Flipper Zero - Tamagotchi multitool na yaro don pentester

Flipper Zero - Tamagotchi multitool na yaro don pentesterInjin wasan ƙwallon ƙwallon sifili - wani aikin multitool na aljihu wanda ya dogara da Rasberi Pi Zero don ƙirƙira IoT da tsarin kula da samun damar mara waya. Kuma wannan shi ne Tamagotchi, wanda cyber-dolphin ke rayuwa, zai iya:

  • Yi aiki a cikin rukunin 433 MHz - don nazarin sarrafa nesa na rediyo, na'urori masu auna firikwensin, makullai na lantarki da relays.
  • NFC - karanta / rubuta da yin koyi da katunan ISO-14443.
  • 125 kHz RFID - karanta/rubutu da kwaikwayi ƙananan katunan mitoci.
  • iButton makullin - karanta/rubutu da kwaikwayi maɓallan lamba masu aiki ta hanyar ka'idar 1-Wire.
  • Wi-Fi - don duba tsaron cibiyoyin sadarwa mara waya. Adafta yana goyan bayan allurar fakiti da yanayin saka idanu.
  • Bluetooth - kunshin bluez na Linux yana tallafawa
  • Yanayin USB mara kyau - na iya haɗawa azaman bawa na USB kuma yayi koyi da madannai, adaftar ethernet da sauran na'urori don allurar lamba ko pentest na cibiyar sadarwa.
  • Tamagotchi! - ƙananan ikon microcontroller yana aiki lokacin da aka kashe babban tsarin.

Ina farin cikin gabatar da aikina mafi buri, ra'ayin da na kasance ina renon shekaru masu yawa. Wannan yunƙuri ne na haɗa duk kayan aikin da ake buƙata sau da yawa don pentesting na zahiri cikin na'ura ɗaya, yayin daɗa mutuntaka don sanya shi kyakkyawa kamar jahannama. Aikin a halin yanzu yana cikin R&D kuma matakin amincewa, kuma ina gayyatar kowa da kowa don shiga ciki tattaunawar fasali ko ma yarda da shiga cikin ci gaba. A ƙasa da yanke shine cikakken bayanin aikin.

Me yasa wannan ya zama dole?

Ina son bincika duk abin da ke kewaye da ni kuma koyaushe ina ɗaukar kayan aiki daban-daban tare da ni don yin wannan. A cikin jakar baya ta: adaftar WiFi, mai karanta NFC, SDR, Proxmark3, HydraNFC, Raspberry Pi Zero (wannan yana haifar da matsala a filin jirgin sama). Duk waɗannan na'urori ba su da sauƙi don amfani yayin aiki, lokacin da kuke da kofi a hannu ɗaya, ko lokacin da kuke hawan keke. Kuna buƙatar zama, kwanta, samun kwamfuta - wannan ba koyaushe ya dace ba. Na yi mafarkin wata na'urar da za ta aiwatar da yanayin hari na yau da kullun, koyaushe a shirye-shiryen yaƙi, kuma a lokaci guda ba kama da gungu na faɗuwar allunan kewayawa nannade da tef ɗin lantarki.Flipper Zero - Tamagotchi multitool na yaro don pentester Raspberry Pi Zero W tare da garkuwar baturi UPS-Lite v1.0 azaman ambaliya ta tsaye don aika hotuna zuwa na'urorin Apple ta AirDrop Kwanan nan, bayan an buga buɗe aiwatar da ka'idar AirDrop. www.owlink.org da bincike daga mutanen HexWay game da raunin iOS Apple-Blee, Na fara jin daɗin sabuwar hanya don kaina: saduwa da mutane a cikin jirgin karkashin kasa ta hanyar aika musu hotuna ta hanyar AirDrop da tattara lambobin wayar su. Daga nan na so in sarrafa wannan tsari kuma na yi na'ura mai sarrafa kanta daga Rasberi Pi Zero W da batura. Wannan batu ya cancanci labarin daban, wanda kawai ba zan iya gamawa ba. Komai zai yi kyau, amma wannan na'urar ba ta da kyau a ɗauka tare da ku, ba za a iya saka ta cikin aljihun ku ba, saboda ɗigon solder ya yaga masana'antar wando. Na yi ƙoƙarin buga akwati a kan firintar 3D, amma ban ji daɗin sakamakon ba.

Godiya ta musamman ga Anya kowa Prosvetova, jagoran tashar Telegram @ sun tilasta min wanda, bisa ga bukatata, ya rubuta bot na Telegram @AirTrollBot, wanda ke haifar da hotuna tare da rubutu, telegram da daidaitaccen yanayin yanayin don a nuna su gaba ɗaya a cikin samfoti lokacin aikawa ta Airdrop. Kuna iya samar da hoto da sauri wanda ya dace da yanayin, yana kama da wannan wani abu kamar haka.

Flipper Zero - Tamagotchi multitool na yaro don pentesterPwnagotchi ya taru da e-ink allo da garkuwar baturiSai na ga wani aiki mai ban mamaki pwnagotchi. Yana kama da Tamagotchi, kawai a matsayin abinci yana ci WPA musafiha da PMKID daga cibiyoyin sadarwar Wi-Fi, wanda za'a iya cin zarafinsa a gonakin GPU. Ina son wannan aikin sosai har na yi tafiya tare da pwnagotchi na cikin tituna na kwanaki da yawa kuma ina kallon yadda yake murna da sabon ganima. Amma tana da matsaloli iri ɗaya: ba za a iya saka shi cikin aljihu yadda ya kamata ba, babu abin sarrafawa, don haka duk wani shigar da mai amfani ba zai yiwu ba daga waya ko kwamfuta kawai. ya bace. Na rubuta game da wannan na Twitter da abokaina, masu zanen masana'antu waɗanda ke yin abubuwa masu mahimmanci na lantarki, suna son ra'ayin. Sun yi tayin yin cikakkiyar na'ura, maimakon sana'ar DIY DIY. Tare da samar da masana'anta na gaske da sassa masu dacewa masu inganci. Mun fara nemo ra'ayin ƙira. Flipper Zero - Tamagotchi multitool na yaro don pentesterFlipper Zero - Tamagotchi multitool na yaro don pentesterFlipper Zero - Tamagotchi multitool na yaro don pentesterFlipper Zero - Tamagotchi multitool na yaro don pentesterAna iya dannawa. Zane-zane na farko na ƙirar Flipper Zero An kashe lokaci mai yawa akan jiki da ƙira, saboda na gaji da duk na'urorin hacker waɗanda ke kama da tarin PCBs da aka nannade da tef ɗin lantarki kuma ba za a iya amfani da su yadda ya kamata ba. Aikin da aka yi shi ne ya fito da mafi dacewa kuma karami da na'urar da za a yi amfani da ita cikin sauki ba tare da kwamfuta ko waya ba, kuma abin da ya fito kenan. Mai zuwa yana bayyana halin yanzu ba na ƙarshe ba tunanin na'urar.

Menene Flipper Zero

Flipper Zero - Tamagotchi multitool na yaro don pentesterMahimmanci, Flipper Zero garkuwa ne da yawa da baturi a kusa da Rasberi Pi Zero, wanda aka tattara a cikin akwati tare da allo da maɓalli. Ana amfani da Kali Linux azaman OS, tunda ya riga ya ƙunshi duk facin da ake buƙata kuma yana goyan bayan rpi0 daga cikin akwatin. Na kalli kwamfutocin allo iri-iri daban-daban: NanoPi Duo2, Banana Pi M2 Zero, Orange Pi Zero, Omega2, amma duk sun rasa zuwa rpi0 kuma ga dalilin:

  • Adaftar Wi-Fi da aka gina a ciki wanda ke goyan bayan yanayin saka idanu da allurar fakiti (nexmon faci)
  • Bluetooth 4.0
  • Yayi kyau 2.4 GHz eriya
  • Ana goyan bayan Kali Linux bisa hukuma kuma yana da shirye-shiryen ginawa da yawa kamar Saukewa: P4wnP1
  • Sauƙaƙan damar zuwa katin SD, babban adadin bayanai ana iya canjawa wuri da sauri

Tabbas mutane da yawa za su ce Rasberi Pi ba shine mafi kyawun zaɓi don irin wannan na'urar ba kuma za su sami muhawara da yawa, misali, yawan amfani da wutar lantarki, rashin yanayin bacci, kayan aikin da ba a buɗe ba, da sauransu. Amma idan kun kwatanta duk ribobi da fursunoni, ban sami wani abu mafi kyau fiye da rpi0 ba. Idan kuna da wani abu game da wannan, maraba da zuwa dandalin masu haɓakawa forum.flipperzero.one.Flipper Zero - Tamagotchi multitool na yaro don pentesterFlipper Zero gabaɗaya yana da kansa kuma ana iya sarrafa shi ta amfani da joystick mai hanya 5 ba tare da ƙarin na'urori kamar kwamfuta ko waya ba. Daga menu za ku iya kiran yanayin hari na yau da kullun. Tabbas, ba duk abin da za a iya yi tare da joystick ba, don haka don ƙarin sarrafawa za ku iya haɗawa ta hanyar SSH ta USB ko ta hanyar Wi-Fi / Bluetooth. Siemens wayoyin. Da fari dai, yana da kyau kawai, allon monochrome tare da hasken baya na orange yana ba ni jin daɗi mara misaltuwa, wani nau'in cyberpunk na soja na retro. Ana iya gani da kyau a cikin hasken rana mai haske kuma yana da ƙarancin wutar lantarki, kusan 126uA tare da kashe hasken baya. Don haka, zaku iya ajiye shi cikin Yanayin-Kullum kuma koyaushe kuna nuna hoto. Hasken baya zai kunna kawai lokacin da kake danna maɓallan.Flipper Zero - Tamagotchi multitool na yaro don pentesterMisalai na allo akan wayoyin Siemens har yanzu ana samar da irin wannan allon don kowane nau'in na'urorin masana'antu da rajistar kuɗi. A halin yanzu mun zaba wannan allon. Flipper Zero - Tamagotchi multitool na yaro don pentesterFlipper Zero tashar jiragen ruwa A ƙarshe, Flipper Zero yana da daidaitattun tashoshin Rasberi Pi, maɓallin wuta / hasken baya, rami don madauri, da ƙarin tashar sabis ta inda zaku iya samun damar na'urar ta UART, cajin baturi, da loda sabon firmware.

433 MHz watsawa

Flipper Zero - Tamagotchi multitool na yaro don pentesterFlipper Zero - Tamagotchi multitool na yaro don pentester Flipper yana da ginanniyar eriyar 433 MHz da guntu CC1111, don aikin <1GHz, daidai da sanannen na'ura Yard Stick One. Yana iya tsangwama da bincikar sigina daga masu sarrafa ramut na rediyo, maɓalli na maɓalli, kowane nau'in kwasfa masu wayo da makullai. Yana goyan bayan aiki tare da ɗakin karatu rfcat kuma yana iya yankewa, adanawa da kunna shahararrun lambobin sarrafa nesa, kamar Ikon nesa don nazari. Don lokuta lokacin da Rasberi Pi ba shi da lokacin aiwatar da siginar, aikin CC1111 na iya sarrafa shi ta hanyar ginanniyar microcontroller. A cikin yanayin Tamagotchi, Flipper na iya sadarwa tare da wasu irin nasa kuma ya nuna sunayensu, kamar yadda pwnagotchi ke yi.

USB mara kyau

Flipper Zero - Tamagotchi multitool na yaro don pentesterFlipper na iya yin koyi da na'urorin bawa na USB kuma ya yi kamar shi maɓallai ne don loda kaya, kama da USB Rubber Ducky. Hakanan kuyi koyi da adaftar ethernet don maye gurbin DNS, tashar tashar jiragen ruwa, da sauransu. Akwai shirye-shiryen da aka yi don Rasberi Pi wanda ke aiwatar da nau'ikan irin waɗannan hare-hare github.com/mame82/P4wnP1_aloaZa'a iya zaɓar yanayin harin da ake so daga menu ta amfani da joystick. A wannan yanayin, allon yana iya nuna bayanan gyara kuskure game da yanayin harin ko wani abu mara lahani don ɓarna.

Wifi

Flipper Zero - Tamagotchi multitool na yaro don pentesterAdaftar Wi-Fi da aka gina a cikin Rasberi Pi baya goyan bayan yanayin saka idanu na fakiti, amma yana yi faci na ɓangare na uku, wanda ya ƙara wannan fasalin. Wasu nau'ikan hare-hare suna buƙatar adaftan Wi-Fi biyu masu zaman kansu. Wahalar ita ce kusan dukkanin kwakwalwan Wi-Fi ana haɗa su ta USB, kuma ba za mu iya ɗaukar kebul na USB kawai akan rpi0 ba, in ba haka ba yanayin Slave na USB zai karye. Don haka, dole ne ka yi amfani da haɗin SPI ko SDIO don haɗa adaftar Wi-Fi. Ban san kowane irin guntu da ke goyan bayan yanayin saka idanu da allurar fakiti daga cikin akwatin ba, amma BA a haɗa ta USB ba. Idan kun san ɗaya, don Allah gaya mani akan batun dandalin Wi-Fi guntu tare da haɗin SPI/SDIO wanda ke goyan bayan sa ido da allurar fakiti

NFC

Flipper Zero - Tamagotchi multitool na yaro don pentesterTsarin NFC na iya karantawa / rubuta duk katunan ISO-14443, gami da Mifare, PayPass/PayWave katunan banki mara amfani, ApplePay/GooglePay, da sauransu. Laburaren LibNFC ne ke tallafawa. Akwai eriya 13,56 MHz a kasan Flipper, kuma don yin aiki da katin kawai kuna buƙatar sanya shi a samansa. A halin yanzu, batun kwaikwayar katin yana nan a bude. Ina son cikakken kwaikwayi kamar Chameleon Mini , amma a lokaci guda ina so in sami damar yin aiki tare da LibNFC. Ban san kowane zaɓin guntu ba ban da NXP PN532, amma ba zai iya cika kwaikwayi katunan ba. Idan kun san mafi kyawun zaɓi, rubuta game da shi a cikin batun Neman mafi kyawun guntu NFC fiye da PN532

125kHz RFID

Flipper Zero - Tamagotchi multitool na yaro don pentesterTsohon ƙananan ƙananan ƙananan katunan 125 kHz har yanzu ana amfani da su sosai a cikin intercoms, baji na ofis, da sauransu. Akwai eriya 125 kHz a gefen flipper; yana iya karanta EM-4100 da HID Prox cards, ajiye su zuwa ƙwaƙwalwar ajiya da yin koyi da katunan da aka ajiye a baya. Hakanan zaka iya canja wurin ID na katin don kwaikwaya ta Intanet ko shigar da shi da hannu. Don haka, masu flipper za su iya canja wurin katunan karantawa ga juna daga nesa. Ni'ima.

iButton

Flipper Zero - Tamagotchi multitool na yaro don pentesteriButton wani tsohon nau'in maɓallan lamba ne wanda har yanzu ya shahara a cikin CIS. Suna aiki akan ka'idar 1-Wire kuma ba su da wata hanyar tantancewa, don haka ana iya karanta su cikin sauƙi. Fliper zai iya karanta waɗannan maɓallan, ya ajiye ID ɗin zuwa ƙwaƙwalwar ajiya, rubuta ID ɗin a kan babura, kuma ya yi koyi da maɓallin da kansa don a iya amfani da shi ga mai karatu a matsayin maɓalli. Yanayin karatu (Maigidan waya 1)Flipper Zero - Tamagotchi multitool na yaro don pentester A wannan yanayin, na'urar tana aiki azaman mai karanta kofa. Ta sanya maɓalli a kan lambobi, flipper yana karanta ID ɗin sa kuma yana adana shi a ƙwaƙwalwar ajiya. A cikin yanayin iri ɗaya, zaku iya rubuta ID ɗin da aka ajiye zuwa fanko.Yanayin kwaikwayon maɓalli (bawan waya 1)Flipper Zero - Tamagotchi multitool na yaro don pentesterAna iya yin koyi da maɓallan da aka ajiye a cikin yanayin bawa mai waya 1. Flipper yana aiki azaman maɓalli kuma ana iya amfani dashi ga mai karatu. Babban wahalar ita ce fito da ƙirar lambar sadarwa wanda za'a iya amfani dashi lokaci guda azaman mai karatu da maɓalli. Mun sami irin wannan nau'i, amma na tabbata cewa za a iya yin shi mafi kyau, kuma idan kun san yadda, ba da shawarar sigar ku akan dandalin tattaunawa a cikin batun. iButton lamba kushin ƙira

Bluetooth

Flipper Zero - Tamagotchi multitool na yaro don pentesterAdaftar Bluetooth da aka gina a cikin Rasberi Pi. Tabbas, ba zai iya maye gurbin na'urori irin su ba ubertooth daya, amma yana da cikakken goyon bayan ɗakin karatu na bluez, ana iya amfani dashi don sarrafa flipper daga wayar hannu ko don hare-hare daban-daban akan bluetooth kamar apple - ruwan 'ya'yan itace, wanda ke ba ku damar tattara sha256 daga lambobin wayar hannu da ke da alaƙa da ID na Apple, da sarrafa duk nau'ikan na'urorin IoT.

Ƙananan iko microcontroller

Flipper Zero - Tamagotchi multitool na yaro don pentester Tun da flipper ɗin ya yi sanyi sosai don kashewa, mun yanke shawarar sanya keɓaɓɓen ƙaramin iko a ciki wanda zai yi aiki lokacin da aka kashe Rasberi Pi. Zai sarrafa Tamagotchi, saka idanu kan tsarin taya na Rasberi Pi har sai ya shirya don sarrafa allon da sarrafa ikon. Hakanan za ta sarrafa guntu CC1111 don sadarwa tare da wasu flippers.

Yanayin Tamagotchi

Flipper ɗan ɗan fashin kwamfuta ne na cyber-dolphin wanda ke da iko akan duk abubuwan dijital. Lokacin da aka kashe Rasberi Pi, yana shiga yanayin Tamagotchi, wanda zaku iya wasa da samun abokai a 433 MHz. A cikin wannan yanayin, ayyuka na NFC tabbas za su kasance a wani bangare.Flipper Zero - Tamagotchi multitool na yaro don pentester Halin ya dogara ne akan dabbar dolphin daga fim din. Johnny mnemonic wanda ya taimaka hack kwakwalwar Keano Reeves kuma ya murkushe mugayen mutane da haskensa. Dolphins suna da ingantattun janareta na mitar da suke amfani da su don bincika duk abin da ke kewaye da su, da kuma buƙatu na zahiri don nishaɗi da son sanin yanayi. Muna buƙatar wanda zai iya fito da halayen flipper, duka ƙirar wasan gabaɗaya, daga motsin rai zuwa ƙananan wasanni. Kuna iya rubuta duk tunanin ku akan wannan batu taron zuwa sashin da ya dace.

О мне

Flipper Zero - Tamagotchi multitool na yaro don pentesterSunana Pavel Zhovner, ina zaune a Moscow. A halin yanzu ina gudanar da Moscow Haxspace Neuron. Tun ina yaro, ina son in bincika duk abin da ke kewaye da ni: yanayi, fasaha, mutane. Babban fanni na na kwarewa shine sadarwar sadarwa, hardware da tsaro, Ina ƙoƙarin kada in taɓa amfani da kalmar "hacker" saboda godiya ga kafofin watsa labaru da kafofin watsa labaru, an rage darajarta gaba daya. Ina so in kira kaina "nerd," saboda ya fi gaskiya kuma yana bayyana ainihin ba tare da pathos ba. A cikin rayuwa, Ina daraja mutane masu kishi waɗanda ke da zurfin tunani cikin abin da ke sha'awar su, waɗanda kuma za a iya kiran su da aminci. Na yi imani da buɗaɗɗen tushe, don haka aikin zai kasance a buɗe gaba ɗaya. A halin yanzu ina da karamar kungiya, amma ba mu da kwararrun mutane a kunkuntar wurare, musamman a rediyo. Da wannan post ina fatan in sami mutanen da suke son shiga aikin.

Shiga aikin

Ina gayyatar duk wanda ke son wannan aikin don shiga cikin ci gaba ta kowace hanya mai yiwuwa. A wannan mataki, muna buƙatar amincewa da jerin ayyuka na ƙarshe don fara aiwatar da sigar farko na na'urar. Akwai batutuwan fasaha da yawa waɗanda a halin yanzu ba a warware su ba.

Ga masu haɓakawa

Flipper Zero - Tamagotchi multitool na yaro don pentester Za mu tattauna duk ayyukan R&D na yanzu akan dandalin forum.flipperzero.one. Idan kun kasance mai haɓaka kayan aiki ko software, ko kuna da tambayoyi, shawarwari, shawarwari, zargi - jin daɗin rubuta su akan dandalin. Wannan shi ne babban wurin da za a tattauna duk matakai na ci gaba, tattara kudade, da samarwa. Ana ci gaba da sadarwa a dandalin a Turanci kawai, Kada ku yi jinkirin rubutawa a hankali, babban abu shine cewa ma'anar ta bayyana.

Zabi don fasali

Flipper Zero - Tamagotchi multitool na yaro don pentesterYana da mahimmanci a gare mu mu san ayyukan da ya kamata su kasance a cikin flipper. Abubuwan ci gaba za su dogara da wannan. Wataƙila na yi kuskuren yin imani cewa wasu ayyuka suna da mahimmanci, ko kuma, akasin haka, na rasa wani abu. Misali, Ina da shakku game da iButton, saboda fasaha ce da ta wuce. Don haka don Allah a ɗauki wannan ɗan gajeren binciken: docs.google.com/7VWhgJRBmtS9BQtR9

Aika kudi

Flipper Zero - Tamagotchi multitool na yaro don pentester Lokacin da samfurin ya kammala kuma aikin yana shirye don zuwa dandamali mai tarin yawa kamar KickStarter, zai yiwu a biya kafin oda. A halin yanzu zaku iya tallafa mani da kaina tare da tallafin abinci kaɗan ta hanyar Patreon. Ba da gudummawa na yau da kullun na $1 sun fi adadi mai yawa a lokaci guda saboda suna ba ku damar yin hasashen gaba. Hanyar haɗin kai: flipperzero.one/ba da gudummawa

Disclaimer

Aikin yana a matakin farko, rukunin yanar gizon yana iya samun kurakurai, tsarin karkatacciyar hanya da sauran matsaloli, don haka kar a lalata shi da yawa. Da fatan za a sanar da ni game da duk wani kuskure ko kuskuren da kuka samu. Wannan shi ne farkon ambaton aikin da jama'a suka yi, kuma tare da taimakon ku ina fatan in kawar da duk wata matsala kafin buga shi a kan babban Intanet mai magana da Ingilishi. Flipper Zero - Tamagotchi multitool na yaro don pentester Ina buga duk bayanin kula akan aikin a tashar Telegram ta @zhovner_hub.

source: www.habr.com

Add a comment