dd bs=4M if=-raspbian-jessie-lite.img of=/dev/mmcblk0 In case you write the image to wrong device, you can overwrite your computers root disk. Note: Check with ‘ fdisk -l‘, ‘ df‘ or whatever that you are writing to right device. Raspberry Pi Zero (With or without Wifi)įirst, grab the latest version of Raspbian Lite image from:.(Note: Raspberry Pi Zero W can also be configured to work as a mass storage drive, keyboard/mouse, MIDI, serial…etc. Remote access and backdoors persist even after the device is removed.įirst we are going to install Raspbian lite to SD card, configure it and then we are going to setup the ethernet gadget and Poisontap with the ‘headless’ Raspberry Pi Zero W.Victim machine is not required to be unlocked.Allow the attacker to remotely force the victim to make HTTP requests and proxy back responses with the user’s cookies on any backdoored domain.Install a persistent backdoor (web-based) in HTTP cache for hundreds of thousands of domains and common javascript CDN URLs (with access to the user’s cookies via cache poisoning).Expose the internal router to the attacker and make it accessible remotely via WebSocket and DNS rebinding.Harvest and save HTTP cookies and sessions from the web browser.

Hijack Internet traffic from the victim machine.Emulate an Ethernet device (among other USB gadgets).tutorials don’t work anymore, I decided to write something that is vaguely like a tutorial.įor those, who don’t know what the poisontap is…When Raspberry Zero is configured as a USB Ethernet gadget and poisontap is installed into the device, it can do the following things (for example): I proceeded to order an Raspberry Pi Zero W so I could make some tests. Since I noticed that the original install scripts etc. I wanted to test and see how poisontap works with current version of Linux/Windows/OSx. Attacking locked computers with Poisontap

How to install dsniff on windows