InfiniteDevelopment

hmm. this does seem psu related. are your PC ports usb 3.0? Also, go grab a 12v/2a charger from your local computer store. That should get you up and going immediately. I use that + my usb cable over eth... I noticed that using two usb ports only gave me 5v/1a max! So be careful that you arent underpowering this thing. It can and will hurt it!

I cant agree more. This is a very easy and robust step in the front door! I had shiish loads of fun last night with Evil Portal. Also the new landing page in config is nice to have! Now how do we get into more plays like metasploit and other client side exploits via MITM? Is that not to be discussed on the fourm? Ive looked at Karmetasploit and Bettercap and I think to myself, how can I port that over to the pineapple. I see ettercap, but its not the easiest thing to use on the MK5.8T currently lol. Maybe if i had CLI expierence with ettercap beforehand I would be more inuitive on how to use it. Any others out there that have these feelings of wanting to be able to make this thing more effective and automated through community developed scipts and porting of exixting tools? p.s. I saw on my Tetra, the model number was MK5.8 which is why I referred to it in that way. Any particular reason you decided not to go full MK6? Or was that just a lil easter egg for later in the dev cycle? :)

This bettercap ish looks like its what everyone has been looking for. I have long wondered if cred stealing using SSL degrade was going the way of kerosene.. Glad to see the community feels the needs for it just like I do. Is bettercap ported over to MK6 yet...?

Hey everyone, I am wondering if you guys have any specific steps you take once you are the MITM? What kind of things are you trying to do with the packets? Push java applets to clients? Use Karmetaspolit? Since SSLStrip is no longer working, what types of things are you doing to gaurentee the most data out of your "victims". I am particularly intrested in emails, social media, etc... Assuming its been approved by the client I am auditing. I really want to show some examples of what can go wrong for a client site when a MITM attack is successfully executed using the pineapple, any ideas?

Has that still not made it to your house yet? I just ordered mine and I am hoping that they packed a worthy power supply for me. I just ordered Sunday night and had it over nighted for a extra $40. Hak5 shipped it in one day I am hapy so far. Just hoping that they included the power supply for me.

I had to reset the Pine when I had this happen last week. You can use the DIP switches to perform a factory reset but it sounds like you may be using the wrong switches or not using the correct procedure. Try this: NOTE: With the switches facing you, they are ordered 1 - 5 from left to right. 1) Power off your Pineapple. 2) Place your DIP switches in the following sequence: Switch 1 - UP Switch 2 - DOWN Switch 3 - DOWN Switch 4 - UP Switch 5 - UP 3) Power on your Pineapple 4) Wait 5 minutes just to be safe and power off again 5) Place all of your switches back in the up position again and power on. You should be good to go. Just connect via ethernet or Wifi, login to the web interface, and create a new password.