Jump to content

craig131

Active Members
  • Posts

    29
  • Joined

  • Last visited

Posts posted by craig131

  1. Download the Responder package from the pinned post here:

    Drop the .deb file into your /tools directory. Safely eject, remount. Then run the payload just as you would any other. Works great on locked machines!

    • Upvote 1
  2. I was doing some totally legal mobile pentesting the other day for several hours and noticed that my pineapple gets pretty hot when inside the zipped up carrying bag. I know that routers in general should have good ventilation to avoid hardware damage, so I was a little worried that the Pineapple might not be getting enough fresh air in there. What do you think? Is it worth being concerned over?

  3. Most of these have been added and installed. In regards to the AbuseFilter, do you have any example rules we should implement?

    Here are a few Abuse Filter rules I use:

    Prevents non-sysops from blanking an article: (consequences: disallow)

    !("sysop" in user_groups) &
    new_size < 40 &
    old_size > 300 &
    article_namespace == 0 &
    !(lcase(added_lines) rlike "#redirect")
    

    Don't touch other user's pages unless you're a sysop: (disallow)

    !("sysop" in user_groups) &
    article_namespace == 2 &
    count (user_name, article_text) == 0
    
    

    Less Objectivity: (disallow)

    article_namespace != 90 &
    (lcase(new_wikitext) rlike "\bi think\b|\bi like\b")
    
    

    I have a good one for blocking bad words that is triggered a lot, but I'm hesitant to post literally a list of the worst words possible on this forum. Let me know if you'd like it and I can PM it.

  4. In your eyes, what are essential MW extensions?

    If you have any pointers, do let me know.

    I wonder if someone can come up with a better (keeping it simple and professional) theme though. Other than that, I think once the Wiki is fully up and running we'll take care of spam etc.

    As far as essential extensions, I would choose:

    WikiEditor - modules that improve the user experience of editing. It is the editing interface used by Wikipedia.

    Liquid Threads - HIghly improved talk/discussion pages. Adds discussion threading and reply notifications.

    Essential for spam-blocking (a huge problem with MediaWiki sites):

    ConfirmEdit - Adds required captcha for new user creation and anonymous edits.

    TorBlock - Prevents edits from users on the tor network. While controversial, I like it because IP bans are not very effective if the offender can just fire up their tor browser.

    AntiSpoof - Prevents confusable usernames from being created. It blocks the creation of accounts with mixed-script, confusing and similar usernames.

    AbuseFilter - Filters can be setup to automatically detect vandalism and abuse. It can ban or warn users automatically.

    I'll try to remember to add more later. You can view which extensions any Mediawiki site uses by going to the page Special:Version.

  5. Thanks for all your hard work seb!

    Upgrade went fine, but unfortunately it looks like something else was introduced?

    On Android devices (the same ones that worked yesterday flawlessly with the MKV), in order to access the network, i have to actually log into the pineapple before the payload shows up?

    Target #1, HTC DNA: Before 1.0.1, Karma and RR worked flawlessly. Now, I can connect to Karma SSID the same way (select it and it connects), but when opening a browser, any page presents me with the Pineapple Login, root is already in the username dialog box. if I login, I then get the RandomRoll payload.

    Target #2 Kindle HD: Before 1.0.1, Karma and RR worked flawlessly. Now, when I connect to Karma SSID, after the "open network" warning, I get another warning indicating I must log into the network before use. I choose OK, and I am presented with the Pineapple Login Page, root is already in the username dialog box. I choose to cancel, shows me as connected to the Karma SSID, and then I open Firefox. Any attempted page presents me with the Pineapple Login, root is already in the dialog box. If I login, I then get the RandomRoll payload.

    What changed that would cause this? If it's expected behavior, the target rich environment just became target barren. :(

    Any help would be greatly appreciated, thanks!

    eta: clarity

    Yikes, that sounds like a serious bug. I think I'll wait to update until Seb comments on this.

  6. Cool, I'm happy to see that we will be using Mediawiki for the future wiki. I have a lot of experience with Mediawiki after creating and administrating this wiki for a few years now. Let me know if you guys need any help with any of the technical aspects, such as setting up anti-spam or essential MW extensions. I will wait to start editing until that big red notice is off the home page though.

  7. I have a bit of experience with Python, but almost none with PHP. The Wifi Pineapple has Python support, but I can't seem to figure out how to make a python-based infusion controllable from the web interface.

    I'm guessing that I need to learn how to give my Python scripts a PHP frontend.. Could any of you shed some light on this? Are there any infusions based in Python out there that I could look at?

  8. I believe the problem started last night when I tried to install the randomroll infusion to the SD card. The progress bar froze at 20% and I eventually stopped it. Now I only get the option to install infusions to the internal storage and when there is not enough room, it asks me to insert the SD card even though it is already in there.

    Things I've tried:

    * Factory reset

    * Eject and reinsert card multiple times, while the pineapple is on and off.

    Here is a copy of the Syslog after bootup. I would really, really appreciate your help guys.

×
×
  • Create New...