Swamppifi Posted November 8, 2014 Share Posted November 8, 2014 The new firmware for the Reaver pro 2 access point is now out. it is on the reaver forum I have just flashed mine without a problem. Make sure you flash the stager version 1st if you haven't updated recently, this sets up everything for the new interface, and also watch the video on how to update. So far, I love the new menu system, and layout'. I will be having a play later tonight to see what it can do, I pull out one of my dlink routers and test the new script. Link to comment Share on other sites More sharing options...
newbi3 Posted November 8, 2014 Share Posted November 8, 2014 I've never seen their interface before. Mind posting a screenshot? Link to comment Share on other sites More sharing options...
ZaraByte Posted November 9, 2014 Share Posted November 9, 2014 Too lazy to check reaver systems whats new in the update anything special :D Link to comment Share on other sites More sharing options...
THCMinister Posted November 9, 2014 Share Posted November 9, 2014 Can we just load the firmware onto an alfa ourself? Link to comment Share on other sites More sharing options...
ZaraByte Posted November 9, 2014 Share Posted November 9, 2014 (edited) Can we just load the firmware onto an alfa ourself? I have friends who tried but we didn't have any luck. I think its because the firmware memory block offsets are not the same on like a alfa network ap-121u due to the way that reaver systems gets their box made custom from a company called patton.com I tried using my ap-121u that i got from hak5 using the steps they have for firmware flashing over serial but had no luck. Had this problem ar7240> erase 0x9f050000 +0xf60000 Error: end address (0x9ffaffff) not in flash! Bad address format Steps Taken: setenv serverip 192.168.1.254; setenv ipaddr 192.168.1.1 tftp 0xa0800000 openwrt-ar71xx-hornet16M-squashfs-sysupgrade-gold13Aug2013.bin erase 0x9f050000 +0xf60000 cp.b 0xa0800000 0x9f050000 0xf60000 Someone who messaged me on youtube managed to get someone ad reaver systems to give him them serial flashing steps he said they didn't work for him. Was giving a Error: end address (0x9ffaffff) not in flash! Bad address format when using erase 0x9f050000 +0xf60000 command From what i seen they totally rebuilt the Web Interface its no longer the green and black webui it looks alot more noob friendly also they added WEP cracking but nothing special was done to the main part of the product "WPS" people will still have problems with AP Rate Limiting and WPS locks they also recommend that same adapter hak5 is selling for the Mark V to extend range of attacks. Edited November 9, 2014 by ZaraByte Link to comment Share on other sites More sharing options...
Swamppifi Posted November 9, 2014 Author Share Posted November 9, 2014 one other thing done is the adding of the script to exploit the dlink wps pin flaw. i haven't tried it yet, got side tracked last night. it appears the default wps pin is calculated by the bssid/mac of the access point, this script will scan and if one of the effected dlink router is found, suggesting the default wps pin for that router to try. I haven't seen it work yet, but go over to http://www.devttys0.com/ and have a read of the latest blog on it Link to comment Share on other sites More sharing options...
ZaraByte Posted November 11, 2014 Share Posted November 11, 2014 Shame I sold my Reaver Pro 2 possibly buy it when its cheaper then $75.00 i got mine as a review box but ended up selling mine for charity. Link to comment Share on other sites More sharing options...
bytedeez Posted November 21, 2014 Share Posted November 21, 2014 Who needs reaver when there's the pineapple. From what i've read (don't own one myself) reviews say the reaver is shit. Link to comment Share on other sites More sharing options...
bingowings85 Posted January 2, 2015 Share Posted January 2, 2015 a**e I had given up on my reaver pro. I thought the project was abandoned and terry had moved on to other unsupported products. Link to comment Share on other sites More sharing options...
factgasm Posted January 26, 2015 Share Posted January 26, 2015 (edited) Reaver Pro's new user interface is absolutely superb. Terry Dunlap is master of presentation. If only he would work his magic on the Pineapple which frankly, in terms of presentation, is lagging way behind. What Terry does is to take complex information and present it so everyone can understand it and that's how the Pineapple should be too. https://forums.reaversystems.com/index.php?threads/using-the-new-reaver-pro%E2%84%A2-interface.41/ Edited January 26, 2015 by factgasm Link to comment Share on other sites More sharing options...
cooper Posted January 26, 2015 Share Posted January 26, 2015 From that video, around the 1:50 mark: "I'm trying to position ReaverPro to be useful for mom and dad." If you're wondering why the Pineapple's presentation is different, there's your answer. Link to comment Share on other sites More sharing options...
factgasm Posted January 27, 2015 Share Posted January 27, 2015 (edited) From that video, around the 1:50 mark: "I'm trying to position ReaverPro to be useful for mom and dad." If you're wondering why the Pineapple's presentation is different, there's your answer. The Reaver Pro's presentation isn't just different, it's excellent. If the Pineapple's presentation was as good, Hak5 would have a bigger market to sell to and they'd sell many more. Edited January 27, 2015 by factgasm Link to comment Share on other sites More sharing options...
barry99705 Posted January 28, 2015 Share Posted January 28, 2015 I don't really see the need. The pineapple's gui does what it needs. There's really no need to add the extra bullshit when a lot of folks are running it from their phone's browser. Link to comment Share on other sites More sharing options...
factgasm Posted January 30, 2015 Share Posted January 30, 2015 (edited) That's exactly the same arrogant attitude Microsoft took about ten years. Like IBM before them they were convinced of their invincibility. They used to define an entire industry but they failed to notice developments elsewhere and missed out on the emergence of entire whole new markets. What's Microsoft's share of the smart phone and tablet market? Three days ago Apple reported the biggest corporate profit in history. Remind me now, what is it that Apple is famous for? Make the Pineapple's interface slicker and more intuitive and you'll sell a lot more and just think what interesting new projects Hak5 could fund from extra revenue. Edited January 30, 2015 by factgasm Link to comment Share on other sites More sharing options...
sud0nick Posted January 30, 2015 Share Posted January 30, 2015 That's exactly the same arrogant attitude Microsoft took about ten years. Like IBM before them they were convinced of their invincibility. They used to define an entire industry but they failed to notice developments elsewhere and missed out on the emergence of entire whole new markets. What's Microsoft's share of the smart phone and tablet market? Three days ago Apple reported the biggest corporate profit in history. Remind me now, what is it that Apple is famous for? Make the Pineapple's interface slicker and more intuitive and you'll sell a lot more and just think what interesting new projects Hak5 could fund from extra revenue. Maybe you're missing the point of the Pineapple and its intended use. You are comparing Hak5 and the Pineapple with companies who market to users who span from potato to 1337 h4x0r. The Pineapple is a pentesting tool and while I'm sure Hak5 would love to sell as many as they can it would be wise to keep it geared toward those who don't think "blinky lights are bad dark magic" when it comes to computers. Bottom line, it's a tool for hackers, not mom and dad. Link to comment Share on other sites More sharing options...
cooper Posted January 30, 2015 Share Posted January 30, 2015 Three days ago Apple reported the biggest corporate profit in history. Remind me now, what is it that Apple is famous for? That would be getting customers to pay extortionate amounts of money for comparatively sub-standard hardware (not saying the hardware isn't good, but for the hardware you're getting you're paying an awful lot), and having the most annoying little critter fanboys line up several days before the launch of the next trinket they didn't know they needed but are convinced they can't live without. Link to comment Share on other sites More sharing options...
factgasm Posted January 31, 2015 Share Posted January 31, 2015 (edited) And you're not seeing the potential. Everyday right across the globe the lives of millions of innocent people are damaged or destroyed by criminals who very often go unpunished and remain free to continue their spree. Sadistic, predatorial criminals who commit premeditated acts such as threatening behaviour, harassment, fraud, theft, extortion, rape, assault, human trafficking, drug dealing, embezzlement, sexual slavery or murder - among others. Naively, many people trust that, because they are good themselves, should they ever become a victim of crime the criminal justice system will leap to their defence and put everything right. The reality is that the criminal justice system has finite resources, works strictly by procedures and is slow to act ("You have all these rules and you think they'll save you.") Worse still, its officers can be judgemental, prejudiced and even corrupt ("Moroni's men") thus denying the victim justice at the first hurdle. Victims of crime often struggle to convince the police that a criminal act has occurred at all, because they lack a vital piece of evidence. An email here or a document there could have made all the difference. ("Well, it's not you know, it's what you can prove in court. Didn't you tell me that once?" as the great Clyde Shelton once said). Even when there is sufficient evidence and a prosecution goes to court the criminal will often avoid the full extent of the punishment they deserve because legal procedures have resulted in compromise. The criminal justice system's failure to prosecute criminals only adds insult to a victim's sense of injustice. Right now, at this very instant, right throughout the world, there are millions of people living with the hurt not just inflicted on them by the criminal, but by the system's subsequent failure too - and what do they do then? The inconsolable widower whose wife took her own life after being raped. The loving parents whose child was abducted and murdered by a paedophile ring. The elderly widow defrauded of her life savings. The moral entrepreneur contemplating suicide after being defrauded by immoral business partners. What do these victims do when the system fails them? Learn to hide the anger behind a smile? Get a knife or a gun and turn on it themselves to end the pain? Or turn vigilante and kill the MF? Unlike Clyde Shelton, most ordinary people, Mom and Pop if you will, are not CIA assassins and they're not hackers either, they're just good, ordinary people, law abiding citizens who happily went about their lives unwittingly stood in the path of the tornado. Most victims of crime have not spent their prior lifetime with Linux or attending DefCon or learning aircrack or hacking their neighbours wifi from the safety of their own Mom and Pop's house, but don't deserve to be cut off from getting justice for themselves just because of that. Occasionally, when people suffer appalling injustice, they take power into their own hands and resort to weapons like knives and guns. Using a weapon might satisfy your bloodlust but they can get you a prison sentence. That's how justice (or injustice) works. The Pineapple has the potential to empower victims of crime to uncover vital clues that the system failed to find, evidence that could see the criminal finally sent to prison. For instance it could help uncover the whereabouts of stolen money, uncover conspiracy or uncover details of the criminal's next hit. Sending the criminal to prison also has the potential to end a whole wave of serious crime and spare others the misery they may have otherwise suffered. While the Pineapple has this potential, its interface is set up so that only those who have developed a high level of expertise can make of use it. That's why I implore Hak5 to produce an improved user interface so everyone can make use of it. Please don't keep the Pineapple the play thing of an highly specialist in-group, bring it out into the sunshine and help let justice prevail. "I'm still a believer in Pineapple even if you're not." Edited January 31, 2015 by factgasm Link to comment Share on other sites More sharing options...
sud0nick Posted January 31, 2015 Share Posted January 31, 2015 (edited) What your suggesting is that the Pineapple be made into an easy tool for vengeance rather than justice. The unanimous point remains that the Pineapple is a penetration testing tool. It is not for vindictive business men as one of your examples displays. I understand some of your reasoning, however, simply changing the user interface will not bring the average user to a greater understanding of the technology beneath. Without the understanding of what is actually happening they will not be successful in their personal vendettas but instead will be out $99. If the interface bothers you so much change it yourself. After all, Hak5 has given you the opportunity to do so in the Configuration infusion. When you build your ideal interface post the CSS on here and see what people think. Edited January 31, 2015 by sud0nick Link to comment Share on other sites More sharing options...
barry99705 Posted January 31, 2015 Share Posted January 31, 2015 And you're not seeing the potential. Everyday right across the globe the lives of millions of innocent people are damaged or destroyed by criminals who very often go unpunished and remain free to continue their spree. Sadistic, predatorial criminals who commit premeditated acts such as threatening behaviour, harassment, fraud, theft, extortion, rape, assault, human trafficking, drug dealing, embezzlement, sexual slavery or murder - among others. Naively, many people trust that, because they are good themselves, should they ever become a victim of crime the criminal justice system will leap to their defence and put everything right. The reality is that the criminal justice system has finite resources, works strictly by procedures and is slow to act ("You have all these rules and you think they'll save you.") Worse still, its officers can be judgemental, prejudiced and even corrupt ("Moroni's men") thus denying the victim justice at the first hurdle. Victims of crime often struggle to convince the police that a criminal act has occurred at all, because they lack a vital piece of evidence. An email here or a document there could have made all the difference. ("Well, it's not you know, it's what you can prove in court. Didn't you tell me that once?" as the great Clyde Shelton once said). Even when there is sufficient evidence and a prosecution goes to court the criminal will often avoid the full extent of the punishment they deserve because legal procedures have resulted in compromise. The criminal justice system's failure to prosecute criminals only adds insult to a victim's sense of injustice. Right now, at this very instant, right throughout the world, there are millions of people living with the hurt not just inflicted on them by the criminal, but by the system's subsequent failure too - and what do they do then? The inconsolable widower whose wife took her own life after being raped. The loving parents whose child was abducted and murdered by a paedophile ring. The elderly widow defrauded of her life savings. The moral entrepreneur contemplating suicide after being defrauded by immoral business partners. What do these victims do when the system fails them? Learn to hide the anger behind a smile? Get a knife or a gun and turn on it themselves to end the pain? Or turn vigilante and kill the MF? Unlike Clyde Shelton, most ordinary people, Mom and Pop if you will, are not CIA assassins and they're not hackers either, they're just good, ordinary people, law abiding citizens who happily went about their lives unwittingly stood in the path of the tornado. Most victims of crime have not spent their prior lifetime with Linux or attending DefCon or learning aircrack or hacking their neighbours wifi from the safety of their own Mom and Pop's house, but don't deserve to be cut off from getting justice for themselves just because of that. Occasionally, when people suffer appalling injustice, they take power into their own hands and resort to weapons like knives and guns. Using a weapon might satisfy your bloodlust but they can get you a prison sentence. That's how justice (or injustice) works. The Pineapple has the potential to empower victims of crime to uncover vital clues that the system failed to find, evidence that could see the criminal finally sent to prison. For instance it could help uncover the whereabouts of stolen money, uncover conspiracy or uncover details of the criminal's next hit. Sending the criminal to prison also has the potential to end a whole wave of serious crime and spare others the misery they may have otherwise suffered. While the Pineapple has this potential, its interface is set up so that only those who have developed a high level of expertise can make of use it. That's why I implore Hak5 to produce an improved user interface so everyone can make use of it. Please don't keep the Pineapple the play thing of an highly specialist in-group, bring it out into the sunshine and help let justice prevail. "I'm still a believer in Pineapple even if you're not." That is the biggest load of bullshit I've seen in these forums. Link to comment Share on other sites More sharing options...
factgasm Posted January 31, 2015 Share Posted January 31, 2015 (edited) What your suggesting is that the Pineapple be made into an easy tool for vengeance rather than justice. The unanimous point remains that the Pineapple is a penetration testing tool. It is not for vindictive business men as one of your examples displays. I understand some of your reasoning, however, simply changing the user interface will not bring the average user to a greater understanding of the technology beneath. Without the understanding of what is actually happening they will not be successful in their personal vendettas but instead will be out $99. If the interface bothers you so much change it yourself. After all, Hak5 has given you the opportunity to do so in the Configuration infusion. When you build your ideal interface post the CSS on here and see what people think. The fact that you suggested I was implying the Pineapple be used for vengeance shows you didn't read what I said correctly. I made it very clear that using a gun or a knife - which would constitute vengeance - is the neanderthal approach. The smart approach is to uncover information the criminal would prefer was kept secret and you do that by hacking him. Suppose you suspected someone was committing serious crime but lacked the evidence to prove it. Now suppose you came by information that could be used be used to bring them to justice, would you use it or would you just turn a blind eye? Edited January 31, 2015 by factgasm Link to comment Share on other sites More sharing options...
factgasm Posted January 31, 2015 Share Posted January 31, 2015 (edited) That is the biggest load of bullshit I've seen in these forums. Suppose you'd been victim of some of the crimes I mentioned above. What would you do, lash out, like you just did? You can't even control yourself over a post. Edited January 31, 2015 by factgasm Link to comment Share on other sites More sharing options...
cooper Posted January 31, 2015 Share Posted January 31, 2015 (edited) I see 2 problems with that long post you made. 1. Against all the criminal acts you mentioned the Pineapple cannot help you at all. It can't protect you from it, it can't help you defend yourself during the act aside from maybe using it to beat your assailant over the head with it, and I'm sure there are plenty more appropriate, sturdier and heavier tools around for that. Maybe poke someone in the eye with an antenna, but that's pretty much it. After the fact you can't use one to make you feel more safe or less violated because, as I already mentioned, it can't help prevent a re-occurrence. 2. When you hack a someone who you consider to be a criminal (innocent until proven guilty and all) to gather evidence, you're doing the exact opposite: you're tampering with evidence. If you produce some document or email to an investigator, that investigator needs to take into account that you may have fabricated the document, so you need to say where you got it from. If you got it from the supposed perpetrator's harddrive, that would prove you have access to that drive so all data on there is now tainted. After all, you could just as easily have planted this evidence as well as any other file that might be indicative of criminal behaviour (child porn pictures, say). To make matters worse, hacking someone's machine without consent is illegal meaning that when you provide the document to a detective, you have proven yourself to have broken the law whereas the other guy is just some random and, thus far according to the law, completely innocent citizen. Edited January 31, 2015 by Cooper Link to comment Share on other sites More sharing options...
sud0nick Posted January 31, 2015 Share Posted January 31, 2015 The fact that you suggested I was implying the Pineapple be used for vengeance shows you didn't read what I said correctly. I made it very clear that using a gun or a knife - which would constitute vengeance - is the neanderthal approach. No, I think you are confusing vengeance with justice and since when is using a gun or knife the only way to seek revenge? Cooper has stated already that by using the Pineapple to get evidence you are tampering with it. With that you are committing a crime yourself. It doesn't matter if someone wronged you, if you illegally access their systems/networks/etc you are at fault for your own crimes. I'll say this again, if you want to interface to be different quit trying to use emotional tactics on us. Instead, change it yourself in the CSS Editor tab of the configuration infusion. You can find all of the other files for the interface in /pineapple/includes/. When you're satisfied with what you've built you can present it to everyone here. Until then everyone is going to continue to use the current interface because it's effective and serves its purpose for the community. Link to comment Share on other sites More sharing options...
barry99705 Posted January 31, 2015 Share Posted January 31, 2015 Suppose you'd been victim of some of the crimes I mentioned above. What would you do, lash out, like you just did? You can't even control yourself over a post. Nope, I know how to defend myself, was an instructor for many years. It just looked like too many other magic jellybean fix all your problems infomercials you see on late night television. Nothing you wrote can be fixed with a wifipineapple. That's not it's purpose, and anything you do use it for won't be admissible in court anyway. It's not your job to gather evidence, it's the police's job. Link to comment Share on other sites More sharing options...
factgasm Posted February 1, 2015 Share Posted February 1, 2015 (edited) Nope, I know how to defend myself, was an instructor for many years. It just looked like too many other magic jellybean fix all your problems infomercials you see on late night television. Nothing you wrote can be fixed with a wifi pineapple. That's not it's purpose, and anything you do use it for won't be admissible in court anyway. It's not your job to gather evidence, it's the police's job. Fight training will only defend you in certain circumstances. For example, some asshole shoots your wife dead in a drive by? Or someone deliberately tries to run you down on the sidewalk late at night with a motorbike because they know you've rumbled what they're doing. What you gonna do now? How exactly does pulling a Bruce Lee pose help you in those circumstances? Too late. Now suppose that the criminal rather than posing a physical threat poses a white collar threat, for example, bribing senior local officials in return for cooperation with plans for some new toxic industrial installation - which could lead to hundreds, even thousands of deaths. In either case you can't go into a court and tell the judge "Here's a bunch of documents proving the accused is guilty. I got them by hacking his computer" instead you pass on the information to the authorities and, hopefully, they go get the warrant if not you go to the media and if they're turning a blind eye. Edited February 1, 2015 by factgasm Link to comment Share on other sites More sharing options...
Recommended Posts