How to Use Kali Linux on Raspberry Pi 4 As a Remote Network Access and NMAP Discovery Audit Tool

[@GotSkillsForaNoob]

I stumbled across this video, just so happened KZbin had some issues with my watch history and was unable to find it again, so happy to have just found this again after 3 days of searching very informative just what I needed, should add drop box to tag to help others find this video !

[@benneboii8117]

Just found your channel and this is so good! In school we learn about different tools on a lab network but this is different. To see how ZeroTier and X2GO interact and what a massivly strong tool-combo they make is cool!

[@jonathanchevallier7046]

Zerotier is very neat service and easy to manage. Thank you very much for this discovery.

[@-Yogo]

ZeroTier reminds me of the old hamachi client... (before it was butchered)

[@davidg4512]

Pretty much is the same thing

[@RamonInNZ]

Also like no-ip

[@codygaudet8071]

That's a great way to look at it. I miss hamachi.

[@PatrikKron]

Great video! A lot of things I have done before but also a lot of new things I’ll try out.

[@rcdenis1]

I tried this and it's been up and running for a week on a Pi ver. 3B+. Accessing it via x2go is slow but 100% usable. It has not crashed once.

[@benlenau]

I'm learning so much from these videos - Thanks for the great work! :-) Just completed my NMAP scan and going to try Zero Tier soon.

[@LAWRENCESYSTEMS]

Good luck!

[@LAWRENCESYSTEMS]

CanaKit Raspberry Pi 4 4GB Starter Kit with Clear Case (4GB RAM) amzn.to/2YfsCdo ⏱️ Timestamps ⏱️ 0:00 Kali Linux Raspberry pi Intro 2:12 Kali Raspberry pi Hardware Requirements 2:33 What is Kali Linux 3:25 Download Kali AMR64 Raspberry pi 3:55 How To write Kali AMR64 Raspberry pi to and SD Card 5:20 Kali Linux Raspberry pi First Time Boot User & Password 6:26 SSH-COPY-ID adding your SSH key(s) to Kali Linux 7:30 Kali Linux First Time Setup Security Configurations 8:00 Turn off SSH password authentication 9:05 Zero Tier One for ARM64 download zerotier-one_1.4.6_arm64.deb 10:08 installing Zero Tier One for ARM64 and joining a network 13:43 Installing X2GoServer for Remote Desktop Access to the UI 17:43 Deploying the Raspberry Pi to a client network 20:00 Why you should use TMUX 21:38 Using nmap for Crating a Network Discovery and Enumeration 25:18 Viewing the HTML Network Discovery Report 29:10 Other potential tools & configurations to automate the process 30:53 Using Proxychains to pivot into the remote network 33:20 Ports and connections used by Zero Tier One Related Forum post with commands forums.lawrencesystems.com/t/how-to-use-kali-linux-on-raspberry-pi-4-as-a-remote-nmap-network-access-and/6142 Other videos mentioned Zerotier Tutorial: Delivering the Capabilities of VPN, SDN, and SD-WAN via an Open Source System kzbin.info/www/bejne/eJ3Ch5SrbdynncU X2GO: Linux Remote Desktop & Terminal Server System With Support For Published Applications kzbin.info/www/bejne/pYTYqmSKiJ15fdU Linux Proxychains Using SSH & SOCKS Proxy For Easy Remote Management & Testing kzbin.info/www/bejne/lXSzqZ-wr9OpZrc Getting Started With TMUX kzbin.info/www/bejne/aGaVfGyip7eXg7c

[@williamp6800]

This post should be pinned.

[@olympusmons4089]

Nice work Tom. You always seem to know the content I enjoy watching. Keep up the great work!

[@williamshenk7940]

Great tutorial!, I enjoyed putting all of the pieces together to create a useful tool. First time that I hear of zero tier, I find that to be a great looking tool/service. Thanks

[@ThomasSmoke]

I think you could mention X forwarding over ssh. You do not get session persistence but launching a browser from Pi and displaying it on your laptop is easier and faster

[@LAWRENCESYSTEMS]

Later in the video I show how to use your local browser with proxychains which is even better.

[@uria113]

Hi Lawrence - thanks for this video, it's super helpful! Any chances of going through a headless setup of Kali? I've tried doing that but it seems to refuse my SSH connection unless I log in after booting.

[@ramb10002000]

Hey Tom great video, keep up the good work 👍

[@nickm9102]

Tangential question to anyone in the know. I am starting to learn Linux with the intent of Pen Testing as a focus. Would I be better off starting with Kali or a different Linux distribution to learn the basics?

[@LAWRENCESYSTEMS]

The same commands work in most distributions so if you're going for pen testing to start with Kali

[@recognizer6194]

If the network supports poe you can use a poe splitter or similar to power the raspberry pi.

[@williamp6800]

If your network switch supports PoE, you can buy a PoE hat for your Pi. The official one is about $32, but there are some as low as $20.

[@nathanmartin7019]

Mine just won't work I'm so lost after I've downloaded it to my SD card. After I put it in it loads to a black screen and stops there any tips to help?

[@1988marksie]

Does zero tier have ACLs between devices? Seems like a huge security issue. All clients could potentially talk to each other over the pi... best way would be to have a small app that makes the pi check a site for a status then connects to a VPN on demand.

[@LAWRENCESYSTEMS]

The default in ZeroTier is to only allow devices connected to that network to talk to each and it does not automatically allow bridging of different networks via the ZeroTier client, but it can be configured that way. There are also fine grained ACL for inter device communication.

[@Trevor_Green]

Slick. Is there also a way to attach something like this to a mirror port off the managed switch and start analyzing all packets for bad actors and whatnot?

[@deejayblacklight]

Zerotier does not allow commercial usage, but putting it on a clients network would be commercial usage!

[@rayyanthamim]

Dammnnn!!! I just done the same thing with my plex server, I kept my plex server in my office and setup a remote access with resbperry pi

[@anthonydash85]

With this you don't need a vpn to access the network or the pi ?

[@LAWRENCESYSTEMS]

Correct, Zero Tier One replaces the need for a VPN to gain remote access.

[@jacksonsystemslimited]

No Zerotier is SD-WAN and free for up to 100 Nodes - set up Zerotier and wait for the device to connect back and grab an IP and you'll be able to access it, as long as the machine your on is joined to the same 'Network' as Zerotier, if your on Windows, install the Zerotier App and join the network through that.

[@chrisp6015]

Hey Tom, when I apt-get install x2goserver all I get is E: Unable to locate package x2goserver, did you have to add a repository?

[@controlaltdeleteninjas]

Use sudo

[@kalikasuksomboon241]

@@controlaltdeleteninjas sudo apt-get install x2goserver --> I have the same problem on my pi 3 + kali linux arm64

[@rogerespinoza5213]

This a good video, there is any other video updated realted to this topic? I see this video is 3 years old.

[@LAWRENCESYSTEMS]

Maybe I will make on with the PI 5

[@VincentThePhotog]

Tom, can you explain what to do if the network doesn't allow zerotier? I'm thinking that it blocks UDP outside of specific ports.

[@JoaoSilva-gs5jb]

hey tom, I'm still struggling with ssh keys now that I moved to Linux, what's the best way to generate them? the bigger the better? how and where to safely save them and back it up?

[@katylad]

SSH keys can be generated using the command ssh-keygen. Default keytype is an RSA key, you can increase the length of the key using the -b option, so 'ssh-keygen -b . Keys are generally stored in the ~/.ssh directory. The keys are just files, and you can back them up using any method you trust for backing up credentials, though it's not really recommended. SSH keys in general should be machine specific, so that if say your laptop gets compromised, you revoke your laptop ssh key, but still have access using your desktop ssh key. I personally do not backup my ssh keys for this reason, but instead have a set of backup keys I can use if something happens to my other keys.

[@JoaoSilva-gs5jb]

@@katylad is going for the max length too slow for practical use? thanks for the great explanation. Tom did 2 vids after this one about ssh keys

[@katylad]

No it's not too bad.

[@chrisn9638]

Do you need to pre-configure the pi, something like a cronjob or bash script, so when it is powered on, it auto-connects and starts services?

[@CrynogarTM]

Setup your own Wireguard Node is better than using a 3rd Party VPN Network Service like Zero Tier which I do not control it. It's like teamviewer if you are too lazy to host your own reversetunnel Server.

[@n0br4in]

It would be grate if you add to your laptop a sticker from your company

[@TwinTailTerror]

is there a way to connect to jellyfin WITH OUT opening a port? i already have a craptastik modem/router combo im not allowed to replace , i dont really want to take chances but i am sick and in the er or travel to dr a lot and its boring as heck. i know plex has a reverse proxy built in but i canot afford anything as im out of work. free way to connect to jellyfin like this but with out a open port ?

[@cecepsuryadi5047]

Hello admin, please help install the "anydesk" properly? Since I've successfully installed but can't start the "anydesk" please provide the correct install thank you

[@GeraldBegin]

Wow, . really interesting. I feel that I will learn a lot from you :-) Thanks

[@therealdoc9320]

Does the bluetooth work on this version of Kali??

[@zwyklyuser44]

Interesting video thx

[@rcdenis1]

That is such a cool command prompt. Where can I learn to configure one like that?

[@LAWRENCESYSTEMS]

Here github.com/flipsidecreations/dotfiles

[@tundrastreaming]

Just use Byobu

[@ceylonecreativetv7512]

Good

[@llofi_boy]

Can you pass a video on how to start zeroteir at startup

[@Denstoradiskmaskinen]

If the RPi is on a different network, i ssh into it, can i somehow Nmap my host network instead of ssh lan?

[@ierosgr]

I watched also the Zerotier VS VPN video you had uploaded a year ago along with this one ans still cant do something probably simple.I get that you use the graphical interface of Pi via X2GO client and from there you can open Pi's browser and just log in to every device you have in your network and has a web interface but how t oconfigure Zerotier in the my.zerotier cong page in order to connect to a device home and afterwards from your browser (not from the other device) to log in to your home router / nas ...etc. I gave it a try and set it to give addresses from 192.168.2.0 segment instead of the 156.10.. ... but still i can t access my home's devices web interfaces. Is there a way to make Zerotier work like setting up an openvpn in pfsense (which i did) and have access to your home's devices? Thank you

[@wartlme]

what I don't like a bout the pi 4 is the micro HDMI ports. Why did they do that? Just one standard HDMI port would have been perfect. Who is using 2 monitors on a raspberry pi 4?

[@renanrenan3312]

I'm Brazilian, my name is Renan, I have an interest in learning web designer and programming in python, but I have nowhere to practice, I would like to have access to the raspberry pi, more here in Brazil with the current dollar quote, the equipment that was supposed to be easy access, very expensive, between R $ 500 and R $ 1000, with a minimum wage of R $ 1060, I am not able to acquire. would it be possible to help me in any way? I'm sorry for any typo I'm using google translator. I'm just asking for not having the conditions. Thanks in advance.

[@Th0mass0]

But what to do when the network you are testing does have a proxyserver?

[@LAWRENCESYSTEMS]

Then you put the proxy information in.

[@plrpilot]

That's funny. Zerotier already dropped the free tier to 50 nodes. :-). Plenty for my needs and most others, too, I'd imagine.

[@Nanok13]

...>25 nodes 2y later ...

[@SB-qm5wg]

I love x2go.

[@viq234]

Thank you. I had no luck installing Kali as a vm using virtual box, wi does defender kept treating it as malware and when i tried to white list it, my computer would glitch. Ill give raspberry pi a go this time.

[@st0ut717]

use Windows service for linux and install kali from the MS app store. if you need a gui for kali you are not ready for kali

[@nabstman3548]

How to make zerotier-one run at reboot ?

[@nabstman3548]

"sudo systemctl enable zerotier-one" after this it works

[@stevencroy4333]

Don't learn Vim.... DL Emacs Great Video.. just thought i'd throw my thought out there.

[@qwerty74]

I saw that thumbnail typo ;) sshhhh

[@jarisipilainen3875]

7:32 yes very secure. if cant get in delete keys what you have they are created on login or send what you have lol.its hacking linux who cares is it secure you have password lol

[@milagrosapparel]

i made a mistake following this. Now i cant use the putty using ssh ffs.

[@maxime_vhw]

4gb vs 8gb

[@caionmarquezini7095]

acabo de perde a moral comigo.