Hak5 LAN Turtle - Revision history

NSingh: /* Man-in-the-middle attacks with DNSMasq-Spoof */

2024-12-14T13:12:38Z

Man-in-the-middle attacks with DNSMasq-Spoof

@@ Line 280: / Line 280: @@
 ==== Step 3: Place the LAN turtle in the network ====
 Once the spoofed hosts are configured, connect the LAN Turtle to the target computer via USB and plug in the network cable. The traffic to spoofed domains will now be redirected to your pre-configured server. Simply plugging the turtle into an USB port of the computer and the network cable into the LAN turtle. When trying to access one of the spoofed DNS names, the target instead opens your pre-configured html file.
 === Information Gathering with nmap ===

2024-12-08T17:13:28Z

Step 2: Configure AutoSSH

← Older revision		Revision as of 17:13, 8 December 2024
Line 218:		Line 218:
	#* <code>remote port</code> remote port to bind through the SSH tunnel (default 2222)		#* <code>remote port</code> remote port to bind through the SSH tunnel (default 2222)
	#* <code>local port</code> local port to bind tunnel (default 22)		#* <code>local port</code> local port to bind tunnel (default 22)
			# Verify the key exchange by attempting an SSH connection without a password prompt.
	# Submit the changes and start AutoSSH (or enable it for autostart)		# Submit the changes and start AutoSSH (or enable it for autostart)

2024-12-08T17:12:56Z

Use Cases

← Older revision		Revision as of 17:12, 8 December 2024
Line 284:		Line 284:
	* Cron to periodically start the attack		* Cron to periodically start the attack
	* SSHFS to save the caputred information in a file on the remote server		* SSHFS to save the caputred information in a file on the remote server
	* Nmap-Scan to sniff the configuration and devices of the network		* Nmap-Scan to sniff the configuration and devices of the network, a typical output of an Nmap scan might include details like IP addresses, open ports, and device types.

	==== Step 1: Configure SSHFS ====		==== Step 1: Configure SSHFS ====

2024-12-08T17:11:05Z

Step 2: nmap-scan

← Older revision		Revision as of 17:11, 8 December 2024
Line 298:		Line 298:
	# Access the nmap-scan module via the module manager		# Access the nmap-scan module via the module manager
	# Go to the configure tab and insert		# Go to the configure tab and insert
	#* target: ~~<code>~~192.168.0.1-255~~</code> (This may differ for our network~~)		#* target: Specify the desired network range (e.g., 192.168.0.1-255, adjust as per your environment).
	#* logflie: <code>/sshfs/</code>		#* logflie: <code>/sshfs/</code>
	#* use the desired attack profile		#* use the desired attack profile

2024-12-08T17:10:20Z

Step 3: Place the LAN turtle in the network

← Older revision		Revision as of 17:10, 8 December 2024
Line 278:		Line 278:

	==== Step 3: Place the LAN turtle in the network ====		==== Step 3: Place the LAN turtle in the network ====
	~~After configuring~~ the spoofed hosts, ~~place~~ the LAN ~~turtle on~~ the ~~victim~~ computer ~~by simply~~ plugging the turtle into an USB port of the computer and the network cable into the LAN turtle. When trying to access one of the spoofed DNS names, the target instead opens your pre-configured html file.		Once the spoofed hosts are configured, connect the LAN Turtle to the target computer via USB and plug in the network cable. The traffic to spoofed domains will now be redirected to your pre-configured server. Simply plugging the turtle into an USB port of the computer and the network cable into the LAN turtle. When trying to access one of the spoofed DNS names, the target instead opens your pre-configured html file.

	=== Information Gathering with nmap ===		=== Information Gathering with nmap ===

2024-12-08T17:08:24Z

Start / Stop modules

← Older revision		Revision as of 17:08, 8 December 2024
Line 68:		Line 68:

	==== Start / Stop modules ====		==== Start / Stop modules ====
	Modules ~~may~~ be ~~started~~, ~~stopped and configured using~~ the ~~Modules~~ menu of the ~~turtle~~. Alternatively they this can be done via the command line:<br>		Modules can be managed (start, stop, configure) via the Turtle's graphical menu or through the command line. Alternatively they this can be done via the command line:<br>
	<code>		<code>
	/etc/turtle/modules $module configure<br>		/etc/turtle/modules $module configure<br>

2024-12-08T17:01:18Z

Setting up the LAN Turtle

← Older revision		Revision as of 17:01, 8 December 2024
Line 23:		Line 23:

	# Connect the LAN Turtle to your computer by plugging it into a USB port. (The startup takes around 30 seconds).		# Connect the LAN Turtle to your computer by plugging it into a USB port. (The startup takes around 30 seconds).
	# Your computer will get an 172.16.84.x address as soon as the startup sequence of the turtle finished. If not, ~~then you have to statically~~ configure an IP ~~out of~~ the 172.16.84.0/24 range.		# Your computer will get an 172.16.84.x address as soon as the startup sequence of the turtle finished. If your computer does not automatically receive an IP address (172.16.84.x), configure a static IP manually within the 172.16.84.0/24 range.
	# Connect to the turtle with <code>ssh root@172.16.84.1</code> and enter the password <code>elvisLab</code> (default password after factory reset is <code>sh3llz</code>)		# Connect to the turtle with <code>ssh root@172.16.84.1</code> and enter the password <code>elvisLab</code> (default password after factory reset is <code>sh3llz</code>)
	# The simplistic graphical shell interface will prompt you to change the password but the old one is also allowed.		# The simplistic graphical shell interface will prompt you to change the password but the old one is also allowed.

2024-12-08T17:00:15Z

Setting up the LAN Turtle

← Older revision		Revision as of 17:00, 8 December 2024
Line 22:		Line 22:
	=== Setting up the LAN Turtle ===		=== Setting up the LAN Turtle ===

	# ~~Plug~~ the LAN ~~turtle~~ into ~~one of the~~ USB ~~ports of your computer~~ (The startup takes around 30 seconds).		# Connect the LAN Turtle to your computer by plugging it into a USB port. (The startup takes around 30 seconds).
	# Your computer will get an 172.16.84.x address as soon as the startup sequence of the turtle finished. If not, then you have to statically configure an IP out of the 172.16.84.0/24 range.		# Your computer will get an 172.16.84.x address as soon as the startup sequence of the turtle finished. If not, then you have to statically configure an IP out of the 172.16.84.0/24 range.
	# Connect to the turtle with <code>ssh root@172.16.84.1</code> and enter the password <code>elvisLab</code> (default password after factory reset is <code>sh3llz</code>)		# Connect to the turtle with <code>ssh root@172.16.84.1</code> and enter the password <code>elvisLab</code> (default password after factory reset is <code>sh3llz</code>)

2024-12-08T16:59:51Z

Hardware Specifications

← Older revision		Revision as of 16:59, 8 December 2024
Line 8:		Line 8:
	* 64 MB DDR2 RAM		* 64 MB DDR2 RAM
	* 10/100 Ethernet Port		* 10/100 Ethernet Port
	* USB Ethernet Port – Realtek RTL8152		* USB Ethernet Port: Realtek RTL8152 chipset.
	* Indicator LED (Green Power, Amber Status)		* Indicator LED (Green Power, Amber Status)
	* Button (inside case for Factory Reset / Firmware Recovery)		* Button (inside case for Factory Reset / Firmware Recovery)

2024-12-08T16:59:25Z

Hardware Specifications

← Older revision		Revision as of 16:59, 8 December 2024
Line 4:		Line 4:

	== Hardware Specifications ==		== Hardware Specifications ==
	* Atheros AR9331 SoC at 400 MHz MIPS		* Processor: Atheros AR9331 SoC (400 MHz, MIPS architecture)
	* 16 MB Onboard Flash		* 16 MB Onboard Flash
	* 64 MB DDR2 RAM		* 64 MB DDR2 RAM