Jump to content

Geeksystem

Active Members
 View Profile  See their activity

  • Posts

    13

  • Joined

  • Last visited

 Content Type 

Posts posted by Geeksystem

    [VIDEO TUTORIAL] Shark Jack Unboxing and Setup

    in Shark Jack

    Posted · Edited by Geeksystem

    On 11/12/2019 at 7:51 AM, Foxtrot said:

    Hi,

    This change is not a fix to the problem you're experiencing, but we'd like to know more. Could you let us know how you're connecting the Shark to the computer (Onboard Ethernet or USB Ethernet?), and what OS you're using. The output of "ip route show" on the computer would be very helpful too.

    Thanks,
    Marc

    I used the USB LAN Adapter which came with the Shark. The downloaded sharkjack.sh came from here: https://downloads.hak5.org/shark
    (Thought it was GitHub but i remembered wrong)


    Here is the output from my actual Kali Linux machine: 

    root@host:~/Downloads/SharkJack# ip route show
default via 172.16.24.1 dev eth1 proto dhcp metric 100 
default via 192.168.1.1 dev wlan0 proto dhcp metric 600 
172.16.24.0/24 dev eth1 proto kernel scope link src 172.16.24.208 metric 100 
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.203 metric 600 
192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1 linkdown 
root@host:~/Downloads/SharkJack# ip route show to match 172.16.24.1 2>/dev/null| grep -i 172.16.24.1 | cut -d ' ' -f3 | grep -v 172.16.24.1
root@host:~/Downloads/SharkJack# ip route show to match 172.16.24.1 2>/dev/null| grep -i 172.16.24.1 | cut -d ' ' -f3 | grep 172.16.24.1
172.16.24.1

    As you can see - the DHCP request worked and my machine get a ip in the correct range. The original Bash Script (Line 75) uses grep -v at the end. Isn't this a inverting ?
    I removed the -v from the option and everything works fine here.

    Greets, Heiko

    [VIDEO TUTORIAL] Shark Jack Unboxing and Setup

    in Shark Jack

    Posted · Edited by Geeksystem

    I changed the following line (75) in my sharkjack.sh - working now. Bug ?

    ip route show to match 172.16.24.1 2>/dev/null| grep -i 172.16.24.1 | cut -d ' ' -f3 | grep -v 172.16.24.1

    to

    ip route show to match 172.16.24.1 2>/dev/null| grep -i 172.16.24.1 | cut -d ' ' -f3 | grep 172.16.24.1

    Greets, Geek

    @Darren Kitchen - thanx. Manually upgrade works as expected.

    [VIDEO TUTORIAL] Shark Jack Unboxing and Setup

    in Shark Jack

    Posted

    Hmmm... suspect behaviour here.

    I downloaded new firmware and sharkjack.sh to my kali machine. Shark Jack is connected, pinging and i can connect to it with ssh.

    When i run sharkjack.sh and select "connect" it only says "waiting for shark jack to connect"

    Same on upgrade so i can't upgrade. Is there a way to manually copy the upgrade to,the Shark and start the upgrade directely from ssh shell ?

    Greets, Heiko

    Modify http results from sever as man in the middle

    in Applications & Coding

    Posted · Edited by Geeksystem

    Hi,

    i just have a few thoughts and would like to hear from you what you think about it.

    let's say we are man in the middle with a Packet Squirrel, Lan Turtle or Pineapple.
    Is there any possibility to modify the html results a user get ? Have never tested it and atm i have no idea but let us think we could.

    I thought about modify a html result page so it redirects to a Root CA certificate from my Mitm device. If you name the device like "install to get secure website.crt" many users will accept it by a click. Especially if you install it on a major page like Google. So if the get SSLStriped to the Google page the result also gave back an iframe within the code which loads up the crt file. Which result in an popup of the browser. (This is important because the CA cert is dropped from a regular / non special webpage so the user think it's ok)

    If the user accept my CA - it should be possible to have some kind of SSL Proxy running which always shows up a correct self CA signed cert for each page the user requests. In real i could do regular ssl requests to the real host the user requests. So for him it looks like he is connected to the correct signed ssl secured webpage and for the Page he requested it looks like i am the real user requesting it correctely with ssl.

    This would not cause any problem if the webpage is SSL only and for the user it looks all good because he installed my root CA before.

    Just an idea - as i am not aware for any solution like this i just want to talk about it and hear your thoughts.

    Thanx,

    Geeksystem

    Solid Green and amber Lights

    in WiFi Pineapple Mark V

    Posted

    Hello,

    having the same problem with my brand new Pineapple which i got yesterday. Inserting the SD Card and after connecting i get the green light up (power) and the ampber (searching for update) blinking.

    Not working after 20 minutes. I tried to mount the SDCard on my Debian machine and it can't read it !!!

    ==> What i did - reformat the card on my Linux to EXT2 and redownload the latest (1.04) Firmware file from the site. Unpacked it to the SD Card and tried again -- WORKING ;-)

    After a few minutes i had a working unit ;-)

    Greets, Heiko

×
×
  • Create New...