Jump to content
Sign in to follow this  
LivingL393nd

can the Nano be used to hack VPNs?

Recommended Posts

can the Pineapple Nano be used to crack a VPN connection? say you are in the parking lot at Starbucks and a user inside is connecting via VPN to his corporate networks. Since you capture the user's credentials before they connect to the VPN server (as they connect to Starbucks's hotspot) would that ultimately allow you as the Pineapple user to also gain access to the VPN server and thus the corporate network?

what about someone doing online banking via VPN at a Starbucks? Is there a payload that can essentially allow you to capture VPN encapsulations and decipher them to access credentials? Just curios ?

Share this post


Link to post
Share on other sites
2 hours ago, m40295 said:

Simple answer no

A longer answer : no, because

The connection for a VPN (userid / password / token) is totally encrypted and therefore not accessible for you to see/snoop or capture; all you see is a datastream.

 

In theory : if you can set up a reverse shell from the targets computer to your computer and he connects to another source you could access that ... if the connecton is available.

 

 

 

Share this post


Link to post
Share on other sites
On 10/25/2018 at 6:05 AM, Dice said:

A longer answer : no, because

The connection for a VPN (userid / password / token) is totally encrypted and therefore not accessible for you to see/snoop or capture; all you see is a datastream.

 

In theory : if you can set up a reverse shell from the targets computer to your computer and he connects to another source you could access that ... if the connecton is available.

 

 

 

for the reverse shell you got the Bash Bunny to the rescue if you can insert it into the user's machine so this would make for a killer combo with the Pineapple and Bunny

Share this post


Link to post
Share on other sites
On 10/28/2018 at 3:53 AM, LivingL393nd said:

for the reverse shell you got the Bash Bunny to the rescue if you can insert it into the user's machine so this would make for a killer combo with the Pineapple and Bunny

However true, that was not your question.

 

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...