Penetration Testing Using a Raspberry Pi: Covert Hardware Drop Boxes
Joseph Muniz and Aamir Lakhani demonstrate building weaponized Raspberry Pi drop boxes for stealthy physical network penetration testing.
Summary
The Role of Physical Drop Boxes in Red Teaming
When external network perimeters are heavily fortified, physical access assessments rely on covert embedded devices left behind on target corporate networks.
Weaponizing the Raspberry Pi Platform
Joseph Muniz and Aamir Lakhani detail hardware modifications—including battery packs, cellular modems, and Kali Linux ARM installations.
Establishing Covert Command and Control (C2)
The speakers demonstrate establishing encrypted reverse SSH tunnels and cellular C2 channels to bypass egress filtering.
Automating Internal Network Reconnaissance
The authors provide automated scripts for immediate LLMNR poisoning, ARP scanning, and credential harvesting upon physical connection.
Related talks
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.
Main Stage·40 min
Dennis Giese · braelynn
Security evaluation and hardware attack surface analysis of smart electronic lockers and storage cabinets.
Lock Picking Village·29 min
d1dymu5
Showcases multi-functional physical security tools designed for bypass, lock manipulation, and covert entry.