Jump to content

mreidiv

Active Members
  • Posts

    412
  • Joined

  • Last visited

  • Days Won

    4

Posts posted by mreidiv

  1. Ngrep is gone for now.

    What issues are you having with urlsnarf?

    What do you mean when you say it is on?

    Reaver is included. No UI for it yet. SHH in and see.

    Best regards,

    Sebkinne

    urlsnarf is not showing up in the ui like the mk3

    & by on i have it enabled in the ui

    is there a log file some where that i can look at?

    i can confirm that after 8 and a half hours not even a sign of over heating so that's good.

    I can cat urlsnarf and phish.log on the advanced page so its working just not in the Web UI

  2. I have used Reaver.

    The reason I was asking was so that I could fine tune the reaver settings. The MAC address gives the Manufacturer, but not the model.

    I started looking through an airodump of the Reaver working and found that I could actually find the Make, Model and firmware version of the router in the pcap file. I was using vi, but I bet if you fired up Wireshark, you could find a lot more info.

    With this, I can start looking up WPS pin prefixes and the Reaver settings. I would highly recommend this as a step to fine tuning the Reaver attack.

    On the reaver code page there is a data base that users are contributing to that stores the best settings for reaver for that particular router. It wont get you the info you want but should help.

    https://docs.google.com/spreadsheet/ccc?key=0Ags-JmeLMFP2dFp2dkhJZGIxTTFkdFpEUDNSSHZEN3c#gid=0

  3. I have a couple questions about the following demo:

    http://partners.immunityinc.com/movies/SILICA-WPS.mov

    So basically, Silica has a tab to get more information from the WAP which they are interested in. This includes the make, model and series of WPS pins that have been seen.

    This allows a user to fine tune the attack.

    I am interested in if anyone knows how they get the exact make and model off of an unconnected Wireless router and if anyone else has WPS pin-lists to help narrow down the range of pins. I have looked into MAC address lookups, but they identify the make and don't provide much information on the model.

    Is there any way of analyzing either packets or banners off of an unconnected router to identify it? If anyone here works for Immunity, big ups on Canvas, the Debugger and Silica. If you have a $3400 off coupon, toss it my way.

    Has anyone else started a WPS Pin list? I could see this being incredibly useful for pattern matching.

    Have you looked at reaver?

    and use this to dertirmin make http://www.coffer.com/mac_find/

  4. you have to remember that using a smaller computer limits the speed at wich some applications run. I have bt5 running on a netbook and i have some programs that will just bring the netbook to a halt. Also some GUI programs wont fit on the screen so the is no way to view the bottom of the GUI program or use it through the GUI. Also after looking at the specs it only has a 4g drive on it. and 256 ram. so i donthing it would work.

  5. My mom asked me what cloud computing is? I know of it. Who provides this how much does it cost. Last question is mine on a web hosting site what is vps. On a good note last year I migrated 3 people to ubuntu. P.S I need to get off the android tab and on my linux box. My mom has ubuntu on her netbook. Mike time for a glass of 3rd wife cab.

    What is VPS click this http://lmgtfy.com/?q=What+is+VPS

    What is cloud computing Click here http://lmgtfy.com/?q=What+is+Cloud+computing

    Not trying to be arrogant but try your questions in Google first.

  6. Open terminal and run(as root)

    wicd

    This should start the wicd daemon. Then try to open the wicd client from applications menu.

    i was able to work around the problem

    1. hit connect in wicd to the ap u want

    2. open terminal and issue "iwconfig [interface] key [key for ap]"

    so it should look like this

    iwconfig wlan0 key sdfsdfgsdf

    also i also noticed that once you have your card in mon0 mode you have to stop mon0 and then restart wlan0

  7. So there are several sites that let you sing in to their website using you twitter account, face book ...ect

    If some one on here can create a landing page similar to att_wifi' and post on it you can sign in using these accounts.

    Sign in using:

    [] Twitter

    [] Facebook

    [] Gmail

    [] Hotmail or live

    [] Yahoo

    [] Aol

    .etc......

    so they have to check a box (so we would know witch one they were using)

    then redirect them to an Error page that say's we could not validate you account or something and ask them to try a different account.

    This would not only save space on the pineapple but alleviate a lot of the headaches.

    Also it would be nice if people shared (and had a place to share their www files)

    So i ask you all if this is a good idea and if anyone wants to take on this project because i have no idea in what i am doing in php or html lol.

  8. My AP51 came in other day and I have run into some issues setting it up.

    Initially I tried using the following video tutorial as a primary source:

    http://hak5.org/hack/wifi-pineapple-flashing-guide

    This tutorial is for "Pineapple v2" - it uses the AP51 flashing GUI so it seemed fitting for my device. It did not work. I was able to flash the device and ping to it but could not telnet into it - Putty would just hang then crash when attempting to telnet and couldn't progress from there....

    I am looking for someone to point me in the direction of a tutorial for configuring an AP51 with the appropriate firmware etc to function as a "homemade" pineapple. I have come across several tutorials for different versions/devices, all of which are different. Is there an up to date, straightforward tutorial out there for flashing and setting up an AP51?

    Thanks for your input!

    Use SSH in putty not telnet

  9. No, you did not.

    Different hardware and slightly different firmware.

    The firmware will greatly change over the development of the MK4 though.

    Best,

    Sebkinne

    ok thanks for the info

    will the firmware be compatible with the mk3

  10. The MK4 is only a prototype. Feature wise and spec wise, information will be released very soon.

    The MK4 is not close to being completed yet - the MK4s at Shmoocon have the correct hardware but firmware wise they are just a little more advanced than the MK3.

    What I can say is that the people with the MK4 will be able to upgrade their firmware once the MK4 is properly released.

    As to a trade in system, I doubt it. Why? For the above reasons. The MK4 will not be available for a while.

    If you have any further questions, do not hesitate to ask.

    Best,

    Sebkinne

    Edit:

    The information above is what I know as of now. It is possible that the above changes.

    So if i am understanding you correctly it is the same hardware as the mk3 just different firmware

  11. If you just plug your pineapple directly into the router, you would need to make sure it's IP was on the same subnet as the network you are plugging into. But doing that also will remove the flexability of using tools before the connections hit the actual network.

    so if i connect to the pineapple using the wifi i should be able to activate the tools before i plug it in right or i can use it as a hidden connection to the network if i had physical access to the internal network?

×
×
  • Create New...