This article is also now available as a full video, click the link below to open the video in a new tab:
In the video above, I walk through some of the major features of the ESP32 Marauder system. The focus is on use of this system for defensive purposes. Useful features include a Bluetooth analyzer, which allows you to track and record Bluetooth signals. There is a simple onscreen graph of activity as well as packet captures which are saved to the storage card.
Other useful features include a scanner which can detect credit card skimmers, these systems typically use Bluetooth and the ESP32 Marauder scans for devices that match their known signatures. This is a useful feature, and since the ESP32 Marauder only takes a second or two to boot up, you can perform a quick scan while sitting in your car at a gas station and it would probably take you less than a minute to perform a scan.
Other useful features include the ability to scan for any hidden Airtag trackers. There are also scans to detect common security tools (which could be misused for hacking) such as the Flipper Zero.
Many of these scans provide packet captures which get saved to the storage card and can be subsequently opened on a pc with a protocol analyzer such as WireShark.
In the video I also demonstrate the ‘Evil Portal’ attack. The ESP32 Marauder shows up as a WiFi access point, and when you connect you get a login screen. This screen is just an HTML file and it’s appearance can be altered to resemble a real login page such as those that may be found at coffee shops, hotels, etc. When the user provides their username and password, it is displayed on the screen of the ESP32 Marauder and also logged to a file.
Overall, this tool is very helpful. With scanning options that allow you to find credit card skimmers, hidden trackers and detect common attacks and hacking devices, all captured to your storage card. This device is useful for defensive purposes as well as highlighting that you should apply caution when using Bluetooth and Wi-Fi networks.
targetedtechtalk@protonmail.com
Follow @TargetedTechTlk
