Hacking Gear: 10 Essential Gadgets Every Hacker Should Try « Null Byte :: WonderHowTo

If you've grown bored of day-to-day hacking and need a new toy to experiment with, we've compiled a list of gadgets to help you take password cracking and wireless hacking to the next level. If you're not a white hat or pentester yourself but have one to shop for, whether for a birthday, Christmas present, or other gift-giving reason, these also make great gift ideas.Some items featured in this article may not appeal to every penetration tester. As hackers, we each develop our own areas of expertise and interests.Wi-Fi enthusiasts might appreciate the below antenna as it's capable of capturing keystrokes over-the-air similar to how WPA2 handshakes are captured. Others with an interest in quadcopters might enjoy the featured drones for their ability to fly 1–2 miles away without losing a signal and carry attached hardware such as the Wi-Fi Pineapple and Raspberry Pi.1. Mousejacking Exploit AntennaIn 2016, the security firmBastillemadeheadlineswhen it reported its research on wireless keyboard and mouse vulnerabilities. Dubbed "mousehacking," these vulnerabilities allow an attacker (up to 300 feet away) to take control of a target computer without needing physical access. These attacks allow for remote keystroke injections by letting penetration testers anonymously pair their device to a target computer that is using popular wireless keyboard adapters (shown below).Image by Bastille/YouTubeThis attack is made possible due to keyboard vendors (Logitech and Dell) failing to encrypt data transmissions between the keyboard and USB adapter or failing to properly authenticate devices communicating with the adapter. It's been over two years since the vulnerabilities were disclosed but there are reportedly more than a billion affected devices worldwide as Logitech and Dell are extremely popular manufactures of wireless keyboards.For more information on this attack, check out Bastille's official website for alist of affected devicesandtechnical details.The "Crazyradio USB Dongle" used in these attacks is a 2.4 GHz bi-directional transceiver which can send and receive radio telemetry. Essentially, this USB dongle is capable of observing, recording, and injecting wireless radio waves.Crazyradio USB Dongle - MSRP $44.99 (Amazon)Image by Bastille/YouTube2. GPUs for Password CrackingAgraphics processor(GPU) is chip, usually embedded in an internal graphics card attached to a computer's motherboard, designed to efficiently process images and alter memory insmartphones, personal computers, and gaming consoles. GPUs are responsible for all of the video and image rendering on our electronic devices.Hackers repurpose GPU technologies and build dedicated "cracking rigs" to enhance password brute-forcing attacks withHashcat. This kind of usage is demonstrated in Tokyoneon's "Hack 200 Online User Accounts in Less Than 2 Hours" article, where he compromised hundreds of Twitter, Facebook, and Reddit accounts by using a GPU to crack hashes found in aleaked password database.GeForcegraphics cards are a great starting point for hackers who are considering building a dedicated brute-force machine. At just $189, theGeForce GTX 1050 Tiis a good starter GPU.EVGA GeForce GTX 1050 Ti - MSRP $219.99 (Amazon|Best Buy|EVGA|Walmart)TheZOTAC GTX 1050 Ti MiniandMSI GTX 1050 Ti OC.Image by Linus Tech Tips/YouTubeIf you're looking to take cracking more seriously, develop acluster of GPUsto multiply brute-forcing power with theGTX 1080 Ti. The GTX 1080 will becapableof cracking tens of millions more hashes per second and therefore might be a better investment. This model has been superseded by theRTX 2080 Ti, so you could also go that way if you can afford it.EVGA GeForce GTX 1080 Ti - $899.99 & Up (Amazon)TheNvidia GEFORCE GTX 1080 Ti Founder's Edition.Image by Linus Tech Tips/YouTube3. The World's Smallest LaptopsTheGPD Pockethas been dubbed "the world's smallest laptop," which is an interesting option for white hats and pentesters always on the go. It features the Intel Atom X7, 1920 x 1080 resolution, and 8 GB of RAM packed into a small-sized laptop that's only a bit larger than most modern smartphones (shown below).GPD Pocket - MSRP $599 (Amazon|eBay|GPD|Walmart)Image by Chigz Tech Reviews/YouTubePocket-sized PCs are growing in popularity due to their small size, physical keyboards, ability to handle high-performance games, and Intel CPUs which are superior to ones found inRaspberry Pisandsmartphones.Pentesters can easily install avariety of Linux operating systemson this device includingUbuntu,Kali Linux, andBlackArchin place of the default Windows 10.If you're looking for a bit more power in a slimmer laptop, the latestGPD Pocket 2features better hardware specs and is 50% thinner than the previous model.GPD Pocket 2 - $799 (Amazon|GPD|Indiegogo)Image by Liliputing/YouTube4. The Latest Raspberry PiThe Raspberry Pi 3 Model B+ was released this year featuring a slightly faster CPU, upgraded Wi-Fi and Ethernet modules, and can be powered without a traditional power adapter using the Ethernet port (with aPoE HAT).Null Byte has covered how tobuild a hacking Raspberry Pi,use VNC to remotely access it, andcreate a portable pentesting Pi box, to name just a few tutorials. Using a Raspberry Pi as a hacking tool has been covered at length, so I'll move on.Raspberry Pi 3 B+ - MSRP $35 (Amazon|Walmart)With power supply - MSRP $47.95 (Amazon)With power supply and case - MSRP $54.99 (Amazon)With power supply, case, 16 GB SD card, etc. - MSRP $74.95 (Amazon)With power supply, case, 32 GB SD card, etc. - MSRP $79.95 (Amazon)With power supply, case, 32 GB SD card, cables, etc. - MSRP $94.95 (Amazon)Image by Kody/Null Byte5. The USBarmoryTheUSB Armoryis a computer about the size of a USB flash drive designed to deliver a number of advanced security features. It was built to support the development of several security software and applications while reducing power consumption. As perthe developer's keynote at FSec 2016, the USB Armory can be used for:file storage with advanced features such as automatic encryption, virus scanning, host authentication, and data self-destructOpenSSH client and agent for untrusted hostsrouter for end-to-end VPN tunnelingpassword manager with an integrated web serverelectronic wallet (e.g., Bitcoin wallet)authentication tokenportable penetration testing platformlow-level USB security testingIt also has excellent support forUbuntu, Debian, andAndroidoperating systems. For an in-depth look at the USB Armory, check out theofficial websiteanddocumentation.Inverse USB Armory - MSRP $140 (Amazon|Crowd Supply|Hacker Warehouse)Image by Inverse Path/Crowd Supply6. VPS SubscriptionsAvirtual private server(VPS) is a computer we can control remotely from any internet-connected device in the world. Adding a reliable VPS subscription to your arsenal is essential to any penetration tester and professional security researcher. From a remote VPS, penetrations testers can:host payloads forhacking macOSandWindows 10securely sync filescreate IRC botshost phishing websitesperform password brute-force reuse attackshost USB drop payloadsuse advanced Nmap scriptscreate server proxiescreate onion websiteshost Metasploit sessionsOur favorite for white hats and pentesters isBulletShieldsince it does not require or request any personal info when registering or paying, offers offshore solutions, and has a Tor-friendly website, among other things. Check out the full guide to picking the right VPN below for more info.More Info:The White Hat's Guide to Choosing a Virtual Private Server7. Hak5 GearHak5is anaward-winning podcastthat offers immersive information security training and renownedpenetration testing gear. Below are some of the excellent tools Hak5 has to offer.The USB Rubber DuckyTheUSB Rubber Duckyis Hak5's USB keystroke injection tool capable of executing payloads at over 1,000 words per minute. It can be used tohack a macOS device in less than 5 seconds,disable antivirus software, orsocial engineer someone into plugging it into their computer.USB Rubber Ducky - MSPR $44.99 (Hak5)Image by SADMIN/Null ByteBash BunnyTheBash Bunnyis a multi-functional USB attack tool similar to the USB Rubber Ducky. However, the Bash Bunny is a full-featured Linux operating system which gives it a number of advantages over the USB Rubber Ducky such as carrying multiple advanced payloads, emulating a combination of devices, and performing numerous advanced attacks. Penetration testers with a need to take their physical attacks to the next level will appreciate this one.Bash Bunny - MSRP $99.99 (Hak5)Image by Hak5/YouTubePacket SquirrelThePacket Squirrelis a pocket-sized man-in-the-middle attack tool designed for covert packet capturing and secure remote access to target networks. Ports on this small network implant include a USB and Ethernet.Packet Squirrel - MSRP $59.99 (Hak5)Image via Hak5LAN TurtleTheLAN Turtleis a covert penetration testing tool great for network intelligence gathering, advanced surveillance, and man-in-the-middle attacks all available via a graphical shell. It ships equipped with SIM (3G) functionalities and a modular framework that allows hackers to very easily execute and automate advanced network attacks.LAN Turtle - MSRP $59.99 (Hak5)Image by Hak5/YouTubeWiFi PineapplesTheWiFi PineappleandWiFi Pineapple Nanoare excellentrogue access pointandWi-Fi auditing devices. Their suite of Wi-Fi auditing tools is designed to make reconnaissance, man-in-the-middle attacks, and hacking wireless networks quick and painless. Best of all, all of these features can be accessed using any phone or web browser via the easy-to-use graphical interface.WiFi Pineapple Tetra Basic - MSRP $199.99 (Hak5)WiFi Pineapple Nano - MSRP $99.99 (Hak5)WiFi Pineapple Terta Tactical - MSRP $299.99 (Hak5)WiFi Pineapple Nano Tactical - MSRP $129.99 (Hak5)Image by Hak5/YouTube8. Standard Wi-Fi Hacking AdapterWi-Fi hackingis a popular topic among penetration testers. Our ability tocompromise wireless networkswith ease is an essential skill. So a wireless adapter is something you can't do without, preferably one that'sKali-compatible. Some choices that are worth looking into include:ALFA AWUS036NHA - $39.99 (Amazon)ALFA AWHUS036NH - $34.99 (Amazon)ALFA AWUS036NEH - $31.45 (Amazon)Panda PAU05 - $13.99 (Amazon)TP-Link TL-WN722N v1 - $9.99 (Amazon)For more information, check out our Null Byte guide on choosing a wireless network adapter to see more options that are available for your specific needs.More Info:Buy the Best Wireless Network Adapter for Wi-Fi Hacking in 2018TheALFA AWHUS036NH.Image by SADMIN/Null Byte9. Long-Range Wi-Fi Hacking AntennaIf standard Wi-Fi hacking antennas aren't getting the job done, increasing the signal coverage and range with a bigger antenna will allow us to compromise routers much further away.TheTupavco TP512 Yagi Wi-Fi Directional Antennahas customer reviews reporting up to 300 feet of range. Some reports online claim up to 1 mile of range where an unobstructed line of sight to the target router is permitted. There are other vendors selling similarYagiproducts and bundles. For example,ALFA's Yagi Antennaincludes an ALFA hacking chipset and the necessary cable adapter.Tupavco TP512 Yagi - $25 (Amazon)ALFA Yagi Antenna - $91 (Amazon)Image by ALFA/Amazon10. Hacking with DronesWithdrone racingrising in popularity over the last few years, these small quadcopters are quickly becoming the DIY-hackers gadget of choice.Project Cuckoois theWatch Dogs-inspired pentesting drone, created by the hacker known as "Glytch." This 3D-printed drone features an attached WiFi Pineapple Nano which allows it toperform man-in-the-middle attacks and inject malicious JavaScript into Wi-Fi hotspotsas well asstealthfully sniff Wi-Fi activity without connecting to the router.In upcoming Null Byte articles, we'll be talking about building our own affordable hacking drone and demonstrating all of the unique scenarios penetration testers can utilize with such devices.3D printers on Amazon(of decent quality) start at around $299. Add the price of thematerials, individual drone components, and a remote control — that's well over $500 spent building a hacking drone from scratch. If you're looking for a quicker solution or lack the patience to deal with the technical ins and outs of 3D printing and drone building, there are alternatives.TheDJI Spark Droneis a small, lightweight drone that includes a remote control for a total of $399. With up to 15 minutes of flight time, a range of up to 1.2 miles, and an attached12 MP 1080p video camera, this is possibly the best, most affordable little drone currently on the market.If your budget allows for a wider range of drones, the "DJI Mavic Drone" may be a better option. Itfeaturesa higher resolution camera, up to 2.4 miles of range, 8 GB of internal storage (for video recording), 3-axis mechanical gimbal (for improved stability), and over 20 minutes of flight time.DJI Spark Controller Combo - MSRP $399 (Amazon|Best Buy|DJI|Walmart)Mavic Air Combo - MSRP $999 (Amazon|Apple|Best Buy|DJI|Walmart)TheDJI Spark Drone.Image by Brendan Miranda/YouTubeBonus: E-Books & Learning MaterialsWhile e-books aren't physical gadgets, I thought this was worth mentioning as every penetration tester should have a healthy supply of learning resources at their disposal.Null Byte is an excellent repository for learning how to useMetasploitas well as how to hackmacOSandWindows 10. However, e-books and certification exam preparation cookbooks contain vast amounts of information. These materials are often created by veteran pentesters with over a decade of hands-on professional experience. Novice hackers who have prepared for any kind of ethical hacking exam will tell you how valuable these learning materials can be.A variety of learning materials can sometimes be found for free on websites like "All IT eBooks." While some of these e-books are several years old, they still contain relevant and useful information. Other (non-free) titles include:The Hacker Playbook 3: Practical Guide To Penetration TestingCompTIA Network+: Certification All-in-One Exam Guide, Seventh EditionCompTIA CySA+: Cybersecurity Analyst Certification All-in-One Exam GuideCEH: Certified Ethical Hacker Bundle, Third Edition (All-in-One)CompTIA PenTest+: Certification All-in-One Exam GuideCISSP: All-in-One Exam Guide, Eighth EditionHash Crack: Password Cracking ManualKali Linux Web Penetration Testing Cookbook: Identify, exploit, and prevent web application vulnerabilities with Kali, 2nd EditionWhat Are Your Picks for Essential Hacking Gear?We tried to compile a diverse list of hacking tools and gadgets intermediate penetration testers might appreciate. If you're looking to explore weaponized hacking drones, extend the range of your Wi-Fi router hacks, or dive deeper into password cracking, the featured gadgets should provide a good starting point.This list of hacker gear might not appeal to everyone, however. Did we miss any noteworthy or new gizmos hackers should know about? Be sure to leave a comment below with your picks for the essential gadgets hackers should try!Don't Miss:Null Byte's Guides to Hacking macOSFollow Null Byte onTwitter,Flipboard, andYouTubeSign up forNull Byte's weekly newsletterFollow WonderHowTo onFacebook,Twitter,Pinterest, andFlipboardWant to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover image viaBrendan Miranda/YouTubeRelatedNews:How to Study for the White Hat Hacker Associate Certification (CWA)News:Always-Updated List of Android 10 Custom ROMs for Every Major PhoneCyber Monday Deals:Get the Essential Phone for the Cheapest It's Ever BeenNews:Essential Phone Comes with an LED Notification Light — And It Better for That PriceNews:Essential Phone 2 Reportedly Canceled, Rubin Looking to SellNews:Essential Releases Oreo Beta 2 UpdateHow To:The Essential Skills to Becoming a Master HackerNews:Android Co-Founder Andy Rubin Gives Us a Sneak Peek into Essential's New Bezel-Less SmartphoneNews:The Biggest Bugs & Performance Issues in the Essential Oreo UpdateHow To:Pack the 10 most important survival essential for any trip to the wildernessFitness Lovers Alert:Get Ready for the New Adidas Workout App 'All Day', Out in Beta TodayHow To:Remove Stock Apple Apps on Your iPhoneNews:Oculus Releases Minecraft for the Samsung Gear VRNews:The Best New Features in the Essential Phone Oreo UpdateNews:PSA—iOS 10 Beta Might Eat Up All Your DataNews:Top 10 Bukkit PluginsHow To:Timehop Breach Impacts Everyone Who's Ever Used the App — Here's How to Check What Info Leaked About YouTypoGuy Explaining Anonymity:A Hackers MindsetNews:Apple Says iPhone & iCloud Are Safe After Claimed Breach by 'Turkish Crime Family'WANTED:Hackers for Bug BountiesNews:You May Need to Switch to Sprint to Get the Essential PhoneNews:White House Hacked by Russian Hackers!Advice from a Real Hacker:How to Create Stronger PasswordsNews:Essential Phone Drops Three Stunning New Colors [Photos]News:Gear 360 VR Camera Set to Accompany Galaxy S7; Announcement Date SetBuyer's Guide:Top 20 Hacker Holiday Gifts of 2018News:Oculus Demos Minecraft for Gear VR, Complete with a Side of NauseaBecome an Elite Hacker, Part 1:Getting StartedNews:Student Sentenced to 8mo. in Jail for Hacking FacebookCommunity Byte:HackThisSite Walkthrough, Part 6 - Legal Hacker TrainingNews:TOON BUILDSCommunity Byte:HackThisSite Walkthrough, Part 2 - Legal Hacker TrainingCommunity Byte:HackThisSite Walkthrough, Part 5 - Legal Hacker TrainingCommunity Byte:HackThisSite, Realistic 3 - Real Hacking SimulationsNews:Anonymous Hackers Replace Police Supplier Website With ‘Tribute to Jeremy HammHow To:10 DIY Hangover Cures for Your Upcoming New Year's Eve FestivitiesNews:Galaxy S7 Preorders Open February 21st, Include Free Gear VR