Jump to content

microsoft surface pen testing setup


sober

Recommended Posts

grawr this disappeared mid post first try

everything is work in progress parts on order

1.end goal: pen testing tablet with minimum of wifi pineapple and metasploit functionality (keep gear in bag and look like tablet user)

2. proposed rig:

64gb surface rt

powered usb hub sporting lan to usb http://forum.xda-developers.com/showthread.php?t=1963384&page=2

raspberry pi running the metasploit via wheezy, or full blown suite over pwnpi

mk4 pineapple

powerpacks for devices

3. how:

putty on surface http://forum.xda-developers.com/showthread.php?t=2092348 unlock easily found on those forums

metasploit on pi: comes on pwnpi

http://www.irongeek.com/i.php?page=security%2Fraspberry-pi-recipes#Installing_Metasploit_on_the_Raspberry_Pi for wheezy

ssh enabled by default on weezy

4. potential issues: win 8 rt may not include ics in which case the rpi would have too take its place which could tax it

post not in depth like first one as it disappeared on me but will edit/ lengthen / update s I go

Link to comment
Share on other sites

Hi Sober, I would advise not to buy the RT version for that purpose, its extremely limited, wait for the PRO or buy a W7 tablet and put W8 if you really want it.

I did that on my Acer Iconia Tab W500, W8 run perfectly and I can use any windows app, W8 RT will limit you to app in the app store only so no hacking for you my friend!

hope this help.

Link to comment
Share on other sites

Hi Sober, I would advise not to buy the RT version for that purpose, its extremely limited, wait for the PRO or buy a W7 tablet and put W8 if you really want it.

I did that on my Acer Iconia Tab W500, W8 run perfectly and I can use any windows app, W8 RT will limit you to app in the app store only so no hacking for you my friend!

hope this help.

I bought the rt for school but I can infact use rt for that purpose, check out my links to xda, you can run any application made for the arm processor, I currently have working putty on my surface, and the rpi will be whats hosting metasploit

entire point of the project is too push the restrictions placed into rt

Edited by sober
Link to comment
Share on other sites

I bought the rt for school but I can infact use rt for that purpose, check out my links to xda, you can run any application made for the arm processor, I currently have working putty on my surface, and the rpi will be whats hosting metasploit

entire point of the project is too push the restrictions placed into rt

Oops my bad, Its just that the title contained 2 statement that my mind couldn't accept... but yeah with ssh support and a pineapple there is definitely some fun thing to do. I didn't knew about the android arm app support.

I had the surface for 1 day and returned it back when I realized how locked the device was... secure bootloader? its just a matter of time before someone find a way to install Linux on it... I can't live without the capability to boot into Ubuntu, but I have to admit that the surface is a really cool tablet considering its not a computer but a tablet.

cool link and project, good luck.

Link to comment
Share on other sites

Oops my bad, Its just that the title contained 2 statement that my mind couldn't accept... but yeah with ssh support and a pineapple there is definitely some fun thing to do. I didn't knew about the android arm app support.

I had the surface for 1 day and returned it back when I realized how locked the device was... secure bootloader? its just a matter of time before someone find a way to install Linux on it... I can't live without the capability to boot into Ubuntu, but I have to admit that the surface is a really cool tablet considering its not a computer but a tablet.

cool link and project, good luck.

thanks and yes it is locked down but I bought it as a tablet that I could get work done with, bonus that I get to mess around and get desktop apps to it, and yes I hope for boot to usb *nix in future

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...