+- DIY Electronic projects (https://forum.yu3ma.net)
+-- Forum: IT (https://forum.yu3ma.net/forumdisplay.php?fid=63)
+--- Forum: Sigurnost i zaštita (https://forum.yu3ma.net/forumdisplay.php?fid=64)
+--- Thread: PoisonTap - Raspberry Pi Zero & Node.js (/showthread.php?tid=1447)
PoisonTap - Raspberry Pi Zero & Node.js - 1van - 11-26-2016
When PoisonTap (Raspberry Pi Zero & Node.js) is plugged into a locked/password protected computer, it:
- emulates an Ethernet device over USB (or Thunderbolt)
- hijacks all Internet traffic from the machine (despite being a low priority/unknown network interface)
- siphons and stores HTTP cookies and sessions from the web browser for the Alexa top 1,000,000 websites
- exposes the internal router to the attacker, making it accessible remotely via outbound WebSocket and DNS rebinding (thanks Matt Austin for rebinding idea!)
- installs a persistent web-based backdoor in HTTP cache for hundreds of thousands of domains and common Javascript CDN URLs, all with access to the user’s cookies via cache poisoning
- allows attacker to remotely force the user to make HTTP requests and proxy back responses (GET & POSTs) with the user’s cookies on any backdoored domain
- does not require the machine to be unlocked
- backdoors and remote access persist even after device is removed and attacker sashays away
https://www.youtube.com/watch?v=Aatp5gCskvk