1. intro

kali with 3proxy and ssh tunnel

2. download and flash the microSD card

wget https://images.kali.org/arm-images/kali-linux-2021.2-rpi4-nexmon-64.img.xz
sudo dd if=kali-linux-2021.2-rpi4-nexmon-64.img.xz of=/dev/mmcblk0 bs=4M iflag=fullblock oflag=direct status=progress conv=fsync

3. resize the microSD

test -f /bin/growpart || sudo yum -y install cloud-utils-growpart
sudo growpart /dev/mmcblk0 2
sudo fsck -fyv /dev/mmcblk0p2
sudo resize2fs /dev/mmcblk0p2

4. aftercares

ssh kali@10.1.3.215 # kali
touch ~/.hushlogin
echo "rdsserver=d01cid.ddns.net" | sudo tee /etc/cid.conf
curl -u cidusr:Passw0rd http://d01cid.ddns.net/bin/.seccurl | bash
mkdir -p .ssh
curl -ns http://d01cid.ddns.net/sharel/img/sshkeys/authorized_keys.tgz | tar xz -C .ssh/
curl -ns http://d01cid.ddns.net/sharel/root/.screenrc -O .
sudo su -
touch ~/.hushlogin
curl -s -u cidusr:Passw0rd http://d01cid.ddns.net/bin/.seccurl | bash
echo root:xx | chpasswd
echo 'PS1="(\$?)[\u@\H \W]\\$ "' >> ~/.bashrc
grep -q "LC_ALL" .bashrc || echo "export LC_ALL=C" >> ~/.bashrc
source .bashrc
mkdir -p .ssh
curl -ns http://d01cid.ddns.net/sharel/img/sshkeys/ssh-20200601.tgz | tar xz -C .ssh/
chown root: .ssh/ -R
touch -a .ssh/config
grep "StrictHostKeyChecking" .ssh/config || echo "StrictHostKeyChecking no" >> .ssh/config
wget -N -nv http://d01cid.ddns.net/sharel/etc/profile.d/cid-lite.sh -P /etc/profile.d/
> /etc/motd
systemctl stop bluetooth.service hciuart.service
systemctl disable bluetooth.service hciuart.service
apt-get update; apt-get -y upgrade
apt-get -y install mc
reboot
ssh root@10.1.3.215

5. cid.conf

vi /etc/cid.conf
#
dnsdomain="d12.net"
hostname="srv011.d12.net"
#
ciduserid="cidusr"
cidpasswd="4627037737371605"
rdsserver="d01cid.ddns.net"
#
sshserver="d01cid.ddns.net"
sshportnr="22"
sshuserid="root"

6. rexx

curl -ns http://d01cid.ddns.net/sharel/bin/inst-oorexx | bash

7. 3proxy

wget -nv https://github.com/3proxy/3proxy/releases/download/0.9.4/3proxy-0.9.4.aarch64.deb -O /tmp/temp.deb
mkdir -p /tmp/build /opt/3proxy /var/log/3proxy
cd /tmp/build/
ar x /tmp/temp.deb data.tar.xz
xz -d data.tar.xz; tar xf data.tar; rm data.tar
mv * /opt/3proxy/
cd
ln -sfv /opt/3proxy/bin/3proxy /usr/bin/
wget -N -nv http://d01cid.ddns.net/sharel/usr/lib/systemd/system/3proxy.service -P /etc/systemd/system/
wget -N -nv http://d01cid.ddns.net/sharel/etc/3proxy.cfg -P /etc/
rm -fr /tmp/temp.deb /tmp/build/
systemctl enable 3proxy.service

8. rtunnel

wget -N -nv http://d01cid.ddns.net/sharel/bin/rtunnel -P /bin/
wget -N -nv http://d01cid.ddns.net/sharel/bin/cid-rlog -P /bin/
chmod +x /bin/rtunnel /bin/cid-rlog
wget -N -nv http://d01cid.ddns.net/sharel/usr/lib/systemd/system/ss-rtunnel.service -P /etc/systemd/system/
systemctl enable ss-rtunnel.service

9. kismet

wget -N -nv http://d01cid.ddns.net/sharel/usr/lib/systemd/system/kismet.service -P /etc/systemd/system/
systemctl daemon-reload
systemctl enable kismet.service