Pentesting BBU Dropbox: 16 Cov Kauj Ruam

2024 Tus sau: John Day | [email protected]. Kawg hloov kho: 2024-01-30 09:26

Nov yog lub khoos phis tawj me me lub roj teeb thaub qab tau hloov mus rau hauv pentesting dropbox. Nws txhais tau tias yuav tsum teeb tsa tom qab khoos phis tawj lossis ib qho khoom siv sib txuas me me thiab mus tsis pom, thaum lub pentester muaj kev nkag mus deb rau hauv lub network los ntawm nws. Lub hom phiaj yog ua kom lub cuab yeej ua haujlwm tau zoo li ua tau, thaum tswj xyuas cov khoom qub ntawm BBU thawj. Cov khoom tseem ceeb yog lub plhaub thiab ob peb daim ntawm BBU qub, me me 5V tsib-chaw nres nkoj network hloov, thiab Raspberry Pi lossis ib lub computer me me uas yuav haum. Feem ntau ntawm cov khoom yog hloov pauv thiab tuaj yeem hloov pauv yooj yim yooj yim. Txhua yam tau tsim nrog cov cuab yeej yooj yim (tsis xav tau lub tshuab luam ntawv 3D!), Raws li kuv tau sim ua qhov no kom yooj yim dua thiab tsim raws li qhov ua tau. Ua tib zoo saib cov duab. Ob peb tuaj yeem ua me ntsis ntawm qhov xaj lossis pom ob zaug. Kuv tau ntxiv ob peb yam thaum kuv mus, thiab yuav tsum tau muab sib dhos thiab rov ua ntau dua. Tsom ntsoov rau kev ua cov haujlwm yooj yim kho tau tiag tiag pab tau!

Kauj Ruam 1: Sau Cov Khoom & Cov Cuab Yeej:

Nov yog cov npe ntawm cov khoom thiab cov cuab yeej uas kuv tau siv. PARTS:

• Roj teeb thaub qab chav tsev - tuaj yeem yog qhov loj me. Pom tseeb nws loj dua, ntau yam khoom koj tuaj yeem haum hauv rooj plaub!
• Lub Hlwb - Kuv siv Raspberry Pi 2 B uas kuv tau pw ib puag ncig.
• Kev hloov pauv Network - Kuv muaj tsib qhov chaw nres nkoj thiab tsuas yog 100Mb/s, tab sis cov chaw nres nkoj ntawm BBU tsis tshua muaj gigabit lawm.
• Lub hwj chim hloov pauv rau Pi - Kuv siv lub cev yuag heev 5V 2A phab ntsa wart nrog USB tso tawm.
• Lub zog hloov pauv rau qhov hloov pauv - Kuv hloov pauv 5V 800mA, yog li kuv siv qhov thib ob me me 5V 2A phab ntsa wart.
• Ntsuab lossis liab LED
• Momentary laub khawm - Ib qho uas tsuas yog koom nrog thaum raug nias.
• 270ish ohm resistor
• 10k-100k ohm resistor
• Hlau - Ntau qhov ntev, ntsuas, thiab xim
• Cov khoom sib txuas lossis ntsuas cov ntsuas - (Tsis teb los tau) Txhawm rau txuas LED thiab hloov mus rau GPIO ntawm Pi.
• 2 Ethernet cables - Yuav tsum tau ua kom luv thiab yoog raws.
• 2 Ethernet jacks - (Tsis teb los tau) Kuv tau siv ob peb lub solder -on jacks los ntawm lwm lub BBU, kom khaws cov khoom zoo.
• USB A rau micro USB cable - Txhawm rau lub zog Pi.
• USB A rau kab hluav taws xob cable - Txhawm rau hloov lub zog. Qhov no tuaj yeem ua tau.
• M3 screws & ceev - (Tsis teb los tau) Ua kom tshem tau yam.
• Raspberry Pi vesa mounting bracket

Cov cuab yeej:

• Phillips ntswj ntsia hlau
• Cov twj ntswj ntswj ruaj ntseg - Yog tias koj lub BBU muaj cov ntsia hlau ruaj ntseg
• Laum nrog laum ntsis
• Cov hlua hlau
• Hlau txiav
• Xaus snips
• Riam riam
• Soldering hlau & solder
• Kub kua nplaum phom & kua nplaum kub
• Dremel los yog pom
• Cov Ntaub Ntawv Tes - Yeem tau, tab sis zoo kom muaj.
• Super kua nplaum
• Tshav kub lossis phom
• Thaum tshav kub kub ntsws los yog daim kab xev hluav taws xob

Kauj ruam 2: Disassembley:

Qhov no yog qhov yooj yim heev.

1. Tshem tag nrho cov ntsia hlau ntawm lub roj teeb thaub qab thiab teeb lawv ib sab.
2. Tshem tag nrho cov khoom tsis tsim nyog, zoo li lub rooj tsav xwm qub thiab roj teeb.
3. Txuag cov khoom siv tau, zoo li ntau yam ntev ntawm cov xov hlau, lub hwj chim qaum, LEDs, RJ45 lub tsho, cov hloov pauv, thiab cov khoom thaiv nrog cov qhov hluav taws xob tsis tu ncua.
4. Tshem lub tsev yas ntawm lub network hloov kom txuag chaw.
5. Tsis tas li, tshem cov yas ntawm lub zog hloov pauv.

Kauj Ruam 3: Cov Hluav Taws Xob Hluav Taws Xob:

Tom ntej no, peb yuav pib txuas cov xov hlau thiab teeb tsa qhov chaw uas peb xav kom txhua yam mus. Kuv nyiam ntxiv cov xaim ntau ua ntej thiab txiav kom haum raws li kuv mus. • Txuas cov xov hluav taws xob los ntawm lub hwj chim qaum thiab muab cov xim dawb thiab ntsuab tso rau sab xis ntawm ib txheej ntawm cov tsheb npav tuav ntawm qhov hluav taws xob. Cov xim dub yuav tsum tau muab pov rau ntawm ib yam nkaus, tab sis peb yuav rov los rau nws. • Ntxiv cov xov hlau txuas nruab nrab ntawm ob kab ntawm cov kab hluav taws xob (tag nrho peb kab). Feem ntau BBUs tuaj nrog qhov nce ntxiv ib sab thiab lub roj teeb + sab ntxiv. Peb yuav koom nrog ob tog los tsim cov kab hluav taws xob yooj yim. • Cov kab hlau sib cais sib cais rau cov ntsia hlau kub thiab nruab nrab txhawm rau txuas Raspberry Pi thiab hloov pauv network hloov tom qab. Qhov no tuaj yeem yog ob qhov kub thiab ob lub xov hlau nruab nrab lossis tsuas yog ib qho ntawm ib qho rau daisy saw cov hloov pauv. Kuv tau txuag lub pob tawg loj thaum rhuav lub BBU. Yog tias koj tseem muaj nws lossis tej zaum yog 10A lossis 15A fuse, txuas ib lub dav hlau mus rau cov xaim dub ntawm lub xaim hluav taws xob thiab lwm lub davhlau ya nyob twg rau txuas txuas txuas. Qhov txuas txuas txuas no tau txuas rau lub tsheb npav kub ntawm lub qhov hluav taws xob uas koj tau siv nruab nrab (dawb) thiab hauv av (ntsuab) xaim rau.

Kauj Ruam 4: Tsawg Hluav Taws Xob Hluav Taws Xob:

Tam sim no peb tab tom yuav xaim lub zog hloov pauv rau qhov hloov pauv thiab Pi. Kuv siv ob qhov sib cais sib xws, vim 2A tsuas yog txaus rau Pi qhov kev pom zoo tso tawm tam sim no thiab qhov thib ob yuav muaj qee qhov tam sim no tso nrog 800mA qhov hloov pauv yuav rub. nyob rau hauv cov kauj ruam kawg mus rau lub khoos phis tawj lub hauv paus (sab qhov twg cov hlau loj txuas nrog). • Tam sim no npog qhov kev sib txuas hauv cov kua nplaum kub kom lawv tsis txhob wiggling lossis luv rau lwm yam tom qab. • Nrhiav qhov chaw zoo hauv koj lub thawv lo los yog ntsia hlau rau, thiab, yog tias koj zoo ib yam li kuv, nco ntsoov tawm hauv chav los ntsaws koj lub USB cable. Koj tseem tuaj yeem daisy saw lawv ua ke, yog tias koj tsuas yog muag ib txheej ntawm cov xov hlau mus rau cov kab tsheb npav.

Kauj Ruam 5: Cables:

Nov yog cov xaim xoob uas kuv tau ua rau ntsaws lub zog thiab network. Cov kauj ruam no tuaj yeem ua tiav tom qab. • Txiav ib qho ntawm cov ethernet cables ib nrab thiab tso nws ib sab. Cov no yuav yog rau peb lub tsho sab nraud ntawm BBU. • Rau lub xov tooj cua ethernet thib ob, Kuv tau txiav nws kom yog qhov ntev kom yog los ntawm kev hloov mus rau qhov chaw Pi thiab crimped tus txiv neej tshiab kawg ntawm. Yog tias koj lub xov tooj twb twb luv lawm, lossis koj muaj chaw txaus rau qhov ua kom qeeb, koj tuaj yeem hla qhov no. • Txiav thiab txuas cov hlua hluav taws xob rau qhov hloov mus rau qhov ntev xav tau. • Txiav thiab txuas USB cable rau Pi rau qhov ntev. xav tau, lossis siv qhov luv luv tiag tiag.

Kauj Ruam 6: Txuas lub Network Jacks

Cov no yog lub network (RJ45) jacks uas yuav hloov lub xov tooj qub (RJ11) jacks. Kuv rub lawv tawm ntawm lwm qhov BBU qhov kev tiv thaiv kev tiv thaiv. Koj tuaj yeem siv cov xaum xaum xaum, tab sis cov xaim hluav taws xob los ntawm cov kab txuas ua kom muaj kev sib txuas zoo dua thaum siv cov laug.

• Tshem RJ45 lub tsho los ntawm kev tiv thaiv hluav taws xob qub, yog tias xav tau. Yog tias koj lub BBU tuaj nrog RJ45, tsuas yog tshem tag nrho lwm cov khoom siv (diodes, capacitors, fuses, thiab lwm yam) los ntawm pawg thawj coj saib.
• Muab cov xaim xaim xaim ntawm cov kab txiav txiav rau hauv qhov kev txiav txim kom raug nyob tom qab ntawm cov khoom sib txuas.
• Kuaj txhua qhov kev sib txuas.
• Kaw ob lub txuas sib txuas ua ke txhawm rau txhim kho rau hauv lub thawv ntawv yooj yim dua.

Kauj Ruam 7: LED Teeb

Tom ntej no peb yuav xaim lub LED. Koj yuav xav tau 470 ohm (daj, violet, xim av) lossis zoo ib yam resistor, LED, ob txoj hlua ntev, thiab (xaiv tau) lub txuas uas yuav ntsaws rau hauv Pi's GPIO.

• Solder cov hlau liab rau qhov ua tau zoo ntawm LED & cua sov ua rau nws.
• Muab cov xaim dub tso rau qhov tsis zoo ntawm LED & tshav kub.
• Txiav cov xaim dub hauv ib nrab & tshem tawm ob qho kawg.
• Siv ib qho hlau lead ntawm tus tiv thaiv rau cov xaim dub ntawm LED.
• Muab lwm cov hlau lead ntawm tus tiv thaiv rau ib daim hlau dub uas koj txiav tawm.
• Thaum tshav kub kub ntsws tshaj tus resistor.
• Crimp los yog txuas qhov txuas rau ob lub xov hlau.

Kauj Ruam 8: Nias khawm thaiv

Nov yog lub pob siv los xa cov lus txib yooj yim rau Pi. Kuv muaj nws teeb tsa los kaw thiab rov pib dua Pi nyob ntawm qhov ntev npaum li cas lub pob nyem (tus lej nyob hauv qib tom ntej). Daim ntawv ceeb toom, los ntawm cov duab tus tiv thaiv yog hom kev xav tom qab thiab yog nyob ntawm yeem yog tias koj tuaj yeem siv qhov rub tawm sab hauv ntawm Pi. Kuv txiav txim siab siv bash tsab ntawv los tham nrog GPIO, yog li kev teeb tsa lub rub tawm tsis yog qhov kev xaiv tiag tiag.

Koj yuav xav tau lub pob nyem tam sim no, peb daim xaim, ib mus rau ob qhov txuas uas haum rau Pi's GPIO (xaiv tau), thiab 10 - 100 ohm resistor (tseem xaiv tau).

• Cov xov hlau txuas rau lub khawm ob lub dav hlau.
• Siv lub xaim thib ob txuas rau ib qho ntawm lub dav hlau & txiav nws ib nrab.
• Cuab yeej ib tus coj ntawm tus tiv thaiv rau cov xaim txiav ntawm lub pob.
• Solder lwm cov hlau lead ntawm tus tiv thaiv rau xaim xaim uas tau txiav tawm.
• Cua sov ntsws txhua yam kom huv si.
• Crimp los yog cov laug txuas rau cov xov hlau.

Kauj Ruam 9: Mounting Khawm & LED

• Teem lub LED qhov twg "Tsis Ua Haujlwm" LED yog thiab npog nws kom sov ntau ntau.
• Mount lub laub khawm nrog ntau ntau cov kua nplaum kub qhov twg "Pib dua" lub tshuab ua kom tawg khawm yog.

Kauj ruam 10: Mounting Network Jacks

• Ua ntaub ntawv tawm qhov chaw uas RJ11 jacks tau ua kom muaj chaw rau RJ45 loj dua.
• Mount lub jacks nrog cov kua nplaum kub & npog tag nrho cov kab lus txuas nrog cov kua nplaum.

Kauj Ruam 11: Txhim Kho Qhov Hloov & Breaker

Tam sim no peb yuav txhim kho lub network hloov pauv thiab lub tshuab hluav taws xob.

• Nrhiav qhov chaw zoo los txhim kho qhov hloov pauv & kos tawm lub qhov rau cov ntsia hlau.
• Predrill qhov rau cov ntsia hlau.
• Nruab ib lub fais fab cable rau qhov hloov.
• Mount lub hloov thiab ntsaws rau hauv lub hwj chim cable.
• Kuv kuj tseem kub glued Pi lub hwj huam hluav taws xob nyob rau sab saum toj ntawm qhov hloov pauv, tab sis qhov no tuaj yeem yog hauv qab nrog lwm qhov.
• Kaw lub tshuab hluav taws xob hauv qhov chaw qhib.

Kauj Ruam 12: Txhim Kho Raspberry Pi

• Txiav Raspberry Pi mounting bracket kom haum snuggly saum tus tes hloov qhov.
• Ntsia tus Pi mus rau lub bracket nrog plaub tus ntsia hlau & ceev.
• Ntxiv qee cov nplaum ua npuas ncauj rau sab hauv qab ntawm lub bracket (yeem).
• Txheeb tawm qhov twg lub qhov nyob hauv kab kab nce hauv sab hauv BBU.
• Kub kua nplaum qhov ntev sawv ntsug uas tuaj nrog tus tuav rau lub thaiv uas koj tau khij.
• Ntsia lub bracket mus rau qhov thaiv.

Kauj Ruam 13: Txhim Kho Txhua Yam Hauv

Nov yog ntu txuas. Cia li ua raws li schematic.

• Plug rau hauv Pi's USB cable rau lub zog.
• Ntsaws cov kab txuas luv rau hauv Pi & lwm qhov kawg rau hauv qhov hloov.
• Txuas cov kab txuas txuas los ntawm RJ45 jacks rau hauv qhov hloov.
• Txuas cov xaim liab los ntawm LED mus rau tus pin 32 (GPIO 12).
• Txuas cov xaim dub los ntawm LED mus rau tus pin 30 (hauv av).
• Txuas lub xaim nrog tus tiv thaiv los ntawm lub pob rau tus pin 1 (3.3V).
• Txuas cov xaim txuas rau tib tus hlau lead ntawm lub pob raws li tus tiv thaiv rau tus pin 36 (GPIO 16).
• Txuas lub xaim kawg los ntawm lub pob rau tus pin 34 (hauv av).
• Txuas lub USB WiFi adapter.

Kauj Ruam 14: Txhim Kho Cov Ntaub Ntawv

Qhov kho vajtse kawg ntawm kev tsim yog txhawm rau txiav thiab haum rau qhov seem ntawm lub thawv. Yeej tsuas yog siv qee qhov kawg ntawm cov ntawv thiab cov ntawv lossis Dremel cov cuab yeej los txiav tawm ntawm cov yas uas tau txais txoj hauv kev khawm ntawm lub thawv.

Kauj ruam 15: Software

Ntawm no peb tab tom teeb tsa Pi's OS thiab qee qhov chaws uas kuv siv rau khawm thiab LED. Koj yuav xav tau me ntsis nyiam kho cov ntaub ntawv hauv Linux.

• Nruab Kali Linux rau Raspberry Pi's SD card. Mus HERE (Kali Linux Lub Vev Xaib) kom tau txais cov lus qhia rau txhua lub rooj tsavxwm koj siv.
• Rub tawm kuv cov ntawv sau rau Pi, hloov qhov txuas ntxiv los ntawm ".txt" rau ".sh", & ua kom lawv ua tiav.

• Ntxiv qhov nkag crontab los pib cov ntawv sau ntawm khau raj. Hauv /etc /crontab file, ntxiv:

  # Flash LED tom qab ua tiav boot@reboot root pw 10s && bash /opt/scripts/flashled.sh &>/dev/null# Pab kom lub zog khawm@reboot root pw 10s && bash /opt/scripts/powerbutton.sh &>/dev /tsis

  Hloov cov npe & npe ntawm cov ntawv sau kom phim qhov koj muab rau lawv & qhov koj npe lawv

Optionally, khiav sudo systemctl lov tes taw lightdm.service rau khau raj Kali tsis muaj gui & txuag qee cov peev txheej

Kauj ruam 16: Mus Pentesting

Qhov ntawd yog txhua yam koj xav tau kom tau Raspberry Pi khiav hauv BBU qub!

Thaum kawg kuv xav ntxiv qhov txuas thiab khawm kom qhib thiab tua lub zog rau lub qhov hluav taws xob saum toj. Ob peb lub roj teeb lithium thiab piezo buzzer yuav zoo, ib yam.

Zoo siab los tshuaj xyuas qhov hloov tshiab ntawm kuv Hackaday.io nplooj ntawv!

Kuv kuj tau muaj qhov haujlwm no tshwj xeeb ntawm Hackaday lub vev xaib tseem ceeb!