Jump to content

Simple idea: Using the Pineapple as a secure gateway for other Hak5 devices.


Recommended Posts

Hypothetical situation: What if someone had a Bash Bunny, a LAN Turtle, a Packet Squirrel, a Key Crock, and a WiFi Pineapple, all connected to Cloud C2, and all deployed at a remote location? Would that gain that person anything more than having them at separate locations, or having them without C2? These are Linux boxes, so why not?

Why not? Because nothing major has been implemented here? What if a Bash Bunny, Key Crock or maybe even a Signal Owl, could grab the Preferred Network list from a computer and send it say, over a VPN to C2, and then use that to communicate that info to the rest of the devices planted on site for a Pen Test? That raises the question: How would the Key Crock Signal Owl, and Screen Crab obtain that info, if the WiFi key isn't known prior to the deployment of those devices. Yes, they can all store their loot offline, but they couldn't participate in a coordinated attack that way, could they?

Well, what if the Pineapple could act as a secure WiFi gateway? This would require WPA2 or WPA3 protected AP support on the Pineapple, and verification that the device connecting is a real Hak5 product. It would also require a USB LTE dongle, Cell Phone, or other long-range wireless uplink, but I think it's very possible to do. Imagine keeping the Pineapple with you, and walking up (or driving up) outside the building. Alternately, the Pineapple could be planted inside along with the other items.

Granted, this would be quite a bit of work to implement. I do have a few ideas about to authenticate devices to the Pineapple, to help ensure someone isn't trying to "hack your hack".

Link to comment
Share on other sites

7 hours ago, Aaron Outhier said:

The response here is much more eh, underwhelming, than I expected. Oh well? Seemed like a great idea to me.

🤷‍♂️

Well, that could be because the forum isn't as active as it used to be. Check out the Hak5 Discord, people are quite active there (me included) 🙂

  • Upvote 1
Link to comment
Share on other sites

  • 2 weeks later...
On 3/18/2021 at 12:08 AM, kuyaya said:

Well, that could be because the forum isn't as active as it used to be. Check out the Hak5 Discord, people are quite active there (me included) 🙂

Yeah, I'll say it's not as active! 158 views, but only 1 response. I don't think the site has had 150+ bots/web crawlers in the last month, but less than 10 users. Someone's been looking.

Don't get me wrong, I'm not getting butt-hurt over it or anything. I realize it would be a boat-load of work for the devs to implement. Would just like some feedback as to whether or not this would be useful to anyone here.

As for Discord, I read much too slowly... Messages scroll off the screen before I can finish reading them.

Link to comment
Share on other sites

  • 1 month later...
On 3/28/2021 at 11:14 PM, Aaron Outhier said:

Yeah, I'll say it's not as active! 158 views, but only 1 response. I don't think the site has had 150+ bots/web crawlers in the last month, but less than 10 users. Someone's been looking.

Don't get me wrong, I'm not getting butt-hurt over it or anything. I realize it would be a boat-load of work for the devs to implement. Would just like some feedback as to whether or not this would be useful to anyone here.

As for Discord, I read much too slowly... Messages scroll off the screen before I can finish reading them.

Well, there could also be the possibility that the people simply didn't know what to reply, didn't have time...idk man. It also seems like a really neat idea to me.

You just seem like a really awesome person and I really recommend Discord if you want to have active responses.

Quote

Messages scroll off the screen before I can finish reading them

Well, the Hak5 discord server is quite active, but it's really not like there are constantly messages falling in, so you don't have to worry about reading too slow. There are obviously discord servers out there where you can't keep up with reading, but the Hak5 server isn't one of 'em.

So...yeah. Hope to see you there. Otherwise, I'll stay here aswell obviously, so we'll see each other again anyways.

  • Upvote 1
Link to comment
Share on other sites

On 3/18/2021 at 3:08 AM, kuyaya said:

Well, that could be because the forum isn't as active as it used to be. Check out the Hak5 Discord, people are quite active there (me included) 🙂

Thanks good to know, I'm slower to get on discord than a board for some reason. 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...