search

secgroundzero / warberry

WarBerryPi - Tactical Exploitation
2.22k stars 288 forks source link

Add packages used for pass-the-hash Win/OsX hack #54

Closed E3V3A closed 8 years ago

E3V3A commented 8 years ago

In order to use the RP3 as proposed in the blogs here and here we need to install some additional packages in the bootstrap.sh script. These (AFAICT) are:

git
screen
sqlite3

and then install the pycrypto python package with pip install pycrypto.

secgroundzero commented 8 years ago

this brings new challenges. Responder is designed to run at the end of all scripts. if this is implemented this means that you need to set it up from before and use the raspberry for this reason. the warberry scripts will be obsolete as they will not run.

agree?

E3V3A commented 8 years ago

Yeah, that is a bit inconvenient, but one should be able to set this with a GPIO switch, that is checked on startup. So because by default RP is started as USB host and it need to be run as USB gadget (the Ethernet adapter), which usually require a reboot. Or we need to figure out how to shutdown/restart USB without risking damage. It should be doable, but I need to think about how to do it, unless someone have already tried and know how to. What do you think?

E3V3A commented 8 years ago

Further studies show that the RP3 is not possible to be put into USB gadget (OTG) mode, at least not without some serious hardware mods, unlike the RP0. The reason is that the RP3 USB contain a LAN9514 4x USB 2.0 HUB, which prevents it to be put into gadget mode. Closing issue.