Molotof

This setup gives me more advantage as i now can : . Use the alfa to do tasks while the pineapple getting internet from the 3G router . If i don't need the 3G modem i can put extra storage and tether to my iphone to provide internet to the pineapple . Control the bandwidth on the 3G connection . Control the protocols that can go thru and disallow VPN protocols from going thru my 3G connection except my own AutoSSH . All this while not making the pineapple sweat with it's tiny 400mhz processor

What boot script? i am confused lol.

THAT is for sure the one i was lucky with, as i ordered more stuff from hak5 and got the spyder usb hub too and it was nothing but trouble, so i went back to my trusty belkin and started building from there.

I have my setup detailed in this thread, if the modem plugged in straight to the pineapple and it was giving you troubles thats a sign of the modem needing more amperage than the pineapple can provide.

You could wait a little bit and you will gain access to the webui or you could go to the shell and type : iptables -t nat -D PREROUTING 1 ......... then you will get the webui back.

Is there a way to make these scripts start at boot with a delay? I tried sleep 20 in the script, nothing. I tried cron and make it start @reboot x.sh , did not get used, might be the cron version does not accept the @ arguments only the interval timing ?!?!

This is the one i am using, notice it has power adapter to give it power, that might be what you need, good luck.

Can you please shed some light on mitmproxy configuration and advantages?

Hmmmm pogoplug? can you please touch up on that a little, like config and hardware used, as i have a pogoplug pro which is driving me crazy sitting doing nothing with arch linux.

From the log it shows that the pineapple is trying bring up the modem but the modem is making a fuss about it because the pineapple is not able to give it the required amperage to power up it's radio. what else do you have connected to the usb port on the pineapple?

Thank you, this was made with what i already have and it is not optimal as i need to stray away from the metal zippers on the bag, what i am looking to do is the water proof box from the local hardware shop and make sure the antennas are mounted on the outside, also take all circuit boards out of there boxes and apply heat sinks to the main processors of both boards. I ordered a raspberry pi and it will be coming to me in the next 1000 weeks lol, while its on its way i will be working on customizing my raspberry pwn image in scratchbox and it's home is going to be the LAN port on the pineapple. When i connected both connectors of the alfa usb Y cable to the hub and turned on the pineapple it worked BUT when i put the alfa in mass deauth (selective wifi jammer) i started getting errors in the log from the usb storage and then lost the storage mount which ruined my active session dumps, it is really like walking over a fine wire. You have to put into account that the battery pack is rated at 2.5 AMP/hour PEAK (do not mind the capacity of 16 AMP/hour) and the pineapple is pulling 1 Amp, the tl-3020 another 1 AMP with the connected 3G usb modem, so that leaves a little amount of amperage for the alfa and usb storage.

We are all having fun here and learning at the same time :) yes it works on my end, try rebooting then issue the commands before connecting the wan port to your home router.

I present to you the Molotov(f) Pudding with pineapple recipe : ----------- ----------- Ingredients: 1 Pineapple MK4 with latest sauce 1 TP-LINK TL-MR3020 with latest stock firmware 1 Alfa AWUS036NHA 1 USB flash memory of your choice 1 3G modem of your choice 1 Powered usb hub 1 Big ass usb battery (iSound 16000 mah) 2 SMA extension antenna cables (optional but good for flavor) Method: . fire up the pineapple without the usb and flash it with the latest firmware . format the usb storage . update the fstab with the config you have on the usb storage . hook up the storage and fire up the pineapple again . run petertfm's script or do your own thing of installing all the modules you like . put the iptables commands for WAN in rc.local now pineapple is ready, set it aside. . get the tl-mr3020 and update its firmware . configure the 3G tab with your modem of choice . configure the router to be a client for another wireless access point (WISP as they say) . configure bandwidth so it would trickle . configure the firewall not to allow streaming media . configure the switch for 3G and WISP to be a soft switch so you can change the hook up remotely without touching the (drop box) now the messenger (tl-mr3020) is ready. final preparation: Power connections: pineapple powered via dc socket to usb battery tl-mr3020 powered via usb cable to usb battery Alfa powered via Y usb cable to usb battery usb hub powered with dc cable to usb battery (DO NOT USE a Y usb cable to power a hub - find a hub that takes dc jack) Data connections: alfa and usb storage into hub hub into pineapple 3G modem into tl-mr3020 Cat5 cable from tl-mr3020 (now lan) port to wan port on the pineapple Now the the Pie is ready to eat.... Fire up everything at the same time and log in and enjoy :) P.S. you can of course manage the tp-link router by going to the gateway address of the wan port of pineapple :) Any questions or comments or ideas PLEASE let me know :)

Sure it looks like a mangled web but it is a fun pack to have lol, i don't want to hijack the thread so i am going to make a new post about it :)

Drop box anyone ? --- I think the pics can say what is involved, it was painful to get it working but it works now GREAT thanks to hak5, you guys and darren :)

You mean you did issue these commands : iptables -A FORWARD -i eth1 -o wlan0 -s 172.16.42.0 -m state --state NEW -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE And it did not work for your wan port ? And i see an extra rule that should not be there : default 10.0.0.1 0.0.0.0 UG 0 0 0 eth1 MAYBE this will help you a little.

on #2 You need to give it some more juice by using a Y usb cable to let the micro sd be stable and not un-mount or error out. on #3 I get your point, you want to make a wifi tap and listen on it from the 3G, right?

I wish for all that to happen without going the NV ION platform and powering 12v dc, wish i can find an ARM that is not so androidy and limited, BT5 arm native with usb host and compiled wifi drivers ahhhhhhhhhh !

If you really want the files go to my fork of the pineapple at github molotof/wifipineapple :)

This looks really weird, i have never been able to produce this mdk3 style garbled ssid's using karma, IMHO reflash the pineapple and see if it does it again.

Thanks for keeping the thought train running, there is so many possibilities to this configuration, the hak5 team keeps pumping new things every week on the videos making me switch from a network admin to a security expert :) I will be waiting for what you might think of later!

It's a matter of trail and error, good call on not logging the chatty ports instead of logging a different interface. So all these ipk's fit in the pineapple without choking it memory and speed wise?

Your eth0 state is down, check your cable as it sounds like no physical connection.

The only way to find out is try it yourself and see if it does but it sounds workable. what will you use as a relay sniffer server? On second thought you will be doing them a favor of relaying there encrypted traffic with zero gain for you unless you force a downgrade for them to use authenticated un-encrypted communication.

Thanks for the guide but i have a BIG question which is if we have TCPDUMP running on br-lan and using a CIFS share to store logs and fetching fun files, all that traffic will be logged to the pcap file which will make it bloat, i might target wlan0 for the TCPDUMP to avoid this, right? This also gives me a nice idea of not hooking a usb storage device to the pineapple and using a different IP storage and mount it as /USB. Does the CIFS shares mount fast after boot up or there is a wait time?