Jump to content

aPices

Active Members
 View Profile  See their activity

  • Posts

    23

  • Joined

  • Last visited

 Content Type 

Posts posted by aPices

    Unable to log into Pineapple

    in WiFi Pineapple Mark IV

    Posted

    Hello all, I have a support request I hope someone can help with. I have a MKiv running firmware version 2.70. I purchased my Pineapple at DerbyCon a couple months ago and have used it happily with no issues until now. My issue is as follows:

    I recently held the reset button for 7 seconds for a factory reset. Since then, when I browse to 10.16.42.1:1471, I am prompted for username and password as usual. However, the default username/password combination does not get me in. I get ping replies with no problem. Further, when attempting to SSH into the device, I am prompted for the password but the default password results in "Access Denied". Additional anomaly: the only lights aglow on the device are "PWR" and "WPS".

    Any help would be much appreciated, because I love my Pineapple and feel empty without it.

    After a reset the UI should be located at 172.16.42.1:1471 and you would ssh into 172.16.41.1 as well

    new pineapple not working

    in WiFi Pineapple Mark IV

    Posted · Edited by aPices

    That's not the typical usage scenario. The idea is to share internet from your computer to the pineapple . This makes you the 'man-in-the-middle'. You wont have the luxury of plugging a pineapple into the router at your local coffee shop or any other hotspot.

    Jasager.jpg

    new pineapple not working

    in WiFi Pineapple Mark IV

    Posted · Edited by aPices

    ok i have tried going to 172.16.42.1:1471 and that gets me into the pineapple. thanks

    so does 172.16.42.1/pineapple do something different

    It's much easier to manage modules and improves security from a pentester's point of view (among other things).

    As you now know, /pineapple provides a redirect. You leverage this for various things including phishing attacks, fake landing pages, etc.

    For example, I've used the redirect to hook my victims into BeEF which in turn integrates with metasploit.

    After that its all fun and games...for starters I like to play some random .wav files or turn their webcams on/off.

    091012_1840_TheBrowserE8.png

    Video: A Working VMware Module for the Pineapple

    in WiFi Pineapple Mark IV

    Posted · Edited by aPices

    Hmm, quite interesting indeed - great job. I would love to see the code for this.

    What I do wonder is when exactly I would use this.. Still neat ;)

    This took more research than coding did. I first started looking into web based virtual machine managers like phpvirtualbox but everything used php5. Then I hopped on the vmware community site and discovered VMWare Workstation 9 + WSX Server. WSX adds the web based functionality on top of the server.

    http://communities.v...mtn/desktop/wsx

    [BugReport] Why Is My Alt Key Not Working.

    in Suggestions / Bug reports

    Posted · Edited by aPices

    See if it works on another computer. This will tell you if its a script problem or a computer problem. I would test it myself but I let one of my friends borrow mine. I would go ahead and try encoding it on a different computer too.

    Make sure none of this is enabled when encoding your script:

    http://tlt.its.psu.e...l#international

    Check for any num lock, fn lock (function key), scroll lock, etc.

    Module Download

    in WiFi Pineapple Mark IV

    Posted · Edited by aPices

    Directory indexing is enabled on the pineapple. This means once you are logged into the admin interface you can browse to http://172.16.42.1:1471/modules/ . Since PHP is server side I would recommend placing a script in that folder that will backup & compress everything in a tarball or zip file. PHP would be best so you can just click it then refresh. A quick & dirty way of doing it would be something like this in the modules directory:


    <? system('tar -czf modules-backup.tar.gz *') ?>
    [/CODE]

    You would also need to put one in /usb/modules because /modules/usbModules is symbolically linked to that location.

    Doing scp in this way will download the entire module directory to your local machine: (note the period at the end)

    [CODE]scp -r root@172.16.42.1:/pineapple/modules .[/CODE]

    Sql Injection Testing

    in Security

    Posted · Edited by aPices

    What helped was learning SQL before trying to hack it. Install it in linux & windows, as each OS handles errors differently. Then the hacking should come naturally (or easier).

×
×
  • Create New...