PiRogue

PiRogue is a small device meant to ease network interception and analysis. PiRogue is based on a Raspberry Pi 3 and Kali GNU/Linux. This project is for educational purpose.

By default, PiRogue will mount a rogue Wifi access point with the SSID PiRogue without password available on wlan1 which is the Wifi dongle. The Internet connection will be dynamically shared with the rogue Wifi network. PiRogue will automatically share the active connection (wlan0 or eth0).

The OLED screen on top of the PiRogue will display:

• disk and memory information
• ethernet IP address
• Wifi IP address
• rogue Wifi IP address
• rogue Wifi SSID
• indication about network capture

Since PiRogue is based on Kali GNU/Linux, it offers plenty of tools.

This project was initiated with the participation of @MaliciaRogue.

Hardware

The PiRogue is based on:

• a Raspberry Pi 3
• a TL WN725N version 2.1 or 2.2
• a 32GB SD-card
• a SSD1306 I2C 0.96" OLED screen

A custom 3D printed case is available on Thingiverse.

Connect the OLED screen

To display things on the tiny screen, you have to connect it to the Rapberry Pi GPIO. Follow this wiring schema:

For more details about the screen and the GPIO, have a look to my PiRouter tutorial.

Demo

• Ep1 - Capture HTTP/S traffic

Installation

1 - Install Kali GNU/Linux

Please refer to the Kali documentation for this step.

2 - Prepare the system

Connect you PiRogue to your ethernet network. An Internet connection is required. Once done, power it on and use root as username and toor as password. Then, you have to resize the root partition. So install gparted:

apt update
apt install -y gparted
gparted

and use it to resize the partition in order to fill the entier SD-card unallocated space.

3 - Install PiRogue customization

To install and configure your PiRogue, just clone the project Git repository:

git clone https://github.com/U039b/PiRogue.git /usr/share/PiRogue

Then, start the installation (it will take a long time and ask questions):

cd /usr/share/PiRogue
sh install.sh

Remember that all the PiRogue files reside in /usr/share/PiRogue.

4 - Screen customization

PiRogue has a tiny OLED screen on top of it. This screen displays two different screens:

• the boot screen defined in oled-screen/boot.py
• the details screen defined in oled-screen/infos.py

Use cases

Transparent proxying with MITMproxy

While using mitmproxy you can use between at least 2 different modes:

• normal you have to specify IP address and port of mitmproxy in the HTTP proxy section of the Wifi connection on your target device
• transparent you do not need to specify a HTTP proxy on your target device

An helper script /usr/share/PiRogue/proxy/transparent.sh is available. By executing this script, HTTP and HTTPS traffic from wlan1 will be redirected to mitmproxy.

Google Location service live map

Please refer to the GLS live map plugin