Bjorn: A powerful network scanning and offensive security tool for Raspberry Pi

by ulrischa • 2 years ago

161 28 2 years ago

Preparing my honeypot right now: https://github.com/infinition/Bjorn/blob/9ea706ccc03437a9dd1...

neilv• 2 years ago

Nice catch. IMHO, it's a little too obvious, so probably not a bugdoor. Maybe someone who knows better wasn't getting enough sleep.

IshKebab2• 2 years ago

Python is a pretty big "I don't know what I'm doing" flag so I wouldn't be too surprised. Not always of course - there are plenty of well written Python projects - but Python and JavaScript are so popular for beginners that projects written by beginners tend to concentrate in those languages.

mikeweiss• 2 years ago

Can someone explain for those of us who aren't as savvy?

pvitz• 2 years ago

For the brute-force attack, THC's hydra could be used instead of reinventing the wheel. Or are there licensing issues involved?

3abiton• 2 years ago

I don't see the "selling value" of this, can you give me a qrd?

StrauXX• 2 years ago

Hydra unifies brute forcing dozens of protocols into a singular (cli) API. It is useful in that you don't have to have dozens of tools for each kind of service you might want to enumerate, each with their own interfaces.

pstoll• 2 years ago

If it ends up living up to the promise of the quality of the documentation (ie the README), I can’t wait to try it. Also screenshots of the display look cool.

insomagent• 2 years ago

The documentation looks a bit LLMish to me.

alisaleh88• 2 years ago

Which is good tbh, we get quality write down. LLMs are around for 2 years now, but not all the documentations use them.

bjored• 2 years ago

Looking at the SSH actions, the "brute force" attack is just iterating through a list of usernames and passwords from an external file. Wow. Much impress. So Hacker.

ipnon• 2 years ago

Is there a simpler approach than dictionary attack?

PhilipRoman• 2 years ago

Take a look at the list of CVEs and start hammering, chances are the SSH server was last updated some time around 2010.

poincaredisk• 2 years ago

Mock all you want, a brute force attack (why the quotes? This is literally the textbook brute force attack) is an important part of pentesting.

assanineass• 2 years ago

I know I’m just a troll account but I can’t believe all it takes to get 1k stars on GitHub is just rewriting an automated file transfer script using five different protocols and claiming it’s some powerful offensive capability lmfao

Fuzzwah• 2 years ago

You are more than a troll account.

tveita• 2 years ago

There's also a cute display which I assume is much of the appeal.

The sophistication of the scanner seems a bit oversold at the moment.

miah_• 2 years ago

If this integrated with Metasploit or some other tooling I might be impressed.the graphics are cool though.

boomskats• 2 years ago

Ahh yeah Bjorn, my pwnagotchi's new older brother. I really hope he can cheer him up - the little guy hasn't been the same ever since daddy decided he was more interested in penetrating that cups server.

Bjorn: A powerful network scanning and offensive security tool for Raspberry Pi

Related Stories