p4721cx Posted April 26, 2014 Share Posted April 26, 2014 Alright I have being googling this every way that I can think of, with essentially no tangible results. WiFi Pineapple may not be the correct fit for this purpose but, I'd really like to think that it is; even so the HAK5 crew has got to have this on their radar... So here is my dilemma, I am currently in a position where I am going to need a solid method of monitoring 3g/4g traffic for PAN/CHD; a lot of us are! I have to believe that tons of PEN-TESTer's are out there in the same boat looking for the best case scenario solution for doing so - affordably . With PCI DSS 3.0 on the horizon, this need is going to be huge. I've looked at pwnie express' pwn pad, though it's got my geek levels excited; I haven't seen definitive proof that it is what I am looking for. My thoughts are that one might be able to connect said Huawei USB adapter, to a pineapple Mark V, and with the right module and drivers be able to perform some recon on these freqs... Any ideas? Quote Link to comment Share on other sites More sharing options...
cooper Posted April 26, 2014 Share Posted April 26, 2014 I'm not a pentester, but I try to keep up. With your post, I'm getting nothing, including from google. What's the big deal regarding PAN/CHD (card holder data - I found that much)? Are you referring to the problem that suddenly anybody with a phone can basically create an outbound connection to anywhere from the company LAN? What is the card holder data going to tell you that's relevant? Quote Link to comment Share on other sites More sharing options...
p4721cx Posted April 26, 2014 Author Share Posted April 26, 2014 In the payment card world, it's all about securing card holder information and card numbers, and identifying where that information is being stored or transmitted. I am just trying to come up with some creative ways of verifying that said information is not being transmitted wirelessly over these bands. There are some high commercial products out there, but I could see (at least conceptually) how the pineapple could be a powerful tool for doing this.. I know that I've seen some word about expansions and usb devices, hoping someone to find some people that have started messing with this. Would love to be a part of developing and/or testing such a project. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.