Can You Really Build a Hacking Lab with a Raspberry Pi?

---

---

AI Summary

Summary of Raspberry Pi Hacking Machine Setup

Requirements

• Raspberry Pi 4 or 5 (8GB or 16GB model)
• Raspberry Pi OS Lite 64-bit
• 32GB SD card
• Raspberry Pi Imager software
• SSH enabled on Raspberry Pi

Initial Setup

1. Use Raspberry Pi Imager to flash Raspberry Pi OS Lite 64-bit onto SD card.
2. Enable SSH and set hostname, username, and password using the imager’s settings.
3. Boot Raspberry Pi with the new SD card.
4. SSH into Raspberry Pi using its IP address.

Installation Steps

1. Update and upgrade the system packages.
2. Install Cockpit for resource management.
3. Install Docker.
4. Install Portainer to manage Docker containers.

Finding Raspberry Pi IP Address

• Connect a monitor to Raspberry Pi.
• Use an IP scanner.
• Check DHCP leases on home router or firewall.

Docker and Portainer Setup

• Follow GitHub documented commands to install Docker and Portainer.
• Access Portainer on http://<RaspberryPi-IP>:9000 and set up a strong password.

Container Setup

1. Create a host network with a specific IP range for containers.
2. Deploy Cali Linux container accessible via the browser.
3. Deploy Metasploitable 2 container for local testing.
4. Deploy Obsidian container for note-taking.

Additional Features

• Set up VPN connections to TryHackMe and Hack The Box for cybersecurity practice.
• Ensure OpenVPN is installed and use provided configuration files to connect.

Network Configuration

• Create two networks in Portainer for container IP management.
• Use a subnet calculator to determine IP ranges.

Accessing Containers

• Access Cali Linux via http://<Container-IP>:3000.
• Access Obsidian via http://<Container-IP>:3000.
• Access Metasploitable 2 via its container IP for local testing.

Final Notes

• Monitor resource usage with Cockpit.
• Download ARM64 containers as needed, but be mindful of Raspberry Pi’s resources.

GitHub Documentation

• Step-by-step process and necessary commands are documented on GitHub.

(Note: No URLs or CLI commands were provided in the text for extraction.)