pirate_john

When I got my first Pineapple (the Mark V) I was chosen to give a presentation at a local conference for developers and other non-infosec types. As part of my presentation I had the Pineapple running during the presentation prior to mine capturing and logging probes. Just showing a list of AP probes will get the audiences attention as they will see their home AP names, various businesses they visit etc. In my presentation I wanted to show the audience the way that the Pineapple was capable of capturing their devices connection and how I could MiTM their information. To ensure there were no legal ramifications I put a simple sign on the door that warned potential attendees that their wireless connection may be modified and if they did not want to participate to please turn off WiFi on all of your devices. This gave everyone warning, then to further cover my @$$ DNS redirect was on and there was no internet connection, doing this along with the "RandomRoll" infusion allowed me to ask everyone in the audience with WiFi turned on to pull out their devices and attempt to navigate to Google. Since I had chosen the dancing banana GIF it was very successful as more than a hundred devices all started playing Peanut Butter Jelly Time (it was classic). This covered me legally (at least at the conference) I also showed the audience my deleting any AP or other info that was captured. The presentation went over REALLY well and I have given the same or similar talk at local OWASP, ISACA, and other local meeting and conferences.