The content of the article
We selected fifteen devices with which you can pentest anything you want: from physical devices to contactless cards. This did not include more ordinary tools like screwdrivers and soldering irons – they are easier to choose to your taste. We hope you watch something interesting on this list.
Raspberry pi 4
Price: from 35 dollars
Raspberry Pi mini-computers of the latest model range operate on quad-core Armovy chips, equipped with 1, 2 or 4 GB of RAM, support Wi-Fi and Bluetooth and have two micro HDMI ports and four USB. They can almost replace a low-cost office desktop, they are often used to create media centers and home servers, as well as in a variety of different projects – from musical instruments to robots. But we are interested in something else: Raspberry may become a portable system for pentests. And there are a great many ready-made cases, displays, batteries and other body kits for them. We published a more detailed review of the Raspberry Pi 4 in 2019, but here we only confirm that “raspberry” is definitely a must-have. By the way, in revision 1.2 they solved the compatibility problem with some USB-C charges, keep in mind.
Price: 100-300 euros
One of the best helpers for conducting attacks on contactless cards has been and remains a device called Proxmark3. It is available in several versions.
- RDV1 is an old version of the device, is rarely found on the market and does not have special advantages.
- RDV2 – The advantage of this version is the availability of a connector for an external antenna.
- RDV3 is the most popular (and cheapest) model on the market, Chinese clones are available with the same features, but not always stable performance.
- RDV4 is the latest version of Proxmark, which at the same time includes hardware and software for working with smart cards. The most expensive model from the list.
Proxmark will replace all similar devices for you, but it is worth noting that if you are going to study only Mifare cards, it is better to look away Chameleon mini.
Price: 150 dollars
If you managed to run into a smart home, you probably heard about the ZigBee protocol. He is already many years old, but there are not so many ready-made devices for testing network security. Among them are the APImote board, which works in conjunction with the killerbee framework. The device comes ready-made, but for fans of soldering, developers have posted it on GitHub KiCad schemes.
Continuation is available only to participants
Materials from the latest issues become available separately only two months after publication. To continue reading, you must become a member of the Xakep.ru community.
Join the Xakep.ru Community!
Membership in the community during the specified period will open you access to ALL Hacker materials, increase your personal cumulative discount and allow you to accumulate a professional Xakep Score!
I am already a member of Xakep.ru