Raspberry Pi Zero W manual

Introduction and Prerequisites:

Image result for raspberry pi logo

This manual refers to full version of Raspbian Stretch 07.09.2017 that can be downloaded from the following link: https://www.raspberrypi.org/downloads/raspbian/, installed from Windows.

Tools required for the installation are:

HPUSBDisk: (HP utility for USB drive formatting): Download Link

win32diskimager: utility to write Raspbian image to the SD card: Download Link

Hardware required:

Raspberry Pi Zero W (with built in Wi-Fi adapter)

SDCard reader

General note on task completion notification:

While running time consuming tasks in terminal via putty I was looking for a way to get notified upon task completion.

The solution is to configure putty to a Beep using the PC speaker:

And using echo -e “\a” at the end of a command.


tar xvzf file ; echo -e “\a”

Initial installation:

Format SD card with HPUSBDisk tool running it as administrator (quickformat,fat32)
Download Raspbian with desktop (not lite) from: https://www.raspberrypi.org/downloads/raspbian/
Extract the img file from downloaded archive 2017-09-07-raspbian-stretch.zip
Write it to the SD card using win32diskimager.
Open boot partition in windows file explorer.
Create empty ssh file with no extension to enable ssh server
Add Ethernet gadget module in cmdline.txt after rootwait:


Add at the end of config.txt


First boot

Eject SD from the PC, put it into raspberry and boot.
If connecting Raspberry in gadget mode to the PC with USB, use micro USB port between HDMI and power micro USB port (Raspberry will appear in windows device manager as “USB Ethernet/RNDIS Gadget” under Network adapters.


If windows doesn’t recognize RNDIS driver, update it in Device Manager choosing from compatible devices: Update, Browse. Let me pick, USB Ethernet/RNDIS driver.
If needed, Internet connection can be shared to Raspberry over USB in Windows
If mouse is connected to the Raspberry enable VNC server in Main Menu > Preferences > Raspberry PI Configuration > Interfaces tab
Resolution can be changed in Main Menu > Preferences > Raspberry PI Configuration > Set Resolution button
ssh to raspberrypi.local with pi and raspberry (user/pwd)
Change default password with:


You will need to enter old password first, which is raspberry, and then a new password twice.

Now lets make sure Internet is accessible from the raspberry:


If output is as following:

PING ( 56(84) bytes of data.
64 bytes from icmp_seq=1 ttl=47 time=92.2 ms
64 bytes from icmp_seq=2 ttl=47 time=96.4 ms

Press Control-C to stop and update the software using following command:

apt-get update && sudo apt-get upgrade -y && apt-get clean

/usr/bin/du –total –summarize –human-readable –one-file-system

Manual network setup to connect over USB with Windows PC:

If you are getting:

Destination Host Unreachable

Do as following:

ifconfig |grep usb0 -a1|grep inet|awk ‘{ print $2 }’

If output starts with:


Then disable windows Internet sharing and enable it again

Go back to step


Otherwise try refreshing the IP address on Raspberry:

sudo dhclient -v -r usb0
sudo dhclient -v usb0

Go back to

ifconfig |grep usb0 -a1|grep inet|awk ‘{ print $2 }’

If the address is still not starting with 192.168.137. set static IP on Raspberry:

sudo ifconfig usb0
sudo route add default gw

Remove and add back sharing on Wi-Fi adapter on the windows machine for windows to update routes.


To test Internet speed run:

curl -s https://raw.githubusercontent.com/sivel/speedtest-cli/master/speedtest.py | python

Useful commands (turn Wi-Fi down and route all via USB):

sudo ifconfig wlan0 down

sudo /sbin/dhclient -v usb0

sudo ip route add <GATEWAY> dev usb0


Connecting with VNC


You can enable VNC Server at the command line using raspi-config:

sudo raspi-config

Now, enable VNC Server by doing the following:

  • Navigate to Interfacing Options.
  • Scroll down and select VNC > Yes.

Connect using RealVNC Viewer (client): Download Link

Use raspberrypi.local as and address in the client.

Username pi, password is empty (no password).

Useful programs

sudo apt-get install -y genisoimage cellwriter matchbox-keyboard shellinabox transmission transmission-daemon davfs2 wicd-curses wicd wicd-gtk wavemon htop samba samba-common-bin proftpd omxplayer aircrack-ng tcpdump mc discover

Press YES on accept unauthorized user to access DAV shares.

Short description:

cellwriter and matchbox-keyboard: on screen keyboards, useful with touch screen, or when only have mouse connected

shellinabox: client-less terminal accessed from web browser

transmission and transmission-daemon: torrent client with web interface

davfs2: allows mapping cloud accounts as local folders

wicd-curses: menue interface for Wi-Fi connection from terminal

wavemon: terminal interface for Wi-Fi monitoring

htop: task manager

samba: making predifined Raspberry Pi folder accessible via network (network share)

proftpd: FTP server

omxplayer: optimized for Raspberry Pi video player

aircrack-ng and tcpdump: useful network tools

mc: midnight commander, powerful file manager

discover: shows all recognized devices (like lsusb)


Shellinabox is terminal that runs in a web browser. No client needs to be installed on PC to access Raspbery Pi

To run automatically on each boot:

sudo crontab -e

Press Enter to select nano.

Add at the end

@reboot sleep 5 && /usr/bin/shellinaboxd –disable-ssl –port 8888

Exit with Control+x , then Y , Enter and Enter:

no crontab for root – using an empty one

Select an editor. To change later, run ‘select-editor’.
1. /bin/ed
2. /bin/nano <—- easiest
3. /usr/bin/mcedit
4. /usr/bin/vim.tiny

Choose 1-4 [2]:
crontab: installing new crontab

To access in local network or over USB, use following link:


Alternatively use Raspberry IP instead of raspberrypi.local


Webmin is web based administration framework.


Install prerequisites:

sudo apt-get install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl apt-show-versions python -y

Download and install webmin package:

wget http://prdownloads.sourceforge.net/webadmin/webmin_1.860_all.deb
sudo dpkg -i webmin_1.860_all.deb

If you don’t need the installation package it can be deleted:

rm webmin_1.860_all.deb

Access from PC on:


To verify webmin is running:

systemctl status webmin  |grep Active| awk ‘{print $2,$3}’

output should be:

active (running)


If you getting This site is not secure page press Details and then Go on to the webpage (Not recommended), or Continue Anyway, depends on your web browser

KWEB installation

KWEB is fast web browser optimized for Raspberry Pi.

It comes together with omxplayer GUI

To install:

wget http://steinerdatenbank.de/software/kweb-
tar -xzf kweb-
cd kweb-

Wi_Fi terminal commands

Scan available Wi-Fi networks with:

sudo iwlist wlan0 scan | grep SSID

Connect to required network:

sudo su

wpa_passphrase SSID password >> /etc/wpa_supplicant/wpa_supplicant.conf

nano  /etc/wpa_supplicant/wpa_supplicant.conf

Remove line starting with #psk=

Alternatively, copy manually output of:

sudo wpa_passphrase “SSID” “password




To edit wpa_supplicant.conf

sudo nano /etc/wpa_supplicant/wpa_supplicant.conf

Hint: To connect to Wi-Fi automatically upon boot:

sudo crontab -e

Add at the end:

@reboot sleep 5 && /sbin/wpa_supplicant -B -iwlan0 -c /etc/wpa_supplicant/wpa_supplicant.conf -d

Optional: DHCP and rout rule for wifi before switching from usb0 to wlan0

@reboot sleep 5 && /sbin/dhclient -v -r wlan0

@reboot sleep 5 $$ /sbin/route add default gw

To route all traffic via specific interface:

 sudo ip route add dev wlan0

To connect two wifi adapters create two wpa_supplicant.conf files:

sudo cp /etc/wpa_supplicant/wpa_supplicant.conf /etc/wpa_supplicant/wpa_supplicant_wlan0.conf

cp /etc/wpa_supplicant/wpa_supplicant.conf /etc/wpa_supplicant/wpa_supplicant_wlan1


Add both in crontab:

@reboot sleep 5 && /sbin/wpa_supplicant -B -iwlan0 -c /etc/wpa_supplicant/wpa_supplicant_wlan0.conf -d

@reboot sleep 5 && /sbin/wpa_supplicant -B -iwlan1 -c /etc/wpa_supplicant/wpa_supplicant_wlan1.conf -d

To connect to wifi network manually:

sudo wpa_supplicant -c /etc/wpa_supplicant/wpa_supplicant.con f -i wlan0

samba (SMB) server

Allowing network share to predefined directory.

sudo apt-get install samba samba-common-bin
sudo mkdir -m 1777 /home/pi/share

cp /etc/samba/smb.conf /etc/samba/smb.conf_backup
sudo su

grep -v -E “^#|^;” /etc/samba/smb.conf_backup | grep . > /etc/samba/smb.conf

nano /etc/samba/smb.conf

Add at the end of the file:

comment = Home Directories
browseable = no
read only = no
create mask = 0700
directory mask = 0700
valid users = %S

Optional for sharing custom directory, or USB drive add in the end of the same file


Set password and reboot the SMB service (user remains pi)

sudo smbpasswd -a pi
sudo systemctl restart smbd
net rpc share list -U pi

To connect from Windows computer:

net use * “\\raspberrypi.local\pi\share” /persistent:no /user:pi *


To get access to your Raspberry home directory use following path:

 net use * “\\raspberrypi.local\pi” /persistent:no /user:pi *

Alternatively get replace raspberrypi.local with IP (can be found with ping raspberrypi.local)

Do not map with net use from elevated command prompt (do not run as administrator), otherwise it will not be accessible in file explorer

To disconnect:

net use z: /delete

To troubleshoot view log (type q to exit):

less /var/log/samba/log.smbd

DAV mount with yandex.disk and box.com examples

sudo dpkg-reconfigure davfs2

Select Yes when prompted

sudo mkdir -m 1777 /home/pi/share/yandex.disk
sudo mount -t davfs https://webdav.yandex.ru /home/pi/share/yandex.disk/

Enter your username and password when prompted.

Check that resource is mapped by getting free space on resource:

df -h /home/pi/share/yandex.disk/

Output should be as following:

Filesystem Size Used Avail Use% Mounted on
https://webdav.yandex.ru 42G 34G 8.1G 81% /home/pi/share/yandex.disk

Same action with box.com

sudo mkdir -m 1777 /home/pi/share/box.com
sudo mount -t davfs https://dav.box.com/dav /home/pi/share/box.com/

Enter your username (email) and password when prompted.

df -h /home/pi/share/box.com/


sudo chown -R pi:pi /home/pi/share/yandex.disk
sudo chown -R pi:pi /home/pi/share/box.com

Add pi user to davfs2 group

sudo adduser pi davfs2
sudo gpasswd -a pi davfs2
sudo nano /etc/davfs2/davfs2.conf

Add at the end of the file

use_locks 0


Automating DAV mounting process:

sudo nano /etc/davfs2/secrets

Add at the end of file replacing username and password with your credentials:

https://dav.box.com/dav username(email) password
https://webdav.yandex.ru username password

systemd automount:
DAV resourcces will mount automatically upon request and disconnect after idling 60 seconds

cat << EOF | sudo tee /etc/systemd/system/home-pi-share-yandex.disk.mount
Description=Mount yandex.disk WebDAV










Same for Box.com

cat << EOF | sudo tee /etc/systemd/system/home-pi-share-box.com.mount
Description=Mount box.com WebDAV




cat << EOF | sudo tee /etc/systemd/system/home-pi-share-yandex.disk.automount
Description=Mount yandex.disk WebDAV automount




cat << EOF | sudo tee /etc/systemd/system/home-pi-share-box.com.automount
Description=Mount box.com WebDAV automount



Lets restart daemon

sudo systemctl daemon-reload

Now automount can be started:

sudo systemctl enable home-pi-share-yandex.disk.automount
sudo systemctl start home-pi-share-yandex.disk.automount
sudo systemctl enable home-pi-share-box.com.automount
sudo systemctl start home-pi-share-box.com.automount

Other useful options for managing DAV mount daemon:

sudo systemctl
sudo systemctl stop home-pi-share-box.com.automount
sudo systemctl status home-pi-share-box.com.automount

Transmission daemon (torrent client)

run transmission (not transmission-daemon) and configure web interface

VNC > Main menu > Internet > Transmission > Agree > Edit > Preferences > Remote > Allow Remote Access > Use Authentication

Set your desired username and password for Web access.

Uncheck Only allow these IP addresses

Close Preferences menu and Transmission

sudo nano ~/.config/transmission/settings.json

Find and change following lines:

“rpc-whitelist”: “*.*.*.*”,

“rpc-whitelist-enabled”: true,

transmission-daemon configuration for automated start without graphical interface


sudo killall transmission-daemon
cp ~/.config/transmission/settings.json ~/.config/transmission-daemon/settings.json


sudo chmod 777 /home/pi/.config/transmission-daemon/settings.json

Check whitelist parameters are still correct

cat ~/.config/transmission-daemon/settings.json|grep whitelist


“rpc-whitelist”: “*.*.*.*”,
“rpc-whitelist-enabled”: true,

If not, change as following:

sudo nano ~/.config/transmission-daemon/settings.json

“rpc-whitelist”: “*.*.*.*”,

“rpc-whitelist-enabled”: true,

Run transmission daemon manually:


To start transmission-daemon on boot:

sudo crontab -e

Add at the end

@reboot sleep 5 && transmission-daemon

To access press on the link below:


P4wnP1 package for security checks

sudo apt-get -y install git
cd /home/pi
git clone –recursive https://github.com/mame82/P4wnP1
cd P4wnP1

Nextcloud (web based file server)

Image result for nextcloud


sudo curl -sSL https://raw.githubusercontent.com/nextcloud/nextcloudpi/master/install.sh | bash

Detailed instructions

Update re4son kernel (kali drivers) – WARNING – Disables built in Wi-Fi

Make sure /boot is mounted:

mount |grep boot


/dev/mmcblk0p1 on /boot type vfat (rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=ascii,shortname=mixed,errors=remount-ro)


To mount boot manually:

sudo bash mount /dev/mmcblk0p1 /boot

Download re4son kernel

cd /usr/local/src

sudo wget -O re4son-kernel_current.tar.xz https://whitedome.com.au/re4son/downloads/11299/

sudo tar -xJf re4son-kernel_current.tar.xz

cd re4son-kernel_4*

sudo ./install.sh

Press “Y” when prompted to install Bluetooth and Wi-Fi drivers , to enable Bluetooth services and to reboot at the end of the process

Nexmon drivers (supporting monitoring mode)

Taken from: https://github.com/seemoo-lab/nexmon

Make sure the following commands are executed as root:

sudo su

Upgrade your Raspbian installation:

apt-get update && apt-get upgrade

Install the kernel headers to build the driver and some dependencies:

sudo apt install raspberrypi-kernel-headers git libgmp3-dev gawk qpdf bison flex make

Clone our repository:

git clone https://github.com/seemoo-lab/nexmon.git

Go into the root directory of our repository:

cd nexmon

Check if /usr/lib/arm-linux-gnueabihf/libisl.so.10 exists,

ls /usr/lib/arm-linux-gnueabihf/libisl.so.*

if there is no libisl.so.10 in the list, compile it from source:

cd buildtools/isl-0.10



make install

ln -s /usr/local/lib/libisl.so /usr/lib/arm-linux-gnueabihf/libisl.so.10

Then you can setup the build environment for compiling firmware patches
Setup the build environment:

cd /home/pi/nexmon/

source setup_env.sh

Compile some build tools and extract the ucode and flashpatches from the original firmware files:


Go to the patches folder for the bcm43430a1 chipset:

cd patches/bcm43430a1/7_45_41_46/nexmon/

Compile a patched firmware:


Generate a backup of your original firmware file stored as /lib/firmware/brcm/brcmfmac43430-sdio.bin.orig

make backup-firmware

mkdir /lib/modules/4.9.41-Re4son+/build

Install the patched firmware on your RPI0W:

make install-firmware

Install nexutil: from the root directory of our repository switch to the nexutil folder:

cd utilities/nexutil/

Compile and install nexutil:

make && make install

Optional: remove wpa_supplicant for better control over the WiFi interface:

apt-get remove wpasupplicant

Note: To connect to regular access points you have to execute

nexutil -m0 first

Using the Monitor Mode patch

Thanks to the prior work of Mame82, you can setup a new monitor mode interface by executing

iw phy phy1 interface add mon0 type monitor

phy1 is chosen according to the wiphy index after executing

iw dev wlan0 info

To activate monitor mode in the firmware, simply set the interface up:

ifconfig mon0 up

At this point, monitor mode is active. There is no need to call airmon-ng.
The interface already set the Radiotap header, therefore, tools like tcpdump or airodump-ng can be used out of the box:

tcpdump -i mon0

Optional: To make the RPI3 load the modified driver after reboot:
Find the path of the default driver at reboot:

modinfo brcmfmac #the first line should be the full path

Backup the original driver:

mv “<PATH TO THE DRIVER>/brcmfmac.ko” “<PATH TO THE DRIVER>/brcmfmac.ko.orig”

Copy the modified driver:

cp /home/pi/nexmon/patches/bcm43430a1/7_45_41_46/nexmon/brcmfmac_kernel49/brcmfmac.ko “<PATH TO THE DRIVER>/”

Probe all modules and generate new dependency:

depmod -a

The new driver should be loaded by default after reboot: reboot * Note: It is possible to connect to an access point or run your own access point in parallel to the monitor mode interface on the wlan0 interface.


Optional Nexmon Drivers
The nexmon drivers enable monitor mode and frame injection for the build in wifi chips of the Pi3 and Pi0W. The re4son kernel includes the compiled nexmon drivers and firmware with -m6 and -m7 support. To install, reboot after installing a new kernel and run:

cd /usr/local/src/re4son-kernel_4*

sudo ./install.sh -x

If you have any problems with the drivers and wish to rollback to to original ones, just run:

cd /usr/local/src/re4son-kernel_4*

sudo ./install.sh -o

Head over to the nexmon project for details: https://github.com/seemoo-lab/nexmon


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s