10 Essential Gadgets For Any Ethical Hacker
Tags: Beginner, Tools, Technology, Programming, Hacking

10 Essential Gadgets For Any Ethical Hacker

Image by Pixabay

Sometimes, in security audits, you may face a scenario in which everything is managed correctly, which means; security patches, policies, network segmentation, antivirus and user awareness are well applied.

It is then that, to continue the analysis from the perspective of researcher or security consultant, Social Engineering and some other tools like the ones we will see throughout the post begin to have a more important value, being perhaps the only ones that will allow to penetrate the target system.

These are hardware mostly designed for security projects or research.

Here are the 10 tools every ethical hacker needs.

#1 Raspberry Pi 3

This is the third generation of these low-budget computers, which can be used for multiple purposes. A classic example in security audits is to use a Raspberry Pi with its appropriate batteries, a distribution like Kali Linux and applications like FruityWifi, which will become the Swiss pentesting knife.

#2 WiFi Pineapple

This set of tools for wireless penetration testing is very useful for different types of attacks, such as the classic Man-In-The-Middle. Through an intuitive web interface, it allows you to connect to any device such as smartphones or tablets. It highlights its ease of use, workflow management, the detailed information it provides and the ability to emulate various advanced attacks, which are always a couple of clicks away.

As a platform, pineapple WiFi allows numerous modules that are developed in the community which add features to expand its functionalities. Fortunately, these modules are installed for free directly from the web interface in seconds.

#3 Red Alfa Plates

A classic in terms of the Wi-Fi plates used for packet injection. They stand out for the quality of their materials, as well as using chipsets that allow them to be put into monitor mode, which is a requirement for wireless audits.

#4 Rubber Ducky

This “special” pendrive is a device that functions as a USB-shaped programmed keyboard. When you connect to a computer, you can start writing to the device in an automated way in order to launch programs and tools. These programs or tools may either be on the victims’ computer or loaded into the Micro SD memory, to get information out.

Image by Pixabay

(If you watched the American drama thriller Mr. Robot, you’ll remember that in the second season Rubber Ducky is a key ally for Angela and helps her get the login credentials of an E Corp executive)

#5 Lan-Turtle

This type of penetration testing and system management tool provides remote access stealthily, as it remains connected to a USB port covertly. In addition, it allows the collection of information from the network and has the ability to run Man-In-The-Middle.

#6 HackRF One

This tool implements a powerful software-defined radio (SDR) system — that is; it’s, essentially, a radio communication device that implements software usage rather than typically implemented hardware. In this way, it is capable of handling all kinds of radio signals between 10 MHz and 6 GHz from the same peripheral, connectable to the computer via a USB port.

#7 Ubertooth One

This device bases its source on a 2.4 GHz open source development platform suitable for Bluetooth experimentation so that you can appreciate the different aspects in new wireless technologies of this type.

#8 Proxmark3-kit

The Proxmark III is a device developed by Jonathan Westhues that has the ability to read almost any RFID tag (Radio Frequency Identification), as well as reproduce or snever them. In addition, it can be operated autonomously — without the need for a PC by using batteries.

#9 Lock picks

It is important to consider that in some countries your possession is considered illegal, so we do not recommend any action that goes against the law; please check the regulations in your country before purchasing such tools.

It earns the main lockpicking links, i.e. the art of opening a lock or physical security device by analyzing or manipulating its components, logically, without having the original key. There are a large number of sizes and formats or kits, which in many cases will help to check physical security.

#10 Keylogger Keyboard

An ancient classic in key capture. This device can be connected via USB or PS/2 and allows stealth connection between the keyboard and the PC, capturing all the keys used. Of course, it is usually undetectable for most security systems.

While we’re still away from Christmas, you may be happy to give yourself some of these devices, which will undoubtedly accompany you in many hours of testing.

Overall, in your next pentest, they could be the gateway to a target that seemed impenetrable :)