Softcover

ISBN 10: 0128007516 ISBN 13: 9780128007518

Publisher: Syngress, 2014

Hacking and Penetration Testing with Low Power Devices shows you how to perform penetration tests using small, low-powered devices that are easily hidden and may be battery-powered. It shows how to use an army of devices, costing less than you might spend on a laptop, from distances of a mile or more.

Hacking and Penetration Testing with Low Power Devices shows how to use devices running a version of The Deck, a full-featured penetration testing and forensics Linux distribution, and can run for days or weeks on batteries due to their low power consumption. Author Philip Polstra shows how to use various configurations, including a device the size of a deck of cards that can easily be attached to the back of a computer.

While each device running The Deck is a full-featured pen-testing platform, connecting systems together via 802.15.3 networking gives you even more power and flexibility. This reference teaches you how to construct and power these devices, install operating systems, and fill out your toolbox of small low-power devices with hundreds of tools and scripts from the book's companion website. Hacking and Pen Testing with Low Power Devices puts all these tools into your hands and will help keep you at the top of your game performing cutting-edge pen tests from anywhere in the world!

• Understand how to plan and execute an effective penetration test using an army of low-power devices
• Learn how to configure and use open-source tools and easy-to-construct low-power devices
• Leverage IEEE 802.15.4 networking to perform penetration tests from up to a mile away, or use 802.15.4 gateways to perform pen tests from anywhere in the world
• Access penetration testing operating systems with hundreds of tools and scripts on the book's companion web site

From the Author:

I hope you will journey with me into the exciting land of open source hardware and software.  In this book you will learn how to unleash the power of open source hardware from the Beagle family (BeagleBone Black, BeagleBoard-xM, and BeagleBone) in order to perform some powerful and exciting penetration tests from far away on an extremely modest budget.In this book you will learn how to perform penetration tests using multiple remote hacking drones, most of which can be built for well under one hundred dollars, which are remotely controlled from your command center up to a mile away.  Techniques for extending the distance between drones and the command center beyond a mile are also covered.  Unlike human penetration testers, these drones don't take breaks, eat, or sleep.  The book also covers some ways to leverage Python to limit human interaction during the penetration test.Is your access to the target limited?  Why not build the aerial hacking drone from Chapter 9.  Want some ideas on how to hide the drones and dropboxes discussed in the book?  Have a look at Chapter 8.  Perhaps you will read this book and decide you want to do something slightly different or develop your own Linux distribution.  Chapters 3 and 4 cover building your own custom Linux in a semi-automated way.  These chapters also provide an introduction to shell scripting.  Are you interested in connecting multiple devices together in a mesh network, be it for penetration testing or some other purpose?  This is covered extensively in Chapter 7.Do you want to build simple battery-powered power supplies that can power a BeagleBone for days, weeks, or even months?  You guessed it, that is in the book too.You can choose how hands on you wish to get with hardware hacking.  All of the things described in this book can be done with commercially available hardware.  Some of this hardware is also available in kit form for those wishing to bust out a soldering iron.  Finally, for the truly adventurous, the book will walk you through etching your own custom printed circuit boards.

From the Inside Flap:

ForewordSo I will start out this foreword by warning you dear reader of the power you nowhold in your hands! This book does not only educate but also create a definingmoment on how business, organization, and people will from now on look at theirnetwork security. For too long we have led ourselves to believe that the dangersof our online interactions were limited and shielded because of the need for an Inter-net connection or an IP address. Well, no more! The author has brought to light thegrim truth that without physical security you have no online security. He shows howeveryday gadgets, gizmos, and computer accessories that we take for granted can beused to penetrate our networks. He shows that the sky is now literally no longer thelimit. By showing how devices ready to attack your network can even fly to theirtarget! These devices are not from the future; they are not even from DARPA!He will walk you through how you too can create these cyber-weapons usinglow-cost parts and this book. The golden age of cyberwar has long since passedwhere only nation states had this power. Thanks to the author's diligent efforts,he has brought this kind of know-how and technology to the masses! This bookshould be given to every CIO, CEO, CFO (well, any person who has a title that startswith "C"), so that they can realize the threats that are out there! I've said, "I don'thave to bypass your firewall if I can bypass your receptionist." Well, the author doesan excellent job showing in graphic detail just how easy that has become. This is not abook for those who are afraid to look into the void (or into their current informationsecurity policies and procedures)! This is a book for those who dare to ask, "Whydoes that power plug have an Ethernet cable attached to it?" and who are never afraidto ask, "I wonder what this does?" This is not a "light reading on a rainy Sundayafternoon" book. This is a "break out the soldering iron, my laptop, and a box of bandaids" book! Go forth, reader, and learn of the wonders of weaponizing your mouse,making a toy robot more terrifying than the Terminator, and how sometimes seeing ablue police box should fill you with dread!I'm serious, this is a great book and I've learned some really great things from it.Enjoy!Jayson E. StreetJune 2014