The Penetoaster (A Penetration Testing Platform / Hidden Emulator Vault)

by Psycosisnine in Circuits > USB

47894 Views, 86 Favorites, 0 Comments

The Penetoaster (A Penetration Testing Platform / Hidden Emulator Vault)

IMG_20130423_202752[1].jpg
Here is yet another off the wall completely insane idea, spawned from boredom and my sick and twisted views on IT Security. I recently won the April fools day contest with my Shockeration Instructable and one of the Prizes was a Toaster USB Hub. As I went through the prizes I stopped looked at the hub and went what am I going to do with that? This is what I came up with! 

Back Ground Info
The company that I work for and the position that I hold within the company lets me think of different ways to test the knowledge of our user's and there ability to determine if something poses a security risk or not.  Because of this background the penetoaster was born.    If you want some more IT security related info don't hesitate to message me! 
 

Materials / Tools Required

IMG_20130423_203007[1].jpg
Materials Required

1. Toaster USB Hub
2. Solder 
3. Kapton Tape (or other insulating material)
4. Teensy with Micro SD Card Adaptor  (Be it 2.0, 2.0++ or 3.0)
5. Hot Glue Sticks
6. Mini-B USB Cable (that you don't mind Destroying)
7. Micro SD Card

Tools Required

1. Soldering Station (I use a Weller WES51)
2. Wire cutters / Wire Stripper 
3. Hot Glue Gun 
4. Drill 
5. Phillips Screw Driver 
6. Utility Knife 

Software Required

1. Arduino
2
. Teensy Library / Software Loader
3
. Console Emulator + ROMS (optional)
4. Script to program into the Arduino to auto execute a file (Again Optional)

Dis-assembly of the Toaster USB Hub

IMG_20130423_191512.jpg
IMG_20130423_191436.jpg
This step is super simple, as the toaster USB hub is very simple. 

1. Remove the 4 Phillips Screws holding the base in place. 
2. Remove the 6 Phillips Screws holding the circuit board to the top half of the shell. 


Information About the USB Hub Chip (FE1.1S)

Fe1.1 Pinout.PNG
A Simple Google Search of the chip model turned up a very good datasheet. It explains that each one of these USB Hub Chips can have up too 4 different devices connect to it (Including another USB Hub Chip)

Here is the Data Sheet Link 
http://www.jfd-ic.com/Documents/FE1.1s%20Data%20Sheet%20(Rev.%201.0).pdf

Prepairing the Mini-B USB Cable / Soldering

IMG_20130423_193925.jpg
Fe1.1 Pinout.PNG
This is hands down the HARDEST step of this project. Unless you know how to solder SMD and have some experience soldering fly wires to circuit boards for testing / troubleshooting do not attempt this. Get help from someone that knows how to solder. 

1. Cut 6 inches up from the Mini-B side of the USB cable.
2. Strip away some of the shielding, this should reveal 4 different wires. A Red, Black, Green, and white wire. 
3. Strip about 1mm of shielding on each of the 4 wires off
4. Tin the wires. (This is just heating up the wires and adding some solder to them before soldering to the board. Makes it much easier for later)
5. Locate where you are going to solder the wires (see my photo for reference)
6. Hot glue your Mini-B Cable before soldering. The pins on the USB Hub Chips are very easy to damage so we don't want any weight or tension on them. 
7. Solder your Red, Black, White, And Green Wires. After you finish the white and green carefully test and make sure that they are solid and work BEFORE hot gluing them. 

Toaster Case Modification (optional)

IMG_20130423_195218.jpg
This is another super simple task. 

1. Drill two small holes with a drill and then using a utility knife make the hole square. 
2. As the bottom is painted black any sanding or filing will reveal the white plastic. I personally colored over the white with a black sharpie!

This step is optional it just allows you to reprogram the Teensy without having to open the case to press the reset button. 

Re-assembly

IMG_20130423_195148.jpg
IMG_20130423_232609[1].jpg
1. Make sure your Micro SD card is plugged into the Teensy 2.0 
2. Wrap the Teensy 2.0 in something to isolate it from the USB hub circuit. 
3. Put the USB Circuit hub back into the top half of the case and screw it down.
4. Connect the Mini-B USB cable to the insulated Teensy and carefully stuff into the case. (if you have the reset hole line it up)
5. Screw the bottom of the case back on.


 

Setting Up the Teensy

No body does it better then the creator. 
http://www.pjrc.com/teensy/teensyduino.html

End / Additional Information

IMG_20130423_234007[1].jpg
IMG_20130423_201425.jpg
Additional Information

I don't exactly want to give everyone the ability to follow an Instructable to auto run a an executable saved on the Teensy's SD card. With that information you could very easily infect  a school / business with a virus on purpose. This is part of the reason why I made this device to show people how such a simple device can damage your workplaces network and server infrastructure.  

Having a Ardunio compatible board inside this gives you a lot of options, the case also has a lot of room. You could add a SNES, NES, N64, or Gamecube Controller port to have the original console experience. You could add several different buttons or senors to the case to make it do different things. 

The Teensy can act as many different things, an SD Card reader, a keyboard and mouse combo, and an Ardunio, or all of them at once. 

I will likely do a part two where I do some case mod's and add some buttons, but I want to wreak some havoc with this at work before I make it look modified.