Tuesday, July 3, 2012

Raspberry Pi with a side of BeEF

A guest post from our friend g13:

The Raspberry Pi(http://www.raspberrypi.org) is a $25 ARM GNU/Linux box that is the size of a credit card. The applications for this little device are seemingly endless. So naturally I picked one up and started working on some penetration testing scripts for this box. One of my goals was to get BeEF running; which I have done.


BeEF comes with a couple installation scripts. I used these as a starting ground to get BeEF running on the Raspberry Pi. The script I started with was the "install-beef" script. After running the script, I noticed that the install failed after trying to install rvm. It appeared that even though rvm installed, it was not available to run. I was able to track this down to a PATH issue. In the install-beef script, the $HOME/.rvm/scripts/rvm file is referenced. That file was never created. I changed the install-beef script to contain a line which created the symbolic link between /usr/local/rvm/scripts/rvm and the one in my local path. After that, everything went off without a hitch!

I also removed some of the code to detect other OSes as the script is intended to only run on the Raspberry Pi. I would also like to note that during the installation, Ruby 1.9.2 is compiled and installed. I highly recommend changing the RAM allocation from 128/128 to 224/32. This will speed up compile time. If you are not familiar with how to do that, here is the command:
As Root: cp /boot/arm224-start.elf /boot/start.elf

BeEF takes about 1 minute to load after the RAM changes are made.  It is not recommended to run X while running BeEF.  Navigating to the UI from another machine is decent, but not as snappy if BeEF was run from more powerful hardware.  I tested hooking a few clients and the performance in the UI did not degrade.

Of course, what would this post be without a screen shot of BeEF running on the Pi:

I have included my modified install script in the PwnBerryPi pentesting suite which is available on github.

67 comments:

  1. It is my first visit to this webpage; I am going by this site and read your post, for example, important and supportive blog entry .

    ReplyDelete
    Replies
    1. I have read your article, it is very informative and helpful for me.I admire the valuable information you offer in your articles. Thanks for posting it.
      Tangki Panel
      Tangki Fiberglass
      Jual Septic Tank
      Mesin RO

      Delete
    2. Good information for me about Ram. Our mobdro baixar application is provided here:https://mobdroportugal.net/

      Delete
  2. an interesting and well-written post, and if you need help writing, then the https://ordercheappaper.com/thesis-papers/ service will help you in this so that you have more time for yourself

    ReplyDelete
  3. Take a look at this great list of homework apps, that are designed to help students.

    ReplyDelete
  4. This posts lists some options windows 10 help support & resources on how to get help in Windows 10. Some built-in, some via Help Desk or Support or Community forums and websites.

    ReplyDelete
  5. It is my first visit to this webpage; I am going by this site and read your post, for example, important and supportive blog entry .

    https://popcorntimeapk.org/

    ReplyDelete
  6. This comment has been removed by the author.

    ReplyDelete
  7. A Raspberry Pi has to run a full operating system which includes things like processor threading, user handling, and file services so it can struggle to push bits out at the speeds required. BK Experience

    ReplyDelete
  8. This is indeed a great and enriching experience, a part from work it enables you to explore new things and learn some amazing skills pikview

    ReplyDelete
  9. Good Post! Thank you so much for sharing this pretty post, it was so good to read and useful to improve my knowledge as updated one, keep blogging.

    Selenium with python Training in Electronic City

    ReplyDelete
  10. Sickbits is a library of unlimited hacks for android, ios smartphones. Get unlimited amount of hacks and modes for mac & pc. https://sickbits.net/

    ReplyDelete
  11. Mulți bărbați care utilizează diluanți spun că după aceea și chiar în timpul utilizării extensorului au suferit o slăbire remarcabilă a erecției lor. https://www.titan-gels.ro/

    ReplyDelete
  12. Thanks for your sharing! Vidmate app is renowned as a well-deserved movie-watching artifact. What’s more, you can download the hottest movies, music, HD videos and live TV on your Android device for free! Download here!Vidmate apkVidmate download

    ReplyDelete
  13. It's interesting that many of the bloggers your tips helped to clarify a few things for me as well as giving.. very specific niche content. www.appslure.com

    ReplyDelete
  14. The information you shared is very helpful to us.
    fnaf sister location

    ReplyDelete
  15. Hepatitis C, caused by the HCV virus, is transmitted only through blood contact. Sexual transmission and during pregnancy and breastfeeding are considered rare.

    Both diseases evolve silently. And that is where the problem lies. Because they do not manifest symptoms, many people do not even realize they are infected, even discovering the condition only when it is already at an advanced stage and has compromised the liver. Read more info

    ReplyDelete
  16. We understand how strict schools are with regards to plagiarism. Therefore, every Best Custom Essay Writing Service has to be screened for plagiarism so that to avoid any traces of Best Online Paper Writing Service.

    ReplyDelete
  17. مكافحة الصراصير Bisha يساعدك أيضًا على ضمان عدم عودة الصراصير مرة أخرى ، مما يضمن لك عزيزي العميل الراحة والنظافة لأن الشركة تعمل على تخليص مكان الصراصير غير ضار بالمكان الحالي الذي لا تحتاج إلى ترك المكان للهروب منه من مشاكل الرائحة أو التنفس ، لذلك اتصل بشركة Bisha الصراصير التي ستأتي في الوقت المناسب لك.
    شركة مكافحة النمل الابيض بابها
    شركة مكافحة حشرات بابها
    شركة رش مبيدات بابها
    ارخص شركة مكافحة حشرات

    ReplyDelete
  18. This comment has been removed by the author.

    ReplyDelete
  19. chase bp visa login
    In the event that you are more into utilizing Credit cards, at that point BP Credit Card will discover you simple choices to proceed with your shopping and feasting.

    ReplyDelete
  20. In the event that you are more into utilizing Credit cards mybkexperience.

    ReplyDelete
  21. Untuk memulainya, Anda dan pasangan Anda harus setuju bahwa Anda akan bertindak dengan memberikan umpan balik ketika mereka berada dalam koitus penuh. Anda akan menjadi semacam "diri pelengkap", tanpa makna ini bahwa Anda memutuskan hubungan dari sensasi menyenangkan Anda sendiri atau menjadi pengevaluasi pasangan Anda. click this link

    ReplyDelete
  22. Por último, los resultados obtenidos en el transcurso de los talleres pusieron de manifiesto la preocupación por parte de la población ante la falta de servicios sanitarios adecuados y, por sobre todo,
    Detoxic

    ReplyDelete
  23. Your blog content is very different. It is good and helpful. Thanks for sharing!!
    Java assignment help
    Programming Help
    Accounting Homework Help

    ReplyDelete
  24. Are you looking to buy the Best Custom Essay Paper from the best writers? When given assignments, many students look for Top-Ranked Essay Writing Service and through a basic web search, you can find many online companies offering help with Best Custom Essay Ever.

    ReplyDelete
  25. StudentsAssignmentHelp.com provide online homework help to those students who have rude professors who give them hard assignments and students are not be able to do their homework on time. Such type of students can get help on homework help USA from StudentsAssignmentHelp.com.

    ReplyDelete
  26. Custom Article Review Writing Services you secure from the firm are versatile such as Custom Article Review Help and Legitimate Article Review Writing Help and any other form of writing, contact them for assistance.

    ReplyDelete
  27. The raspberry pi comes in two models, they are model A and model B. The main difference between model A and model B is USB port. Model A board will consume less power and that does not include an Ethernet port. But, the model B board includes an Ethernet port and designed in china McDVOICE

    ReplyDelete
  28. Your blog content is very different. It is good and helpful. Thanks for sharing!!
    https://www.mybkexperience.xyz/

    ReplyDelete

  29. رش مبيدات بالمدينة المنورة رش مبيدات بالمدينة المنورة
    رش مبيدات بالدمام رش مبيدات بالدمام
    مكافحة الحمام بالمدينة المنورة مكافحة الحمام بالمدينة المنورة


    ReplyDelete
  30. Wow! Very helpful advice within this post! It is the little changes that will make the most important changes. Thanks a lot for sharing.These type of posts keeps the users interest in the website, and keep on sharing more. I enjoyed reading your articles .. good luck.
    newamericanjackets

    ReplyDelete
  31. Your blog is filled with unique good articles! I was impressed how well you express your thoughts.
    Flud for PC

    ReplyDelete
  32. I have read your excellent post. This is a great job. I have enjoyed reading your post the first time. MyBKExperience

    ReplyDelete
  33. i have never red that kind of post i really like it thanks for sharing You must share this valuable post on WhatsApp Plus with friends

    ReplyDelete
  34. Thanks for sharing you website.We would like to introduce our service in social media accounts like Bulk Gmail Accounts.we provide our service to increase your business growth.Please visit our website for more information : http://www.bulkgmailaccounts.com/phone-verified-gmail-accounts/

    ReplyDelete
  35. We love the Raspberry Pi because it's a tiny $35 computer you can use ... I had more fun hacking together a half-working machine with cables ..

    ezlms app apkxyz

    ReplyDelete
  36. It is a great article. You will surely like this also because it is a great stuff apk

    ReplyDelete
  37. The development of artificial intelligence (AI) has propelled more programming architects, information scientists, and different experts to investigate the plausibility of a vocation in machine learning. Notwithstanding, a few newcomers will in general spotlight a lot on hypothesis and insufficient on commonsense application. machine learning projects for final year In case you will succeed, you have to begin building machine learning projects in the near future.

    Projects assist you with improving your applied ML skills rapidly while allowing you to investigate an intriguing point. Furthermore, you can include projects into your portfolio, making it simpler to get a vocation, discover cool profession openings, and Final Year Project Centers in Chennai even arrange a more significant compensation.


    Data analytics is the study of dissecting crude data so as to make decisions about that data. Data analytics advances and procedures are generally utilized in business ventures to empower associations to settle on progressively Python Training in Chennai educated business choices. In the present worldwide commercial center, it isn't sufficient to assemble data and do the math; you should realize how to apply that data to genuine situations such that will affect conduct. In the program you will initially gain proficiency with the specialized skills, including R and Python dialects most usually utilized in data analytics programming and usage; Python Training in Chennai at that point center around the commonsense application, in view of genuine business issues in a scope of industry segments, for example, wellbeing, promoting and account.

    ReplyDelete
  38. If you want to add more pep to your Pi, fast mobile internet, or a suite of sensors, these are the add-ons you need.

    jogos do friv online

    ReplyDelete