Jump to content

hfam

Active Members
  • Posts

    393
  • Joined

  • Last visited

  • Days Won

    4

Posts posted by hfam

  1. Probably not from what I've walked into... <_< Though it could be an "open" network, with a radius server after connection.

    Search Wigle.

    I'll have to snap a screenshot, but I have a similar situation where I end up pwning the local bus transit system's connections when I setup at home, as there is apparently some wifi connectivity going on which connects their bus stop terminals. :)

    <placeholder for later snapshot add>

  2. I have two Ethernet ports on my computers motherboard I was wondering if it's possible to hook up the pineapple mark iv through those so I don't have to use my wifi card?

    If what you're asking is, since you have 2 eth ports on your computer, can you provide the Internet connection via eth instead of wifi, I suspect you can.

    You would need to follow up the same setup instructions, except setup Internet Connection Sharing on the NIC you're feeding Internet from instead of setting it up on the WiFi adapter.

    The MK4 will still plug into your computer via the PoE/LAN port, and the other MK4 eth (WAN/LAN) will still go unused.

    Your computer will then provide the Internet connection to the karma'd clients via ICS on the computer's 2nd NIC, and not via the computers WiFi.

  3. here is the cammand that works great for me when using mdk3

    mdk3 mon0 d -w /root/Desktop/pineapple-mac.txt
    

    -w is the mac white list file.

    place the mac of the pineapple in the text file, one thing i noticed is mdk3 does not check for clients only AP's witch is good for what I need anyways:-D

    Interesting stuff, guys, thanks! Can't wait to give this a shot.

    Admittedly I never used mdk3 before, but if it's that successful at deauthing in particular, do you suppose the dependencies of mdk3 are such that it could run on the MK4 itself? Maybe included in the upcoming "image" for the USB drive, or maybe implemented in the Neinsager sub-project...or using the AWUS036H plugged into the MK4?

    Just a thought.

  4. 1.01. and i downloaded the upgrade.bin file, went to upgrade.php, selected the file and hit upgrade. the page proceeded to refresh followed my and error page with read "connection error". after that i was no longer able to access the pineapple's UI. Then i unpluged, and replugged the pineapple's power cord. some of the LEDs binked and then only the power LED stayed on. from there i looked up how to flash it, downloaded the Freifunk Ap51 EasyFlash and all the other files that it came with. from there i followed all the directions and thats when i kept getting the error described at the top. Now idk what to do, or where to go.

    **uh-oh** :(

    I have a feeling that the underlined events happened very close to each other, and that you now have a brick.

    I'm sure Darren and seb will weigh in, but powering down before it's done updating (a few minutes of "unpingable" interface anyhow) will almost certainly brick the device.

    BroTip: When I do my updates (and this may be a good process to include in the updating docs), I *always* open a console window (command prompt) and run a constant ping against the pineapple so I can see when it goes down, and when it comes back up. In Windows, run: ping 172.16.42.1 /t

    Sorry. :(

  5. Thay are all getting 172.16.42.x addresses.

    I see you have 3G enabled, but you refer to the 42.42 address on PoE interface.

    If you've got ICS setup on a laptop (42.42), and you're plugged into the PoE port (42.1) with the laptop, the problem may be that you've got all the 3G stuff turned on as well.

    - Make sure your ICS is setup correctly (laptop ethx port is set to 172.16.42.42)

    - Reboot the MK4

    - don't turn on anything but Karma

    Now connect up some clients and see if it resolves the issue.

    - Can you ping 42.42 from your clients connecting to the MK4?

    - Can you then ping 8.8.8.8 (or any other external IPs?)

    I've a feeling that it's the 3G stuff turned on, as well as having teh PoE port servin up ICS that's the issue.

    stab in the dark...give it a try.

  6. So, you are saying that for any target to get internet, it must flow through a ICS enabled laptop or run off of a usb cell dongle?

    Why then does the pineapple have a lan/wan port?

    Yes.

    The hardware isn't designed around the MK4, it's the other way around.

    The LAN/WAN port is used in the flashing process of the factory OS, but beyond that, it's not used on the MK4...at least at this time.

  7. ok. I do not know much about Linux but do networking for work. Been learning BT for a few weeks, having fun with Reaver. I have never SSH'd to my ignorant shame. Just so you know what you are dealing with;

    When I got my M4, I powered it up. Plugged in internet (192.) to the WAN port of the Pineapple, went to 172.16.42.1/pineapple/, logged in, activated karma and allowed a (Win7 and then Ipad2) to connect to a phantom ssid. Once I saw that the device(s) received a 172 IP, I tried from the target machines to surf. No joy. Read the forums and tried Darren's simple instructions (/etc/init.d/firewall disable; /etc/init.d/firewall stop), reboot, try again; no joy. Then tried putting the firewall command in the job tab below the karma disable but before the exit(/etc/init.d/firewall disable; /etc/init.d/firewall stop to rc.local via the Jobs), no joy.

    Because I am overly methodical, I did not try ICS, change any other settings or service. Will wait for firmware;

    upgrade to 1.01 was exactly as expected (reboot, 2 minutes, no error, happy pineapple.

    With internet (192) in the WAN port of pineapple, i can ping 8.8.8.8, I can tracert www.google.com from the pineapple. Activate karma, connect target machine to phantom ssid, receive a 172.16.42.184 ip, but am not able to ping 8.8.8.8 from target cpu. A tracert to www.cnn.com goes; pinapple.lan, (172.16.42.1), destination host unreachable. I confirm the target machines are receiving an IP via the status in pineapple. the IP routing table has 4 entries;

    default - 172.16.42.42 - 0.0.0.0

    default - 192.168.1.1 - 0.0.0.0

    172.16.42.0 - * - 255.255.255.0

    192.168.1.0 - * - 255.255.255.0

    wirless in enabled

    karma is enabled

    autostart disabled

    cron job enabled

    all the rest disabled

    (did not mess with anything other than karma)

    I also tried a Ipad as the target, received a 172.16.42.157 IP but am unable to surf the internet.

    No cellphone dongle to try. Use OpenDNS on my netgear router.

    I know this is a firewall issue but I dont see where I am messing up or what I could have done to receive such a non-standard experience.

    I had another network guy look at my process but he is unable to see the error I am making. In all, I have tried the above steps dozens of times but distilled it for clarity. Some users don't know what they are clicking but I did the above steps methodically and deliberately (not that I didn't mess-up somewhere, just I paid attention out of fear of a repeat experience of my M2.)

    Maybe I'm reading your post wrong, but you need to provide Internet via 42.42 (your laptop should have this IP assigned to eth0)

    Your Laptop should be plugged into the PoE port on the MK4, NOT the "LAN/WAN" port of the MK4.

    There should be no 192.x.x.x in the equation.

    Hope that helps!

  8. Thanks fellas!! I'm gonna try the upgrade first to save some effort, if it.doesn't recognize.all my gear.ill do the clean reinstall, thanks again for all the feedback!

    Off to make some EXT4 flash drives, thanks Telot.

    eta: sorry about the spelling, periods, etc...I'm not a window licker, its this damn Kindle Fire kbd layout! ;)

  9. We have a bunch of hubs on their way for evaluation. I want to make sure we only carry the best solutions for modding goodness. Same goes for batteries, cases and antennas. I must have tested a dozen of each. I'll be the first to admit it's kinda a fun job, testing all this gear. Just making sure nothing we put up in the shop is crap.

    Also, very nice rig. Love the tripod. How well does the yagi mount to it?

    Here's a post from the Everything Else thread I did late last year about mounting the Yagi to a tripod. I did a tap & die thing after trying an epoxy.solution. I included pics, etc. Scroll down to.he bottom.of page 1

    Yagi tripod mount

  10. Im rockin one of the Acer I5 TimelineX laptops that I think Snubsie had in Season 9. Cobolt blue, I5 Cpu, W7x64. I dualboot to BT5R1 and I abolsolutely love this box. It was around $600 last Dec.

    ETA: everything worked straight out of the box, BT works flawlessly on install

  11. LOVE IT!!!

    Gotta get a.few.battery packs, some of those right angle power cables (hakshop?), and start having some fun!!

    Anxious to find out about the next level battpack you're thinking about....Neinsager is gonna take double the power, and I gotz me 4 MK3s and 2 (soon to be 4 when my Alfa usb/ttl cable arrives) MK4s, so I'm really looking forward to getting some Jasager/Neinsager backpacks into some creative enclosures!!

    The MK4 is so $&@**#@ brilliant, love you guys!!! Stock up the hakshop, Darren & Snubsie, I got some spendin to do!! ;)

  12. Nice info, thanks Telot!! Hoping that Darren and crew can sort out how to get the Alcatel 760 3G to provide both 3G *AND* the USB Flash Drive capabilities! Two birds, one USB port! :)

    The "I can't boot windows" new post on the backtrack forums made me do it. :lol:

    I just did an apt-get dist-upgrade, aaand it booted!! B)

    Have the four normal versions of BT4r2 running on my torrent server.

    ---OffTopic---

    Barry: Do you mean that you did an "apt-get dist-upgrade" in BT5R1 to upgrade your BT5R1 to BT5R2?

    I'd LOVE if if that were the case...don't want to reinstall it, I'm still doing a LOT of learning with BT/Linux...it'd be less stressful if that were the case, as I'm dual-booting BT5R1 and Win7

    ---OnTopic---

    Sorry about that, we now return you to your regularly scheduled topic! ;)

  13. Yeah, really sorry about that. It should have worked right out of the box. Well, it does if you try 3G first. *Grumble*

    We'll have a 1.0.1 out soon with macchanger, sniffer page, this fix and a few other odds and ends probably over the weekend or Monday. Stay tuned.

    Excellent job Darren, it's workin'...LIKE A BOSS!! :) :) :)

    No apologies necessary, I end up learning something I otherwise wouldn't have dealing with an occasional "gotcha".

    I do note however, like Telot's post above, I too got the syntax error, and it did not appear to work for me as it did for Telot.

    I changed the "off" command to "stop", reissued the command line "/etc/init.d/firewall disable; /etc/init.d/firewall stop", refreshed my client, and VOILA!!

    Thanks eternal for everything you do Darren!! I took the rest of the day off to celebrate and get to know my new MK4 (and ALL it's new "clients" ;) ) intimately!!

    You're the best, man, thanks again for the quick fix!!

    ETA1: Added the line /etc/init.d/firewall disable; /etc/init.d/firewall stop to rc.local via the Jobs page as you indicated (after the Karma line, and before the "exit 0" line), saved it with the button, rebooted the MK4, and it's all fixed up, works straight away after enabling Karma!

    Thanks again everyone!!

  14. Okay guys, let me just step in here.

    Let me clear a few things up:

    -Robin, Darren and myself have all worked on the MK4. Together. As a team.

    -The MK4 Firmware will be released to the public as we all support and love homebrew. Just give it a bit of time.

    -Updates will be released like there was with the MK3 (just this time they are bigger and better), just that they will be a lot easier to do!

    Now, about "paying the devs", speaking for myself at least, I do this for the community and because I love it.

    I also think that if we had some sort of donation button it would go against the community as it currently works. It is something to consider though.

    What I can say is that all of us are on board because we want to.

    We have a lot of things still in the works, one of which as Darren hinted at on some other post will greatly involve community work.

    I hope that clears a few things up.

    Best Regards,

    Sebkinne

    You cant shake my love for you, seb. :lol: ;) :P

    I know you guys are in it because ya love it.

    Put up a link sometime and Ill buy ya a few drinks. ;)

  15. OK, will you allow me a rebuttal?

    I agree, OSS should always be free. However seems obvious to me the new firmware Mk4 release is being delayed, at least to non-paying customers (who do not buy the retail package which is released presently). Understandably, the hard facts are the forum servers and Darren and company have significant expense in their operation. However a purely pay for download would indeed be chilling and I do not support that.

    So if a membership program were in effect it would allow access to the latest project code, which would still be made available freely later to everyone, but those who desire to contribute would get access first. You could still join the forum for free. Maybe a donor avatar like someone suggested. If the software gets passed around, well, thats how OSS should be. I am trying to suggest a way for the DIYers here to contribute something toward the expenses here.

    Or maybe a way to just donate would be fine.

    Thanks!

    Sure, brother, we're all friends out here! ;)

    The issue then becomes, what about guys like me who are happy to support hakshop and buy the products knowing they help out with expenses, and I also love DIY and do that too? I get socked twice...or I have to make a choice; buy from hakshop, or pay to DIY.

    I think that describes a lot of us actually...we buy happily because the.product is great and know it supports the other functions of Hak5, and we DIY because at the end of the day were hackers who love to DIY.

    I understand your point, when its looked at from a purely DIY perspective though, I just think it will penalize a large group of us who already do both buy and DIY. For instance, I bought 2 MK4s from the hakshop. I also have 2 Alfa AP121s.

    I believe the way.they're doing it now.is to create incentive to support hakshop now and get the great firmware and product now, or you can wait for a bit as a DIY untkl sufficient units are.sold to.meet their financial.goals, then release it to the community at large. I'm ok with that, understand why they would do that.

    I like the model as it is, I suspect that most do too. I think that the incentive approach is a good model, and as I stated above, and you echoed in your response, if Seb and digininja were to put up a donation link, many of us would happily click it and donate to show our appreciation.

    Anyhow, that's my re-rebuttal, and about all Ill say on the subject other than to say thanks again to Hak5, Darren, Seb, digininja, and everyone else for sharing their brilliant projects with us, and for making this community such a great place. Very glad to have found such a gold mine of great folks and feel a bit privileged to be a tiny part of it.

  16. I disagree with memberships being paid, or a paid membership having download privileges.

    The hakshop works because there's a premium and profit generated by providing the.projects, and the markup is on the gear itself, not the code.

    I support the community in a number of ways:

    - I buy products from hakshop (a LOT of stuff)

    - I also build products from the OSS provided out here and purchasing hardware elsewhere

    - I use the products and provide feedback to devs and assistance to others

    - I watch the show religiously, as well as other Rev3 shows

    - I frequent the forums and interact with others to.create and be a part of the incredible community we are so lucky to have.

    Charging a premium to access downloads of OSS-based firmware does some negative things:

    - it goes against the OSS spirit

    - it creates a situation where people are shut out unless they pay for the downloaded

    - it will get shared regardless, creating a situation where code will be distributed outside the.forums and/or current distribution methods

    These devs are doing this because they love what.they.do. they love the.community, and love the spirit of OSS.

    Personally, I do both DIY, and support hakshop. I do not want to pay to download code/firmware, but I have no.problem donating money.to devs. There is a distinct difference, and I believe the.current situation is optimal for everyone, including the community.in general.

    Paying for forum access jusy to download firmware, when we already have many.means to.support will have a significant chilling effect on the community,.the incredible projects theh.bring to us all, and these forums.

  17. I use my MK IV on a linux machine without any issue. I am using the WP3.sh script to set everything up. I even added a line of code to launch sslstrip in an xterm window on my laptop. I wonder if ti is OS related and not the MK IV itself??

    Its got.to be on the MK4:

    - The MitM laptop and connected.clients works flawlessly with an MK3

    - The client cannot get past the gateway (172.16.42.1), but the MK4 itself can (via a PuTTY session)

  18. I'm sure its been arranged as well - just interested in how it all works (hacker...you know).

    Hehe hfam visits the forums on his android. I can.tell by.all.the periods :)

    My pineapple didn't arrive today (curse me for choosing the cheap shipping!) but as soon as it does I'll dive right in and see if we can get ICS working for ya!

    telot

    ahaha!! You know me too well! :) That damn space bar on the Kindle Fire is WAAAAAAY too small!!! :) :) :)

    Thanks brother, hope your package arrives soon, I know how painful the wait can be!!

    Looking forward to you weighing in on the "no WAN for pwnd clients" issue, thanks for all your participation out here, I just LOVE our community out here! :)

  19. hfam: I have tried all the same steps that you have with no luck either. I have tried connecting my android phone via karma and through the SSID and still no luck. I also tried changing the DNS server on my LAN connection from 8.8.8.8 to 4.2.2.2 (Verizon iirc) with no luck either.

    Somewhere there is a problem getting connected clients to from the mk4 to the internet. I didn't make any changes and plugged up my mk3 and had no problem whatsoever.

    FYI: running Win7 with ICS. I haven't tried 3G yet because that won't be in until tomorrow.

    Dude, I can't thank you enough for confirming that I'm not nuts (ok, well maybe I am, but not on this particular issue!! :) )

    So, there is definitely an issue going on with the MK4 and routing clients through the gateway.

    Given that this issue has been confirmed, I'm confident that Seb/Robin/Darren/MrP can weigh in and get this issue resolved.

    Eternal thanks for checking back in with your results my friend, the confirmation that there's an issue gives me some relief!! :)

    Standing by for seb and crew to weigh in!

    Thanks everyone, and again, anything I can do to test, provide more info, etc, I'm happy and ready to do so!

  20. I am sure that seb, robin, Darren, etc, have discussed all this and are all on board with whatever arrangement they've made.

    I enjoy DIY, and did a few of the MK3s that way, bit I still bought my MK3 at hakshop, and spent a lot.of bread on.other items as well at hakshop primarily to show my love and support for the show and all the great knowledge they bring to us in an entertaining and informative format.

    That said, I would be more than happy to send seb and robin some money for their amazing efforts and undying loyalty to OSS and selflessly offering us all the great opportunity to be a.part of these incredible.projects.

    Put up a link and I'm there.

  21. Have you tried the other eth port on the MK4? If not, give it a shot.

    If it is indeed a firmware bug then we will find it asap.

    I will look at it once I get back.

    Best,

    Sebkinne

    Hi all,

    Thanks for.the replies!.

    iamk3: thanks, I'm anxious to see if you can.replicate the issue, holding tight for your follow up!

    seb: I am using the PoE port which has 42.1 assigned to it. I did unplug from.that port and tried the.other.one (LAN/WAN) , and just tried to pong it from the laptop (42.42) and received no reply, so I figured that was a no-go.

    Thanks for looking into.this fellas. I.provided a lot of details in as orderly a fashion as I could to try to get.to the bottom of this. I confirmed all the ICS stuff is working on the MITM laptop by plugging in my MK3 and it works like a dream. Even removed/re-setup ICS and tried it again on both MK3 and MK4 with the same results: MK3 works flawlessly, MK4 fails to route clients past the gateway.

    Everything appears to work, interfaces responding as expected, except the MK4 refuses to let clients past the 42.1 gate, cant even ping 42.42 from a pwnd client. The MK4 itself can get past it (PuTTY, run a ping and it can ping all the way through 42.1, 42.42, 42.161(a client IP), 8.8.8.8, etc

    If I can provide more info, or test some other ideas I would be more than happy to try anything at this point.

    Thanks for all your help!

×
×
  • Create New...