Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/alexlynd/esp8266-warshipping

Low-cost WarShipping with built-in geofencing, WiFi recon, and Rogue AP on the ESP8266
https://github.com/alexlynd/esp8266-warshipping

esp32 esp8266 reconnaissance wardriving warshipping wifi-security

Last synced: about 8 hours ago
JSON representation

Low-cost WarShipping with built-in geofencing, WiFi recon, and Rogue AP on the ESP8266

Awesome Lists containing this project

README

        

# ESP8266 WarShipping
Low-cost WarShipping proof-of-concept with built-in geofencing & WiFi recon on the ESP8266.

## What is WarShipping?
WarShipping involves mailing a physical package that delivers an attack payload to a victim. Typically these attacks will target large companies by addressing the package to a non-existent recipient, and having the package run a wireless payload while sitting inside a mail center, until it's shipped back to the return address.

## WarShipping Proof-of-Concept

### Components
I wanted to show that a $5 payload could phish for user credentials and gather reconnaissance on a corporate network, so I used the following components:
- ($2) [ESP8266 WiFi microcontroller]()
- ($2) [LiPo charging circuit]()
- ($6) [1800 mAh LiPo battery]()*
*I ripped this out of a toy helicopter*

*insert image here*

The "D1 Mini" form factor makes these components stackable, but I soldered everything together to make it more stable for shipping.

*insert image here*

### Setup
Setup video + guide coming soon!

#### Building & flashing from source
**To compile this tool from scratch, install `make` and `docker` on your machine.**
```
sudo apt install make docker
```

**Clone this GitHub repo & navigate to source**
```
git clone https://github.com/AlexLynd/ESP8266-WarShipping
cd ESP8266-WarShipping/src
```
**Build only**
```
sudo make build
```
**Build & flash the ESP8266**
```
# PORT parameter optional
# update network triggers

sudo make flash trigger-network= home-network= PORT=
```

### Features
- Low-power mode
- Geofencing
- Basic WiFi reconnaissance
- Rogue AP for credential phishing
- Known network detection
- CSV logging

### To-Do
- CSV exports
- Deep sleep
- WiFi manager for cred setup