[Defending against WiFi Pineapple on OS X]

Hi,

I haven't see any solutions as to how to defend against the wifi pineapple, so I made a quick script to do so on os x. It uses a whitelist of networks that you trust (non-open networks) and will check os x preferred networks periodically (you must set a cron job to do so) and remove any non whitelisted entries.

#!/bin/bash
# prevent automatic ssid association to hotspot honeypots (wifi pineapple) by removing non whitelisted ssids from os x preferred networks (run as cron job)

whitelist=('ssidname1' 'ssidname2')

if [ ${#whitelist[@]} -eq 0 ]; then
	echo "you must define ssid names in the whitelist."
	exit 1
fi

IFS=$'\n';
num=0
wifi=`networksetup -listallhardwareports | awk '/Hardware Port: Wi-Fi/,/Ethernet/' | awk 'NR==2' | cut -d " " -f 2`
ssids=( $(networksetup -listpreferredwirelessnetworks $wifi | sed -n '1!p' | sed 's/	//g') )

echo "-> starting wifi pineapple defense"
echo "-> checking for new preferred networks on $wifi.."
for i in "${ssids[@]}"; do
	if [[ "${whitelist[*]}" =~ $i ]]; then
		:
	else
		networksetup -removepreferredwirelessnetwork $wifi $i
		let num=num+1
	fi
done
echo "-> finished, removed ($num) entries"