audibleblink

God, I really hate AngularJS

Brilliant! \_(ö)_/

Woooo! It's live! You glorious beings.

You got any 1.0.2, maaaan? Just a hit, then I'll stop.

wlan0 is for broadcasting SSID and serving clients wlan1 is for scanning Any attached antenna would be seen as wlan2 or usb0. I guess you can either make the PineAP/Recon use wlan2, or shuffle devices around so your antenna is wlan1. Come to think of it though, I've always wondered why there's a wlan0 and wlan0-1 though.

I blocked the entire client network, so in my case, it would, if the secure network gives you an IP in that same range. I'm not sure since I've never set it up that way. I've always accessed pineapples through a reverse tunnel and then binding the UI management port to some localhost port.

Oh, right. I forgot. I'd thrown in a firewall rule to deny requests from the client network to the UI port. Yeah, no bueno

Can you capture a client of yours (phone or something) with the Nano and verify that associated clients have internet too? If it does, maybe I didn't initially because a tethered phone uses the usb0 interface and the alpha registers as wlan2. Not that it will matter after the update; it's more to satiate my curiosity.

Oh man, if they're on your physical machine, you've got bigger problems! In all seriousness though, tab-closing and relying on the obscurity of the port number you host the GUI on shouldn't be an acceptable _permanent_ solution. Not ideal that one could enumerate your modules. That said, I appreciate how complex the software development process is and the prioritization game that comes with it. Yinz do great work, Hak5 team. +1 for adding "not exposing information behind the login modal" somewhere on the back log.

Welp. Got it working with the following, but should I have to have done that? # add to /etc/firewall.user iptables -t nat -A POSTROUTING --out-interface usb0 -j MASQUERADE iptables -A FORWARD --in-interface wlan0 -j ACCEPT #restart firewall /etc/init.d/firewall restart

I must have broken something along the way. The Nano itself has internet access. I know this because autossh connects to my relay server and I can ssh into the Nano from another network. However, when piping tcpdump into wireshark, I started seeing a flood of black (retransmission packets.) I rebooted and whitelisted my phone and joined a fake network provided by the Nano. No internet access. Where should I start on this one?

It will in an upcoming firmware update. Some have already been ported. Check the nano modules subforum to see which ones

Great logo! I went with:

One might also add: .modal { background-color: black } to the css file in the same folder (or through the advanced tab) to black out the areas behind the modal until a more permanent solution is found.

I had the same idea! It's line 35 of /pineapple/index.html

This guy is phenomenal teacher, I thought.

I got this working a different way. I didn't want the web interface public all the time so I didn't configure with autossh on the pineapple. Instead, I made an entry in ~/.ssh/config on the relay server. I can ssh in to the relay server and type `ssh publicpi` and then I can access the web interface from anywhere by going to http:<relay_server>:8888 Host publicpi Hostname localhost User root Port 4255 IdentityFile ~/path_to/pineapple/id_rsa LocalForward 0.0.0.0:8888 localhost:1471 Since autossh is already connected to the relay server with -R, you can access the pineapple with `localhost`. If you're interested in the manual command, it looks like this ssh -i ~/path_to/pineapple/id_rsa -L 0:0:0:0:8888 localhost:1471 root@localhost When I'm done with the GUI, I kill the ssh session on the relay server. Also, since the ssh client can fire one-off commands, anywhere I can get to the relay server I can type ssh -t <relay_server> ssh publicpi and get a shell to the pineapple AND a public web interface. The `-t` tells the client to use <relay_server> as a tunnel

If the modules in the forum are ready, would it be possible to send or link a tar for manual install? I found some Nano modules on Github and installed them just to start playing with them. Alas, I found none of yours. =(