Search the Community

Hi guys, Please see the attached poll (just the one question). It would be great to see the outcome, as this will gauge where most users go in times of need. Cheers 😎

Hi guys, I just found out about this community and it looks really cool. I was wondering what the active users in this community thinks a good age to start learning to hack is. I also wanted to know where to start. I don't feel like spending money on something I'm not sure will stick with me in the future. Thanks

Apparently I've tried to update to 1.1 incorrectly. It has a solid green on startup then it turns blank. After three times it goes into recovery mode I am assuming. Then once there it blinks red for a while. Then it turns blank again. I've waited ten minutes tried to replug it in assuming something went wrong it it was done. But it never blinks or goes solid green or blue after the red blinking. But just now It was blinking red then started to alternate red to blue. Now it's blank again, I will wait another fifteen minutes before I try anything else. What exactly is going on? I am assuming it's either trying to recover then flash. I moved the upgrade contents to the root file system. I don't know exactly what went wrong. Easier way to understand the problem: Plug In > Solid Green > Blank LED ........ Ten minutes has passed.... Replug In > Solid Green > Blank LED ....... Ten minutes has passed.... Replug In > Solid Green Blank LED ...... Ten minutes has passed.... Replug In > Blinking Red > Couple of Minutes Passed > Blinking Red . Blinking Blue . Blinking Red > Couple of Minutes Passed > Blinking Red > Couple of Minutes Passed > BLANK LED!!!! Ten minutes has passed... Replug In > Solid Green > Blank LED Every time it tries to recover then it will try to boot three times and try to recover again. It will never fully boot up nor will Kali recognize the file system or that it's plugged in.

Dear Shannon, Yes! I checked all areas and both E-mails both Earthlink and Hotmail that I used to send out. I thought that my first Emails from Earthlink might have been blocked by the system it happened to me once before someone blocked all Earthlink emails so mine had not gotten through. So I checked everything and I could not find any emails that came to me from Sara or Hak5. Thank you so much for helping me with this situation. I do not trust UPS and I will tell you why. My son bought a Large screen TV and UPS said it was delivered but it was not, then after they started checking the driver had told then that he had left it with the people across the street and would retrieve it and get it to me. I caught the UPS truck coming down the street and stopping in front of the peoples house across the street so I ran right up to the truck and found out it was not with my neighbor across the street it had never left his truck. He went in back of his truck and got it for me. If I had not been fast in going after the missing TV, he I am sure was going to keep it for himself. Your emails seem to be reaching me fine. Yes I did just receive an email with a new tracking number that just came in around the time yours did. I hope this one makes it all the way to me my fingers are crossed J May God be with you and thank you, thank you for all your help. I could not have done it without your help. John AT&T Electronic Eng. From: Sara - I have your order on the way to you, The HakShop Team: Run by the Hak5 team, HakShop is dedicated to serving the Information Security community. Hi John, I think I figured out the issue. Please see the below text from Sara. Thanks! On Sep 19, 2016 11:03 AM, "Shannon Morse" wrote: Hi John, I read your forum post. Are you sure you didn't receive an email two days ago? Because I see that it is dated September 17. See the attached screenshot. Whatever the case, the shop is aware of your problem and you've been contacted (maybe it ended up in spam?). If you did indeed find a personal home phone number on the internet, please note that we take our personal privacy seriously. A call to one of our personal numbers will result in lots of time and money spent researching this issue. I've had a stalker in the past who started calling me and showing up. On Sep 19, 2016 9:05 AM, Sara ******It looks like this email to John was only sent to me and cc Sara Remmy. Did you send it to John too or just us?****** Date: Sep 17, 2016 11:27 AM Hi John, I apologize, I was unable to sit and answer emails yesterday due to the ongoing training event at the Hak5 Warehouse. I understand that your package has been marked as delivered, but was sent to the wrong address. After speaking with UPS, I have been instructed to send you a replacement package. I will send tracking to you on Monday. Let me know if you would like the package shipped to an alternate address. Please do not take my delay in response personally, I am trying my best to help all our customers in a timely manner. We do not offer phone support, due to overwhelming, long, difficult calls. Other than help with packing packages, I run the shop myself. Email is most of the time to the point and brief - much more time effective for large volumes of requests. I can understand the frustration of not receiving your package, I am here to help, and we do care greatly about our customers and the community. Timing is often difficult, and I apologize.

Hey there, guys. Got my ducky in the mail today, and I'd love to get started, but I can't get the damn thing to work for the life of me. I accidentally deleted the inject.bin, and cannot find a single copy of it online. I figured this might be remedied by updating the firmware, but it wasn't (I used duck_v2.1.hex, the tutorial didn't say which of the 19 in \images\ to use). Plugging it in yields a red light. Just not sure how to proceed.

Portal Auth is my first infusion. It allows you to directly authenticate the client radio with a captive portal. If you connect your Pineapple to an AP that has a captive portal you normally have to first authenticate with another client and then place that MAC address on the client radio. Portal Auth will detect captive portals and give you the ability to authenticate from the Pineapple. If you have any problems with this infusion or just have questions, please post them here.

Hello Do not bother the I have a question I am looking for extension of them does not like the KGB that File Commnad You can just about 10 of these cases suggest me Of course I could not find by searching ... thank you

I have recently purchased a WiFi Pineapple Nano an I am trying to connect it to my android. I watched the video on youtube and followed the instructions to an exact yet it just gets stuck at "Waiting for the WiFi Pineapple to make a connection. My phone is a AT&T Samsung Galaxy S7, Model Number: G930A Version: 6.0.1 if that helps. I am using the USB adapter that comes with the product attached to my PC and my USB charger connecting to the pineapple. Is there anything im doing wrong? Thanks!

hello everyone, i was wonder about support regard security issues/exploits. so like most of you guys i also carry a "smartphone" (android in this case). what do you guys think the support on a "smartphone" should be? 2 years, 3 year, 5 years? and should it receive security updates even a year after the mentioned years? also i own a HTC One M7 (android) should in this case HTC (and or any other brand) make a security update for a phone regarding the fact that it is 3 years old because of the stagefright exploit? Thank in advance and sorry if the reading is wonky

Its been working and now it won't show any logs..?

Hello! I know; there's lotsa older discussions related/around modem support for MK IV, but not with this particular modem. Anyone tested with this model (Huawei E5776s-32) ? It certainly finds the device, but only as storage - makes me wonder: Does the dongle drive modem through the USB at all? Thanks.

Hi All I recently purchased a pineapple to use in some upcoming red team assessments and have spent the day setting up and exploring. I have ICS working with OS X and the latest firmware but i'm a little confused about a few things. Its probably best I start by explaining what exactly I would like to do! Aim: to demonstrate to clients that they shouldn't enable wifi on devices as its easy to impersonate a legitimate access point and start intercepting even SSL traffic I believe to impersonate a legitimate access point I would use PineAP + Karma + Harvester. Question 1: is the above correct and if so, will the client devices not complain that the AP they are connecting to are unprotected instead of WPA2? Assuming they are now connected to my AP... Question 2: How can I understand who is connected? I see a client count in the web interface top right corner but don't see how I can find out anymore info? Also, I have found that after installing and enabling SSLStrip, I am not getting any output at all. It seems to be started but not stripping anything Question 3: Why after turning on SSLStrip and visiting a https page on my laptop connected to the fake AP am I not being stripped and nothing is showing in the logs? I think I once read about an infusion that would actually show you a list of the access points and the clients connected to each of these access points. I can't seem to find this again, the closest I have found is Site Survey Question 4: How can I find a list of which clients are connected to which AP's Finally, i notice that there is also a WLAN 1, which isn't started. Question 5: What is that typically used for? ICS without using the ethernet cable? Thanks in advance Mike

I received my first rubber ducky today and i have done a few test and at first all was well, im however hitting a bit of a wall. I wanted to try some reverse shell action and tried out one from the Duck tool-kit which works up to a point. all backslashes "\" in the scripts strings are output by the victim as hashes "#" for example i ran this script DELAY 1000 CONTROL ESCAPE DELAY 1000 STRING notepad DELAY 1000 ENTER DELAY 1000 STRING \\\\\\ and what i get is a notepad window with ###### can not for the life of me figure out why.

First of all I would like to apologize for being a complete noob to this. I have a specific need, to create a VERY simple payload which will refresh a screen overnight in order to not log out of a program. What I need is a 10 second delay when the duck is plugged in, followed by the F5 key, followed by a 10 second delay, followed by the F5 key etc, etc, ... This sequence would need to be repeated for 12 continuous hours until I was able to return to the terminal. Can anyone please help me to generate a payload (my first) to run such a program? is it possible? Keep in mind that I am a humble sales guy with basic computer skills. Thank you for any help you could provide. Examples welcome.

Hello, I recently placed a purchase for one of the Wifi Pineapple's and was promptly notified via email that my order had been automatically canceled, the email stated the following: Being rather confused by this, I emailed customer service requesting further information as to why my order had been canceled, the response I was provided with was: Totally understandable, and prior to receiving this email from support, I had placed a second order on the Hak5.org store assuming that I had perhaps keyed in the shipping information incorrectly. The first order reflects being canceled, my bank also reflects the same information but this new order I placed, is stuck in a "processing" state and I'm unable to get any sort of information from the customer service department. I've called, left a message and sent about 5 emails since receiving this notice, providing the link to my linked-in account, even sent an email from my company just as a secondary layer of proof, no response. I'm not sure what to think at this point, the money was deducted from my account but I've not received word if the information I provided was sufficient proof or not. I'm afraid that this has been a rather unpleasant experience thus far, people often have items sent to their place of business, this isn't abnormal behavior by any means and being that this item was supposed to be delegated for work related purposes, I opted for the 2 day shipping, it doesn't appear that I'm going to receive my item on time even though the site states that _most_ items are shipped within the first 24 hours. I'm a bit frustrated, am out 130+ dollars and have no idea if my item is going to ship or what the status is of the order, I'd very much like a response on this if possible. I can understand being a smaller business and having to be cautious when mailing to a secondary addresses but, I've provided the proof requested, I've been charged for the item, I just want this issue resolved. Any assistance with this will be greatly appreciated, thank you for your time.