Skip to content

OpenPiMap Hacking the hackers with OSINT Raspberry Pis

evilbotnet

Low-cost Raspberry Pi-based network monitoring using Netflow and OSINT to detect malicious traffic.

Summary

Home Network Defense

OpenPiMap is a network utility detecting, analyzing, and responding to malicious network traffic on small home or office networks. Running on 5v Raspberry Pi costing under $10 provides dynamic interactive threat response.

Detection Approach

Everyday internet-facing systems face thousands of scans and exploit attempts with minimal notification. OpenPiMap detects and responds to botnets, hackers, and script kiddies traditional firewalls ignore.

Technical Stack

The open source Python3, Flask, JavaScript, and SQLite tool combines open source intelligence with networking and intrusion detection. Two-part architecture: Netflow collection and database processing.

Malicious Detection

All traffic is compared to dozens of IP blacklists. Identified suspects are mapped, interrogated via Shodan API for services and ownership, and staged for exploitation if available exploits exist.

Related talks