dustbyter
-
Posts
360 -
Joined
-
Last visited
-
Days Won
7
Posts posted by dustbyter
-
-
Thanks!
-
Can someone do a diff of the changes? I have my pineapple nicely configured and want to avoid reflashing from start!
Seems that most the changes are UI changes.
-
Sweet! Will need to review the API and see if anything is required in the GET infusion!
Good to have an API now to see what else we can quickly build :)
-
Anyone ever capture this before it was taken down?
-
barry99705 - The pineapple plug is a device that allows you to physically "marry" two pineapples and then makes them act like 4 radios.
Configuration is still required of the pineapples to set up the routing. Look at the video from wifi village at defcon. Darren and Seb discussed it there.
-
Version 1.4 has yet been approved by the admins. Once they review it, it will be published in pineapple bar.
The current version is 1.3. It will work on version 2.x.x of the firmware as is, but version 1.4 has some bug fixes implemented.
-
Get plugin has been checked against FW 2.0.2. No issues seen with the infusion!
Some bug fixes have been implemented
v1.4 - 8/11/2014* Fixed bug where get.database would be deleted when switching from sd to internal storage* Fixed bug in results table that didn't display the host name correctly -
Anyone capture the exploit payload?
-
To newbi3's point. Many vulnerabilities have been fixed, and must continue to be fixed even by the infusion authors.
It is not just the responsiblity of the core web interface to be secure, the infusions must also be as they could be exploited themselves.
-
I would imagine that this is possible, but not without some work.
Assuming your on an Android phone, it would probably require a rooted device, with a custom driver of some sort that would emulate a keyboard. This would at least be my first step. Next would be having sometime of API or way to interface with the application to get it to send custom key sequences to execute.
-
Personally I've never had any issues. I hope to continue this streak then. :)
-
Not sure why anyone would believe that you cannot fly with this device. It is an Access Point just as any other access point.
-
The process would not be very much different... The main difference would be the network plugging.
-
:( I have to leave early from DEFCON and will on my way to the airport during that time... Hopefully the stream will be saved for later viewing
-
The GET Infusion is up to date.
It has been completely rewritten for the MKV.
The way it works is that it loads an iframe into the target's browser through the redirect.php page and execute some client-site code to profile the browser. This information is then posted back to the MKV and saved for later review.
-
Check in /tmp.
/tmp/karma-phy0.log
-
Hey Darren,
Do you know the schedule for when you guys are presenting? I wanna make sure I can make it to this talk.
Thanks!
-
I think they have a public image of the pwnpad. You can put it on a Nexus7 I believe.
-
very nice! well done.
-
I can confirm that get does not create that file.
-
If they are still around let me know. Im in Chicago. I'll do the 100 for the no shipping as I can pick it up.
-
This is really cool! Keep up the good work!
-
Seb,
The filtering added to the karma log is superb! Very well done.
-
If we had some insight on where the issue is, then we could try to fix it.... if its a web interface issue writing to the config files, then it maybe able to fix. If it an issue with the firmware itself, then this we can't fix, without the help of Seb.
PineAP not starting (firmware 2.0.3)
in Questions
Posted
That is odd that the device did this...definitely good to add to the wiki for debugging steps.