search

KasperskyLab / TinyCheck

TinyCheck allows you to easily capture network communications from a smartphone or any device which can be associated to a Wi-Fi access point in order to quickly analyze them. This can be used to check if any suspect or malicious communication is outgoing from a smartphone, by using heuristics or specific Indicators of Compromise (IoCs). In order to make it working, you need a computer with a Debian-like operating system and two Wi-Fi interfaces. The best choice is to use a Raspberry Pi (2+) a Wi-Fi dongle and a small touch screen. This tiny configuration (for less than $50) allows you to tap any Wi-Fi device, anywhere.
Apache License 2.0
3.08k stars 222 forks source link

Pr/92 #106

Closed uzlider closed 2 years ago

CLAassistant commented 2 years ago

CLA assistant check
All committers have signed the CLA.

fixpc82 commented 2 years ago

What version of Debian has it been tested with?

mrludo001 commented 2 years ago

This change is now impacted by a change in the naming of the zeek package on Buster (Debian 10) noted here. It might be worth adjusting this fix or following it up with another to change the intsalled package name to zeek-lts on Buster...

[Zeek don't release Zeek5 binaries for Buster and instead only release Zeek4 (now called zeek-lts) which is why the TinyCheck script fails to install. You either have to install TinyCheck on Bullseye which has Zeek 5 binaries, or manually install the package "zeek-lts" on Buster before running the TinyCheck install script.

Zeek page showing only Bullseye (Debian 11) support https://software.opensuse.org//download.html?project=security%3Azeek&package=zeek

Zeek-LTS page showing Buster (Debian 10) support https://software.opensuse.org//download.html?project=security%3Azeek&package=zeek-lts

The install.sh needs to be modified to do "apt install zeek-lts" when it detects Buster to fix this bug.](https://github.com/KasperskyLab/TinyCheck/issues/97#issuecomment-1198890442)