{"id":8284,"date":"2016-09-25T21:50:56","date_gmt":"2016-09-25T21:50:56","guid":{"rendered":"http:\/\/tajdini.net\/blog\/2016\/09\/25\/pwnoi-kali\/"},"modified":"2020-12-20T11:17:55","modified_gmt":"2020-12-20T09:17:55","slug":"pwnoi-kali","status":"publish","type":"post","link":"https:\/\/tajdini.net\/blog\/linux-and-open-source\/pwnoi-kali\/","title":{"rendered":"PwnPi & Kali Installation Guide"},"content":{"rendered":"
\n

<\/p>\n

<\/p>\n

Penetration Testing<\/span> Distributions for Raspberry Pi<\/span><\/h1>\n

PwnPi is a penetration testing distribution for the Raspberry Pi, this guide will explain how to install it for your Raspberry Pi. The best way to describe it can be found on the PwnPi website[1]<\/span><\/span><\/span><\/span><\/a>:<\/p>\n

\u201cPwnPi is a Linux-based penetration testing dropbox distribution for the Raspberry Pi. It currently has 200+ network security tools pre-installed to aid the penetration tester. It is built a stripped down version of the Debian Wheezy image from the Raspberry Pi foundation\u2019s website and uses Openbox as the window manager. PwnPi can be easily setup to send reverse connections from inside a target network by editing a simple configuration file.\u201d<\/span><\/p>\n

You will need a 4 GB SD card to flash the image to. You can use a program like Ubuntu startup disk creator<\/b> or you can use dd<\/b> or dcfldd<\/b> on Linux<\/span>, or use Win32 Disk Imager <\/b>or<\/span> RUFUS <\/b>on Windows.<\/p>\n

Here is dd<\/b> method for this example but if need to use dcfldd<\/b> just swap out dd <\/b>for dcfldd <\/b>in the following command:<\/p>\n

sudo dd bs=1M if=<PATH TO FILE> of=<\/dev\/sdX> && sync<\/span><\/em><\/p>\n

Replace <PATH TO FILE> and <\/dev\/sdX> with the relevant information, if you don\u2019t know where your SD card is mounted run lsblk<\/b> to find out, for example the command can be looked like this :<\/p>\n

sudo dd bs=1M if=\/root\/Downloads\/pwnpi-3.0.img of=\/dev\/sdb && sync<\/span><\/em><\/p>\n

When the command is finished safely remove your SD card and insert it into your Raspberry Pi, plug in the power and let it boot up. PwnPi should be ready to use, enjoy pen-testing!<\/p>\n

Of course to install Kali all steps are same just to download Raspberry version of Kali should use Kali project official website[2]<\/span><\/span><\/span><\/span><\/a> and choose suitable version for your Raspberry Pi model under RaspberryPi Foundation part of this page.<\/p>\n

And it\u2019s better to use bs=512<\/b> for Kali and use command like below:<\/p>\n

sudo dd bs=512 if=\/root\/Downloads\/kali-2.1.2-rpi2.img.xz of=\/dev\/sdb && sync<\/span><\/em><\/p>\n

A note about the Raspberry Pi: if you have a keyboard and mouse plugged in (which you should) the Pi often takes more power than a standard AC adapter can provide. It\u2019s better to use a powered USB hub to make sure that all of peripherals work. However, the default PwnPi image is pretty out of date and may not support your USB mouse\/keyboard. Even if it does, it\u2019s a good idea to update Raspberry Pi to the latest versions of software. Before do this however, need to expand the file system to encompass the entire SD card.<\/p>\n

In PwnPi image file that wrote to the SD card constituted a bit-by-bit image of the file system; unfortunately this included a minimally sized data partition. If need to expand this partition. To do this, start the Raspberry Pi Software Configuration Tool by entering the following at console:<\/p>\n

raspi-config<\/p>\n

The first choice should be \u201cExpand file system<\/b>\u201d, which is the subject of this task. Press Enter<\/b><\/span> and follow the prompts. Reboot<\/b> when asked to. When the Pi has rebooted, it is possible to begin the process of updating its software. Enter Aptitude<\/b>, the package management system on the Pi by entering the following:<\/p>\n

aptitude<\/p>\n

Once in Aptitude<\/b>, press the \u201cu<\/b>\u201d key to get the list of latest updates available. The Pi will update the latest list of packages from the Raspbian sources. When it\u2019s finally finished updating there should be a large amount of packages available for update. Select \u201cUpgradable Packages<\/b>\u201d and press the \u2018+<\/b>\u2019 key. This will select all upgradable packages for installation. Press the \u2018g<\/b>\u2019 key to view what packages will be installed and press \u2018g<\/b>\u2019 again to begin downloading and installing. Wait a bit (for various definitions of bit) for all packages to finish download and install. When it\u2019s all said and done it will be prompted to press return to continue. This will bring you back into aptitude, from which pressing \u2018q<\/b>\u2019 will quit. The updates we installed included a new kernel which requires a reboot, so go ahead and do this at the console.<\/p>\n

reboot<\/p>\n

Once the Pi has rebooted start up the graphical user interface by entering the following:<\/p>\n

startx<\/p>\n

But if it\u2019s not directly connected to Monitor, then just with SSH should connect to Raspberry Pi and then install VNC Server. To Install TightVNC server package use this command:<\/p>\n

apt-get install tightvncserver<\/span><\/span><\/p>\n

for the first run of VNC Server to generate configuration files and VNC password enter:<\/p>\n

vncserver :1<\/p>\n

It started an X session on display port 1, note that by default VNC Server will attempt to start on display 0 which is already taken by the started Kali session used for local access<\/p>\n

The first time after run VNC Server, it prompts for a password (8 char max<\/b>). That\u2019s when VNC sessions are not linked to Linux user authentication but relies on a single password (one of VNC insecurity problems). It is possible later change that password using the vncpasswd<\/b> command.<\/p>\n

to check the VNC Server is running by issuing the netstat -tupln<\/b> command:<\/p>\n

tcp\u00a0\u00a0\u00a0 <\/span>0\u00a0\u00a0 <\/span>0\u00a0 <\/span>0.0.0.0:5901\u00a0\u00a0 <\/span>0.0.0.0:*\u00a0 <\/span>LISTEN\u00a0\u00a0\u00a0 <\/span>Xtightvnc<\/p>\n

tcp\u00a0\u00a0\u00a0 <\/span>0\u00a0\u00a0 <\/span>0\u00a0 <\/span>0.0.0.0:6001\u00a0\u00a0 <\/span>0.0.0.0:*\u00a0 <\/span>LISTEN\u00a0\u00a0\u00a0 <\/span>Xtightvnc<\/p>\n

tcp\u00a0\u00a0\u00a0 <\/span>0\u00a0\u00a0 <\/span>0 \u00a0<\/span>0.0.0.0:22\u00a0\u00a0\u00a0\u00a0 <\/span>0.0.0.0:*\u00a0 <\/span>LISTEN\u00a0\u00a0\u00a0 <\/span>sshd<\/p>\n

Port 5901 is VNC connection port, 6001 is X server for VNC.<\/p>\n


<\/p>\n
\n
\n

[1]<\/span><\/span><\/span><\/span><\/a> If you want any more information, head over to these 2 sites: http:\/\/pwnpi.sourceforge.net<\/a> or http:\/\/www.pwnpi.com<\/a>.<\/p>\n<\/p><\/div>\n

\n

[2]<\/span><\/span><\/span><\/span><\/a> https:\/\/www.offensive-security.com\/kali-linux-arm-images<\/a><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

Penetration Testing Distributions for Raspberry Pi PwnPi is a penetration testing distribution for the Raspberry Pi, this guide will explain how to install it for your […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[227,230],"tags":[254,4,5,230],"class_list":["post-8284","post","type-post","status-publish","format-standard","hentry","category-linux-and-open-source","category-penetration-testing","tag-kali-linux","tag-linux","tag-penetration-testing"],"_links":{"self":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8284","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/comments?post=8284"}],"version-history":[{"count":1,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8284\/revisions"}],"predecessor-version":[{"id":8610,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8284\/revisions\/8610"}],"wp:attachment":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/media?parent=8284"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/categories?post=8284"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/tags?post=8284"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}