Hak5 LAN Turtle

Summary

LAN Turtle and Field Guide

The LAN turtle is a tool for penetration testers and system administrators disguised as a simple USB Ethernet adapter. It provides possibilities to perform remote access, man-in-the-middle and information gathering attacks. These functions are provided by the turtle modules which are preinstalled on the LAN turtle. The modules are based on the OpenWRT platform which allow users to add customized modules. The turtle itself is covert by a generic USB to Ethernet adapter and can therefore be placed unnoticed in IT infrastructures.

Description

Setting up the LAN Turtle

1. Plug the LAN turtle into one of the USB ports of your computer.
2. Your computer will get an 172.16.84.x address as soon as the startup sequence of the turtle finished. If not, then you have to statically configure an IP out of the 172.16.84.0/24 range.
3. Connect to the turtle with ssh root@172.16.84.1 and enter the password sh3llz
4. The simplistic graphical shell interface will prompt you to change the password but the old one is also allowed.
5. The LAN turtle can be configured and modules can be installed within the interface.
6. If you end the interface you will be greeted with an normal Linux shell but you can open it again with the turtle command

Updating firmware (optional)

To ensure the best performance and compatability you should update the firmware regularly. This requires internet connection.

1. Select Config in the Main Menu and press select.
2. Go to Check for updates and press select to start the update process.
3. Wait till the update finishes.

Factory Reset (optional)

In the extreme case that a LAN Turtle has become permanently inaccessible or inoperative, there is a quick method for recovery using a special web interface.

1. Download the latest LAN Turtle factory image from the official download center. Note: Choose the factory recovery image.
2. Open the LAN Turtle carefully. There are 2 screws under the sticker.
3. Now you need to find the reset button/jumper contact. You can find a video on how to locate here.
4. Hold down the button/jumper while you're plugging the LAN Turtle in your PC and keep holding it for 5 more seconds.
5. Go to http://192.168.1.1 for the firmware web recovery tool and upload the image to the LAN Turtle.
6. Wait 5-10 minutes for the recovery to finish, the LAN Turtle will indicate it with a special LED blink pattern. Watch the video for the LED Pattern to know when the recovery has finished.

Using the turtle modules

The LAN turtle comes packed with pre-installed tools. Furthermore it is possible to program your own or download them from the internet and configure them with the module manager as well.

</references>