microsoft surface pen testing setup

[sober]

grawr this disappeared mid post first try

everything is work in progress parts on order

1.end goal: pen testing tablet with minimum of wifi pineapple and metasploit functionality (keep gear in bag and look like tablet user)

2. proposed rig:

64gb surface rt

powered usb hub sporting lan to usb http://forum.xda-developers.com/showthread.php?t=1963384&page=2

raspberry pi running the metasploit via wheezy, or full blown suite over pwnpi

mk4 pineapple

powerpacks for devices

3. how:

putty on surface http://forum.xda-developers.com/showthread.php?t=2092348 unlock easily found on those forums

metasploit on pi: comes on pwnpi

http://www.irongeek.com/i.php?page=security%2Fraspberry-pi-recipes#Installing_Metasploit_on_the_Raspberry_Pi for wheezy

ssh enabled by default on weezy

4. potential issues: win 8 rt may not include ics in which case the rpi would have too take its place which could tax it

post not in depth like first one as it disappeared on me but will edit/ lengthen / update s I go

[madhak]

Hi Sober, I would advise not to buy the RT version for that purpose, its extremely limited, wait for the PRO or buy a W7 tablet and put W8 if you really want it.

I did that on my Acer Iconia Tab W500, W8 run perfectly and I can use any windows app, W8 RT will limit you to app in the app store only so no hacking for you my friend!

hope this help.

[sober]

Hi Sober, I would advise not to buy the RT version for that purpose, its extremely limited, wait for the PRO or buy a W7 tablet and put W8 if you really want it.

I did that on my Acer Iconia Tab W500, W8 run perfectly and I can use any windows app, W8 RT will limit you to app in the app store only so no hacking for you my friend!

hope this help.

I bought the rt for school but I can infact use rt for that purpose, check out my links to xda, you can run any application made for the arm processor, I currently have working putty on my surface, and the rpi will be whats hosting metasploit

entire point of the project is too push the restrictions placed into rt

Edited January 29, 2013 by sober

[madhak]

I bought the rt for school but I can infact use rt for that purpose, check out my links to xda, you can run any application made for the arm processor, I currently have working putty on my surface, and the rpi will be whats hosting metasploit

entire point of the project is too push the restrictions placed into rt

Oops my bad, Its just that the title contained 2 statement that my mind couldn't accept... but yeah with ssh support and a pineapple there is definitely some fun thing to do. I didn't knew about the android arm app support.

I had the surface for 1 day and returned it back when I realized how locked the device was... secure bootloader? its just a matter of time before someone find a way to install Linux on it... I can't live without the capability to boot into Ubuntu, but I have to admit that the surface is a really cool tablet considering its not a computer but a tablet.

cool link and project, good luck.

[sober]

Oops my bad, Its just that the title contained 2 statement that my mind couldn't accept... but yeah with ssh support and a pineapple there is definitely some fun thing to do. I didn't knew about the android arm app support.

I had the surface for 1 day and returned it back when I realized how locked the device was... secure bootloader? its just a matter of time before someone find a way to install Linux on it... I can't live without the capability to boot into Ubuntu, but I have to admit that the surface is a really cool tablet considering its not a computer but a tablet.

cool link and project, good luck.

thanks and yes it is locked down but I bought it as a tablet that I could get work done with, bonus that I get to mess around and get desktop apps to it, and yes I hope for boot to usb *nix in future