@@ -2,3 +2,56 @@ littleblackbox
2
2
==============
3
3
4
4
Database of private SSL/SSH keys for embedded devices
5
+
6
+
7
+ Dependencies
8
+ ============
9
+
10
+ LittleBlackBox requires the OpenSSL, libpcap, and sqlite3 libraries:
11
+
12
+ $ sudo apt-get install libssl-dev libpcap-dev libsqlite3-dev
13
+
14
+
15
+ Installation
16
+ ============
17
+
18
+ LittleBlackBox can be built and installed using the typical configure/make process:
19
+
20
+ $ ./configure
21
+ $ make
22
+ $ sudo make install
23
+
24
+
25
+ Usage
26
+ =====
27
+
28
+ Check a remote host for a known SSL key pair:
29
+
30
+ $ littleblackbox --host=192.168.1.1
31
+ $ littleblackbox --host=192.168.1.1:443
32
+
33
+ Check a pcap file for SSL certificate exchanges that match a known SSL private key:
34
+
35
+ $ littleblackbox --pcap=file.pcap
36
+
37
+ Listen on a live network interface for SSL certificate exchanges that match a known SSL private key:
38
+
39
+ # littleblackbox --interface=eth0
40
+
41
+ Check a local SSL certificate to see if it matches any that have a known SSL private key:
42
+
43
+ $ littleblackbox --pem=cert.pem
44
+
45
+ Search the database for a given hardware/firmware version:
46
+
47
+ $ littleblackbox --search=hardware.vendor=linksys
48
+ $ littleblackbox --search=firmware.vendor=dd-wrt
49
+
50
+ List of all valid table/column values for use with the --search option (requires sqlite3):
51
+
52
+ $ sqlite3 lbb.db
53
+ sqlite> .schema
54
+ CREATE TABLE certificates(id INTEGER PRIMARY KEY, fingerprint TEXT, certificate TEXT, key TEXT, description TEXT);
55
+ CREATE TABLE firmware(id INTEGER PRIMARY KEY, device_id INTEGER, certificate_id INTEGER, vendor TEXT, description TEXT);
56
+ CREATE TABLE hardware(id INTEGER PRIMARY KEY, vendor TEXT, model TEXT, revision TEXT, description TEXT);
57
+
0 commit comments