Jump to content

Pineapple Pi Setup


ahbvrh

Recommended Posts

Ok updated with new min image and a hopefully a working setup script.

go to hilt.co for downloads.

the modules will install if by chance the webpage times out just wait for 10 mins then refresh the install works just sometime the page timesout first basically when you you install reaver before aircrack-ng)

uumm lets see there is 30 mins left on the upload of the img soo i am headed to the bar to test out karma and a few other things and work on an image that is all setup and ready to go.

Link to comment
Share on other sites

  • 3 weeks later...

ok been busy drinking -- grrcon was awesome and would say its a great place to be --- free beer...

I got a few idea to add to this as modules but Now I am pretty sure a nice 1.0 image is up...

I have ran into dev problem for basic install ideas and other thing along those lines soo i will be making a post asking questions...

ruby on rails is a bitch when you look to add ajax but not work a framework or cheat and use already made shit... stealing code is cool i mean look at the whole project i am doing but when you you just want a text box updating from a file its different.

I am pretty sure ( could check on oct 3 ) that everything is nice all well plus there should be the grrcon image.

Also this project is moving to an mk802 that is sold from the hack shop.

hilt.co

Just an fyi..

kamra recorded 1000 different mac address at grrcon on friday

Edited by leapole
Link to comment
Share on other sites

  • 1 month later...

I didn't want to start a new thread, but I'm working on a similar task. I was using my pi to access my mkiv and i figured why not just do it from the pi. so I, like you, managed to get karma installed and running, but it doesnt appear to be running correctly. Care to share any updates on how you were able to "broadcast" collected SSIDs. I'd love to give your image a shot sometime, but I can't right now as I need debian to stay functional for other programs.

Link to comment
Share on other sites

here's a quick run of it. Problem 1, Digital's Domain SSID, IS in the whitelist.... Problem 2, the only SSID I see coming off the pi is the broadcasted one i set

pi@raspberrypi ~ $ sudo hostapd -dd hostapd-karma.conf

random: Trying to read entropy from /dev/random

Configuration file: hostapd-karma.conf

ctrl_interface_group=0

KARMA: Enabled

KARMA: White list mode

nl80211: interface wlan0 in phy phy0

rfkill: Cannot open RFKILL control device

nl80211: RFKILL status not available

nl80211: Using driver-based off-channel TX

nl80211: Add own interface ifindex 4

nl80211: Set mode ifindex 4 iftype 3 (AP)

nl80211: Create interface iftype 6 (MONITOR)

nl80211: New interface mon.wlan0 created: ifindex=5

nl80211: Add own interface ifindex 5

BSS count 1, BSSID mask 00:00:00:00:00:00 (0 bits)

nl80211: Regulatory information - country=00

nl80211: 2402-2472 @ 40 MHz

nl80211: 2457-2482 @ 20 MHz

nl80211: 2474-2494 @ 20 MHz

nl80211: 5170-5250 @ 40 MHz

nl80211: 5735-5835 @ 40 MHz

nl80211: Added 802.11b mode based on 802.11g information

Allowed channel: mode=1 chan=1 freq=2412 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=2 freq=2417 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=3 freq=2422 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=4 freq=2427 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=5 freq=2432 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=6 freq=2437 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=7 freq=2442 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=8 freq=2447 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=9 freq=2452 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=10 freq=2457 MHz max_tx_power=20 dBm

Allowed channel: mode=1 chan=11 freq=2462 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=1 freq=2412 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=2 freq=2417 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=3 freq=2422 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=4 freq=2427 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=5 freq=2432 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=6 freq=2437 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=7 freq=2442 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=8 freq=2447 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=9 freq=2452 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=10 freq=2457 MHz max_tx_power=20 dBm

Allowed channel: mode=0 chan=11 freq=2462 MHz max_tx_power=20 dBm

Completing interface initialization

Mode: IEEE 802.11b Channel: 1 Frequency: 2412 MHz

nl80211: Set freq 2412 (ht_enabled=0 sec_channel_offset=0)

RATE[0] rate=10 flags=0x1

RATE[1] rate=20 flags=0x1

RATE[2] rate=55 flags=0x0

RATE[3] rate=110 flags=0x0

Flushing old station entries

Deauthenticate all stations

wpa_driver_nl80211_set_key: ifindex=4 alg=0 addr=(nil) key_idx=0 set_tx=0 seq_le n=0 key_len=0

wpa_driver_nl80211_set_key: ifindex=4 alg=0 addr=(nil) key_idx=1 set_tx=0 seq_le n=0 key_len=0

wpa_driver_nl80211_set_key: ifindex=4 alg=0 addr=(nil) key_idx=2 set_tx=0 seq_le n=0 key_len=0

wpa_driver_nl80211_set_key: ifindex=4 alg=0 addr=(nil) key_idx=3 set_tx=0 seq_le n=0 key_len=0

Using interface wlan0 with hwaddr 00:c0:ca:57:26:3d and ssid 'pineapple'

nl80211: Set beacon (beacon_set=0)

wpa_driver_nl80211_set_operstate: operstate 0->1 (UP)

netlink: Operstate: linkmode=-1, operstate=6

wlan0: Setup of interface done.

random: Got 20/20 bytes from /dev/random

RTM_NEWLINK: operstate=1 ifi_flags=0x1002 ()

nl80211: Ignore interface down event since interface wlan0 is up

RTM_NEWLINK: operstate=1 ifi_flags=0x1002 ()

nl80211: Ignore interface down event since interface mon.wlan0 is up

RTM_NEWLINK: operstate=1 ifi_flags=0x11043 ([uP][RUNNING][LOWER_UP])

RTM_NEWLINK, IFLA_IFNAME: Interface 'mon.wlan0' added

Unknown event 5

RTM_NEWLINK: operstate=1 ifi_flags=0x11003 ([uP][LOWER_UP])

netlink: Operstate: linkmode=-1, operstate=6

RTM_NEWLINK, IFLA_IFNAME: Interface 'wlan0' added

nl80211: if_removed already cleared - ignore event

RTM_NEWLINK: operstate=1 ifi_flags=0x11043 ([uP][RUNNING][LOWER_UP])

RTM_NEWLINK, IFLA_IFNAME: Interface 'wlan0' added

nl80211: if_removed already cleared - ignore event

mgmt::deauth cb

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Requested ESSID is RFamilyNetwork

KARMA: ESSID not found in white list mode so not accepting probe

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Requested ESSID is Digital's Domain

KARMA: ESSID not found in white list mode so not accepting probe

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Requested ESSID is Digital's Domain

KARMA: ESSID not found in white list mode so not accepting probe

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Requested ESSID is Digital's Domain

KARMA: ESSID not found in white list mode so not accepting probe

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Requested ESSID is Digital's Domain

KARMA: ESSID not found in white list mode so not accepting probe

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Requested ESSID is Digital's Domain

KARMA: ESSID not found in white list mode so not accepting probe

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Requested ESSID is Digital's Domain

KARMA: ESSID not found in white list mode so not accepting probe

KARMA CTRL_IFACE Karam is enabled for handling probe request

KARMA CTRL_IFACE Requested ESSID is Digital's Domain

KARMA: ESSID not found in white list mode so not accepting probe

^CSignal 2 received - terminating

Flushing old station entries

Deauthenticate all stations

nl80211: Remove interface ifindex=6

netlink: Operstate: linkmode=0, operstate=6

nl80211: Set mode ifindex 4 iftype 2 (STATION)

pi@raspberrypi ~ $

Link to comment
Share on other sites

ok it might be the driver but I am a unsure.

nl80211: interface wlan0 in phy phy0

rfkill: Cannot open RFKILL control device

nl80211: RFKILL status not available

those 3 lines are odd and i do not remember them.

My pi is not setup for this right now but I will have it all setup towmarrow and will comment back about those lines.

Now it could be the driver but not sure...

If i was to do this all over again

I recompile the raspberry pi kernel to have the frag+ack attack and the negative one error patches for wifi compat driver ( the one atk9 uses)

then I compile digi's hostapd from his webpage

I have yet to really mess with white and blacklisting.

edit: the errors he was have ended up being from commenting out a few lines in the config file -- I am normally always on google chat if anyone wants to discuss anything or ask questions

Edited by leapole
Link to comment
Share on other sites

  • 2 weeks later...
  • 2 months later...

Hi All ,

As other before me already mentioned here on this boards , the Pineapple is a great product and it’s doing exactly what it suppose to do (MITM via Karma).

However, after quite a bit of testing I found that for the sake of performance and stability I need to offload some of the more demanding tasks the an external machine.

I wanted to have fully automated setup and still keep it highly portable (no laptop require) and at the same time to overcome the current limitation by having a full Linux box at my disposal.

After ~month of testing I have what I believe a very stable POC .

Components:

1.MK IV

2. Rasberry Pi (Raspbian -HardFP , over clocked to 930 MHz)

3.Alfa awus0036h (for MDK3)

4.Brookstone battery pack

5.Belkin F4u040

6.Tmobile Rocket 4G

7.Pny 8G

Setup:

MK IV with PNY 8G connected to the Pi via Rj45.

PI is connected to the Belkin hub.

Belkin Hub has the Alfa , the 4G modem and is back feeding power to the PI.

Brookstone battery pack is feeding the hub via 5v 2.1A USB and the MK IV

Automation:

· I created several scripts to automate all the tasks I usally use , and then I used SSH remote exec (find it on the market) to send the command from my SGS3 by creating preset buttons

· Modified wp4.sh script running on startup in order set the IP and IP tables.

Set up the following scripts to be run as buttons from my phone as needed:

* Script to connect/disconnect the 4G Modem.

* Script to enable SSLstrip (0.9 and tcpdump on the PI)

* Script to disable SSLStrip and resore IPtable

* MDK3 script to deauthenticate everyone except mi Pineapple MAC

This works really great as the Pineapple is only doing Karma(and aircrack if needed) and the PI (over clocked) has enough horse power to do everything else (SSLStrip , Set ,Metasploit,tcpdump, etc...)

My next project to port it to the Odroid-x board which should have enough USB power to allow me to ditch the USB hub and therefore make it even more portable (and the fact the Odroid-x board has 4 time the horse power and 6 full USB ports).

Would you mind sharing the scripts for this project of yours? Also any progress in making it functional ?

Link to comment
Share on other sites

  • 2 weeks later...
  • 2 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...