Introducing the Plunder Bug - A Smart LAN Tap by Hak5 - Hak5 2509

[@brandonvaldez5923]

You guys have changed my life. Thanks for all these great videos.

[@ripmeep]

I read this but couldn't take it seriously cos of your profile pic I love it

[@ZachTangen]

I can't thank all of you at Hak5 enough. You all continue to release kickass content. I've been enjoying both tcpdump and Wireshark. Tcpdump helps me figure out what's gone wrong with networks at work but if I need to communicate with another network tech Wireshark is hard to beat. The packets don't lie (I am aware that they actually can, but the types of issues we normally troubleshoot at work if the packets are lying the customers have much bigger issues.)

[@MaximumDoog]

My favorite tool to use is wireshark when I am at work. There are so many different ways to utilize the tool and I feel like I learn something new every time.

[@chandlerhoneycutt7474]

I've been watching the wireshark playlist for a couple of days now and I have learned so much

[@ShainAndrews]

Worthwhile evolution. Can always tell when something is developed with intent instead of a "feature list".

[@caseysutherland]

Snubs' Wireshark tutorial is canon. So essential. Love you guys. More MUBIX plz! Thanks for awesome content Darren & team!

[@4kuuuki]

Hi Darren, first of all, i want to thank you for all the information and sharing knowledge provided on this channel i am watching this channel like 7 or 8 years now ironically i am from Macedonia and there is no shipping support for my country so i can play with all that incredible equipment you have there. But anyway keep up whit the great work, you are a great resource and i am thankful for that.

[@eliezercohen2205]

My favorite pcap tool is tcpdump I feel that the simplicity of the output leaves room for creativity and a deeper understanding of the protocol on which one is analyzing. Though I like Wireshark allot I feel that having a less 'colourful' environment inspires greater creativity. Kudos on the plunder bug btw, I had that I deal for a while but I never got around to actually putting it together. I actually got the idea from all of your other tools, you have been a great inspiration to me.

[@andrijafeher5032]

Cool product! What type of SoC is used inside PLUNDER BUG? Is it the same Atheros AR9331 SoC like inside LAN TURTLE. I might want to install my own linux on it ;)

[@markpinegar2191]

I've been watching HAK5 for many years, but only recently began experimenting with Kali Linux. Looking forward to watching Shannon Morris' Wireshark series. 😎

[@Stinger_Games3]

My favorite network monitoring tools are of course WiFi nano for WiFi analysis. And packet squirrel for wired. I love how straight forward the interface for the pineapple is and how easy to add on functions to the device through modules.

[@Stefan863]

Excited for this new product! Currently working with PLCs (industrial systems) and honeypots. Wireshark is for sure my go-to tool. Definetly because it is the only analyzer with most industrial protocols built in. Hack on!

[@NateCrownwell]

This looks amazing! Thank you Darren! You are so awesome! I love all your pentest devices!

[@michaeldemers8006]

I'm quite new to this, but it really has been eye opening. Enjoying the journey, and thanks for having all of this info out there!

[@mrwifi3809]

Awesome new tool! I'm new to packet captures and this Plunder Bug would make it so easy to grab packet data directly inline from a client device!

[@mcguirej869]

I personally love Wireshark, but I still have a lot to learn. On my way now to watch the playlist you mentioned for Wireshark. Thanks, I hope I win!

[@PrairiePirateGaming]

Im just getting deeper into this field as I finish up my BS in CS. I have a few certs(N+,S+,CCENT,MCSA, etc) But wht I am really excited to focus on is getting my CEH and PenTest+. Once I am actually done with college, I plan to focus more on honing my skills from home. I am an IS Analyst for work and don't get much time to focus on what I want to know, its more about what the Army wants me to know. I have a WiFi Pineapple, Packet Squirrel and LAN Turtle. I feel like this would make a great addition to my toolkit.

[@williamchalifoux2709]

My favourite is tcpdump ... love what you guys come up with continue increasing the gear selection.

[@UmbralDraconix]

Currently working on shifting into Cybersecurity career wise. Wireshark is the only tool I have gotten to extensively work with but thanks to vids from Shannon, Darren, Viss, and a few others not at Hak5, I have already learned a great deal of basic and advanced tactics for using Wireshark effectively. I already see a dozen great ideas for the Plunder Bug. Time to work on getting some more gear!

[@thefreebird413]

Just getting into information security. Interested to see go down the rabbit hole and see where it leads me.

[@vincentvandermeijden9481]

Ordered one today. Cool stuff. Can't wait to try it out since I've been using the lan turtle and the packet squirrel for a few years. Awesome!

[@owenstanl3y]

OMG IM SO EXCITED FOR THIS I think my favorite tools are Wireshark, nmap, and the WiFi pineapple

[@Vgameshark93]

Plunder bug may be my favorite now, since it is so versatile

[@frixostheodoulou4866]

Amazing new product! Cannot wait to add it to my Hak5 collection! Wireshark with tcpdump is the way to go for me when I am on the Laptop and Packet Capture when on my Android!

[@joshuapope7801]

Super excited about this one. Still using Wireshark for most my packet capture.

[@cjouglard]

My go to tool continues to be Wireshark. Since I do a lot of wireless work I use coloring for the various frame types, which makes it eaiser to visualize and diagnose.

[@arcathdarkspell]

I need a Plunder Bug! Very versatile, would be a great addition to the go-bag.

[@AdHdEntertainmentLLC]

As a fan of hak5 for many years would love to win any gear because I am finishing up my criminal justice degree for cyber security. Learned a lot from you and @Snubs over the years. From metasploit to wireshark

I started learning very recently, and only got as far as Wireshark. I guess it's one of the best, and i'd rather know one tool well, than 4 or 5 different tools very badly. Keep those toys coming.

[@hadestech8147]

Always excited to watch great and informative content. Keep up the great work guy's.

[@richa4425]

Wireshark has been my goto for looking at PCAP files. It would be interesting to capture PCAP using a cellphone but I don't like to spend time transferring files around unless it was for a specific situation. What scripts will you be developing for the Bash Bunny next?

[@jcollins7593]

Hi Darren, I'm still relatively new to the penetration testing scene, but I've found that the ubiquitous nature of smart phones make android based network tools a great asset. My current favorite is called Fing. It allows you to scan a network for devices, run trace routes, and look for open ports.

[@wfrandles]

Thanks for reminding me about Wireshark I forgot about it. I Haven't used it in years since taking IT in school.

[@lamius]

Straight-up Wireshark, super useful.

[@timmehwimmy]

Wireshark is the got that I use on the work network. Sometimes, using network miner is helpful to see what the traffic looks like, automatic splitting of files, display of images.

[@NelsonANelisR]

Awesome. Have this gadget compatibility with 802.1p and 1.q ?.

[@ddemers001]

Wireshark is my favorite packet analyzer, love your tools, I am having a lot of fun with the Bash Bunny!

[@sandorincze9543]

Wow, this bug seems to good to be true. Amazing Discovery ;-) In my dynamic environment it will save me half the time setting this up for a quick test. Brilliant USB-C Phone connection. I use Wireshark for analyzing in depth. Currently cloning pcapfex. ;-) to give me a head start. Tnx again.

[@ThisPageIntentionallyLeftBlank]

An issue I noticed immediately with the PlunderBug is that the PB is assigned an IP by a router’s DHCP server which also means it’s MAC address is visible `00:13:37:xx:xx:xx` - a dead giveaway when scanning a network. The 1337 MAC address and defaults like “Pineapple _XX” (xx= the burned MAC address) are my two biggest gripes.

[@thathyperguy]

Good old Wireshark, you can't go wrong. Nifty looking device too.

[@arandomnamegoeshere]

Nifty kit. Yeah. Standard go-to is wireshark or tshark analyzing a growing cap file being generated by tcpdump or snoop and made available locally via a SSH tunnel. maybe some scripts to slice and dice the pcap. The Python script noted here looks like its worth a look to that end.

[@heathkennedy1830]

There was an instance of using Wireshark because, bored that's why, and realized their POS system was on the same open network as their customers transmitting sales data as it happened (uh..from what my friend told me) at a known coffee shop. Cash=safe. Also a fan of wifi dongle set to mon mode and letting it run. Thanks for the great videos/tutorials guys and gal!

[@legnati]

Cada dispositivo que conozco de ustedes me parece más sorprendente que el anterior!! Todos sus dispositivos para captura de paquetes son asombrosos por la facilidad de uso y definitivamente, luego de ver este video, Plunder Bug podría convertirse en mi favorito por lo fácil que se ve de usar y lo completa que se ve su salida.

[@twitchynoodle1035]

Gotta keep it original with Wireshark! I've been following your guys tools for a while now, still have my OG WiFi Pineapple! Would love to give the Plunder Bug a go!

[@kylemcdonald5978]

I love wireshark, so stremline and easy to use seems like plunder bug a perfect fit... hope to win one and play around with it to find its full potential

[@kholdsworth27]

Oh my goodness! I have been looking for a small tap for so long. I thoroughly appreciate type C on there also, way to get with the times :P I'm a Wireshark guy through and through although I'm interested to see what Android options are out there. A great way to show a client why locking their cabinet is always necessary!!

[@jhdore]

Coolerama! This looks as useful as the PacketSquirrel, which is my usual fave diagnostic tool.

[@themightyquinn1343]

I'm not too familiar with Wireshark or packet sniffing in general, so I guess it's time to learn something new :) Also Darren, you're a saint, keep making good products and content, this is really cool

[@josuecrespo8386]

Alway with something new and informative. I'm starting to use tcpdump, Wireshark. And BTW what phone are you using Darren

[@paulcrinq]

Probably the best one out there, wireshark, It’s just too useful 😍🔥

[@taiquangong9912]

How do you get better with these skills?(read,practice,etc)

[@ProjektONE]

tai quan gong I’m you. I’d like to learn more.

[@shanekush7664]

You guys are awesome!!! Keep up the good work!!!

[@philipm1896]

Nice. I have most of your gear, time to get the wallet out again :) A burner phone to send information to ftp server or cloud storage maybe. Is it possible to get encryption keys or handshakes this way.?

[@freesoftwaretalk]

Great idea! Why didn't you go for WiFi as entry point?

[@freesoftwaretalk]

@jon b I do think the added value (stealthiness, distance) of a WiFi connection or even a mobile connection (insert SIM card) would outweigh that cost. Those are not the most expensive components out there... I think maybe $10 or $15 at most. Yes, it would raise the price with $30 or maybe even $50 ... but imagine how strong an entry point this would offer...

[@JohnSvazic]

Awesome Darren, this is definitely getting added to my wish list.

[@denp54z]

cannot find the Shannon tutorials ?

[@D4NS80]

That looks like a handy device. Great work guys.

[@KrisLloyd]

Wireshark and nmap are my favorites!

[@JohnTarbox]

This is much easier than what I do on my Windows computer for my class.

[@natesales4218]

My favorite packet capturing device is little raspberry pi clones plugged into a switch. The OrangePI is my go to, because it has wifi built in, is super tiny, and can be set up for PoE. Plus it runs debian nicely so all your tools are just a few keystrokes away.

[@KenJohnson121]

tshark (and/or tunneling remote tcpdump output over SSH to wireshark) and airodump-ng are some of my favorite packet tools. I'll have to take a look at pcapfex; combining that with something like binwalk could be really fun!

[@davevehrs5890]

The combination of tshark and wireshark are my go to tools for capture and analysis. Be interesting to see what can be done adding Plunder Bug to the mix.

[@Quade1492]

I love all the new toys you guys keep coming out with! I’ve been a fan since the Hak house days, I’ve only had a chance to play with PCAP and wireshark a bit and love the tutorials that you and Snubs have made! Thank you and keep all the cool toys coming!

[@checkyoursix]

How about a raspberry pi with wifi and send the packets to anywhere you want?

[@muckypup-riot]

Exactly

[@chaoskiller1758]

This is smaller and easy to use and you can use your phone, cant do that with a pie

[@checkyoursix]

I would pay someone to develop a device that would broadcast to my phone via wifi or cell data

[@mattmchenry6835]

Im so happy right now, I was just about to build one of these myself out of necessity and now I don't have to.

[@alphaxion]

Have you tested this to see how BPDUGuard on a port reacts to it?

[@jasonp2710]

I don't even know where to start which tool is my favorite I was actuallyI getting ready to look at the kit you guys offer just starting out been wanting to do this for a while but life is getting in the way unfortunately but love the videos and thank you for them but if you always want to get rid of something I'm always interested

[@batica81]

Looks cool. Does it work with USB C to Micro USB Cable, for Androids that only have Micro USB? Does the app install additional kernel modules (drivers) on the rooted device?

[@shawnt117]

currently using , lan turtle, WiFi Pineapple, bash bunny, the plunder bug would be a great addition to my kit thanks for showing it. :)

[@abeltusa5710]

I got 1 of this but as a new user I did not know how to start. Is there a tutorial on how to use these?

[@stevesmith2553]

the usb connection? usb-c to usb-c or usb 3.1 - I don't have a usb-c on both ends

[@oxtrader730]

Looks like a great product! Keep those ideas coming!

[@sleaf6]

I love using wireshark, it’s amazing and so flexible. Also have you seen the videos from liveoverflow decoding packets in python (using a proxy for that one game made for a hacking contest)?

[@DanielKelly87]

Still new to all this. I have tried using wireshark a few times but never get it working. Always seem to fail getting the nic to monitor mode. Looking to upgrade my rig and then start kitting out with some tools definitely will get more hak5 gear.

[@astroko]

downgrade. get a raspberry pi.

[@evanibbott3088]

Looks cool! Usb-c is a great addition!

[@themasterprivate1075]

Great video! Wireshark continues to be my go-to tool (as well as tshark). Would love to win one Plunder Bug and see how much it changes my workflow.

[@arash1353]

I thought PACKET SQUIRREL could do all those ! What's the differences between them?

[@sundhaug92]

I think this one has more support for you being directly connected

[@sundhaug92]

Also, USB-C

[@MyAlteredSoul]

One of my go to's is Net-Creds, because I like anything that's simple and easy to use. For the same reason, I'll be getting a Plunder Bug. KISS is an acronym I love by.

[@csudsuindustries]

10/100 or does it support the Giggty-E bits as well?

[@maloneweghorst]

Huge fan of the channel! Keep making great content!

[@net-ethicalhacking458]

Ossum! Great product yet again!

[@tomhansen123]

i already have the hak5 field kit and would love to add this one to my collection

[@kb9liq]

Love to give this a try with wireshark

[@antoniomendoza6281]

Wich kind of laptop do you use for kali lynux

[@davidbirkett4636]

I got a USB port that only connects to my laptop not to my Android so how can i use this?

[@writingpanda]

This is really cool! My company developed an IDS powered by threat intel, and it essentially does this but on a much larger scale. This is GREAT for investigations, though. I love it!

[@writingpanda]

@@bitgoblin8497 you got it! 👍

[@ripmeep]

my favourite pcap tool/MiTM tool was the older ruby version of 'bettercap'. It allowed so many different attack and monnitoring modes. The new version of it is made in GO and is still a great tool to use. It easily allows different attacks like DNS Spoofing and Redirection and great for traffic logging. It has so many tools and is easily installable now on kali with 'apt-get install bettercap'. The old ruby version is available on github still too but is deprecated. It would be awesome to see you use this and get your opinion on this! Greetings from the UK too! :) you guys are the best and inspired a lot of my work.

[@jsmithproductions]

Yayyyyyyyyyy! Looking forward to this

[@thexlspecialist2722]

Can I get it to drop unwanted packets coming across the wire? Still having fun with my Tetra.

[@joshpickard8211]

Obviously wireshark is the best deal. Plunder bug sounds like a dream

[@Broughman9]

I'm guessing there isn't a way to utilise the existing packet squirrel for this kind of use case?

[@wolvarine35]

honestly i think it is more redundancy of design. this is more oriented to live packet captures while the packet squirrel is optimized to be a 'stay behind' tool, i'm sure either could be pressed into the role of the other if needed but the beauty of the Hak5 catalogue is that if one tool doesn't work in the exact situation you find yourself dealing with you have multiple options you can fall back on that may work.

[@-_IT_-]

I upgraded my Mark V with the TETRA Basic. I got the basic because I already got the tactical with the bag + the 16 dbi yagi when I got the Mark V. But I enjoy those devices! These tools are great when you are in an area that does not get great signals, when WiFi is offered, I use these tools to "boost" the range! Just don't bother explaining what these are and what these are capable of, "parents just don't understand". I understand with just some scripts and my Alfa antenna, I can do the same thing, but I am lazy and do not feel like restarting my laptop and booting into Linux! Cannot wait for it arrive!

[@PosiP]

Thank you, DK.

[@AirForceTeacher]

Love this tool - will get added to my bag. As far as favorite tools, I’m particular to Scapy. I’ll be checking out the python project you mentioned as well.

[@testusser2234234]

Again a great gadget dromen hack5 keep up the good work. I love the rubberducky using it almost every day.

[@davetriplett8109]

Plunder Bug!! @Darren Were you playing Doom93??

[@NicolaiBrogaard]

Nice! My favorite is tcpdump.

[@Francois_L_7933]

Looks like you haven't been slacking off... did you put too much sugar in your coffee? 😁 I haven't done packet capture in a long time but Wireshark was my goto for some time. But the script you found is pretty nifty. While the power of Wireshark is pretty incredible, most of the time I tend to like small one trick poneys that do the task really well.

[@Decoy1982]

Awesome! Another one for my collection! Is there any onboard storage, or do I need to be connected in order to capture packets? Also - are there plans to integrate this into C2?

[@exmixgaming1869]

New tool! I love it! Gonna have to get me one of these ASAP. Aside from Wireshark, another .pcap tool I like is NetworkMiner. It doesn't do quite as much as Wireshark but it does make some things pretty easy. and of course, TCPDump as another network analysis tool.