Access Any Network Remotely

[00:00] plug in ethernet or wifi, walk away and I'm in. It's my network now. And no, Two reasons. Number one, I am kind of the unofficial IT guy for my church.

[00:16] Now being in tech, that happens a lot in almost every situation. My parents, my friends, parents', friends, you can try and escape the help desk. especially networking. Massive pain. So here's what I'm thinking.

[00:31] I'm going to take control. I'll need full access to their networks. I'm not playing around anymore. You want support, you're going to get it. Now, You drop this device in any network and you suddenly have access to everything,

[00:47] You don't have to already know that. device and do stuff on that network. If that doesn't get you excited about this,

[00:59] drink more coffee, come back and see me and let's do this. I need remote access to my church, which as I say, that just sounds kind of fun. Well configure this. A raspberry pie. This is a four. It can be really anything.

[01:14] 5, 3 0. It could be a NAS computer, a laptop, whatever you have. something like this is all you'll need. And I wasn't kidding, we'll drive up, And hopefully when I get back to the studio,

[01:29] and I'll have full access to that network, being able to do whatever I want. Run INAP scans, do some lateral movement, get access to other stuff, don't you dare hack anymore.

[01:44] Hacking one without permission and so I can have support for the church and not only will me as a client be able to access my church's network,

[01:56] to apps to programs to connect to this church network and monitor it. And again, this is not VPN, it's so much better. But then what is it? It's Twin Gate, a zero trust network access solution. What does that mean? It means magic.

[02:11] It's free for up to five users. It's wicked fast to set up and it just works. You don't have to worry about firewall or CG mat or any kind of weird networking issues. You plug it in and you leave. Oh by the way,

[02:24] a Python script using their API that will tell me whatever network my device Now I've been using Twin Gate for a long time in my business, tried and tested,

[02:38] for a minute. I'm proud to partner with the product and company that I trust and use every day Check the link below or go out to twin gate.com yourself with your own typing

[02:51] We'll click on sign in at the top right, we're setting up a new account, so we'll click on create a new Twin Gate network. Put in your email address. I'll call it a home lab. How did I hear about it?

[03:04] Let's say other type in network check. All of you do this now. I'm just kidding. but if I had to care and you want me to choose for you, this one continue. You can change the name if you want. I like this one Reach.

[03:19] a sign end method and they have an identity provider for per pretty much I'm going to go with Google building my network and we're almost done. Let's make sure you do hit that like button notification, bell comment,

[03:34] of course I haven't said that in a while. It felt good. Anyways, We can do all this later. I'll click on skip to admin console. And just so you know right here is your network, it lives in the cloud.

[03:49] And the whole point of this is so I can access a remote network. Click on that remote networks and then we'll add a remote network by clicking on It's going to be on premise and we'll call it whatever we want.

[04:03] So we've created the remote network for my church, but how do I get to it? A connector is going to connect us to this remote network.

[04:15] I'll click on the church and our next step is going to be deploying a connector. Now what exactly is that? It's going to be this device here, Twin Gate software operating as a connector will live on this device and side

[04:32] before you click on deploy connector, make sure your device is ready to go. I'm going to take out the SD card and re-flash it and I'll walk you through that real quick. So if you have a raspberry pie, perfect, 4, 5, 3, 0, whatever,

[04:46] put it into an SD card reader, so closeup and pop it into my computer. Now we're going to flash it or write a new operating system to the SD card using

[04:58] a tool called the Raspberry Pi imager. You can download it from the internet. I have the Raspberry Pi four, choose your os. so I'm going to do the Raspberry Pi OS 64 bit right here.

[05:12] Like that guy right there that has some pictures for the church. Now here we have a chance to kind of pre-bake our raspberry pie. We can add things like the name remote reach instead of username and password,

[05:27] this will be the wifi for us right now to pre-configure the pie before we put it I do want to apply these settings. Click on yes, yes and perfect time for a coffee break

[05:42] and mine is done. Continue. I'll grab my SD card. Got it. Plug that sucker back into my raspberry pie and try to find a power cable that I lost. I'll be right back.

[05:55] That one you had one somewhere.

[06:08] you could do this on pretty much any device. It's fully supported Twin Gate. Deploy connector, look at the options.

[06:20] I think everything is supported except for Windows and even then you can deploy I'm going to give this a moment to connect and at this point you could just I'm going to wait for an IP address to register on my router and then I'll

[06:34] connect to that. So I'll jump into Unify real quick and see if we can find them. launch my terminal and get logged in. First thing we always do in Linux is a pseudo a PT update,

[06:47] updating all our repos and then we'll go to Twin Gate once more for Raspberry so I'll select that and watch this. It's going to be so easy. Twin Gate is an enterprise class Zero trust network Access solution meaning that

[07:03] you know what? Home Lab users, You'll take it to your company but tokens and makes it super secure. they have documentation or I've got a video where I talk about it right here.

[07:18] authenticate in the same way you did before. I'm going to hide mine, They're just going to be sitting there and they should already be added to this Click on copy command just like that.

[07:33] It's going to have my keys in it, That's going to take care of everything for you. Seriously. Take a sip of coffee, you're about to celebrate

[07:47] and that's it. It's done. How do we know it works? Let's go check Twin Gate. Just make sure everything's good. Yes, controller is connected, relay is connected. This is our connector right here. The beige nut hatch.

[08:02] you should always go back to the church. We've got one connector connected. Yes, you can connect more than one connector to make it redundant. That's awesome.

[08:14] When you plug in your device into your remote network, whatever it is, This is definitely the easier option because you just have to walk in, literally plug it in and go away. Or are you going to use wifi? Now,

[08:29] that obviously means you'll need to know the wifi connection of the remote if we're using it for support for our families, you'll probably know the wifi.

[08:41] connection will just be more stable. it that way. But there may be a scenario where you're shipping it to somebody, maybe your parents and friends or family don't live near you but they still need

[08:55] ship it to them and all they have to do is open it up, plug it in, boom, I control your network to help you. Now to quickly add wifi to our raspberry pie, we can use this command and MTUI,

[09:09] I'm out of pseudo before that just in case the network manager and we'll select and click on add or an I click on highlight add, hit enter DSL InfiniBand. Anyways,

[09:22] You can leave profile name and device. Just default. You'll need to know the SSID and the password for the wifi. Do I have this for my church? Oh yeah, I found it. Okay, SS id.

[09:37] We'll keep the mode at client security. It uses, I should know this. It's going to be WPA two personal and they'll put in password and that should be We're not going to need that. Although you could put in the static IP address.

[09:51] If you already know the IP address scheme or network of the remote network, you may not know it. Hit okay and then we'll hit escape and tab over to. Okay, And now that wifi will be searched for every time it boots up and it looks for a

[10:04] wifi network to connect to. Now time to drop it off at the church. Let's go. I'm going to unplug it. Grab the power cable and I'll meet you there.

[10:53] Okay, I'm back. Fingers crossed. We'll have access. Let's test it out. Twin Gate kicked me out. Let's get logged back in and look at that. Okay, so here we go.

[11:09] a remote network. It's up. Cool. Now what? Well at this point, so like the IP address range, you didn't know any hosts there.

[11:23] One thing that's really cool about Twin Game amongst a million things is they you don't have to do all this fancy API stuff if you already know the network

[11:35] if you know that your parents' network is 1 9 2 1 6 8 1 0 slash 24 and the 1 9 2 1 6 8 1 point 23. That's the best way to do it. But if you're like me and you don't know anything,

[11:53] this script using the API will auto discover that for you creating a resource the private IP address of the Raspberry Pie that you had dropped in there. I think it's settings and what you know, it's right there.

[12:08] Essentially Twin Gate says here we have some stuff that you can talk to to find You can find out things and you can also change things. What am I talking about?

[12:22] so first thing we'll do is generate API token right now. my token, just something permission. I'm going to go everything right now. So go ahead and give it everything. Allowed ranges, everything.

[12:39] Here's my key. You can't see it, I'm not going to show you. Just make sure you copy that. Put it somewhere safe. And then on your computer, I'm going to do this on my Ubuntu machine here and WSL.

[12:54] I'll create a new Python script. I'll use nano Nano, I'll call it Twin Gate pi, just like this. And then I'll copy and paste this config or this script. Now a few things you'll want to change. We'll go to the very top here.

[13:07] We got to custom fit this to your network. First thing is your A-P-I-U-R-L. This will be the URL of your network. So mine was reach dot twin gate.com. You have no idea how powerful this is what we're about to do reach.

[13:21] You're going to put that sucker right here between double quotes. And then finally this field right here is the last thing we have to do. I forgot what I named mine, so I'm going to have to look in a second.

[13:38] Like right now. What did I call it? Remote networks. Oh, I called it the church. You probably remembered I didn't. So we'll call it the church. the twin gay, API to our controller of the brain.

[13:53] And then it's going to go, Hey, can you tell me the IP address of the connector, giving us a ton of information about that network. Let's do this.

[14:07] So we'll hit control X, Y, enter to save. And then with Python, we're going to run the script. Python three, twin Gate pi. Ready? Set, please work. Oh, I forgot. There are some prerequisites we have to install.

[14:19] We're going to create a Python Virtual environment Command will be Python three And we're going to use the virtual environment module or the ENV and we'll call Python Virtual Environment is like creating a little safe space for us to play

[14:36] And then we'll activate that environment by typing in source. Then twin Gate, something our virtual environment slash bin slash activate. Boom. Now we'll install some prereqs real quick. We'll use PIP to install.

[14:51] I believe it's going to be GQL. Yes, that might be enough. we need request PIP install requests. That's another Python module. Got it. Request under School Tool Belt. Install that.

[15:07] Now let's try look at it. Go. Okay, It found the public IP and then it found the private IP address right here of Now it didn't just find it, it created a resource.

[15:24] If I go to Twin Gate right now, I jump into, I'll jump the church. Let's go. I'll have to look at my script again. But one of these private IP addresses is our connector.

[15:37] the way Twin Gate works is you'll need a client, So you'll sign in with your Twin Gate client. Android,

[15:49] and then you'll use that to sign in and access the resources you have access to. I think I already have it installed, actually. Lemme see. Oh I do. I do. Twin Gate for Windows. Do the NSI installer if I wanted to. Oh,

[16:05] And now you'll have to switch over to my other monitor because it's looking at I'm going to update it real quick. Make sure it all works. Actually, it'll be reach dot twin gate.com. I'll join that network right now.

[16:21] Lots of logging in, lots of authentication. It's very, Creating stuff. So now I'm authenticated. So I'm actually connected.

[16:34] Let me just right click my menu here. I'm connected, but it says zero resources. I have not given myself access to the church. Let's do that right now. I'm not sure why it created two. Maybe just found two. Oh no, you know what?

[16:49] I bet it connected to wifi and the ethernet. I'm going to click on one and then I can click on add access. I'll put it in the everyone group. Now notice by default it was like, okay,

[17:03] That's the idea of least privilege, And the default policy is no one needs it unless you explicitly say so. the everyone group. If I look at my Twin Gate client now, oh,

[17:22] I know I'm going to access it via SSH. Let's try it out. SSH Network. Chuck, It just worked and I'm inside the raspberry pie.

[17:35] How insane is that? It just dropped me into the network. Now I can do things like install inmap, I want to show you something. This resource, we can actually make it very tight.

[17:49] So for example, maybe I only want users to access this resource on Port 22, the SSH port. I could click on edit and I can add port restrictions here. So let's say only Port 22 and that's it. I can also do this at an alias.

[18:03] Call it connector reach. Rockwall Local. I created D-N-S-A-D-N-S entry that I can use right now. Let's try it out. Port 22 should be open for me and I'm going to SSH two connector.

[18:21] Did you just see that S entry created out of thin air and the way twin gate treats DNS is so interesting. I have a full video on it here.

[18:33] Let's do an in-app scan. What's my IP address again? So the network is slash 24. can we talk a little bit about this? Look at this. If I refresh the screen,

[18:45] I can generate a report of who's been accessing this stuff over here on the What does that mean? Well, if we go to policies, I can do only trusted devices based on trusted profiles.

[19:00] Only Mac users can access this resource. Is that not crazy? encryption, firewalls enabled.

[19:13] You can really put in some security here and this is all free for you right now. You can restrict it based on the serial number of the device. This is so neat. I can also restrict it and set expiration. Like, okay,

[19:28] Then you don't have any access anymore. I can auto lock after 30 days. I can simply just add a user invite email to anyone. I can add them to groups,

[19:42] Now lemme see if my Nmap scan worked. Oh sure did. Look at all this. I think I found a Windows computer. Oh, found the iMac. Oh that was a printer.

[19:54] And for anything I find all I have to do is just add this as a resource. So let's grab this IP address. We'll get into our network,

[20:06] we'll create a resource, call it reach printer. Printer do reach rock wall, local and we'll restrict it to only port 80 and nothing else.

[20:19] And we'll give access to the everyone group. Cool. So now in theory, reach Rockwall local. That's refusing connection. Maybe it just doesn't work. Lemme try the IP address instead. Port 80 was open.

[20:34] Maybe it was lying to me. What other ports were open? Oh, HT PS was open too. Let's add that port. We'll update that resource and try that. Oh, there we go. And look at that. Access to the printer.

[20:47] Do you see how crazy powerful this is? So now think about this for your family, just get a bunch of little devices, raspberry pies, any kind of Linux device, whatever, and just drop them off at their houses. Remote support. You got 'em.

[21:01] The network is up. Be quiet, Nana, you put your phone in airplane mode again. twin Gate has a way. If I go to team here, notice I have three options.

[21:15] and then we have services. What is that? Services gives us away. We add one real quick. The service account to monitor. It gives us a way to give an application just one server,

[21:29] It gives it the ability to log into the network and access the resources we give it access to. So I might generate a key, only make it last for a year. make sure it stays up. And then I could install this on uptime Kuma.

[21:45] could be running inside a cloud instance and it could access this network And make sure the printer's up, man, how cool is that? That's Twin Gate. That's the video. I'll catch you guys next time.