thatCEHguy Posted June 25, 2014 Share Posted June 25, 2014 (edited) During a class the instructor had a mark V running, the way I detected it was simple. I was running inSSider and noticed that a known 5Gz only SSID was being broadcast on the 2.4 GHz band. I am sure that detection is simple in many instances and would require that someone was looking for it. In most cases, your average person would not be looking for it to start with. I was just surprised that I noticed it that easily. Edited June 25, 2014 by thatCEHguy Quote Link to comment Share on other sites More sharing options...
choppin32 Posted June 25, 2014 Share Posted June 25, 2014 did your instructor tell you that he was running it? Quote Link to comment Share on other sites More sharing options...
ZaraByte Posted June 25, 2014 Share Posted June 25, 2014 Meh my way to detect a Pineapple is when im connected and im able to access :1471 Quote Link to comment Share on other sites More sharing options...
newbi3 Posted June 26, 2014 Share Posted June 26, 2014 Meh my way to detect a Pineapple is when im connected and im able to access :1471 What happens when the person changes the port? Other people check for the network to be 172.16.42.0 but that can be easily changed as well if the person knows what they are doing. Others check for mac-address which again is very easily changed. Quote Link to comment Share on other sites More sharing options...
thatCEHguy Posted June 26, 2014 Author Share Posted June 26, 2014 Yes, we knew that he was running it. The fault wasn't with the Pineapple, It was doing it's job saying "yep, that's me", windows included the known 5GHz SSID in it's 2.4GHz probe requests and I simply noticed that channel 11 was listed next to the 5GHz only SSID. I don't think there is any way to prevent that type of detection. Quote Link to comment Share on other sites More sharing options...
ZaraByte Posted June 26, 2014 Share Posted June 26, 2014 Well the other way to tell but it requires you to connect to the device is nmap scanning :B You ever ran a nmap scan on the MK5 you will see what im talking about. Quote Link to comment Share on other sites More sharing options...
thatCEHguy Posted June 27, 2014 Author Share Posted June 27, 2014 When mine shows up I will scan it. It has been ordered since the morning of the 25th, but it is still unfulfilled on the customer page. Quote Link to comment Share on other sites More sharing options...
i8igmac Posted June 28, 2014 Share Posted June 28, 2014 for discovering a pineapple. what if u sent off a probe for ssid like pineapple-checker and that ssid exist then wouldn't this be a dead give away? Quote Link to comment Share on other sites More sharing options...
thatCEHguy Posted June 28, 2014 Author Share Posted June 28, 2014 I suppose it would, as I said I was just surprised that the 5GHz SSID was being broadcast on channel 11. If it weren't for the facility using separate names for the 2 radios, I wouldn't have caught it so quickly. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.