Jump to content

sebaz

Active Members
  • Content Count

    18
  • Joined

  • Last visited

Posts posted by sebaz


  1. Hi!

    I fear there is an encoding issue with the SSID pool. This is a pineapple without any modules or big changes made to it, using the ssid capture method. After a while, it captures a lot of SSID's that are displayed like this:

     

    image.png.05838aaa1a0cc37a91ba9e8706f4fe6d.png

     

    I'm currently using the new firmware of this current update. Does anybody understand what is happening or know a fix?


  2. What exactly is the problem with that?

     

    as trashbo4t said: 

    172.16.0.0/16 CIDR's are not Internet routable. From an outside perspective it could be anyones IP address.

    The pineapple DHCP gives you this local, unroutable IP to connect to the Pineapple. It is not unique to the phone, and doesn't say anything about your traffic or your device. It is basically useless to anyone getting acces to it, because anytime you connect your phone to your pineapple you will get a new one.

     

     


  3. Hi!

     

    I am using the pineapple API to request client data. However, I noticed that whenever I kick or disconnect een cliënt (via the webinterface), the cliënt data keeps being send by the API. How does this happen/ is there a fix for this?

     

    Kind regards,

    Sebastiaan


  4. However,

    When I change these settings, they don't stay 'saved'

    The checkboxes load as 'checked' but then get unchecked as the page loads further.

     

    Quote
    
    registerController('PineAPSettingsController', ['$api', '$scope', '$timeout', function($api, $scope, $timeout) {
        $scope.disableInputs = true;
        $scope.disableButton = false;
        $scope.saveAlert = false;
        $scope.pineAPenabling = true;
        $scope.settings = {
            allowAssociations: false,
            logEvents: true,
            pineAPDaemon: true,
            beaconResponses: false,
            captureSSIDs: true,
            broadcastSSIDs: false,
            broadcastInterval: 'low',
            responseInterval: 'low',
            sourceMAC: '00:00:00:00:00:00',
            targetMAC: 'FF:FF:FF:FF:FF:FF'
        };

     


  5. Hi!

    I am trying to build a new webinterface for the pineapple, because I want to use the device to teach people how vulnerable they are. I want to use the pineapple API for this, using PHP to call the functions on my pineapple via cURL. I have the following code:

     

    Quote

    <?php
    //display errors, remove when done
    ini_set('display_errors', 'On');
    error_reporting(E_ALL | E_STRICT);

    $key="apiToken";

    //define POST & encode in JSON

    $a=[
        'system'=>'notifications',
        'action'=>'addNotification',
        'message'=>'Hello from apache!',
        'apiToken'=>'7de64925dd8703fc5595a7d0b845ce0ed965fa799b67a19b310cb2538017aeaacb205e6dbc72d8758c3b995d25a1a273783c49bfb7519b2e71fbd49af074ab35'
    ];

    $JSON = json_encode($a);
    print $JSON;

    //curl post request
    $c = curl_init();
    curl_setopt($c, CURLOPT_CUSTOMREQUEST, "POST");
    curl_setopt($c, CURLOPT_FOLLOWLOCATION, true);
    curl_setopt($c, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($c, CURLOPT_URL, "http://172.16.42.1:1471/api");
    //curl_setopt($c, CURLOPT_POST, true);
    curl_setopt($c, CURLOPT_POSTFIELDS, $JSON);
    curl_setopt($c, CURLOPT_HTTPHEADER, array(
        'Content-Type: application/json',
        'Authorization: ' . $key
    ));

    //print curl output
    $result = curl_exec($c);
    print $result;
    $info = curl_getinfo($c);
    print '</br>';
    print $info['http_code'];
    if(!curl_exec($c)){
        die('Error: "' . curl_error($c) . '" - Code: ' . curl_errno($c));
    }
        curl_close($c);
     

    When I execute this code, i'll get bag a '200' http code. All good right? However, the server output is 'not authenticated' and nothing happens on the pineapple, no notification appears.

     

    Does anybody have any idea what I'm doing wrong?

×
×
  • Create New...