Friday, August 11, 2017

Connecting to Raspberry Pi on the go

A side project I'm working on, using a Raspberry Pi Zero W, is small enough to carry around. For this, I needed a way to SSH into the raspberry pi zero locally, since the project involves the use of the wireless chip on the Zero Pi W. The folks on reddit.com/r/raspberry_pi suggested a bunch of options, and I followed the top one: Raspberry Pi Zero OTG mode, option 1.

I installed Bonjour for Windows, and then followed this guide to install the right driver for the new ethernet device.

Now, to get an external wireless adapter to work.


Tuesday, August 01, 2017

Great Wireless Hacking Course from Defcon

Defcon is over and the PDFs are out, available here.

Since I'm sitting here in beautiful, cool Pittsburgh, waiting for credentials from the client so I can test what they need me to test, instead it's time to read through the presentations. One fantastic guide is on Wireless Hacking of Enterprise Networks, including targeting wireless networks and escalating through Evil Twin attacks, like downgrading SSL connections with man-in-the-middle attacks.

https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Gabriel-Ryan-Advanced-Wireless-Attacks-Against-Enterprise-Networks-Course-Guide.pdf

https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Gabriel-Ryan-Advanced-Wireless-Attacks-Against-Enterprise-Networks-Lab-Setup-Guide.pdf

https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-Gabriel-Ryan-Advanced-Wireless-Attacks-Against-Enterprise-Networks.pdf

Friday, July 28, 2017

Switch upgrade

Recently I upgraded the switch on which my Tor relay sits from an FS108 (unmanaged switch) to a Ubiquiti US-8 (managed), and the traffic throughput of the relay approximately doubled, recently hitting an all-time high of 3.15 MBit/s average speed, with 32 GB transferred total in a single 24-hour period. I'm still trying to figure out how having a managed switch worked this magic. Granted, I also increased the max bandwidth rates permitted, but the change in traffic was noticeable before that increase.
Replaced switch on July 09, 2017
Update: A colleague suggested QoS as the most likely improvement in a managed switch.

Wednesday, July 26, 2017

Check out my Guest Post on the Internet of Things

Check out a guest post I wrote last week on IoT. After being sent an inaccurate image of "IoT Attacks: Top 10 Things you need to know" I got riled up and wrote a more accurate summary.

http://elephantscale.com/2017/07/iot-top-10-things-need-know-non-fluff-version/

Note: To make it snappy I avoided being pedantic. While routers with smartphone apps for remote access could fall into the IoT or "smart" category, there is a difference between the former and routers that have issues with their firmware or the web management interfaces (for internal use). The original graphic gets mixed up between the two.