Ror Posted November 23, 2011 Share Posted November 23, 2011 (edited) Hi, I setup my Mark III v1.0.2. I have no problem grabbing devices. The first time I used it, I could see wifi associations being made (the network name the target was connecting to) and URL snarf was showing a little bit of data. But now those associations aren't being shown, however the devices are connecting to the pineapple. URL Snarf was showing a device name and an http protocol, but no URL. The first time I used the device, URL snarf at least showed a device name and protocol, but now shows nothing. Yes, it is enabled. I have reset to factory too many times, to see if I could get a circumstance similar to the first time I booted it (this is when associations were being displayed and URL snarf kinda functioned) Also, how does ngrep display its data? I assume through the log file, but my linux skills are crapolla. When I use an ls command I can see ngrep.log but I dunno how to view it mang? Help a dog out. I tried using a fresh target device, and still no associations or URL snarfs. Any advice? Thx, xtra crispy n00b Edited November 23, 2011 by Ror Quote Link to comment Share on other sites More sharing options...
allisonmagic Posted November 23, 2011 Share Posted November 23, 2011 Ngrep is usually displayed on the status page. If you want a better view of the data goin through the pineapple try running wireshark . What version of Linux are you running ? Quote Link to comment Share on other sites More sharing options...
Darren Kitchen Posted November 24, 2011 Share Posted November 24, 2011 If data isn't showing kn ghd status page. First attempt to clear the pineapple cache from the advanced menu, then second try using an incognito window of clearing your.browser cache. Let us know if that does the trick. Quote Link to comment Share on other sites More sharing options...
Ror Posted November 28, 2011 Author Share Posted November 28, 2011 (edited) Thanks for getting back to me Allison and Darren. Allison, primarily I am using Win 7 SP1 to conduct activities. I mentioned Linux (BT5) because I thought I was trying to get at the log files via BT5. My linux skills blow. Darren, after reading your advice… It was kinda funny actually. As soon I cleared the pineapple’s cache & opened up an incognito window, I started to see the URLs appear from a session the night before. I thought well, he is on to something so I tried D’s advice with a fresh factory config. 1) reset pineapple to factory default 2) Clear pineapple cache (for kicks) 3) Cleared browser cache 4) Enabled Mk3 5) Enabled URLSnarf 6) Enabled Ngrep After I do this factory default + reboot, I still see old snarfs with no urls. Even when i clear the pineapple cache, and incognito cache I still have ghost snarfs appearing?? These are the results I got (attached pic) I'm back to where I was before ?! No URLs snarfing again? In URLSnarf's module I see the PC named jglynni5 following the machine name, it reads PCHTTP. Even while I am browsing with jglynni5, I am not seeing any URLs appear, but I did a few days ago. Man I'm so confused. Thanks dudes. Hope this message isn't too spastic. I'm actually having some of the same problems as whazupman. Although his message reads much clearer. Edited November 28, 2011 by Ror Quote Link to comment Share on other sites More sharing options...
Sebkinne Posted November 28, 2011 Share Posted November 28, 2011 I saw this happen before in one of my first attempts at porting the firmware. In my newest firmware urlsnarf works fine. I can try to dig out the change I made if that would help? Best, Seb Quote Link to comment Share on other sites More sharing options...
Ror Posted November 29, 2011 Author Share Posted November 29, 2011 Seb, Thanks! That would be great. Could you also show me how to implement it? Quote Link to comment Share on other sites More sharing options...
Ror Posted November 30, 2011 Author Share Posted November 30, 2011 After walking away from it, I fired it up. I had success using URL snarf. The next thing I want to do is figure out how to extract the ngrep data. No that I can catch devices, and monitor the URLs. How can I take this further, like extract user/pass data using ngrep? Quote Link to comment Share on other sites More sharing options...
abbie100 Posted December 15, 2011 Share Posted December 15, 2011 I saw this happen before in one of my first attempts at porting the firmware. In my newest firmware urlsnarf works fine. I can try to dig out the change I made if that would help? Best, Seb [/quot hi seb I was wondering if you could help me as you have also encountered this problem and managed to overcome it. When I first set up my pineapple mark 3 I could easily see my urlsnarf now I can no longer see my urlsnarf I have tried the following options: 1) reset pineapple to factory default 2) Clear pineapple cache (for kicks) 3) Cleared browser cache 4) Enabled Mk3 5) Enabled URLSnarf 6) Enabled Ngrep After I do this factory default + reboot, I still see no urls. please help thank you Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.