SpyPi

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #claude-code #codex #cli #developer-tools #react #windows

★ 221 Open GitHub ↗

An (un-)ethical hacking-station based on Raspberry Pi and Python

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# SpyPi
An (un-)ethical hacking-station based on Raspberry Pi and Python.
OS: Raspbian
![github](https://user-images.githubusercontent.com/31287043/29887140-c3bf5e7c-8dbc-11e7-918d-7f51bf90bbcc.jpg)
Images: Remo Eisner
## What is SpyPi?
The SpyPi is a white-hat hacking-station I've created as part of my high school graduation-work (2017). The device aims at raising awareness of data protection by letting people interactively get in touch with the topic. The SpyPi provides different applications which help the user to learn about the risks of everyday tasks/activities involving technologies such as networks, contactless payment or social media. The interactive aspect allows user and SpyPi to meet at eye-level. To schoolmasterly educate about data protection would only kill interest and insight at birth. The hacking-station is meant to be an on-going project. Its applications and the hardware can be expanded and improved by the user or creator.

## (un-)ethical, what do you mean?!
Whether the hacking-station is ethical or unethical is entirely dependent upon the operator. It's simply out of my control (although SpyPi is thought to be an ethical device).
## Hardware 
If you are interested in the hardware, please visit my [website](http://spypi.ch/).
## Please remember 
SpyPi is a **high school** project and was created with **very little programming** experience. Don't expect flawless code. Constructive criticism is appreciated! Parts of the code are written in German. I'll translate it as soon as possible.

The Project is licensed under the Apache License 2.0. I'm happy to share but under the condition to get credit for my work.  
## Okay cool, but what does it do?
### Network Scanner
Gets basic information about surrounding networks such as the BSSID, ESSID, encryption and authentication type. 
### Brute-Force dict.
Allows user to attack a network with a custom or pre-made password list.
### Mifare default key attack
Tests out whether a Mifare Classic 1K card uses any default read-permission keys.
### Mitmproxy Login-Data Catcher
Catches formular data from HTTPS POST requests by the SpyPi-AP (transparent proxy) client. Every match is stored in a file with additional information about the host and the time the request took place.
### Twitter Data-Miner
Mines incoming Tweets containing a certain string (word, hashtag...) the user chooses himself. Collects Data until ```Ctrl + C```
## How to use
### scanner.py
```
sudo python3 scanner.py
```
### Bruteforce.py
```
sudo python3 Bruteforce.py
```
### login_proxy.py
Make sure you've... 
- installed mitmproxy, Python 3.5 or above (I suggest pyenv) and OpenSSL 1.0.2 via Jessie Backports
- created a wireless AP following [this tutorial](https://learn.adafruit.com/setting-up-a-raspberry-pi-as-a-wifi-access-point/overview) 
- created a text file named proxy.txt

Open two terminal windows or split screen:

Window 1:
```
tail -f proxy.txt
```
Window 2:

Set iptable rules:
```
sudo iptables -F
sudo iptables -t nat -A POSTROUTING -o wlan1 -j MASQUERADE
sudo iptables -A FORWARD -i wlan1 -o wlan0 -m state — state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i wlan0 -o wlan1 -j ACCEPT
sudo iptables -t nat -A PREROUTING -i wlan0 -p tcp — dport 80 -j REDIRECT — to-port 8080
sudo iptables -t nat -A PREROUTING -i wlan0 -p tcp — dport 443 -j REDIRECT — to-port 8080
```
run:
```
mitmdump -s "/home/pi/login_proxy.py" -T --host
```
### mifare.py
```
sudo python mifare.py
```
### twitter-mining.py
Make sure you've created your own Twitter application and inserted the keys in the key.py file.
```
sudo python3 twitter-mining.py
```

SpyPi

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README