Idea / suggestion - Support request :-)

[sjcjonker]

Hello,

I recently acquired the Mark IV and it's a nice little box, but as one might expect not super power. Running items like sslstrip, mitm etc at the same time forces a watchdog reboot. However I don't actually need that on the Pineapple.

My idea for the travel kit:

- Could be used for full MiTM attacks

- Could be used for WPA2-Enterprise credential capture

Solution idea:

• connect a 3G modem (Huawei E220) in my case
• Configure a script to choose between WAN or 3G for connectivity (via cron, check 3g and wan. Choose wan over 3g, establish default route)
• Start openvpn to home network for:

• Radius connectivity

• Force all traffic over home network for MiTM & tcpdump

With the exception of getting the E220 to work reliable I think I can manage most / all on a regular linux box. But if one has tips for Pineapple WiFi. As some of the questions are:

- How to configure secondary SSID's (via uci or otherwise)

- Any pointers / tips in general on the E220 (saw one topic, but it doesn't work - hard to find logs/debug info - for instance where is ppp log?)

Thx,

stijn

[sjcjonker]

Replying to my own post, but could it be WPA2-Enterprise is not supported:

Found "http://wiki.openwrt.org/doc/uci/wireless"

Then doing the "uci set" => commit magic and afterwards wifi down/wifi up but then get the following erorrs in /tmp/karma.log also tried with "server", "port" and "key".

Any pointers? (Search didn't reveal anything close.)

4 errors found in configuration file '/var/run/hostapd-phy0.conf'

Configuration file: /var/run/hostapd-phy0.conf

Line 70: unknown configuration item 'auth_server_addr'

Line 71: unknown configuration item 'auth_server_port'

Line 72: unknown configuration item 'auth_server_shared_secret'

Invalid IEEE 802.1X configuration (no EAP authenticator configured).

config wifi-iface

option device 'radio0'

option network 'lan'

option mode 'ap'

option encryption 'wpa2+tkip+ccmp'

option server '<<REMOVED>>'

option key '<<REMOVED>>'

option port '1812'

option eap_type 'ttls'

option ssid 'TEST'

option disable '1'