Search the Community
Showing results for tags 'report'.
I recently bought a WiFi Pineapple Tetra and started playing with it. I'm having a few issues that I need a bit of guidance in. I set it up. It scans, it's also connected to my LAN via ethernet. It receives the news bulletins and I can ssh into it so I know it's connected. I can update patches and it pulls data from wifi scans, load modules and dependencies. However... The reporting log shows multiple repeats of these two errors: 2019-09-10-19:00: Failed to save to SD card - no SD card found 2019-09-10-19:19: Failed to send email to email@example.com (this isn't the real address) The second error is result of my trying to send a test email to my mail server on same subnet as eth interface. Default route set and DNS reloaded. 1. Keeps claiming it can't write to SD card. Is there an SD card? There's no access to it in the web interface and it's not mounted in /mnt and there doesn't appear to be a dev/sd* device either. FAQs don't show an SD card installed or even optional so I'm a bit confused. 2. May be related to 1 but I can't generate any reports. There are no reports in /root which it claims is the default directory it writes to. 3. Can't email reports. When I configure test, it doesn't seem to work. Can't find log of email in syslog or mail.log and can't find the MTA logs on Tetra. Also neither my firewall or MTA can see the email being received or rejected in their logs. Which interface does it use for mail output? Default route? I have the default route setup on my internal network via ethernet. I can get updates and news from Hak5 on Dashboard and I can SSH into the box so I know I'm connected. Am I just generating reports wrong and that prevents the email from being sent, even with test, or is it trying to write to SD card, or something else? I've tried the email server config with mailserver name and IP using ports 25 and 587. Any push in the right direction would be appreciated. Thanks!
[TL;DR below] Hello, Firstly I would like to say that the Tetra is an amazing piece of equipment and love that it is still being updated. Yesterday I powered up my Tetra again and noticed all the new updates (has probably not been on for a year) and love that it is still very active. That being said, I would like to talk about active remote logging. My goal is to set up the Pineapple Tetra to listen to beacons/probe requests, send this information (preferable syslog 514) to a logcollector so that I can send the information to a Kibana or Grafana dashboard. I live near a pretty busy street, so i would like to see in graphs how many unique devices walk by my house. At the moment I've noticed that only reporting/logging over SMTP is enabled. Unfortunately services like syslogd/syslog-ng have not been integrated in the GUI nor enabled in the shell. I'm able to install one of them through the opkg installer, but before i start adding dependencies over SSH I wanted to check, where can I get the logs from? I enabled the PineAp, started the logging and after a few minutes started the reporting manually and also enabled log every hour. I started an SSH session and started to look for the logging. Firstly I found some sessions_xxx files but these did not contain the information I was looking for. Then I just tailed the files in the tmp folder and noticed it contained the information I was looking for: *Removed MAC intentionally* Unfortunately, this file is only updated with a minimum of once per hour. I've yet to find the file that the PineAp configuration is actively adding the logging information. I did find some files that i believe contained the information, but unfortunately this did not seem to be clear text files. You might be thinking, why use the Tetra for something like this, a Raspberry would suffice. The reason I want to use the Tetra is because i'm done (at the moment) playing with all it's features and I love the range of it. Since i'm not using it for anything else, I thought using it as a beacon/probe request listener would be better than gathering dust on the shelf. [TL;DR] 1. Is there a clear text file that the PineAp configuration logs to so you could basically tail -f the file to see new beacons/probe requests without using the one hourly reporting function. 2. Is it safe to install syslog-ng or syslogd over opkg without potentially bricking the Tetra? . I do not believe there is, but if anybody has a complete setup working with logging to something like ELK stack/Grafana/Kibana, care to share?
I'm trying to generate an email'd report of the AP & Client scan, however the report can't make it out via email. I'm seeing these errors in the System Log: Wed Mar 30 09:00:00 2016 cron.info crond: USER root pid 6834 cmd /pineapple/modules/Reporting/files/reporting Wed Mar 30 09:00:46 2016 mail.err sSMTP: Unable to locate mail Wed Mar 30 09:00:46 2016 mail.err sSMTP: Cannot open mail:25 Report configuration is set to: Generate Report every 1 hrs Send Report via Email Report Contents set to: PineAP Site Survey Duration of AP & Client scan: 30 seconds Email Configuration set to: From: firstname.lastname@example.org To: email@example.com SMTP Server: mail.ivycomputer.com SMTP Port: 25 Domain: ivycomputer.com Username: left blank Password: left blank TLS/StartTLS not checked Is there a mail module or something additional that needs to be installed?
I am currently working on a research project and was told about a study that had two penetration tests on the same network and found that their individual findings only overlapped by roughly 25%--AKA they only find 25% of the same vulnerabilities. I was told that this was a study done by Microsoft but have searched high and low and been unable to find it. I was hoping someone else may have some information or know where to find this report or any reports with similar findings.