Local Network Pentesting Device

Name: Pluskwiak

Description

Pluskwiak is a tool that enables remote connections to the network it is plugged into. The connection is established through SSH tunneling using ngrok, and a custom Bash application facilitates proxy connections. This allows users to choose from a variety of options, including:

• SSH access
• RDP connections
• Reverse shell connections to Windows servers
• Direct SSH connection to the device and use tools like Nmap:
  Not included in the app: The endpoint link looks like this: tcp://10.tcp.eu.ngrok.io:15840

ssh -i ./id_rsa username@10.tcp.eu.ngrok.io -p 15840

The entire solution is built on the Radxa Zero device (link here), running a Debian-based system and custom Bash application. This compact and efficient setup makes it an ideal tool for pentesters looking for a seamless and portable solution.

Device Photos

Features

• Establishes remote SSH tunnels using ngrok
• Supports SSH, RDP, and reverse shell connections
• Easy to deploy and operate

Technical Specifications

• Hardware: (link here)
• 3D Project: (link here),
• System: Armbian (link here)
• Connectivity: Ethernet
• Software: Custom Bash application for automate remote connectivity

Bash app

---

Disclaimer:
This tool is intended for educational purposes only. Using it on networks or systems without proper authorization may be illegal. Please ensure you only test it on your own machines or in environments where you have explicit permission to do so. Always adhere to ethical guidelines and legal regulations.

Step 1: Generate a New SSH Key Pair

You need to generate a new SSH key pair and upload the public key to the device. Follow the steps below:

Generate an SSH Key Pair

Run the following command in your terminal to generate a new SSH key pair:

mkdir ssh && cd ssh
ssh-keygen -t rsa -b 4096 -C "your_email@example.com" -f ./id_rsa
ssh-copy-id -i ./id_rsa.pub username@device_ip

Try to login to the dievice using ssh key

ssh -i ./id_rsa username@device_ip

Step 2: Configure the Device

Now, let's configure the device. First, create a free Ngrok account and copy your individual key:

Once you are sure that it works, run this command on the device.

wget https://raw.githubusercontent.com/dadmins1984/Pluskwiak-pentesting-tool/refs/heads/main/Device_config/config.sh && chmod +x config.sh && sudo ./config.sh {your Ngrok-key}

Important: Disable optional options if you want to have access via the local network.
Disabling local and SSH access on the local network has been implemented in case the device is left uncontrolled on a network where physical access will not be possible at a later time. If you want to ensure even greater security and prevent unauthorized access to the device, I recommend securing the SD card in place so that it cannot be removed without causing damage.

Restart the machine.

Go to the Ngrok website. In the Endpoints section, a new connection should be visible.

Step 3: Download and Run the Application

On your Debian machine, download the app folder, open it in the terminal, and run the following command:

chmod +x app.sh
sudo ./app.sh

• Copy your private key to the proxy_key folder. Important: The key name must be id_rsa. If it is different, change the Bash code accordingly.
• Run the app and establish a proxy connection. The link can be found in the Ngrok Endpoints section, and the username is the username of your device.
• After a successful connection, you can use one of the available options or add connections if you know the IP addresses and credentials for the target machines.