|
|
| (3 intermediate revisions by 3 users not shown) |
| Line 1: |
Line 1: |
| == Summary == | | {{Device|device_name=Shark Jack network attack tool|manufacturer=Hak5|link=https://lab401.com/products/shark-jack|image_link=https://stuff.elvis.science/uploads/models/assetmodel-image-8EubvbfP6k.png|description=Portable network attack tool, fast nmap scans. The Shark-Jack is a pen-testing utility developed by the ”Hak5” company and is designed for Ethernet plug and play vulnerability scanning in LANs. In its most basic form, it is essentially a small Linux-machine with a built-in Ethernet plug. The modest, portable physical nature of the device allows for quick and secretive reconnaissance activity. The Shark-Jack consists of following physical components: USB-C charging port, Battery, Status LED, RJ45 Ethernet Jack, MT7628DAN Mikrocontroller, 64 MB RAM, Casing with mode-switch. |
| [[File:Shark_Jack.jpg |thumb|right|600px||Shark Jack]]
| |
|
| |
|
| The Shark Jack is a penetration tool for penetration testers and system administrators looking like a simple USB-Stick. It consists of three main components: a LAN-Port for configuration and executing pentests (which also uses a RGB-LED for visual responses), a USB-C port for charging and a slider to change modes. It provides possibilities to perform network audits and information gathering attacks. These functions are provided by the packages which are installed on the Shark Jack. The packages are provided by the OpenWRT platform, which means that users can add other packages than the preinstalled ones. Regarding the phases of penetration testing, Shark Jack is in phase 2, information gathering.
| | |technicalSpecification=https://docs.hak5.org/shark-jack/|supportedTechnologies=Ethernet, USB|includedEquipment=1x shark jack, 1x instruction card|elviscategory=Security/Crypto}} |
| | |
| == Description ==
| |
| | |
| === Modes ===
| |
| | |
| * OFF (Slider is in position nearest to USB-C) - charging
| |
| * Arming (Slider is in middle position) - configurating
| |
| * Attack (Slider is in position nearest to LAN) - pentesting
| |
| | |
| === Setting up the Shark Jack ===
| |
| | |
| # Change mode to arming.
| |
| # Plug the Shark Jack into one of the LAN ports of your computer.
| |
| # Your PC will get an IP-address in range 172.16.24.0/24.
| |
| # Connect via SSH to 172.16.24.1.
| |
| # You are now connected to the Shark Jack.
| |
| | |
| === Folder structure ===
| |
| | |
| The Shark Jack folder structure consists of two predefined directories:
| |
| * payloads
| |
| * loot
| |
| The payloads directory is the place where the code is located which you want to be executed when the Shark Jack is in Attacking Mode. The filename of the code needs to be <code>payload.sh</code>. Only one payload script may exist at a time. The loot directory is the place where you can save the results of the network attack.
| |
| | |
| === Installing/updating packages (optional) ===
| |
| | |
| # [[#Setting_up_the_Shark_Jack|Connect]] to your Shark Jack to your PC.
| |
| # Enter the command <code>NETMODE DHCP_CLIENT</code>
| |
| # The Shark Jack will now act as a normal client waiting for an IP-address from an DHCP-Server.
| |
| # Connect the Shark Jack to your router.
| |
| # Gather the IP-addres of the Shark Jack (Web interface of the router or form the DCHCP-Server).
| |
| # Connect via SSH to the new IP addres (e.g., 192.168.0.153).
| |
| # Use <code>opkg upgrade [package]</code> for updating packages or <code>opkg install[package]</code> for installing new packages.
| |
| | |
| === Updating firmware (optional) === | |
| | |
| # Download latest update from https://downloads.hak5.org/shark
| |
| # [[#Setting_up_the_Shark_Jack|Connect]] to your Shark Jack to your PC and also connect the USB-C port to a reliable power source.
| |
| # Copy the firmware file to the Shark Jack (e.g., with scp)
| |
| # Change to the directory where the firmware file is located.
| |
| # Execute following command <code>sysupgrade -n [filename]</code>
| |
| # Wait 5-10 minutes while the firmware is flashed.
| |
| # DO NOT unplug the Shark Jack during the update process!
| |
| | |
| === C2 === | |
| | |
| #C2 is a dashboard created by hak5 for tools from hak5, which can be easily set up on a local server for free. With C2, data can be inspected directly in the dashboard and the current state of the device can be viewed. It is also possible to let Shark Jack execute commands like nmap without a previously uploaded payload.
| |
| | |
| === Hardware ===
| |
| | |
| # Size: 62 x 21 x 12 mm
| |
| # Charging plug: USB-C
| |
| # Microcontroller: MT7628DAN
| |
| | |
| === How to attack === | |
| | |
| # Shark Jack must be connected to a router or a switch to perform an attack
| |
| | |
| === How to defend ===
| |
| | |
| # Routers and switches must not be accessible to unauthorized personnel
| |
| # Do not allow strangers to enter the company without supervision
| |
| # Disable unused ports
| |
| # Physically inspect routers and switches on a regular basis
| |
| | |
| == Examples ==
| |
| | |
| === nmap ===
| |
| The nmap payload is the default payload with which the Shark Jack is delivered.
| |
| It executes a nmap scan and saves the results in the loot directory.
| |
| | |
| === ipinfo ===
| |
| The ipinfo payload tries to gather information about private, public and gateway IP addresses of a network and saves the results in a log-file.
| |
| To obtain this information the external website http://ipinfo.io/ip is used.
| |
| | |
| === netdiscover ===
| |
| The netdiscover payload tries to gather information about a network even if the Shark Jack won't get an IP address from a DCHP-Server. There are two modes netdiscover can use: active and passive. In active mode netdiscover sends ARP packages into the network and tries to gather information about devices, which are currently online. The passive mode doesn't send packages on his own, instead it analyses the traffic of the network (see [[Sniffing_Devices]]).
| |
| | |
| == References ==
| |
| | |
| * https://hak5.org/products/shark-jack
| |
| * https://github.com/hak5/sharkjack-payloads/
| |
| * https://help.hak5.org/shark-jack/writing-payloads/included-tools
| |
| * [https://github.com/hak5/sharkjack-payloads/tree/master/payloads/library/recon/netdiscover nmap Github]
| |
| * [https://github.com/hak5/sharkjack-payloads/blob/master/payloads/library/recon/ipinfo/payload.sh ipinfo Github]
| |
| * [https://github.com/hak5/sharkjack-payloads/tree/master/payloads/library/recon/netdiscover netdiscover Github]
| |
| | |
| [[Category:Pentesting]]
| |
