Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [raspberry-pi]

A series of tiny hobbyist computing devices designed and developed in the UK by the Raspberry Pi Foundation with the aim of teaching basic computing and programming in schools.

1
vote
0answers
9 views

Fluxion disconnecting both of my external and internal wifi cards [migrated]

I installed fluxion in raspberry pi so i can use it on the go. I mainly connect to my pi using ssh and vnc. I plugged an external wifi adapter to my PI to support monitor mode, but when I select my ...
1
vote
0answers
32 views

UFW (Uncomplicated Firewall) Question

I was wondering if there's any benefit of adding following rules to a Raspberry-Pi directly exposed to the internet: sudo ufw deny to 0.0.0.0/8 && sudo ufw deny to 169.254.0.0/16 && ...
1
vote
1answer
63 views

using secure boot in embedded systems

The whole idea about using Secure Boot in Embedded Systems to boot an operating system is new to me. I've never paid much attention to it previously. I just know that it prevents the loading at start-...
1
vote
0answers
94 views

How secure is a file on a raspberry pi?

Let's say I change the password for the root & pi user to something impossible to brute force, say 20 characters. Then in one of my files on my raspberry pi, I hardcode a password. Is this ...
-2
votes
2answers
114 views

Is ssh secure if I dont port forward?

If I have a Raspberry Pi, and I install noobs on it. If i connect it to my router and log in with the default user pi over ssh to create another user to then delete the pi user, is it secure? Since ...
0
votes
1answer
263 views

best way to encrypt code and data on IOT device?

I have R scripts which are running on a Raspberry Pi device. I want to encrypt the code and data on the device so that if anyone unmounts the disk and try to read the content via other devices they ...
0
votes
0answers
21 views

Linux aarch64 security update provision, Raspberry Pi

Do any of the major Linux distributions (Fedora, Debian, Arch, Ubuntu, etc.) provide timely security updates for the aarch64 architecture for kernel and other standard system components present in a ...
2
votes
1answer
701 views

Port-forwarding to a web server on Raspberry Pi

I've recently created a relatively simple smart Christmas tree which is a Raspberry PI Zero W powered LED strip. In order to control it via IFTTT webhooks, I've started a lightweight flask server on ...
9
votes
1answer
928 views

wget: what security issues am I not considering?

Questions: based on the details provided below, (a) what potential security vulnerabilities and threats might I face in my use of wget and (b) what recommendations would you give for mitigating those ...
6
votes
1answer
273 views

Hashing password longer than 14 characters in wpa_supplicant.conf

My college has a WPA2 Enterprise network, which I can connect to on my Pi after configuring the network in wpa_supplicant.conf. I don't want my Wi-Fi password stored in plain text, so I use echo -n $...
1
vote
1answer
191 views

Additional risks to home network in exposing (raspberry pi) honeypot to the internet

While I would like to contribute piping of logs from a home-deployed honeypot to the DSHIELD project using a raspberry pi, I am concerned that the additional exposure of the port to the internet would ...
0
votes
1answer
230 views

Would an RP3 do well as a firewall appliance?

I have seen this post about the Raspberry Pi for use as an IDS. But how well would it do as a firewall appliance in a residential setting? I will soon be setting up a new network and want to exercise ...
2
votes
4answers
168 views

How to secure automatic SSH connection

I have Raspberry PI 3 which has 4G modem dongle attached to it. It works autonomously and every one in a while has to connect to my server via ssh. This is done by service script either with password ...
0
votes
1answer
1k views

Does a raspberry pi VPN do anything?

Does a raspberry pi vpn do anything besides hide your traffic on your local network? Can your ISP still see what traffic you are sending? Are homebrew openvpn raspberry pi vpn servers a viable source ...
3
votes
3answers
7k views

Can Snort run on a Raspberry Pi?

I hope this is ok to ask here. I am in the preliminary stages of designing a cybersecurity suite for my home network. I don't have any servers or anything, just the standard home setup (computers, ...
5
votes
3answers
649 views

Protect Raspberry Pi's physical sd card to be swapped

Scenario: In a company there are Raspberry Pis which are connected to its network environment. A person with bad intentions could swap the SD card and replace it by his own which makes the Pi to a "...
4
votes
1answer
244 views

IFTTT maker channel and Security Concerns

This is about IFTTT Maker Channel and security around it. They announced a new Maker Channel recently where you can receive and make web requests for automation. For example, I can turn ON/OFF my ...
3
votes
0answers
344 views

Raspberry Pi (Raspbian) not capturing WPA2 handshake with Aircrack-ng [closed]

I've been using Aircrack for a short time now with my Alfa wfif adapter on my laptop and it's been working perfectly. However when I try and do the same thing on my Raspberry Pi it's having issues ...
0
votes
0answers
157 views

Unknown DNS requests to China and DoD

I have set up a RaspberryPi with multiple tools for my needs. This includes a Pi-Hole instance. This is a small DNS proxy that filters the requests going out to Ad Networks preventing them to be ...
1
vote
0answers
128 views

Connect RFID readers with system/PC [closed]

I have a Raspberry Pi, HID smartcard (HID iClass Px G8Y), HID Card Reader (RP40 multiClass). What I am trying to do is to read the data from this smartcard via the Card Reader onto my system (Laptop/...
0
votes
2answers
599 views

RaspberryPi3 wont show fake AP created by Airbase-ng

Im using Aircrack-ng suite to apply an evil-twin attack with my RaspberryPi3 operated by Kali-linux on another RspberryPi3 with Raspbian Jessie. The steps are as followed: 1.configuring the apache2 ...
-1
votes
3answers
169 views

Could an attacker grab my wifi password from ethernet?

If an attacker plugged a standard outlet-to-ethernet adapter into an outlet inside my house, and then plugged in an ethernet-to-usb adapter into a raspberry pi, would the raspberry pi connect to the ...
3
votes
1answer
450 views

Arpspoof on Debian - Linux isn't working [closed]

I'm using the following code: >sudo bash >echo 1 > /proc/sys/net/ipv4/ip_forward >arpspoof -i wlan0 -t [Victim IP] [Gateway IP] #on terminal num.1 >arpspoof -i wlan0 -t [Gateway IP] [...
1
vote
1answer
207 views

What are the risks of connecting a Raspberry Pi to a PC? [closed]

I was wondering what are the risks of connect a Raspberry pi to a PC through the USB port?I could think of HID emulation and keystroke injection into the victims PC.Other than that what are the ...
1
vote
1answer
304 views

protect c ++ application via an automatic hardware binding

I have a Qt App which is running on a raspberry pi (Debian Wheezy). The raspberry image is autogenerated via a python script: - Get the latest version of the generic custom-raspi-image - Mount the ...
0
votes
0answers
225 views

Spoofing MAC address on Raspberry Pi B+ breakes connection

I'm using Raspberry Pi on my home Wi-Fi network, and I wanted to test spoofing script spoof-mac.py. What comes out is that with MAC other than default it can connect to router but does no get access ...
-1
votes
1answer
135 views

Weird GET request to /proxychecker/check.cgi [duplicate]

I started running a flask application on a raspberry pi last night. It was not hiding behind apache or nginx, served the requests by itself. I set up my router to forward http traffic towards it as ...
5
votes
1answer
516 views

How to prevent ARP poisoning with hostapd and iptables?

I have a raspberry pi and hostapd and iptables are running on my pi. However iptables cannot block the wifi clients from communicating with each other, thus I cannot prevent them from sending out ARP ...
0
votes
1answer
56 views

How to check connectivity between raspberry pi and server [closed]

How to check connectivity between raspberry pi (which act as a client) and server using web-socket
1
vote
1answer
286 views

What is the best practice to secure an unattended Raspberry Pi?

I'm working on a project which involves mounting a Raspberry Pi on a self-moving vehicle. I'm looking for the best way to encrypt the Pi (entire file-system, swap, etc.), with the minimum possible ...
0
votes
0answers
243 views

Can't see WEP networks with airodump-ng

I use airodump-ng on my RPi3 (armhf version). I've been able to properly set up the interface and turn it into monitor mode. Now, I can sniff the air traffic using airodump-ng, but I can't see my pre-...
7
votes
3answers
34k views

Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng

For some reason, I can't turn the built-in Wi-Fi adapter on the new Raspberry Pi 3 into monitor mode like I used to do on other platforms. First I kill the processes that interfere with sudo airmon-...
4
votes
2answers
349 views

How significant are these Dieharder results on a Raspberry pi

I was running the Dieharder test suite on my raspberry pis hardware random number generator, and it came back with this: root@raspberrypi:/home/pi# dieharder -a -g 201 -f /dev/hwrng #=========...
1
vote
2answers
562 views

How to know if a host has been compromised and re-secure it again? (particular case of a raspberry) [duplicate]

I'm running a raspberry PI and I've accidentally left the 22 port open to it from a public IP for about 24 hours. Raspberries' raspbian distro comes by default with a "pi" user and "raspberry" ...
1
vote
0answers
94 views

Under which circumstances is the default security profile of XRDP considered okay?

In xrdp.ini, the base install of xrdp on my raspberry pi*, there I have the following below. I changed crypt_level to high. [globals] bitmap_cache=yes bitmap_compression=yes port=3389 crypt_level=...
2
votes
1answer
729 views

risk of default pw on my raspberry pi

I have a raspberrypi with raspbian and default user and pw (I know, don't shoot me). I setup port fw on my router so that I could ssh to it from an external network. Also because my external IP keeps ...
6
votes
1answer
767 views

Locking Linux system to work on certain hardware only

Is there a way of locking a Linux system to work with a specific (pre-defined) hardware only? I am developing a commercial product and want to make it a bit harder for someone to clone the whole ...
2
votes
2answers
328 views

How can the connection of a rogue VPN router be countermeasured with a sniffer?

As an IT admin, what can I do to countermeasure an attack performed like this page explains? http://www.pivpn.net/2015/08/hide-your-ass-hide-by-mac-address-and.html What they do is to put a raspberry ...
9
votes
3answers
15k views

MSFConsole/Kali Linux - gain root access to unix system

I am messing around with Kali Linux, MSFConsole and DVWA (Damn Vulnerable Web Application). I have successfully been able to get into the system (Raspberry Pi) by creating a PHP backdoor and uploaded ...
46
votes
1answer
51k views

Diffie Hellman parameters still calculating after 24 hours

I have a fresh install of Arch Linux on a RaspberryPi model B. I'm setting up OpenVPN and using easy-rsa with OpenSSL 1.0.2d to generate initial keys and certificates. All went fine until I ran ./...
2
votes
1answer
4k views

Diffie Hellman parameters still calculating after 24 hours [duplicate]

I have a fresh install of Arch Linux on a RaspberryPi model B. I'm setting up OpenVPN and using easy-rsa to generate initial keys and certificates. All went fine until I ran ./build-dh. It is now 24 ...
2
votes
2answers
2k views

Lots of SSH tries on my log. Is it normal?

I have a Raspberry Pi connected to my home and at day 2 of this month I've opened the port 22 of my router so I could SSH it from anywhere. Today by curiosity, I decided to see the raspberry pi log, ...
0
votes
1answer
835 views

Security of access to local network via VNC over SSH tunnel

I've just set up a Raspberry Pi 2 with the latest raspbian and installed some services. For remote access I've installed tightvnc server which I set up to only allow connections from localhost. I can ...
1
vote
3answers
322 views

How do I protect security camera footage from an adversary?

I am interested in installing a security camera in my car, but I am worried about an adversary gaining physical access to the camera, and destroying the footage; leaving me with no evidence. ...
4
votes
1answer
551 views

SSH raspberry pi security

I've setup an SSH server on my Raspberry Pi. I use RSA keys to login, I disabled root login, password authentication and I use port forwarding to login from outside my network. I can see the ...
2
votes
1answer
1k views

How to block traffic coming from an “public” WiFi hotspot and going to the LAN (iptables)

I followed this tutorial (http://elinux.org/RPI-Wireless-Hotspot) for an Wifi Hotspot in the guesthouse. This is working fine, but every device on the WiFi network can reach any LAN device in the LAN ...
2
votes
1answer
2k views

Buffer Overflow on Raspberry PI

Is the ARM processor used on the Raspberry Pi vulnerable to standard buffer overflows? That is, if a program that has a BO vulnerability is run on a Pi, will it be vulnerable to exploit? How does ...
13
votes
7answers
7k views

Testing a hardware random number generator

The Raspberry Pi has a built in hardware random number generator but there doesn't appear to be any public documentation on the hardware, and even if there were it would be questionable (what company ...
4
votes
2answers
2k views

How does processor architecture affect password hashing speed?

Does hashing speed vary significantly using different architectures (x86 vs ARM)? Scenario I am investigating the possibility of using a cluster of Raspberry Pi for cracking passwords hashed with ...
10
votes
4answers
2k views

Is the Raspberry Pi vulnerable to injection beyond the SD Card?

I understand that it is possible for a code to be crafted for a given hardware/firmware to inject a virus that would not be removed by a wipe of the hard disk. Video card, and BIOS are examples of a ...