S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

26
By: Bilal Bokhari A Penetration Testing User Interface For Openwrt Based Dropboxes

Transcript of S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

Page 1: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

By: Bilal Bokhari

A Penetration Testing User Interface For Openwrt Based Dropboxes

Page 2: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

2

Inspirations Behind SWORD Design Philosophy Development Process Key Features Demo Wrap up

Agenda

Page 3: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

3

Inspirations behind SWORD MiniPwner Project Dsploit APP

Page 4: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

4

“It is a small Wireless 3G router installed with Openwrt and network penetration

testing tools.” 

Page 5: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

5

Pros On a small 3G router Tools Wi-Fi Attacks

Cons No Interface SSH

Page 6: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

6

MiniPwner’s Interface

Page 7: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

7

“ DSploit is a penetration testing suite developed for the Android operating

system.”

Dsploit.

Page 8: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

8

Pros User Friendly Interface Speed Runs on phone

Cons Limited Tools Can’t launch Wi-Fi Attacks

Dsploit.

Page 9: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

9

Dsploit’s Interface

Page 10: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

10

In a Nutshell

Page 11: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

11

Easy to useSpeedPractical

Design Philosophy

Page 12: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

12

Hardware Selection

Development Process

Page 13: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

13

Started with Basics

Development Process

Page 14: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

14

Started with Basics

Development Process

Page 15: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

15

Scripts

Development Process

Page 16: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

16

Adding HTML Frames

Development Process

Page 17: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

17

Final Look Development Process

Page 18: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

18

Device Boots under 1 minute.

Key Features

Page 19: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

19

Cross Platform Access Tablets Smart Phones Laptop

Key Features

Page 20: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

20

WEP Cracking Made Easy

Key Features

Page 21: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

21

DEMO:

• Wifi Nuke• WEP

cracker• MDK3 • Reaver

• Reverse shell• Nmap• Nbtscan• Password

Sniffer• Network

Sniffer

Page 22: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

22

Reverse Shell Connection: VPS

Page 23: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

23

Wrap Up

Positive Community Feedback

Page 24: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

24

Wrap Up Room For Improvement. Need To try SWORD on different

Hardware.

Page 25: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

25

Questions ?

Page 26: S.W.O.R.D. : A Penetration Testing User Interface For Openwrt Based Dropboxes

26

Thank You