black. While not as easily noticeable as a new HDMI connection, the BeagleBone Black is also more energy-efficient than the original. Elimination of several chips has resulted in significant reduction in required current (roughly 30%). As a result, battery-powered hacking drones based on the BeagleBone Black can run longer than drones based on the original BeagleBone. The BeagleBoard.org team tried to make the new BeagleBone as compatible with the original as possible. When purchasing capes, be sure to check that they are compatible with the BeagleBone Black. Compatibility can be checked at http://elinux. org/Beagleboard:BeagleBone_Capes. The addition of eMMC and HDMI resulted in several pins that were formerly available on the expansion headers being used by the BeagleBone. Capes that use the same lines as eMMC or HDMI will only function properly with the conflicting service disabled. Given that The Deck is too large to fit on the eMMC and that HDMI output isn’t needed for hacking drones, this should be a nonissue for our purposes. There are other differences between the two BeagleBone versions, but they are unlikely to pose problems in our penetration testing efforts. Consult the System Reference Manual to learn more about these differences. As always, the BeagleBone Black should be protected from shorting by either using an enclosure or embedding it inside a nonconducting material. Adafruit (http://www.adafruit.com/category/75) sells both a small acrylic case and a larger case intended to house a BeagleBone with one or more capes. Most of the other BeagleBone Black vendors such as Special Computing (https://specialcomp.com/ beaglebone/) seem to offer simple acrylic cases for around US$10. The Special Computing case is shown in Figures 2.9 and 2.10. Cases for the original Beagle- Bone may be used after a slot for the microHDMI connector has been created with a rotary tool or similar. Should you decide to make your own case, be careful not to use overly large standoffs as you might damage components close to the mounting holes.
Page 2 and 3: Hacking and Penetration Testing wit
Page 4 and 5: Hacking and Penetration Testing wit
Page 6 and 7: Dedicated to my favorite wife, my f
Page 8 and 9: Contents Foreword..................
Page 10 and 11: Contents ix Network Hubs and Switch
Page 12 and 13: Foreword So I will start out this f
Page 14 and 15: Author Biography Dr. Philip Polstra
Page 16 and 17: Acknowledgments First and foremost,
Page 18 and 19: CHAPTER Meet the deck 1 INFORMATION
Page 20 and 21: The deck 3 FIGURE 1.1 Collection of
Page 22 and 23: The deck 5 FIGURE 1.4 Fern WiFi Cra
Page 24 and 25: The deck 7 MODES OF OPERATION One o
Page 26 and 27: The deck 9 stores data only on a lo
Page 28 and 29: Summary 11 I knew that The Deck, wh
Page 30 and 31: CHAPTER Meet the beagles 2 INFORMAT
Page 32 and 33: Texas instruments devices 15 FIGURE
Page 34 and 35: Texas instruments devices 17 proces
Page 38 and 39: Texas instruments devices 21 The AD
Page 44 and 45: CHAPTER Installing a base operating
Page 46 and 47: Introduction 29 FIGURE 3.2 QNX smar
Page 48 and 49: Introduction 31 FIGURE 3.4 Android
Page 50 and 51: Introduction 33 (http://openembedde
Page 52 and 53: Introduction 35 FIGURE 3.6 Arch Lin
Page 54 and 55: Introduction 37 Sabayon In the phys
Page 56 and 57: Introduction 39 Table 3.7 Fedora Pe
Page 58 and 59: Introduction 41 tar xJf debian*.xz
Page 60 and 61: Ubuntu options 43 supportive commun
Page 62 and 63: Creating a microSD Card 45 Device t
Page 64 and 65: Chapter 3 Appendix: digging deeper
Page 72 and 73: CHAPTER Filling the toolbox 4 INFOR
Page 74 and 75: Adding a graphical environment 57 b
Page 76 and 77: Adding a graphical environment 59 W
Page 78 and 79: Adding a graphical environment 61 t
Page 80 and 81: Adding tools the easy way 63 The li
Page 82 and 83: Adding tools the easy way 65 check_
Page 84 and 85: Adding tools the easy way 67 echo -
Page 86 and 87: Adding tools the hard way 69 # chec
Page 88 and 89: Adding tools the hard way 71 descri
Page 90 and 91:
Adding tools the hard way 73 FIGURE
Page 92 and 93:
Page 94 and 95:
Page 96 and 97:
Page 98 and 99:
Page 100 and 101:
Page 102 and 103:
Adding tools the hard way 85 dl_src
Page 104 and 105:
Starter set of tools 87 and possibl
Page 106 and 107:
Starter set of tools 89 #get John w
Page 108 and 109:
Starter set of tools 91 The company
Page 110 and 111:
CHAPTER Powering The Deck 5 INFORMA
Page 112 and 113:
Power requirements 95 the city and
Page 114 and 115:
Power sources 97 WALL POWER When it
Page 116 and 117:
Power sources 99 Thanks to commonly
Page 118 and 119:
Power sources 101 Table 5.2 Duracel
Page 120 and 121:
Reducing power consumption 103 REDU
Page 122 and 123:
Penetration testing with a single b
Page 124 and 125:
Page 126 and 127:
Page 128 and 129:
Page 130 and 131:
Page 132 and 133:
Page 134 and 135:
Page 136 and 137:
Page 138 and 139:
Summary 121 site. In-depth testing
Page 140 and 141:
CHAPTER Input and output devices 6
Page 142 and 143:
Display options 125 FIGURE 6.1 LCD7
Page 144 and 145:
IEEE 802.11 wireless 127 The Alfa A
Page 146 and 147:
BeagleBone capes 129 FIGURE 6.4 UAR
Page 148 and 149:
BeagleBone capes 131 pull-up resist
Page 150 and 151:
BeagleBone capes 133 FIGURE 6.7 XBe
Page 152 and 153:
BeagleBone capes 135 Newly created
Page 154 and 155:
BeagleBone capes 137 Table 6.1 Cape
Page 156 and 157:
BeagleBone capes 139 If you don’t
Page 158 and 159:
Penetration testing with a single r
Page 160 and 161:
Page 162 and 163:
Page 164 and 165:
Page 166 and 167:
Page 168 and 169:
Page 170 and 171:
Summary 153 if "done" in status.ite
Page 172 and 173:
CHAPTER Building an army of devices
Page 174 and 175:
Using IEEE 802.15.4 networking 157
Page 176 and 177:
Configuring IEEE 802.15.4 modems 15
Page 178 and 179:
Page 180 and 181:
Page 182 and 183:
Page 184 and 185:
Remote control the easy way 167 FIG
Page 186 and 187:
Remote control via python 169 seria
Page 188 and 189:
Remote control via python 171 impor
Page 190 and 191:
Remote control via python 173 elif
Page 192 and 193:
Remote control via python 175 dnum
Page 194 and 195:
Remote control via python 177 rc_na
Page 196 and 197:
Remote control via python 179 The M
Page 198 and 199:
Remote control via python 181 } [ "
Page 200 and 201:
Remote control via python 183 Merel
Page 202 and 203:
Saving power 185 on the modem. The
Page 204 and 205:
Adding security 187 a different cha
Page 206 and 207:
Expanding Your Reach 189 FIGURE 7.1
Page 208 and 209:
Penetration testing with multiple d
Page 210 and 211:
Page 212 and 213:
Page 214 and 215:
Page 216 and 217:
Page 218 and 219:
Page 220 and 221:
Summary 203 # if IP and MAC aren’
Page 222 and 223:
CHAPTER Keeping your army secret 8
Page 224 and 225:
Hiding devices 207 FIGURE 8.2 At fi
Page 226 and 227:
Hiding devices 209 FIGURE 8.4 Car d
Page 228 and 229:
Hiding devices 211 FIGURE 8.7 Wirel
Page 230 and 231:
Hiding devices 213 FIGURE 8.11 Unde
Page 232 and 233:
Hiding devices 215 FIGURE 8.14 Unde
Page 234 and 235:
FIGURE 8.17 Inside the Dalek Desk D
Page 236 and 237:
FIGURE 8.21 The haxtar. The haxtar
Page 238 and 239:
Installing devices 221 example, wea
Page 240 and 241:
CHAPTER Adding air support 9 INFORM
Page 242 and 243:
Building the AirDeck 225 Latte is s
Page 244 and 245:
Building the AirDeck 227 what you a
Page 246 and 247:
Using your aerial drone 229 Power i
Page 248 and 249:
Using your aerial drone 231 Install
Page 250 and 251:
Alternative aircraft 233 else { //
Page 252 and 253:
CHAPTER Future directions 10 INFORM
Page 254 and 255:
Closing thoughts 237 For reasons me
Page 256 and 257:
Index Note: Page numbers followed b
Page 258 and 259:
Index 241 configuration, 77-79, 83f
Page 260:
Index 243 Python scripts, 143-144 w
show all

Hacking_and_Penetration_Testing_with_Low_Power_Devices

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?