Jump to content

jdogherman

Active Members
 View Profile  See their activity

  • Posts

    268

  • Joined

  • Last visited

 Content Type 

Posts posted by jdogherman

    Security

    in WiFi Pineapple Mark IV

    Posted

    Future security solutions...

    • limit http and ssh access to certain hosts
    • add encryption to a new management ssid
    • enable ssh & http to only eth0 interface
    • enable SSL on http access / https
    • only permit management though ssh access (restrict http access to all but lo)
    • build web user access who is not root
    • disable root access, make user escalate for SU rights

    Just brainstorming ideas

    Security

    in WiFi Pineapple Mark IV

    Posted

    with all this concern about security it amazes me that we dont have encryption on the management ssid NOR SSL on the web traffic..

    Out of the box I guess you could do an shell connection with port forwarding.

    So the moral of the story is think carefully about changing the root password to something that is familiar to you as it is transmitted in clear text.

    Karma Isnt Saying Yes!

    in WiFi Pineapple Mark IV

    Posted

    Pineapple Hardware Version: Mark IV

    Pineapple Software Version: 2.3.1

    OS used to connect to the pineapple: OSX Lion

    Network layout of how your setup is connected (including IP information): mac is connected to wireless AP using WiFi (internet), mac ethernet is connected to Mark IV lan port.

    Mac WiFI: 10.7.1.132/16

    Mac ETH: 192.168.2.200/24

    Mark LAN Port: 192.168.2.254/24 GW 192.168.2.200

    All the tools/options that are running on the pineapple when the issue happened: usb drive installed with swap space setup

    Ping results from computer to pineapple: 100% pass

    Is the problem repeatable (Yes/No): YES

    Steps taken which created the problem: Haven't gotten it working

    Error Messages: None

    Log file information:

    Anything else that was attempted to 'fix' the problem: Converted address space to 192.168.2.0 instead of 172.16.42.0 following instructions. Mark IV is able to access internet through OSX system (pings and module listings) Wireless is on as I can see the pineapple SSID and connect to it. Mark IV KARMA is ON. I have created other "fake" wireless SSID on target machines to pump out Probe requests but I am still not able to get a karma response.

×
×
  • Create New...