Urlsnarf On The Wi-fi Pineapple Iv

TylerCPU · April 14, 2012

I started the urlsnarf on the pineapple IV but where do I see all the traffic urls at????

Thanks,

Tyler

NotTheFed · April 14, 2012

I started the urlsnarf on the pineapple IV but where do I see all the traffic urls at????

Thanks,

Tyler

by default if you have not moved them.. /www/pineapple/logs/urlsnarf.log

NTF

TylerCPU · April 14, 2012

by default if you have not moved them.. /www/pineapple/logs/urlsnarf.log

NTF

Thank you so much. :)

Sebkinne · April 14, 2012

Someone made a viewer for these as well, although I've yet to try it.

Not yet - not really.

It will be in the next major release though.

Best,

Sebkinne

jahausfrau · May 7, 2012

Someone made a viewer for these as well, although I've yet to try it.

This works well. You'll have to double-check the paths, but otherwise it's pretty much copy and paste.

thespiritbomber · May 7, 2012

This works well. You'll have to double-check the paths, but otherwise it's pretty much copy and paste.

I just tried that out but couldn't get it to add a menu to the webui. My navbar.php was empty so I assume I just created a new one. Where should it be located?

jahausfrau · May 7, 2012

I just tried that out but couldn't get it to add a menu to the webui. My navbar.php was empty so I assume I just created a new one. Where should it be located?

I think it's in the "includes" directory.

thespiritbomber · May 8, 2012

I think it's in the "includes" directory.

Alright, I found it. Thanks!

Edited May 9, 2012 by tylerscoldrevenge

thespiritbomber · May 9, 2012

I can't seem to get this to work quite right. I can confirm that urlsnarf is working because I can go into the log file and see URL's. However, when I click on the new urlsnarflogs menu button, Firefox just constantly refreshes and doesn't do anything else. I'm pretty sure I followed the tutorial correctly and updated all the paths but I'm not sure what's going on here.

jahausfrau · May 9, 2012

It seems like the curly quotes in that blog don't paste quite right. Check all of the ' and " marks in your files and see if that helps?

#!/bin/sh
tail /www/pineapple/urlsnarf.log | awk {‘print $1 $8′} | sed ‘s,http://, http://,’

versus

#!/bin/sh
tail /www/pineapple/urlsnarf.log | awk {'print $1 $8'} | sed 's,http://, http://,'

thespiritbomber · May 9, 2012

It seems like the curly quotes in that blog don't paste quite right. Check all of the ' and " marks in your files and see if that helps?
#!/bin/sh
tail /www/pineapple/urlsnarf.log | awk {'print $1 $8′} | sed 's,http://, http://,'
versus
#!/bin/sh
tail /www/pineapple/urlsnarf.log | awk {'print $1 $8'} | sed 's,http://, http://,'

Hmm, I checked that and it looks fine.

Maybe I messed something up somewhere else. Since the navbar.php is in /www/pineapple/includes, should the other stuff (geturlsnarf.sh and displaysnarflogs.php) be in there as well or should I leave them in /www/pineapple like the tutorial says?

Edit: I moved geturlsnarf.sh and displaysnarflogs.php over to /www/pineapple and that didn't fix the problem. I guess there's something wrong with one of them so I'll recreate them and see if that fixes the problem.

Edited May 9, 2012 by tylerscoldrevenge

thespiritbomber · May 9, 2012

I remade the files but it's still not working so I'll copy over what I've got: (All of this is in /www/pineapple/includes. The only things I've changed is the path to urlsnarf.log in geturlsnarf.sh and also every path that was to /www/pineapple to /www/pineapple/includes.)

This is geturlsnarf.sh:

#!/bin/sh
tail /www/pineapple/logs/urlsnarf.log | awk {'print $1 $8'} | sed 's,http://, http://,'

This is displaysnarflogs.php:

&lt;html&gt;
&lt;head&gt;
&lt;title&gt;snarf logs&lt;/title&gt;
&lt;META HTTP-EQUIV="REFRESH" CONTENT="30"&gt;
&lt;/head&gt;
&lt;body bgcolor="black" text="white" alink="green" vlink="green link="green"&gt;
&lt;?php require('navbar.php'); ?&gt;
&lt;br&gt;
&lt;br&gt;
&lt;?php

$cmd = "/www/pineapple/includes/geturlsnarf.sh";
exec("$cmd 2&gt;&amp;1", $output);
foreach($output as $outputline) {
    	echo ("$outputline\n");
    	echo ("&lt;br&gt;&lt;br&gt;");
    	}
?&gt;
&lt;/body&gt;
&lt;/html&gt;

And here is navbar.php:

&lt;table border="0" width="100%" bgcolor="green"&gt;&lt;tr width="100%"&gt;
&lt;td&gt;
&lt;pre&gt;&lt;a href="/pineapple/index.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Status&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/config.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Configuration&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/advanced.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Advanced&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/usb.php"&gt;&lt;font color="black"&gt;&lt;b&gt;USB&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/jobs.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Jobs&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/3g.php"&gt;&lt;font color="black"&gt;&lt;b&gt;3G&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/ssh.php"&gt;&lt;font color="black"&gt;&lt;b&gt;SSH&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/scripts.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Scripts&lt;/b&gt;&lt;/font&gt;&lt;/a&gt; | &lt;a href="/pineapple/logs.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Logs&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/upgrade.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Upgrade&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/resources.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Resources&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/modules.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Modules&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/about.php"&gt;&lt;font color="black"&gt;&lt;b&gt;About&lt;/b&gt;&lt;/a&gt; | &lt;a href="displaysnarflogs.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Urlsnarflogs&lt;/b&gt;&lt;/a&gt; |
&lt;/pre&gt;&lt;/td&gt;&lt;/tr&gt;&lt;/table&gt;

jahausfrau · May 9, 2012

And here is navbar.php:

&lt;table border="0" width="100%" bgcolor="green"&gt;&lt;tr width="100%"&gt;
&lt;td&gt;
&lt;pre&gt;&lt;a href="/pineapple/index.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Status&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/config.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Configuration&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/advanced.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Advanced&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/usb.php"&gt;&lt;font color="black"&gt;&lt;b&gt;USB&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/jobs.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Jobs&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/3g.php"&gt;&lt;font color="black"&gt;&lt;b&gt;3G&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/ssh.php"&gt;&lt;font color="black"&gt;&lt;b&gt;SSH&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/scripts.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Scripts&lt;/b&gt;&lt;/font&gt;&lt;/a&gt; | &lt;a href="/pineapple/logs.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Logs&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/upgrade.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Upgrade&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/resources.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Resources&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/modules.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Modules&lt;/b&gt;&lt;/a&gt; | &lt;a href="/pineapple/about.php"&gt;&lt;font color="black"&gt;&lt;b&gt;About&lt;/b&gt;&lt;/a&gt; | &lt;a href="displaysnarflogs.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Urlsnarflogs&lt;/b&gt;&lt;/a&gt; |
&lt;/pre&gt;&lt;/td&gt;&lt;/tr&gt;&lt;/table&gt;

Did you try this for the link in navbar.php?

&lt;a href="/pineapple/displaysnarflogs.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Urlsnarflogs&lt;/b&gt;&lt;/a&gt; |

thespiritbomber · May 10, 2012

Did you try this for the link in navbar.php?

&lt;a href="/pineapple/displaysnarflogs.php"&gt;&lt;font color="black"&gt;&lt;b&gt;Urlsnarflogs&lt;/b&gt;&lt;/a&gt; |

Okay, great! That fixed it! But I put it as

/pineapple/includes/displaysnarflogs.php

since it's in includes not pineapple.

I still have another problem though. It's not displaying the logs correctly. I have URLs in the urlsnarf.log file but it's being displayed like this:

172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"

Edited May 10, 2012 by tylerscoldrevenge

jahausfrau · May 10, 2012

Okay, great! That fixed it! But I put it as
/pineapple/includes/displaysnarflogs.php
since it's in includes not pineapple.

I still have another problem though. It's not displaying the logs correctly. I have URLs in the urlsnarf.log file but it's being displayed like this:
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"
172.16.42.242HTTP/1.1"

Did you get it working again yet? If not, try replacing $8 in 'geturlsnarf.sh' with $0 to see if you like that better?

Darren Kitchen · May 11, 2012

Let's break it down:

tail /www/pineapple/logs/urlsnarf.log | awk {'print $1 $8'} | sed 's,http://, http://,'

The first part just keeps an eye on the urlsnarf.log file, and its output is piped to awk, which is instructed to only list out of that the first and eighth fields (space is the default delimiter), then finally that pipes to sed which looks like it's adding a space before http://,'>http://, for whatever reason I cannot remember.

If you issue cat /www/pineapple/logs/urlsnarf.log you'll see the whole shebang and from that you should be able to figure out which fields you need (replacing $1 and $8). I'm thinking the | sed 's,http://,'>http://, http://,'>http://,' part may not be necessary.

Sign In

Urlsnarf On The Wi-fi Pineapple Iv

Recommended Posts

TylerCPU

NotTheFed

TylerCPU

Sebkinne

jahausfrau

thespiritbomber

jahausfrau

thespiritbomber

thespiritbomber

jahausfrau

thespiritbomber

thespiritbomber

jahausfrau

thespiritbomber

jahausfrau

Darren Kitchen

Join the conversation

Recently Browsing 0 members

Browse

Activity