[Java Attack Methods]

How would I get the portal to prompt the user to run the applet?

[Mk4 Firmware 2.0.0 Release]

I'm sorry you are having problems with the pineapple, thankfully, we do not get that many issues like you are having :)

The firmware link seems to be working, our web server seems to have had an issue for about 15 minutes. Sorry!

About flashing the pineapple, the problems you describe with nothing working is very odd.

Could you re-flash your pineapple over SSH?

Plug in the Ethernet cable to the POE/LAN port and SSH in (The WAN and LAN lights do not work properly, the WLAN one does, but as you said, WLAN is disabled).

SCP over the upgrade.bin to /tmp/ and execute this:

"sysupgrade -n /tmp/upgrade.bin"

Please wait patiently and let the router reboot.

Your pineapple sounds like an incomplete flash, did it loose power before rebooting? Did it reboot cleanly when you upgraded?

Again, sorry for any inconvenience, I am sure we can get this sorted out!

Maybe it was that it didn't download completely before your web server went down? Either way I could ssh into it and everything else was normal but could not start any of the options..no wireless, nothing. Ended up re-flashing it a few times until I was able to enable things again. I did re-download the upgrade.bin file so that must have been the root of the problem. I was banging my head against the table trying to figure it out! Problem solved.

[Pineapple Java Applet Attack!]

Won't this method completely disallow the client to get any internet connection whatsoever. This would make the whole thing suspicious for the client. Am I right?

Also it would be a good idea if this was turned into a Module.

Suspicious for sure but I'm just seeing if the idea is feasible.. almost like the metasploit module where you click to run the .jar file and then are allowed to continue on with using the internet as if nothing happened..or heck even if they clicked ok and ran the file and nothing happened I'd still be happy with at this point.

[Mk4 Firmware 2.0.0 Release]

Firmware link dead? I had done the new firmware 2.0.0 and now I'm having major problems..no WLAN or LAN lights work which seems to be everyones problem and now I cannot enable wireless..I click start and it just does nothing..this is the same for every options available...can someone please help as now I'm thinking I have made a poor purchase. I've had nothing but problems with the pineapple product.

[Java Attack Methods]

Hey all,

I currently have a .jar file that I had custom made so when run it sets up a backdoor to connect back to an IRC server which is on my network to better manage the computers I'm pen testing.

Anyways I'm having a hard time getting the java program to run when a person connects to the pineapple. Can someone give me some tips as to where do I put the .jar file? under /www and then just have a the DNS spoof page linked to the location of the .jar file on the pineapple?

I'd like to incorporate this just as the SET java attack does...have the user click "ok" etc.. to run the java.. Anyone have any ideas?

[Pineapple Java Applet Attack!]

Hey all,

I've read through all the wiki's but seem to be having trouble with the java attack.. I have my own .jar file I've created for my custom attack.. I'm able to connect to the "FreeWifi" ssid I've made for the pineapple(which is not connected to the internet via ethernet,etc..) it does not load the .jar file automatically nor when attempting to view any other pages...since it's not connected to the internet it displays nothing.. I have dns redirect enabled but nothing happens...I've extracted the java directory into the /www/ directory of the pineapple but not too sure what else to do now..

My question is I want to have whoever connects to it redirected to a "login" screen that either I have created and have the .jar file either run automatically or with the java attack applet coming up prompting the user.. I'm a little bit of a newb when it comes to the pineapple as I just got it yesterday but I'm stuck on what to do here.. I do not want it to connect back to metasploit,etc... just want the .jar file ran.. Can someone help me with this? A better wiki on that would be great...