![PenTest](/img/default-banner.jpg)
- 41
- 127 421
PenTest
เข้าร่วมเมื่อ 5 ม.ค. 2024
Penetration Testing is just as fun as it sounds.
Flipper-Zero - How To Create Favorites
How to create favorites on the Flipper-Zero. Two methods are used.
มุมมอง: 290
วีดีโอ
HackRF with PortaPack - Changing the Splash screen
มุมมอง 202วันที่ผ่านมา
How to change the splash screen on the HackRF with PortaPack. You can upload many images and change them anytime.
Flipper-Zero - How to create a Sub-GHz playlist
มุมมอง 56914 วันที่ผ่านมา
Flipper-Zero - How to create a Sub-GHz playlist. We go over how to create a playlist of different SubGHz codes so they will run one at a time, in order.
netAlly LinkRunner 10G Advanced Ethernet Tester
มุมมอง 7614 วันที่ผ่านมา
netAlly’s LinkRunner 10G is an Android based Network testing solution. It is a high performance Ethernet testing and Multi-Gig to 10 Gig unit that works in validating and configuring Copper and Fiber networks.
Flipper-Zero SubGHz Remote
มุมมอง 20921 วันที่ผ่านมา
How to create a SubGHz remote in the field. This is useful when you need to interact with a number of SubGHz devices consistently, and need a fast solution for a remote.
Flipper-Zero can Copy and Deploy Rolling Code Key Fobs. One time use, but you still get in.
มุมมอง 504หลายเดือนก่อน
I show how, with just the Zero, I can copy a code from a Key Fob and use that code, once. It certainly narrows your vector and is a one way trip.
Dual Evil Portal with Awok Dynamics Dual ESP32 Touchscreen GPIO Board for the Flipper-Zero
มุมมอง 2.2Kหลายเดือนก่อน
In this video, I go over how to setup the files on both SD cards to run Dual “Evil Portal” with AWOK Dynamics Dual ESP32 GPIO board, for the Flipper-Zero. Then we run it all through the Marauder firmware.
Wardriver - Flipper-Zero and the Rabbit-Labs EU ESP32 v4 GPIO Board with the Rabbit-Labs GPS Board
มุมมอง 782หลายเดือนก่อน
In this video I go over prepping, flashing and using Wardriver with the Rabbit-Labs ESP32 v4 GPIO Board. GPS data is supplied by the Rabbit-Labs GPS GPIO Board. I connect all this, run Wardriver and detail how to review the data from the Flipper-Zero. In this video I am using the latest “Momentum” Dev firmware.
Flipper Zero Wifi and NRF24 Module expansion by Speexvocon
มุมมอง 509หลายเดือนก่อน
NRF Mousejack and Wifi Scanner/Deauther expansion shield for Flipper Zero. This is a combination shield with an NRF24 module for the Flipper NRF sniffing (i.e. for mousejacking), as well as an ESP-01s module for Wifi scanning or esp8266 deauthing.
ESP32 Marauder Touchscreen by Justcallmekoko with AWOK Dynamics GPS module
มุมมอง 660หลายเดือนก่อน
This video showcases the ESP32 by Justcallmekoko, with an AWOK Dynamics GPS module added. I run through a little Wardriving for WIFI and Bluetooth.
How to: Generate IR Signal with The Masta-Blasta - IR Blaster by Rabbit-Labs
มุมมอง 2782 หลายเดือนก่อน
How to generate IR signal using the Masta-Blasta. An Infrared Board by Rabbit-Labs.
How To: ESP32 Marauder Mini by Justcallmekoko with an external antenna and battery installed.
มุมมอง 3.3K2 หลายเดือนก่อน
This version sports and external GPS antenna and a battery, making it very portable. The ESP32 Marauder Mini is a portable suite of WiFi/Bluetooth offensive and defensive tools for the ESP32. This iteration sports a 5-way tactile switch for user input rather than a touch screen. It is considerably smaller than previous versions of the Marauder but still retains most of the familiar capabilities...
HackRF by Rabbit-Labs with PortaPack and Mayhem Installed
มุมมอง 1.1K2 หลายเดือนก่อน
HackRF by Rabbit-Labs with PortaPack and Mayhem Installed
Rabbit-Labs ESP32 S3 v2 Flat Flipper Zero board running Marauder firmware
มุมมอง 9432 หลายเดือนก่อน
Rabbit-Labs ESP32 S3 v2 Flat Flipper Zero board running Marauder firmware
ESP32 WIFI Marauder v6.1 - Touchscreen with Battery Installation by Justcallmekoko
มุมมอง 2.2K3 หลายเดือนก่อน
ESP32 WIFI Marauder v6.1 - Touchscreen with Battery Installation by Justcallmekoko
WIFI Marauder on the Dual ESP32 v2 Mini with GPS by Awok Dynamics for the Flipper-Zero
มุมมอง 1.5K3 หลายเดือนก่อน
WIFI Marauder on the Dual ESP32 v2 Mini with GPS by Awok Dynamics for the Flipper-Zero
Rabbit-Labs The Gemini Dream GPIO Board for the Flipper-Zero
มุมมอง 1.8K3 หลายเดือนก่อน
Rabbit-Labs The Gemini Dream GPIO Board for the Flipper-Zero
Flipper Zero - MouseJacking Attack with a 5v NRF24 MiniBoard by Rabbit-Labs
มุมมอง 3.2K3 หลายเดือนก่อน
Flipper Zero - MouseJacking Attack with a 5v NRF24 MiniBoard by Rabbit-Labs
ESP32 Marauder Mini by Justcallmekoko
มุมมอง 4.4K4 หลายเดือนก่อน
ESP32 Marauder Mini by Justcallmekoko
Dual ESP32 Touchscreen GPIO Board by AWOK Dynamics
มุมมอง 2.1K4 หลายเดือนก่อน
Dual ESP32 Touchscreen GPIO Board by AWOK Dynamics
Dual ESP32 GPIO Board by AWOK Dynamics running WIFI Marauder for the Flipper Zero
มุมมอง 1.7K4 หลายเดือนก่อน
Dual ESP32 GPIO Board by AWOK Dynamics running WIFI Marauder for the Flipper Zero
Chungus ESP32 V4 GPIO board by AWOK Dynamics using Marauder and Evil Portal for the Flipper Zero
มุมมอง 3914 หลายเดือนก่อน
Chungus ESP32 V4 GPIO board by AWOK Dynamics using Marauder and Evil Portal for the Flipper Zero
How to use FZEasyMarauderFlash by SkeletonMan03 to update ESP32 GPIO Boards for the Flipper Zero
มุมมอง 3364 หลายเดือนก่อน
How to use FZEasyMarauderFlash by SkeletonMan03 to update ESP32 GPIO Boards for the Flipper Zero
Lego Flipper Zero External CC1101 Module with Dual-pole antenna.
มุมมอง 2.2K5 หลายเดือนก่อน
Lego Flipper Zero External CC1101 Module with Dual-pole antenna.
Rabbit-Labs - Flux Capacitor - Amplified CC1101 - LIMITED EDITION for the Flipper Zero
มุมมอง 4K5 หลายเดือนก่อน
Rabbit-Labs - Flux Capacitor - Amplified CC1101 - LIMITED EDITION for the Flipper Zero
E.T. Flipper Zero GPIO Board GPS/GNSS Module by Rabbit-Labs
มุมมอง 2.2K5 หลายเดือนก่อน
E.T. Flipper Zero GPIO Board GPS/GNSS Module by Rabbit-Labs
Mayhem v1 for Flipper: Wifi/Camera/SD/NRF24-CC1101 by Erwin Ried
มุมมอง 3.3K6 หลายเดือนก่อน
Mayhem v1 for Flipper: Wifi/Camera/SD/NRF24-CC1101 by Erwin Ried
Disney’s Toy Story - Woody, Bullseye, Buzz and Alien Inferred controlled by the Flipper Zero.
มุมมอง 1.9K6 หลายเดือนก่อน
Disney’s Toy Story - Woody, Bullseye, Buzz and Alien Inferred controlled by the Flipper Zero.
Flipper Zero Video Game Module powered by Raspberry Pi Unboxing and First Look
มุมมอง 1.1K6 หลายเดือนก่อน
Flipper Zero Video Game Module powered by Raspberry Pi Unboxing and First Look
Air Arkanoid Flipper Zero Video Game Module powered by Raspberry Pi
มุมมอง 1866 หลายเดือนก่อน
Air Arkanoid Flipper Zero Video Game Module powered by Raspberry Pi
How to but esp it
Do you need the thing on top for it to work?
You don’t have to use the module on the flipper to use Sub-GHz. It extends the range quite a bit, though.
Thanks PenTest!
Anytime.
God all i ever hear about the NRF is MOUSEJAKING MOUSEJAKING MOUSEJAKING. When will someone make apps for other uses? like finding and communicating with LORA devices? NRF24s are quite powerful, especially the CaracalDB version, like MILES and MILES of range. messing with mice to deploy scripts seems like its not letting the chip live up to its potential. Also thats the RabbitLabs version, just say its Rabbit Labs. No one calls these products "tech rabbit"
Thank you for the suggestion.
@@PenTestTuner oh i didint mean you as much, i just meant in general. EVERYONE talks about mousejaking but even in forums you never hear about anything else.
@@PenTestTuner sorry if i came off to you personally
Nope. I didn’t take it that way at all. It’s the interwebs, I take no offense.
Thank you! I have been trying to figure this out for months!
Happy to help.
Thanks.. simple and helpful...
Thank you.
I can confirm that this does work. Just tried it 😂
Nice.
Where'd you get the path?
It is the path to the file in the SD card.
Is it possible to use the flipper zero to copy and duplicate a Schlage 9651t key fob, that will be used on common area doors using HID multiclass SE ? I’m waiting for my flipper to arrive for this use. From what I can see, 9651t is easy to read and copy, but the HID SE might be tough
I have not used that hardware.
Nice short video! Where did you find a repository of splash screens? And did you have to modify them to fit? Thanks!
There are a number of splash screens on GitHUB.
@@PenTestTuner I will look there more deeply.
@@d.tracylane8661 did you find them?
Where do you get the HTML from?
You can find allot of the HTML on GitHUB.
@@PenTestTuner how can you make a number of different APs and select them? does a folder need to be created?
You are able to create 2 “Portals” at once with this device. Each chip can function independently.
Nice video, thanks :)
Thanks you.
Have you been able or have you tried to keyless entry a vehicle and turning on the ignition on a pske system using 2 of these device to grab the key fob signal using a 125-135khz antenna ?
I have not.
*_Don’t use the Read RAW feature with your car key fob!_* Modern car central locking systems use rolling codes, which means that every time you use your key fob, it generates a unique code. This code is based on a sequence known by the central locking system and is used to unlock a car. If you capture the key fob’s signal and replay it back to your car, *_you risk de-syncing the original key, making it unusable_* .
That has not been my experience.
Thats clean, what else can it do
So much.
Just finally got one
Oh yeah.
Is there an easy way to make an evil portal?
There are a number of different ways. This is my favorite.
I have everything jam file on my sub GHz...love it
Nice.
This is what the flipper community needs. Dope video bro 🔥
Thank you.
So you don't use rolling code ! it's called click-bait ...
It is simply a vector that can be exploited.
Excellent coheret consise content. Well done!
Thank you.
Does it work for the whole sub-ghz range ? or is it for a sub band within it ?
It is a 433MHz antenna. So it works in ranges around 300MHz to about 450MHz.
Keep em coming
Thanks for the motivation. More to come.
For some reason the deauth attack isn’t working for me- do you have to start it at a specific time?
There are a couple of ways to deauthorize. Just keep trying.
Does this marauder support web server management AP to manage it and not using a display at all?
You can use a CLI to interface with it and do not have to use the screen.
@@PenTestTuner Ah. That still needs physical connection. I was talking about controlling it wirelessly.
I have not seen it used in that way.
Can u list every product u used to make this? Like as in the listings/names
It would be best to just watch the video and take notes.
Can u do a breakdown of all the things i need to buy to get the same kind of device as yours?
Watch my video over and over to take notes.
Is there a video on how to install this software
In this video I was using the XTREME firmware. Now I use Momentum, most of the time. If you are referring to the Bruteforce attacks, they are in the Momentum firmware by default.
it would be more effective if you used one for evil portal and one for deauth nearby a real access point
That’s cool.
The flipper isn't the right tool for the job. Sure, it can hold a ton of different files. But for a quick duplicate of a fixed code, I recommend a 4 button RT433 based RF duplication remote. It can be 4 different buttons for one remote or unlock for 4 different remotes and on different frequency bands. They're like 5 bucks each. There's no save buttons or menus. Just point one remote at the other and done.
Sounds cool, too.
Ygvyvyczzzz
Its hard to see whats on the screen 🤥
I know. I’ll get better. Hahaha.
Heh
Yep.
How does it look in the mini? Is it more difficult?
I haven’t done it in the mini.
You prefer this one or the touch?
Mini is easier to navigate. Touchscreen is better when you are looking at the data right there, especially with functions that show you a graph. So I just like a bigger screen. I would also say that that the mini has an advantage when selecting things and scrolling. Touch relies on swipes to scroll and sometimes those swipes end up selecting things you don’t want to select. It becomes a pain. So… Mini most of the time.
Hello, is that suppirt esp32-s3
This is the ESP32-WROOM chip.
Hi, thx for the video. So, what steps should I follow to make these rolling codes continuously executable from the Flipper Zero? I hope the only way isn’t to capture a new signal every time. (:
Because of the nature of rolling codes, the code changes every time. So yes, you would need to copy it every time to perform this attack. It is a great security feature. This video shows a specific attack vector that only works once.
St7735 supported?
I don’t believe that is the screen that is used.
should have shown how to set up the driver as well what maybe easy for you is not easy for other which is why we are looking up/watching your video besides i ran all the step and it cant find the specific file to launce in command prompt. the file is located in the unzipped folder and it in a .py format run through python just like your but im drawing a blank please help if you can
Make sure to navigate to the folder in Command Prompt, then type the entire name of the file I state. You will get it.
Link for buy?
Limited Edition is no longer available, however, the standard version is still being produced. Keep an eye out for when it is stock. rabbit-labs.com/product/rabbit-labs-flux-capacitor-amplified-cc1101/
Hey, i love the video and im glad you like the board! Do you mind sending me your order number so i can send you the latest version of the board? Also btw, the chip does have bluetooth but marauder doesnt utilize it due to a software issue. Im currently working on fixing that and the updated marauder firmware should be included in Momentum very soon.
Hey. I appreciate the kudos. Look forward to the fix. Your stuff is great.
dude, i like your channel but thats pure clickbait. anyone with understanding of rolling codes sees through this, it would require participation from the fob owner in real situation. do better.
I disagree. Access to the fob could happen without the owner knowing. I agree that the vector is not ideal, but it is possible. Dude, thank you for liking.
@@PenTestTuner you have knowledge we don’t. Without the button actuation there is no signal to emulate. The reason that worked is becuase you recorded it without it reaching the vehicle. Once they correspond the code rolls from the vehicle and sets the fob for its next signal. Or the vehicle is pre rolling era.
Correct. And that, one time you are in. My point is that you can get in, even if the vector is not the most ideal.
I know rolling codes and vehicles better than you. His technique works fine. That same recording will open the door many times. I do it all the time. You don't know what you're talking about.
@@honestlocksmith5428 apparently not. In his example he only recorded 1 code. In order to open any rolling code device you have to have the signal recorded that’s the same in sequence expected by the reciever. Of coarse if you have every signal recorded and play them eventually one is going to be right. You missed the part of my comment that it would take participation to achieve that. I get that it’s able to be done but not with one random recorded signal.
I can´t see nothing on the screen..
Keep trying.
Can you do a tutoriao how to use nrf24 scanner?
Thank you for the suggestion.
Great simple example vid. New sub
Thank you.
❤️ Amsterdam ✌🏽
Love you Amsterdam.
Wait, what?! Has anyone tested this with RogueMaster? Unleashed? Thanks for the info!
I know that it works with Momentum.
How does one even find out which sub ghz frequency and transmitter/ brand version a gate is using in order to brute-force it in the first place ?????
1. Allot of trail and error. 2. Allot of trial and error.
3. Try again.
Failed to load sd card. How do we fix that? I’m getting that message on my awok v2 and there’s an sd card inside.
Make sure you have the latest firmware. Remember there are two chips to flash.
very nice video , +1 question can you do something with supermarkets? i mean i see some of them play with wallgreens and some of them but if you can do what is the procedure to capture signal from supermarket i mean need to use read hoping with bin raw? or read raw?
I haven’t had enough experience with markets. Vulnerabilities are everywhere.