Questions tagged [raspberry-pi]

A series of tiny hobbyist computing devices designed and developed in the UK by the Raspberry Pi Foundation with the aim of teaching basic computing and programming in schools.

Filter by
Sorted by
Tagged with
0 votes
0 answers
39 views

nmap scanning Raspbian with strange results

I'm a high schooler in a CyberDefense Class and we are learning to PenTest. I'm on Red Team and my teacher set up a system with Rasbian as the OS. When I run a scan on the computer scanning the Top ...
user avatar
0 votes
0 answers
21 views

Disguising Device Information During IP and Open Port Scans

I am getting into the field of penetration testing and had a question about device information scans. I know that you can scan all of the devices on a network and scan for open ports, and in the ...
user avatar
0 votes
1 answer
352 views

aircrack-ng on Raspberry pi 3 and WiFi adapter

I am just getting into ethical hacking and cybersecurity and would like some advice regarding USB Wi-Fi adapter. I am hacking on Raspberry PI 3 which is running Kali Linux. Furthermore, I have been ...
user avatar
1 vote
0 answers
135 views

How to do forensics on RaspberryPi in home network?

while debugging some strange effects in my home network (bad video call quality due to packet loss) I found out this only happens when my RBPI is connected to the network. When I wanted to log in I ...
user avatar
  • 111
0 votes
1 answer
114 views

Password hashing for local servers

I'm running a local web server on my Raspberry Pi and want to have a login screen. My plan is to hash the password and store the result in a text file ( This is where I'm storing settings for the ...
user avatar
0 votes
1 answer
89 views

Would putting important information on a flash drive that never touches the internet be secure?

First off, I'm not even sure if this question belongs on this site, but I am a programmer and I usually just ask stack overflow questions like this, and I know for a fact this one doesn't belong there....
user avatar
1 vote
1 answer
239 views

How is a service running at a specific port discovered and how to hide it?

I have my Raspberry Pi accessible through SSH and I do not want it to reveal any information to port-scans such as below: How do port-scanners (I used Advanced Port scanner on Windows 10) get so much ...
user avatar
  • 45
0 votes
0 answers
91 views

Recovery files fails Raspberry Pi 3b

i am trying to learn something about computer security, I decided to start from the linux world, through raspberry p3 with raspbian jessie OS I would like to start with forensics file management, and ...
user avatar
  • 121
0 votes
0 answers
209 views

securely using Nextcloud on raspberry pi

I like data privacy, so I would like to set up a system that allows me to exchange data such as photos with family and friends. I have a raspberry pi (version 4 I think? the one that was new in the ...
user avatar
  • 101
8 votes
1 answer
634 views

How can I exploit a Buffer Overflow on a Raspberry Pi 4?

I am trying to exploit a bufferoverflow on raspberry pi 4 which makes use of Cortex-A72 (ARM v8) 64-bit SoC. The linux kernel version is v4.19 and the OS a Debian Buster compiled for the raspberry pi ...
user avatar
-1 votes
1 answer
114 views

Bluetooth vulnerability on a Raspberry PI running Raspian

Is it possible for someone to exploit a Raspberry PI running Raspian through bluetooth just by having the bluetooth enabled?
user avatar
1 vote
1 answer
193 views

Antivirus/DPI Solution with openvpn server

I wish to set up a system that I log into with openVPN on my Raspberry Pi 4. I have already set up an openVPN server with a PKI infrastructure as well as other services that run on the Pi (like pi ...
user avatar
  • 422
0 votes
1 answer
448 views

Is tails needed to securely generate a PGP key on raspberry Pi?

I understand that usually one should use Tails on a trusted machine to generate PGP keys. However, I find it difficult to trust a machine with an Intel CPU, many wireless interfaces, a hard disk that ...
user avatar
  • 255
1 vote
1 answer
346 views

Where to store pydrive secret?

Backstory: been toying with the idea of setting up some raspberry pi cctv cameras. originally I was going to store all footage for 31 days (complying with DPA) on a network drive but decided against ...
user avatar
0 votes
1 answer
324 views

Monitor mode not sniffing from other devices on the same network

i'm currently running a 802.11n adapter in monitor mode on a kali linux PC. Monitor mode was enabled using airmon-ng. On the same network as the kali linux PC are 2 raspberry pi devices. Pinging from ...
user avatar
1 vote
0 answers
100 views

Packets shown are mostly 802.11 despite open network

I'm currently trying to see if it's possible to sniff MQTT packets between two raspberry pi's from a wireless adapter in monitor mode attached to my PC. I ran the following command on my PC (Kali ...
user avatar
  • 11
1 vote
1 answer
686 views

How can I hide my mac address when using a public wifi? [duplicate]

As a new student of cyber security, I have started to see in real-time how an individual can actually scan and view the mac addresses on a public wifi connection. How can I hide my mac address when ...
user avatar
  • 143
1 vote
0 answers
831 views

Use TPM 2.0 to automatically decrypt the SD Card in Raspbian OS

I'm a college student trying to complete the first part of a rather large project, but I'm new to TPM, and Linux. What I'm trying to do is have TPM handle automatic decryption of the root ext4 ...
user avatar
0 votes
1 answer
1k views

Preventing Basic Directory Traversal Attack in Linux application

I have a Raspberry Pi connected to my network and keep getting this vulnerability warning from my security software. I turned off the apache2 web server on the Pi, which fixed my port 80 issue but ...
user avatar
  • 3
2 votes
1 answer
157 views

End-2-End and server to server encryption over home network

I am setting up a private home management system containing several daemons/servers and a few clients to connect from. I am trying to achieve end-to-end encryption with the most monitoring and health ...
user avatar
  • 23
0 votes
1 answer
201 views

WiFi security against spoofing attacks

I am about to install some custom pi cameras that connect to my network via WiFi. I know people hack wifi through spoofing SSID. My password is randomly generated and is impossible to brute force ...
user avatar
2 votes
1 answer
235 views

Was the Raspberry Pi-related NASA JPL network breach primarily caused by the failure to keep an updated list of authorized devices?

The question What information was stolen from JPL during the Raspberry Pi hack? refers to an event in recent news (e.g. Engadget's A rogue Raspberry Pi helped hackers access NASA JPL systems) and ...
user avatar
  • 1,375
0 votes
0 answers
80 views

Apache - Adding Redirect to sub-directory V/S changing DocumentRoot

I want to understand security implications of changing DocumentRoot in Apache to an installed website versus adding a RewriteRule. The reason I ask this, I have a website that is installed under /var/...
user avatar
4 votes
1 answer
249 views

How should I use Facebook while giving as little information as possible?

As a college student, Facebook and Messenger are virtually necessary to have in my life for communicating with clubs, classmates, finding housing, and more. As much as I want to get rid of them, it's ...
user avatar
1 vote
1 answer
209 views

website hacked by someone proxying over a tor router

I'm curious to get an opinion on following: If someone decides to exploit some sort of vulnerability in a web application of mine or performs something of malicious intent, would this individual be ...
user avatar
  • 167
0 votes
1 answer
155 views

Could an infected .iso file infect a PC that is running a disc burning or drive imaging program?

I can't seem to find too much on this, but I'm worried after realizing I downloaded my Raspbian image from HTTP, and wrote it into a USB stick without verification. I'm worried, especially since I ...
user avatar
2 votes
0 answers
174 views

Hacked Raspberry-pi server

My internet provider doesn't let me open my ports, it's an optional service, and even when they finally said over the phone that I was allowed to open the ports I was still not able to. So I was ...
user avatar
4 votes
2 answers
7k views

How to connect a Raspberry Pi IDS to the home router to detect intrusions network wide?

I'm configuring a raspberry pi IDS/IPS with ELK stack on a separate machine, my problem is to connecting it to the router in a way it can read traffic on the whole network and drop the suspicious ...
user avatar
1 vote
2 answers
155 views

Using command (dd if=/dev/mmcblk0p1 | sha1sum) while running from initramfs

I have an opensource airgapped raspberry pi project seen at the following link: www.privatekeyvault.com I have provided a method for installing LUKS full disk encryption seen at the following: https:/...
user avatar
0 votes
1 answer
760 views

I think my raspberry was hacked, what should I do? [duplicate]

First of all, sorry if all of this seems a bit stupid, but my field of expertise is software development, not security. So, here is what happened. 1/ The breach I did something I really shouldn't ...
user avatar
  • 101
1 vote
0 answers
221 views

UFW (Uncomplicated Firewall) Question

I was wondering if there's any benefit of adding following rules to a Raspberry-Pi directly exposed to the internet: sudo ufw deny to 0.0.0.0/8 && sudo ufw deny to 169.254.0.0/16 && ...
user avatar
2 votes
1 answer
877 views

using secure boot in embedded systems

The whole idea about using Secure Boot in Embedded Systems to boot an operating system is new to me. I've never paid much attention to it previously. I just know that it prevents the loading at start-...
user avatar
1 vote
0 answers
200 views

How secure is a file on a raspberry pi?

Let's say I change the password for the root & pi user to something impossible to brute force, say 20 characters. Then in one of my files on my raspberry pi, I hardcode a password. Is this ...
user avatar
-2 votes
2 answers
194 views

Is ssh secure if I dont port forward?

If I have a Raspberry Pi, and I install noobs on it. If i connect it to my router and log in with the default user pi over ssh to create another user to then delete the pi user, is it secure? Since ...
user avatar
0 votes
1 answer
919 views

best way to encrypt code and data on IOT device?

I have R scripts which are running on a Raspberry Pi device. I want to encrypt the code and data on the device so that if anyone unmounts the disk and try to read the content via other devices they ...
user avatar
  • 103
0 votes
0 answers
64 views

Linux aarch64 security update provision, Raspberry Pi

Do any of the major Linux distributions (Fedora, Debian, Arch, Ubuntu, etc.) provide timely security updates for the aarch64 architecture for kernel and other standard system components present in a ...
user avatar
3 votes
1 answer
2k views

Port-forwarding to a web server on Raspberry Pi

I've recently created a relatively simple smart Christmas tree which is a Raspberry PI Zero W powered LED strip. In order to control it via IFTTT webhooks, I've started a lightweight flask server on ...
user avatar
  • 1,495
11 votes
1 answer
4k views

wget: what security issues am I not considering?

Questions: based on the details provided below, (a) what potential security vulnerabilities and threats might I face in my use of wget and (b) what recommendations would you give for mitigating those ...
user avatar
  • 187
6 votes
1 answer
563 views

Hashing password longer than 14 characters in wpa_supplicant.conf

My college has a WPA2 Enterprise network, which I can connect to on my Pi after configuring the network in wpa_supplicant.conf. I don't want my Wi-Fi password stored in plain text, so I use echo -n $...
user avatar
  • 111
1 vote
1 answer
425 views

Additional risks to home network in exposing (raspberry pi) honeypot to the internet

While I would like to contribute piping of logs from a home-deployed honeypot to the DSHIELD project using a raspberry pi, I am concerned that the additional exposure of the port to the internet would ...
user avatar
  • 739
0 votes
1 answer
381 views

Would an RP3 do well as a firewall appliance?

I have seen this post about the Raspberry Pi for use as an IDS. But how well would it do as a firewall appliance in a residential setting? I will soon be setting up a new network and want to exercise ...
user avatar
2 votes
4 answers
268 views

How to secure automatic SSH connection

I have Raspberry PI 3 which has 4G modem dongle attached to it. It works autonomously and every one in a while has to connect to my server via ssh. This is done by service script either with password ...
user avatar
0 votes
1 answer
2k views

Does a raspberry pi VPN do anything?

Does a raspberry pi vpn do anything besides hide your traffic on your local network? Can your ISP still see what traffic you are sending? Are homebrew openvpn raspberry pi vpn servers a viable source ...
user avatar
3 votes
4 answers
19k views

Can Snort run on a Raspberry Pi?

I am in the preliminary stages of designing a cybersecurity suite for my home network. I don't have any servers or anything, just the standard home setup (computers, tablets, game consoles). The ...
user avatar
  • 209
6 votes
4 answers
5k views

Protect Raspberry Pi's physical sd card to be swapped

Scenario: In a company there are Raspberry Pis which are connected to its network environment. A person with bad intentions could swap the SD card and replace it by his own which makes the Pi to a "...
user avatar
3 votes
1 answer
339 views

IFTTT maker channel and Security Concerns

This is about IFTTT Maker Channel and security around it. They announced a new Maker Channel recently where you can receive and make web requests for automation. For example, I can turn ON/OFF my ...
user avatar
  • 1
3 votes
0 answers
531 views

Raspberry Pi (Raspbian) not capturing WPA2 handshake with Aircrack-ng [closed]

I've been using Aircrack for a short time now with my Alfa wfif adapter on my laptop and it's been working perfectly. However when I try and do the same thing on my Raspberry Pi it's having issues ...
user avatar
1 vote
0 answers
238 views

Connect RFID readers with system/PC [closed]

I have a Raspberry Pi, HID smartcard (HID iClass Px G8Y), HID Card Reader (RP40 multiClass). What I am trying to do is to read the data from this smartcard via the Card Reader onto my system (Laptop/...
user avatar
  • 111
0 votes
2 answers
1k views

RaspberryPi3 wont show fake AP created by Airbase-ng

Im using Aircrack-ng suite to apply an evil-twin attack with my RaspberryPi3 operated by Kali-linux on another RspberryPi3 with Raspbian Jessie. The steps are as followed: 1.configuring the apache2 ...
user avatar
  • 131
-1 votes
3 answers
230 views

Could an attacker grab my wifi password from ethernet?

If an attacker plugged a standard outlet-to-ethernet adapter into an outlet inside my house, and then plugged in an ethernet-to-usb adapter into a raspberry pi, would the raspberry pi connect to the ...
user avatar
  • 35