echoblack

Updated to pineapple-0.6 ------------------------- Ok, I've just done a bunch of messing around with this today and have fixed a couple things. First, I now get the GW IP with that new way but I had to move it above all the iptables stuff for it to work. And it is working for me now. However, one thing to check is this.... When the script runs it tells you what route it set i.e. sslstrip will write it's log file to: /usr/src/sslstrip-0.7/sslstrip.log eth0 is given the IP address of 10.110.0.1 & netmask 255.255.255.0 IP forwarding enabled! All iptables chains and rules cleared. . . Setting new iptables rules iptables configured... Default route removed. . . Default route set to 192.168.1.1 through wlan0 Plug in the Pineapple You see that ^ "Default route set to 192.168.1.1 through wlan0" Now look at that when you run the scrip. If it didn't set the route correctly then that line could say.... "Default route set to through wlan0" with no IP address for the GW. If it dose mess up like that you can set the route yourself like this with the IP your GW IP address and where "wlan0" is the Internet facing NIC. route add default gw 192.168.1.1 wlan0 ---------- Also in pineapple-0.6 I changed the way I check to see if python Twisted is installed. Before I was just doing this... ls /usr/lib/$Py_Version/*/twisted/im.py if [ $? != 0 ]; then However, in the new version of Python Twisted in Archlinux that file is not there anymore. So, instead I just do this to see if I can ls the whole twisted directory. It spits a bunch of junk to the screen but it is more reliable. ls /usr/lib/$Py_Version/*/twisted if [ $? != 0 ]; then

Hum, so when you run pineapple.sh on your Laptop, your laptop is already connected to the Internet correct? Also, is your computer speaking English? Although, I think now that I changed the way I get the Gateway IP in the new, just posted, pineapple-0.5 should work with any language. ----------------------------------------------------------------------------- Ok I updated to pineapple.sh-0.5 I changed the way I get the GateWay IP. This way wil hopefully work better. Please let me know if it brakes anything. CHANGED # This sets up the Default Route # GW=`ifconfig $Wan | grep "inet addr:"| grep -v "127.0.0.1" | cut -d: -f2 | awk '{ print $1}' | cut -d. -f1,2,3` GW=`echo $GW.1` TO THIS # This sets up the Default Route # GW=`netstat -nr | awk 'BEGIN {while ($3!="0.0.0.0") getline; print $2}'` route add default gw $GW $Wan echo "Default route set to $GW through $Wan" echo ""

Hum, if you want my opinion. I am not convinced you got hacked do to the Jasager. I would not be surprised if you got a virus wile searching the web for info on how to set up the Internet connection sharing. Or I been if someone did connect and then attack your windows box he/she probably could have done the same if they just got on your normal wireless lan. I don't think a firewall setup will help you with the Jasager. Just leave Wireshark on and watch all the TCP packets. If you see a client IP connecting to your Windows box IP then your getting hacked. Some things you should do are to go into control panel/administrative tools/Services then go down the list and "disable" Telnet, RPC, Fast User switching, File sharing,.... You know what just google for a list of services that should be disabled in windows. Ya, get all the updates you can all the time. But at the end of the day, you will still get viruses and get hacked and your computer will crash. It's just windows. There is really no way of making it secure. If you feel like having some fun. Install Ubuntu. Ya, it will be hard at first but after a month or two you'll never want to go back. The choice is up to you though. It's all good if you don't have the time. It is a lot of work to learn a new OS. If you do switch though. Go All Out. Main and Only OS on your Main Box. If you just install it as a second OS and never use it for real computer work then you'll never learn. You have to use it all the time to learn.

I have found my Jasager-FON to be a little overwhelmed with all the stuff it has to do. CPU is always vary high and a lot of RAM is used just sitting there. This "Could" be a problem but digininja would know a lot more about that then me because he wrote Jasager. Also, if you are using "NetworkManager" that "Could" be the problem too. NetworkManager seems to brake everything. Like it could be Re-setting the default route after a bit. I use WICD and never have problems with ettercap or anything with it. WICD is just a GUI front-end for the command line tools.

Glad to here it is working now. Did that modified line of code make the script work in Germen? Did you get the install.sh to work or what of the things I listed could be the problem with the install.sh running on a Germen Box? You know I was thinking that because I didn't specify the character encoding could be the problem. i.e. I use this line to check the return code of the last command run and if it is anything other then 0 it will remove all installed files and exit with a specified exit code. if [ $? != 0 ]; then This is saying. . . "if"=IF "$?"=the exit code of the last run command "!="=is not equal to "0"=0 "then"=Then do this. . . So, if the encoding if different then utf-8 it may not read the reported exit code correctly. ------------- Try adding this line to the vary top of both the install.sh and pineapple.sh scripts. # -*- coding: utf-8 -*-

Ya you can. I could be wrong but from what I remember the only real different between the + and the non+ is that the + has an extra Ethernet port. I think some other components are different too but none of the ones that would effect compatibility.

This is a problem with the script that was reported on a different thread. I put this here so all the stuff about this script is easy to find. -------------------- The problem with sslstrip not working is do to the fact that the install.sh errorred out and quit without installing anything. So ya, you can run pineappple.sh from the install folder itself but it is trying to call sslstrip from /usr/src/sslstrip-0.7 If you just move sslstrip-0.7 to /usr/src It will Still NOT work. Because you still need to sudo chmod -R 777 /usr/src/sslstrip-0.7 Because the default log file is written in that folder. ------- The problems you are having are do to the script being depending on the computer speaking English. I'll explain. Here is the line of code that is giving you the problem in pineapple.sh. However, the install.sh problem may be a problem with something ells. I'll talk about that latter # This sets up the Default Route # GW=`ifconfig $Wan | grep "inet addr:"| grep -v "127.0.0.1" | cut -d: -f2 | awk '{ print $1}' | cut -d. -f1,2,3` GW=`echo $GW.1` You see that line of code is all assuming that the ifconfig $Wan will report back in English. So, if it dose NOT have the line with the string "inet addr:" then grep will report nothing. Leaving $GW blank. Then when the next line GW=`echo $GW.1` is run ... $GW="" and then only the ".1" is assigned to $GW. SO, when the comand that sets the route is called route add default gw $GW $Wan You get the error .1: Unknown host Default route set to .1 through ra0 AND that is why DNS is not working for your WiFi connected clients. YOU COULD EDIT the script and change that line of code to this. It still mite not work though. GW=`ifconfig $Wan | grep "inet Adresse:"| grep -v "127.0.0.1" | cut -d: -f2 | awk '{ print $1}' | cut -d. -f1,2,3` -------- Also Note, That this line of code is dependent on the Internet facing NIC Already being connected to the Internet. Otherwise this line of code will not set the proper Route. I need to do some more checking here. I also need to ad a block to make sure iptables is installed. I could add in check to make it work in Germen if that modified line of code works for you. ------------------ Now the install.sh problem.. This line of code is not working on your Germen computer. cp ./pineapple.sh $PINEAPPLE_INSTALL_DIR/pineapple.sh You DID do this right? tar pxzvf pineapple-0.4.tar.gz cd pineapple-0.4 sudo install.sh Dose this directory exist on your computer? /usr/bin You do have the cp command in Germen Right? Dose the default exit code on a Germen Linux Box still 0 will English bash scripts Run on a Germen Linux Box ?

The problem with sslstrip not working is do to the fact that the install.sh errorred out and quit without installing anything. So ya, you can run pineappple.sh from the install folder itself but it is trying to call sslstrip from /usr/src/sslstrip-0.7 If you just move sslstrip-0.7 to /usr/src It will Still NOT work. Because you still need to sudo chmod -R 777 /usr/src/sslstrip-0.7 Because the default log file is written in that folder. ------- The problems you are having are do to the script being depending on the computer speaking English. I'll explain. Here is the line of code that is giving you the problem in pineapple.sh. However, the install.sh problem may be a problem with something ells. I'll talk about that latter # This sets up the Default Route # GW=`ifconfig $Wan | grep "inet addr:"| grep -v "127.0.0.1" | cut -d: -f2 | awk '{ print $1}' | cut -d. -f1,2,3` GW=`echo $GW.1` You see that line of code is all assuming that the ifconfig $Wan will report back in English. So, if it dose NOT have the line with the string "inet addr:" then grep will report nothing. Leaving $GW blank. Then when the next line GW=`echo $GW.1` is run ... $GW="" and then only the ".1" is assigned to $GW. SO, when the comand that sets the route is called route add default gw $GW $Wan You get the error .1: Unknown host Default route set to .1 through ra0 AND that is why DNS is not working for your WiFi connected clients. YOU COULD EDIT the script and change that line of code to this. It still mite not work though. GW=`ifconfig $Wan | grep "inet Adresse:"| grep -v "127.0.0.1" | cut -d: -f2 | awk '{ print $1}' | cut -d. -f1,2,3` -------- Also Note, That this line of code is dependent on the Internet facing NIC Already being connected to the Internet. Otherwise this line of code will not set the proper Route. I need to do some more checking here. I also need to ad a block to make sure iptables is installed. I could add in check to make it work in Germen if that modified line of code works for you. ------------------ Now the install.sh problem.. This line of code is not working on your Germen computer. cp ./pineapple.sh $PINEAPPLE_INSTALL_DIR/pineapple.sh You DID do this right? tar pxzvf pineapple-0.4.tar.gz cd pineapple-0.4 sudo install.sh Dose this directory exist on your computer? /usr/bin You do have the cp command in Germen Right? Dose the default exit code on a Germen Linux Box still 0 will English bash scripts Run on a Germen Linux Box ?

YES, there is a huge advantage to having 8MB of flash memory. That is one of the 3 best things about the Fon. i.e. Cheap, Atheros, and an astonishing 8MB of flash. Looking at the DD-WRT list of router specs it seems that the FON is the only router that has this much flash memory. You see all the applications are installed in the Flash memory. So the more flash you have the more your router can do. Like I installed OpenVPN on my FON and then connect it to my off-shore anonymous OpenVPN account. This way All traffic from any computer connected to the FON is automatically untrackable by the NSA, which vary openly monitors ALL Internet traffic in the USA. Not to mention the ISP and all the servers keeping logs of everything you do. Or people that want to sue you for downloading copyrighted content. You can install Nmap or have SSH tunnels setup. You can do loads of stuff.... Have it download torrents for you. Basically, the more flash memory the cooler the firmware and the more applications you can have installed on the router. However, the only place I know of to buy a FON is form Daren.

Hum, Yes there vary well could be bugs in the script still. See I am on Archlinux and things are set up a bit different then any other Linux system. Archlinux uses BSD rc files. However, it should be all working now on v0.4. I defiantly need the output your getting to fix the script or tell you what is wrong. Make sure your Fon-Pineapple is set up on 10.110.0.2 and all the stuff in the /etc/config/dhcp is setup how I show you. To test the ICS. Just deliberately connect to the AP and watch wireshark on eth0 To deliberately connect you need to go into the Webif Admin page and create a Wireless Vlan. Give it an essid and just live it unencrypted. Remember you WANT people to connect so no need to setup WPA. --------------- I am not too sure what you were asking but...... You CAN connect to the INTERNET with Ethernet on your Laptop. Then run your wireless in Ad-Hoc mode. Then set up a Wireless V-lan on the Fon-Pineapple and make the connection. Then run the pineapple.sh and enter eth0 for the first question asking what is the Internet facing NIC And wan0 for the Pineapple facing NIC. I don't like that setup though. Because I simply can not get WEP to work on Any of my Wireless cards in Ad-Hoc. --------- Ya, the Jasager works best at a Coffee shop. When the persons Home AP Really is in range. It will most likely connect to that. I think the fact that the Jasager doesn't spoof it's MAC has something to do with it too. Also, Jasager Will spoof an AP that has WEP or WPA. However, Jasager will Not spoof the WEP or WPA. So, the client computer could just forget about the WEP/WPA and connect to Jasager Unencrypted Or it could just insist on using encryption and not connect to the Jasager. You can also run a DOS attack on the person home AP. Then the client Can't connect to that AP. I guess to test you could change the ESSID on your Home AP. Then connect your Host laptop to it. However, non of the other computers in the house will know the New essid so they will still be probing for that Old essid. The Jasager will spoof it and they should connect. Really though. The Jaserger works. Just make sure the ICS is working and head to town.

Here is what I have wiritten so far for the tcpdump option. I have to install Ubuntu on my room mates laptop now so I may not get a chance to code this anymore today. I'll try though.. http://rapidshare.com/files/325081606/test.sh test.sh #!/bin/bash # # SET GLOBAL VARIABLES # # Location of tcpdump # TCPDUMP_DIR="/usr/sbin" # Default Log location for tcpdump # TCPDUMP_LOG="/usr/src" # This checks if tcpdump is installed # # This dose this by running ls $TCPDUMP_DIR/tcpdump # # If this command gives a return code other then 0 # The variable $Tcpdump is set to "N" # Otherwise it is set to "Y" # ls $TCPDUMP_DIR/tcpdump if [ $? != 0 ]; then $Tcpdump="N" echo "tcpdump is NOT installed" echo "tcpdump option is disabled" echo "" else $Tcpdump="Y" echo "tcpdump is installed" echo "tcpdump option is enabled" echo "" fi # This Asks the user if they want to start tcpdump # # This scrip check if $Tcpdump is set to "Y" # If it is then the user is asked if they would like to start tcpdump # The user imput it sent to variable $Run_Tcpdump # # # The user leave this blank then the default value of "N" # If the user enters Y, y or yes then the tcpdump is enabled # # Run_Tcpdump="N" if [ $Tcpdump == "Y" ]; then read -p "Whould you like to start tcpdump? Y/N: " Run_Tcpdump if [ $Run_Tcpdump == "Y" -o $Run_Tcpdump == "y" -o $Run_Tcpdump == "yes" ]; then echo "tcpdump is enabled" echo "" else echo "tcpdump is disabled" echo "" fi fi # This askes the user where they would like to the tcpdump log file to be # # The user input is sent to variable $Tcpdump_Log_User # # If the user leaves it blank then the default tcpdump logfile of $TCPDUMP_LOG/tcpdump.log is used # # X="N" while [ $X == "N" ]; do echo "" echo "" echo "Where would you like tcpdump log file to be located?" echo "" echo "If left blank the default location of $TCPDUMP_LOG/tcpdump.log will be used" read -p "Enter the /full/path/and/LogName.log: " Tcpdump_Log_User echo "" if [ -z $Tcpdump_Log_User ]; then Tcpdump_Log_User=$TCPDUMP_LOG X="Y" else # This Varifies the /full/log/path/and/logname.log by User # # Would be better if script could verify # Y="N" while [ $Y == "N" ]; do echo "Are You sure you want tcpdump to write to log file $Tcpdump_Log_User?" echo "If $Tcpdump_Log_User is not a valid path tcpdump will fail" echo "" read -p "So you sure ?: Y/N" Verify echo "" if [ $Verify != "Y" -o $Varify != "y" -o $Varify != "yes" ]; then echo "Asking agin. . ." else echo "$Verify path User verified" echo "" Y="Y" fi done fi done # This asks for any -flags or expression the user would like to use with tcpdump # # This checks if $Run_Tcpdump is = to Y, y or yes If so # # This sets user input to $Tcpdump_Flags # If left blank $Tcpdump_Flags is set to "N" Make sure to clear this before adding to tcpdump command # # If user inters input the while loop will varify with that the user would like to use the -flags and expressions # # X="N" while [ $X == "N" ]; do if [ $Run_Tcpdump == "Y" -o $Run_Tcpdump == "y" -o $Run_Tcpdump == "yes" ]; then echo "" echo "" tcpdump --help echo "What tcpdump -flags and expression would you like to use?" echo "You may want to open a new shell and look at the tcpdump man page" echo "" echo "The -flags and expression will enclued the logfile location alredy given" echo "" read -p "Enter -flas and expression: " Tcpdump_Flags # If the user left that question blank then $Tcpdump_Flags are set to "N" # $X is set to "Y" to leve the loop # if [ -z $Tcpdump_Flags ]; then Tcpdump_Flags="N" X="Y" echo "No tcpdump flags set" # This echos $Tcpdump_Flags to the user and asked if they really want to use these # # It sents user input to $Varify # # If the user leves the question blank then the defult value of "N" is left on $Verify # So, $X stays = to"N" and the question loops agin # else Verify="N" echo "These are the tcpdump -flags and expressions you have set" echo "$Tcpdump_Flags" echo "" read -p "So you sure these are the -flags and setting you want? Y/N:" Verify echo "" # This checks if the user intered Y, y or yes the Varify question # If so it sets $X to "Y" to leve the loop # # Otherwise it will loop through the question agin. # if [ $Verify == "Y" -o $Varify == "y" -o $Varify == "yes" ]; then echo "OK flags and expression set" X="Y" else echo "Asking agin. . ." echo "" fi fi # Set the Value of $X to "Y" to leave the loop if the user did want to start tcpdump # else echo "tcpdump is disabled so no flags set" X="Y" fi done exit

taiyed14: I think I leave what is written as bash. I already have it checking for Python2.6 and 2.5 so I think I mite start making a GUI to use with it if Python is installed. I'm going finish this tcpdump feature in bash and see where it go's from there. Glad to here your learning Python too and we can go down the route if we want to. It is just that Python is so much more powerful then Bash and I'd like to improve my Python skills. I am also afraid I am picking up bad coding habits coding in Bash. -------------- Owe ya I do NOT have the +.... You do right.

Ya, I just say that because it has one more Ethernet port and so there needs to be one more entry in the. . . ./etc/config/dhcp for that port. It should be fully supported by the end of today by the pineapple-setup script. It is trivial to add that in. and NO the new "Fon N" is NOT supported by jasager.

I was wanting to know... If a client is probing for say there Home AP and there Home AP is WPA encrypted. Would Jasager still say it is that AP and if so would the client connect even though Jasager doesn't use that WPA ?

Just to clearly answer this question Ya, a script so all the IP's get set to the ones in the pineapple.sh 10.110.0.0/24 10.110.0..2 for the Fon 10.110.0.1 for the LapTop GW NIC maybe ask the user what the MAC address is of the NIC that they will be using as the Laptop GW NIC That way you could set a Static IP of 10.110.0.1 for it and stuff. No need to ask what they want the IP's to be set to. Because they are Hard Coded into thepineapple.sh ----- You know what there is no need to set a static IP for the Laptop NIC. As log as 10.110.0.1 is not in the DHCP range the pineapple is dishing out. Basically pineapple.sh is setting the static IP of the laptop NIC with the ifconfig command. All pineapple-setup has to do is ask if they have a Fon or a Fon+ Then cat ./file > /etc/config/fileOK I forgot an fi ..Clasic Ya your right after reading throgh the code agin. If the user never gives and answer to the Do you Want To use sslstip. Then the $Ssl Never got a value and there was still Two IF blocks checking it. So I should be fixed now. Pineapple-0.3.2.tar.gz http://rapidshare.com/files/324698659/pineapple-0.3.2.tar.gz sha1sum = 4ab8c56bee3137405b08d61a3c396c869f16b07e Hum, Do you think I should just do this change instead.... Or will the * cause problems in the log run? ls /usr/lib/$Py_Version/site-packages/twisted/im.py TO ls /usr/lib/$Py_Version/*/twisted/im.py --------------- Hum ya I am just going to add the * Or other things if you like. -------------------------------- I am going to start coding in an option to spawn a new xterm with tcpdump and ask what -flags they want to set. . . . moving along . . . I mite try to figure out how to make a Class in BASH so I can make the tcpdump thing it's own file. If you know how let me know. I can call the script but what is the best way to get the output from it? I guess I could brake it up into a whole bunch of tinny scripts but would be better to make a Class with Functions in it that I call and pass input to and get output from. I want to avoid having some 1,000 line script. I don't care if it is a 1,000 of Comments but a 1,000 of code is a problem. I could make a sudo-class (I made up that word if there really is such a thing that is not what i meen) I like I could make a whole buch of script. One function per scrip and then put them in one Folder. So the Folder would be like a Class. . . You know what I'm saying. -- I'd almost like to rewrite the whole thing in Python... Na. . No need to get that nuts. Hum if I did though I could write a GUI and stuff for it too. Na na too much too much.. well maybe leave what I have in bash and then go ahead and start the rest in Python.... no promises Well I don't know do would you use a GUI with embedded terminals and auto logfile greping of passwords and auto cracking of md5 password hashes and stuff. Maybe make a Karmetasplot kind of thing as an option . . Hum think BIG what could this thing end up being? I know I would have fun coding it and I would become a better programmer. No harm in that. I mean the only way I am going to get better at coding it if I have a project to work on that I think is fun even if only a few people use it.

Well I added the check to make sure the install.sh is running as root. The way you did it Taiyed14. I also put that * in there. And $Ssl as a default value of "N". I just want to get a sold working script up then I'll start waiting longer to update. I also stopped listing who did what your an Author and so am I. New Version pineapple-0.4

bla

bla

"""" Couple of things. The script is reporting that I don't have python twisted lib installed because the im.py file lives in /usr/lib/python2.6/dist-packages/twisted/im.py. Running Ubuntu 9.10. also getting [: to many arguments error on lines 451 and 493 echo "SSL is $SSL" # I added for debugging if [ $Ssl == "Y" -o $Ssl == "y" -o $Ssl == "yes" ]; then edit: the error on lines 451 and 493 are because SSL var is empty. """" Awe, OK I bet if I fix that one thing the rest will fall in line

Ya I think these 3 should do it Well here is the /etc/config/dhcp network wireless http://rapidshare.com/files/324692818/configs.tar.gz

Awe, good to know How about you write the pineapple-setup and I'll fix the pineapple.sh I'll upload my tar'ed up /etc/config off of my Fon and you can do what you want with it.

OK, pineapple-setup-0.1 Is Uploaded Now This HowTo is all but worthless :) The setup need some work though. All I had was my file form my La Fonera It only sets /etc/config/dhcp and /etc/config/network ------------- It would problay be best to just tar up the whole /etc/config from the La Fonera and La Fonera+ Then ask the user what one they have and dump it on the Fon

Ok v0.3 is up LOL I just added this because it would have sucked if someone had it set and then the script didn't work # Removes the Default Route # route del default echo "Default route removed. . ." v0.2 Has LOADS of bug fixes. And I set a lot more GLOBAL VARIABLES to make it simpler to fix latter on when the script becomes a program. Like all locations of files and stuff. I also verify that the NIC's the user entered are real by running ifconfig. If they leave it blank it will still set $WAN to wlan0 and $LAN to eth0 I can't think of a way to varify the user entered /path/to/log/sslstrip.log. So I just ask them twice and if the leave it blank it logs to /usr/src/sslstrip-0.7/sslstrip.log -------------- Woops, uploaded again with a small fix. Now it should be all working 100% SSLSTRIP_LOG_BKP="$SSLSTRIP_INSTALL_DIR/sslstrip.log" changed to SSLSTRIP_LOG_BKP="$SSLSTRIP_INSTALL_DIR/sslstrip-0.7/sslstrip.log" I made /usr/src Owned by root:users and 770 permissions but that is not the default on most Linux systems so. That line works on my computer but not on anyone ell's computer. The install.sh dose a chmod 777 /usr/src/sslstrip-0.7 Probably not a good thing to do but the hell with it. I'll change it in v0.4 if you think of a better setting. sslstrip is ran with UID#1000 so not too big of a deal. Should add in that verification of Root permissions to the install.sh too in v0.4

Ya if anyone can write something new or better then I did go for it. You can tell me your doing it so we don't do double work or not I'll just put in what ever it the best way. You'd be best off to email me if you to tell me what your working on, if you would like to let me know. I'll get that with in 5min's. Or if you would like me to log into like the #hakhouse IRC or something. I'd like to add in more tools like maybe Dsniff or something I was thinking about starting tcpdump but I was thinking that the user would probably want to use special -flags Maybe we could ask what -flags the user would like to set? And maybe add the ones to filter out trafftic between the laptop and the pineapple and just log everything ells. I find it best to just capture everything with tcpdump then search through it latter. It would be cool to have this thing be the only script you need to run to get all your Jasager-Pineapple packet sniffing on.

OK, pineapple-0.2 is UP I didn't put in the "Default route" check but it doesn't "Really" cause any problems that I can see... Unless the user already had some other Route set. If that is the case it would not set the correct route. . . . Maybe I'll write it up really quick and put out 0.3 ... I don't want to run the sslstrip's installer setup.py Scents I am putting my version of sslstrip in /usr/src I know that the script will work with it. Otherwise, If sslstrip gets changed upstream it would brake the script and Block Port 80. I also don't want to mess with peoples computers more then I have to. ------------ Ya, the script to set up the pineapple will do nothing but cat ./ConfigWorkingWithPineapple-0.2/dhcp > /etc/config/dhcp And any other files that need to be set. It would just be a one time thing on the pineapple.