Questions tagged [raspberry-pi]
A series of tiny hobbyist computing devices designed and developed in the UK by the Raspberry Pi Foundation with the aim of teaching basic computing and programming in schools.
79
questions
0
votes
1
answer
99
views
Linux found preloaded shared library: potential threat to security?
On a Linux Raspbian system, I have performed variuos security checks and among those I have performed a rkhunter scan to seek for rootkits, backdoors, and other malicious software with the following ...
- 109
2
votes
1
answer
495
views
Store/Secure openssl cert and key file in TPM2.0
I have my TPM2.0 connected to my raspberry pi. I generated a Cert file and Private key using openssl. These files are used to connect MQTT with TLS. How do I store/secure these files in/with the TPM ...
- 23
0
votes
2
answers
112
views
Most secure way to use a Raspberry Pi as a security cam
I want to make a security camera using a Raspberry Pi 3 B.
I believe there are more ways of to view the video stream but one way I've found that seems very convenient is through a web server like in ...
- 3
0
votes
1
answer
162
views
How secure is a bitlocker startup key on a mountable encrypted container?
Let's say I want to protect the contents of my Desktop PC which I use in quite many occasions remotely.
I want to use Bitlocker with a startup key that only "activates" at a specific moment ...
0
votes
0
answers
55
views
nmap scanning Raspbian with strange results
I'm a high schooler in a CyberDefense Class and we are learning to PenTest.
I'm on Red Team and my teacher set up a system with Rasbian as the OS. When I run a scan on the computer scanning the Top ...
- 1
-1
votes
1
answer
955
views
aircrack-ng on Raspberry pi 3 and WiFi adapter
I am just getting into ethical hacking and cybersecurity and would like some advice regarding USB Wi-Fi adapter. I am hacking on Raspberry PI 3 which is running Kali Linux. Furthermore, I have been ...
- 101
1
vote
0
answers
160
views
How to do forensics on RaspberryPi in home network?
while debugging some strange effects in my home network (bad video call quality due to packet loss) I found out this only happens when my RBPI is connected to the network. When I wanted to log in I ...
- 111
0
votes
1
answer
121
views
Password hashing for local servers
I'm running a local web server on my Raspberry Pi and want to have a login screen. My plan is to hash the password and store the result in a text file ( This is where I'm storing settings for the ...
0
votes
1
answer
110
views
Would putting important information on a flash drive that never touches the internet be secure?
First off, I'm not even sure if this question belongs on this site, but I am a programmer and I usually just ask stack overflow questions like this, and I know for a fact this one doesn't belong there....
1
vote
1
answer
447
views
How is a service running at a specific port discovered and how to hide it?
I have my Raspberry Pi accessible through SSH and I do not want it to reveal any information to port-scans such as below:
How do port-scanners (I used Advanced Port scanner on Windows 10) get so much ...
- 45
0
votes
0
answers
97
views
Recovery files fails Raspberry Pi 3b
i am trying to learn something about computer security, I decided to start from the linux world, through raspberry p3 with raspbian jessie OS
I would like to start with forensics file management, and ...
- 121
0
votes
0
answers
262
views
securely using Nextcloud on raspberry pi
I like data privacy, so I would like to set up a system that allows me to exchange data such as photos with family and friends. I have a raspberry pi (version 4 I think? the one that was new in the ...
- 101
7
votes
1
answer
827
views
How can I exploit a Buffer Overflow on a Raspberry Pi 4?
I am trying to exploit a bufferoverflow on raspberry pi 4 which makes use of Cortex-A72 (ARM v8) 64-bit SoC.
The linux kernel version is v4.19 and the OS a Debian Buster compiled for the raspberry pi ...
- 71
-1
votes
1
answer
129
views
Bluetooth vulnerability on a Raspberry PI running Raspian
Is it possible for someone to exploit a Raspberry PI running Raspian through bluetooth just by having the bluetooth enabled?
1
vote
1
answer
256
views
Antivirus/DPI Solution with openvpn server
I wish to set up a system that I log into with openVPN on my Raspberry Pi 4. I have already set up an openVPN server with a PKI infrastructure as well as other services that run on the Pi (like pi ...
- 402
0
votes
1
answer
590
views
Is tails needed to securely generate a PGP key on raspberry Pi?
I understand that usually one should use Tails on a trusted machine to generate PGP keys. However, I find it difficult to trust a machine with an Intel CPU, many wireless interfaces, a hard disk that ...
- 297
1
vote
1
answer
476
views
Where to store pydrive secret?
Backstory: been toying with the idea of setting up some raspberry pi cctv cameras. originally I was going to store all footage for 31 days (complying with DPA) on a network drive but decided against ...
- 47
0
votes
1
answer
459
views
Monitor mode not sniffing from other devices on the same network
i'm currently running a 802.11n adapter in monitor mode on a kali linux PC. Monitor mode was enabled using airmon-ng. On the same network as the kali linux PC are 2 raspberry pi devices.
Pinging from ...
1
vote
0
answers
130
views
Packets shown are mostly 802.11 despite open network
I'm currently trying to see if it's possible to sniff MQTT packets between two raspberry pi's from a wireless adapter in monitor mode attached to my PC.
I ran the following command on my PC (Kali ...
- 11
1
vote
1
answer
1k
views
How can I hide my mac address when using a public wifi? [duplicate]
As a new student of cyber security, I have started to see in real-time how an individual can actually scan and view the mac addresses on a public wifi connection.
How can I hide my mac address when ...
- 163
2
votes
0
answers
964
views
Use TPM 2.0 to automatically decrypt the SD Card in Raspbian OS
I'm a college student trying to complete the first part of a rather large project, but I'm new to TPM, and Linux. What I'm trying to do is have TPM handle automatic decryption of the root ext4 ...
- 21
0
votes
1
answer
1k
views
Preventing Basic Directory Traversal Attack in Linux application
I have a Raspberry Pi connected to my network and keep getting this vulnerability warning from my security software. I turned off the apache2 web server on the Pi, which fixed my port 80 issue but ...
- 3
2
votes
1
answer
166
views
End-2-End and server to server encryption over home network
I am setting up a private home management system containing several daemons/servers and a few clients to connect from.
I am trying to achieve end-to-end encryption with the most monitoring and health ...
- 23
0
votes
1
answer
258
views
WiFi security against spoofing attacks
I am about to install some custom pi cameras that connect to my network via WiFi. I know people hack wifi through spoofing SSID.
My password is randomly generated and is impossible to brute force ...
- 1
2
votes
1
answer
250
views
Was the Raspberry Pi-related NASA JPL network breach primarily caused by the failure to keep an updated list of authorized devices?
The question What information was stolen from JPL during the Raspberry Pi hack? refers to an event in recent news (e.g. Engadget's A rogue Raspberry Pi helped hackers access NASA JPL systems) and ...
- 1,415
0
votes
0
answers
87
views
Apache - Adding Redirect to sub-directory V/S changing DocumentRoot
I want to understand security implications of changing DocumentRoot in Apache to an installed website versus adding a RewriteRule.
The reason I ask this, I have a website that is installed under /var/...
- 349
4
votes
1
answer
268
views
How should I use Facebook while giving as little information as possible?
As a college student, Facebook and Messenger are virtually necessary to have in my life for communicating with clubs, classmates, finding housing, and more. As much as I want to get rid of them, it's ...
- 141
1
vote
1
answer
215
views
website hacked by someone proxying over a tor router
I'm curious to get an opinion on following: If someone decides to exploit some sort of vulnerability in a web application of mine or performs something of malicious intent, would this individual be ...
- 167
0
votes
1
answer
177
views
Could an infected .iso file infect a PC that is running a disc burning or drive imaging program?
I can't seem to find too much on this, but I'm worried after realizing I downloaded my Raspbian image from HTTP, and wrote it into a USB stick without verification.
I'm worried, especially since I ...
- 171
3
votes
0
answers
190
views
Hacked Raspberry-pi server
My internet provider doesn't let me open my ports, it's an optional service, and even when they finally said over the phone that I was allowed to open the ports I was still not able to. So I was ...
- 31
4
votes
2
answers
7k
views
How to connect a Raspberry Pi IDS to the home router to detect intrusions network wide?
I'm configuring a raspberry pi IDS/IPS with ELK stack on a separate machine, my problem is to connecting it to the router in a way it can read traffic on the whole network and drop the suspicious ...
- 43
1
vote
2
answers
182
views
Using command (dd if=/dev/mmcblk0p1 | sha1sum) while running from initramfs
I have an opensource airgapped raspberry pi project seen at the following link: www.privatekeyvault.com
I have provided a method for installing LUKS full disk encryption seen at the following: https:/...
- 111
0
votes
1
answer
1k
views
I think my raspberry was hacked, what should I do? [duplicate]
First of all, sorry if all of this seems a bit stupid, but my field of expertise is software development, not security. So, here is what happened.
1/ The breach
I did something I really shouldn't ...
- 101
1
vote
0
answers
263
views
UFW (Uncomplicated Firewall) Question
I was wondering if there's any benefit of adding following rules to a Raspberry-Pi directly exposed to the internet:
sudo ufw deny to 0.0.0.0/8 &&
sudo ufw deny to 169.254.0.0/16 &&
...
- 349
2
votes
1
answer
983
views
using secure boot in embedded systems
The whole idea about using Secure Boot in Embedded Systems to boot an operating system is new to me. I've never paid much attention to it previously. I just know that it prevents the loading at start-...
- 267
1
vote
0
answers
236
views
How secure is a file on a raspberry pi?
Let's say I change the password for the root & pi user to something impossible to brute force, say 20 characters.
Then in one of my files on my raspberry pi, I hardcode a password.
Is this ...
- 215
-2
votes
2
answers
220
views
Is ssh secure if I dont port forward?
If I have a Raspberry Pi, and I install noobs on it. If i connect it to my router and log in with the default user pi over ssh to create another user to then delete the pi user, is it secure?
Since ...
0
votes
1
answer
997
views
best way to encrypt code and data on IOT device?
I have R scripts which are running on a Raspberry Pi device. I want to encrypt the code and data on the device so that if anyone unmounts the disk and try to read the content via other devices they ...
- 103
0
votes
0
answers
68
views
Linux aarch64 security update provision, Raspberry Pi
Do any of the major Linux distributions (Fedora, Debian, Arch, Ubuntu, etc.) provide timely security updates for the aarch64 architecture for kernel and other standard system components present in a ...
- 213
3
votes
1
answer
2k
views
Port-forwarding to a web server on Raspberry Pi
I've recently created a relatively simple smart Christmas tree which is a Raspberry PI Zero W powered LED strip.
In order to control it via IFTTT webhooks, I've started a lightweight flask server on ...
- 1,585
10
votes
1
answer
5k
views
wget: what security issues am I not considering?
Questions: based on the details provided below, (a) what potential security vulnerabilities and threats might I face in my use of wget and (b) what recommendations would you give for mitigating those ...
- 177
7
votes
1
answer
755
views
Hashing password longer than 14 characters in wpa_supplicant.conf
My college has a WPA2 Enterprise network, which I can connect to on my Pi after configuring the network in wpa_supplicant.conf.
I don't want my Wi-Fi password stored in plain text, so I use echo -n $...
- 121
1
vote
1
answer
492
views
Additional risks to home network in exposing (raspberry pi) honeypot to the internet
While I would like to contribute piping of logs from a home-deployed honeypot to the DSHIELD project using a raspberry pi, I am concerned that the additional exposure of the port to the internet would ...
- 739
0
votes
1
answer
402
views
Would an RP3 do well as a firewall appliance?
I have seen this post about the Raspberry Pi for use as an IDS. But how well would it do as a firewall appliance in a residential setting? I will soon be setting up a new network and want to exercise ...
2
votes
4
answers
297
views
How to secure automatic SSH connection
I have Raspberry PI 3 which has 4G modem dongle attached to it. It works autonomously and every one in a while has to connect to my server via ssh. This is done by service script either with password ...
- 121
0
votes
1
answer
2k
views
Does a raspberry pi VPN do anything?
Does a raspberry pi vpn do anything besides hide your traffic on your local network? Can your ISP still see what traffic you are sending? Are homebrew openvpn raspberry pi vpn servers a viable source ...
3
votes
4
answers
20k
views
Can Snort run on a Raspberry Pi?
I am in the preliminary stages of designing a cybersecurity suite for my home network. I don't have any servers or anything, just the standard home setup (computers, tablets, game consoles). The ...
- 209
6
votes
4
answers
5k
views
Protect Raspberry Pi's physical sd card to be swapped
Scenario:
In a company there are Raspberry Pis which are connected to its network environment. A person with bad intentions could swap the SD card and replace it by his own which makes the Pi to a "...
- 75
3
votes
1
answer
343
views
IFTTT maker channel and Security Concerns
This is about IFTTT Maker Channel and security around it. They announced a new Maker Channel recently where you can receive and make web requests for automation.
For example, I can turn ON/OFF my ...
- 1
3
votes
0
answers
585
views
Raspberry Pi (Raspbian) not capturing WPA2 handshake with Aircrack-ng [closed]
I've been using Aircrack for a short time now with my Alfa wfif adapter on my laptop and it's been working perfectly. However when I try and do the same thing on my Raspberry Pi it's having issues ...
- 31