Setting-Up Hak5 Packet Squirrel MARK II

Packet Squirrel MARK II, Packaging, and Included Documentation

If you are interested in where to purchase one of these here is a link to Hak5’s Shop

[embed]Packet Squirrel Mark II The man-in-the-middle that's nuts for networks The Packet Squirrel by Hak5 is a stealthy pocket-sized man-in-the-middle.shop.hak5.org

This setup will be in a lab setting. Everything explained here is for Educational Purposes Only!

Also Check out My Github for the payloads I build for the Packet Squirrel MARK II

[embed]h311oWoR1D1337 - Overview h311oWoR1D1337 has one repository available. Follow their code on GitHub.github.com

The Packet Squirrel is a matchbook sized Ethernet multi-tool. It enables Man-in-the-Middle attacks, Remote Access, Packet Capture, and payload delivery. Payloads can now utilize DuckyScript 2.0, Bash, and Python out of the box, with the ability to install other interpreters for other languages if desired. Utilizing these capabilities allows for red teams, internal security teams/sysadmins, and consultants to demonstrate how a small network device can lead to a squirrel running off with all your bits.

Equipment

• Packet Squirrel MARK II
• A Windows 10 PC
• Internet Connection

Initial Setup

https://docs.hak5.org/packet-squirrel-mark-ii/setup/connecting-the-packet-squirrel

It is critical to understand which port is which so this guide will refer to device in the orientation shown above. To start connect and Ethernet cable to your Windows 10 machine and to the Target Port on the Squirrel, This is the port on the Upper-Left above the USB-C port. Next connect the power using the USB-C connection to the lower-left. The first time powering on the Squirrel it will generate its SSH keys and initialize the on-board storage. During this stage the LED will flash Green. Once the initialization is complete the LED will flash Magenta indicating it is ready to be configured.

Next verify you have an IP address from the Squirrel using the terminal app with this command.

ipconfig

You should get an output similar to this

Now that the Windows PC is on the right network it is time to navigate to http://172.16.32.1:1471 in your browser. Which will greet you with a Determined Little Squirrel image.

Clicking Begin Setup Will provide a walk-through of the MARK II’s features

This explains Lower-Left is for USB-C Power. This port will only work for power, You cannot use it for other USB devices.

This explains the Switch from left to right 1, 2, 3, Arming. These are Payload placeholders. You can assign a unique payload to position 1, 2, and 3. The Arming position is to load the payloads.

This explains the button at the top. You can program the button in your payloads to execute a desired action.

This explains the Target port on the top-left. This is the port you would plug the target into. Traffic from this port will be forwarded to the Network port on the top-right.

This explains the Network port on the top-right. This the port that will have the network connection.

This explains the USB-A port on the bottom-right. This port is for mass storage. Using a USB drive formatted in ext4, fat32, or NFTS allows for storing Packet captures and other loot.

This is where you setup the User-defined password. I recommend a stong password store in a password manager. You can also set the timezone the work will be proformed in.

Next you can set the light or dark mode for the dashboard.

Next reading the Terms of Service and License Agreement and agreeing to them.

Now the setup is complete :)

Loging in the first time will use:

• Username: Root
• Password: User-Defined in Setup

Once logged in for the first time you will get a warning that there is no network connection because the setup only had the Target port and Power connected. That’s it the squirrel is now ready to accept payloads :)