| Current Version | Release Date | Firmware Download |
|---|---|---|
| 0.6 | 04_25_23 | Download |
- Why does this need to exist?
- Resources
- Get Started
- Stay informed about updates
- Read the source code that generates the HackMeWifi lab
- Lab Presentation
- Are you stuck at the first challenge of trying to crack the wifi password?
- Why did you make this?
This project is a self-paced, real-world cybersecurity learning solution for the Raspberry Pi.
The hack-this-wifi firmware turns your Raspberry Pi into a WiFi Hotspot you can practice hacking. It hosts an SSH server and a web application with tips on how to proceed once you’ve cracked the Wi-Fi password. It reflects real world open-source software security mistakes common in IoT devices. You can practice:
- Cracking a WIFI network credential
- Finding a vulnerability and obtaining remote shell access on the Access Point
- Defacing a web page hosted on the access point
Why does this need to exist?
The biggest hurdle to starting a career in cybersecurity is safety. When you learn a sport or a skill like playing a musical instrument- you get better through going to practice. Unfortunately, you can’t just practice on other people’s systems. There are legal consequences for building your security skillset against other people’s systems.
While Virtual Machine practice labs have helped many people get into cybersecurity, the configuration of virtual machines is too complex for many beginners. I created a simpler solution based on the Raspberry Pi. You just install my firmware on your Raspberry Pi & power up.
You don’t have to install virtualbox.
You don’t have to configure virtual networking.
You don’t have to learn docker.
It’s push-button simple to start simple hacking exercises with real world implications.
If you can download a file and follow instructions for ripping it to an SD card, you’re good to go.
Use my firmware to establish a safe target for you to practice cybersecurity offense & defense against.
Resources
Ready to get started?
Your prerequisites:
Purchase a Raspberry Pi 3 or 4.
Raspberry pi 3 (Amazon)
Raspberry Pi 4 (Amazon)
Purchase a 16gb or greater micro SD card.
Get Started
Download the firmware.
Rip the firmware to an SDCard
Step-by-step instructions for ripping the firmware to an SDcard are available here.
Stay informed about updates
Stay informed on new versions of the firmware or learn about any upcoming labs Iām running by subscribing to my newsletter.
Notify me of bugs & ask for help!
File a ticket on github!
Read the source code that generates the HackMeWifi lab
Firmware source is available. Look at These Ansible playbook files to see what programs are installed in the firmware and how they are configured.
Start with main to see the order of operations.
Then read essentials to see the initial configuration of a recipient device. From here, you can read the rest of the files.
Lab Presentation
When I run this lab as a class, I use this presentation
Are you stuck at the first challenge of trying to crack the wifi password?
Most wifi hacking tutorials focus on sniffing an existing user’s connection request. The handshake packets are then processed through a tool like aircrack-ng for cracking the hashes of existing client connections.
Of course, when you run this firmware at home, you won’t have any existing users- so you’ll have to figure out a way to programmatically attempt wifi connections through a brute force method.
Still stuck? SPOILERS
Mac Users should check this out.
Windows Users should check this out.
Why did you make this?
My daughters are interested in learning more about Cybersecurity in practice. Abstractions are boring. Hacking is cool. I’m hoping to give them a cyber-gym to develop their cyber-muscles so that some day, they can have access to a lucrative & interesting career. I’m publishing this in the hopes that it elevates their potential dating pool. š