Jump to content

[RELEASE] WiFi Pineapple Mark VII Firmware 1.1.x


Recommended Posts

Hello!

This firmware marks a massive release for the WiFi Pineapple Mark VII, with a huge set of feature additions, bug fixes and improvements to many aspects of the project and it's user experience. From reliability fixes in PineAP and Recon to the addition of the Package browser and a WPA/2 Evil AP or out of the box support for supported 802.11ac adapters, there is sure to be something in this version for you.

As always, you can grab the update OTA by giving your WiFi Pineapple an internet connection and navigating to Settings -> Software Update in the Web UI.

A huge thank you to the beta testers for this release who provided great feedback and bug reports, you are invaluable and much appreciated! To further join the discussion, feel free to join the Discord chat.

You can catch the full changelog below, and highlights of the new firmware in the second reply to this topic.

Changelog 1.1.1:

  • General
    • Update the Pineapple Python library.
  • Setup
    • Fix a UX issue where the Filter description doesn't show until a mode is selected.
  • Recon
    • Fix an issue where some partial handshake captures would not have enough data to be crackable.
  • Settings
    • Remove the Nightly Update channel.

Changelog 1.1.0:

  • General
    • Add a setup walkthrough dialog when attaching an AC-capable USB radio to the WiFi Pineapple.
    • Improve the displaying of dates from the future in some UI pages.
    • Move warnings into an "Informational Messages" dialog.
      • This new dialog adds more information about system messages, and provides convenient links directly to the relevant setting.
    • Removed bluelog and other bluetooth related tools from firmware.
      • Note: You can now install these packages and more with ease using the Package Manager.
    • Swap PineAP and Recon location in sidebar.
    • Enable SSH earlier in Setup process.
    • Removed polling for Reset button.
    • Add password reset functionality.
    • Notifications
      • Notifications are now previewed in the title bar.
      • Notifications can now be reported as "success", with a green color.
    • Changed to a better download icon.
    • Decrease clutter in title bar for mobile displays.
    • Fix an issue where some kernel modules would cause the device to reboot.
  • Setup
    • Add Sweden to WiFi Country Code list.
    • Fix typo in Client Filters page.
    • Added GIFs to indicate how to proceed with verification.
    • Added the ability to fine-tune filters during setup.
    • Generally improved layout of various setup elements.
  • Dashboard
    • Improved connection error message for "Get News".
  • Campaigns
    • Fix an issue where some reports will use the first Recon scan, instead of the latest.
    • Fix an issue where reports would not be removable.
  • PineAP
    • Fix a crash.
    • Fix an issue where extended Recon scans would lead to a memory leak.
    • Add Sweden to WiFi Country Code list.
    • Fix a hang introduced in the beta which would cause Recon and Filters to show an incorrect status.
    • Change "WPA & Open" tab to "Access Points".
    • Change "Authenticated AP" card title to "Evil WPA AP".
    • Add "View Handshakes" button to Evil WPA AP card.
    • Evil WPA AP handshakes now only send one notification per client.
    • Fix an issue where empty SSIDs would be added to the SSID Pool.
    • Add a new tab for Management and Open APs.
    • Fix an issue where the "Handshakes Captured" counter wouldn't be accurate.
    • Add Evil Twin WPA Access Point.
  • Recon
    • Add a dialog to clarify what a handshake capture does, when clicking "Start Handshake Capture".
    • Fix an issue where handshakes in custom locations couldn't be downloaded.
    • Scan settings are now loaded from the current scan across devices.
    • Added the ability to specify save location for Recon scans.
    • Added the ability to specify save location for Handshakes.
    • Fix an issue introduced in Beta 1 where handshakes could not be deleted.
    • Fixed an issue where the table would become unsorted during a scan.
    • Added graphs for wireless landscape and channel distribution.
    • Moved Settings into a new card, with search functionality.
    • Added the ability to select which radio is used for Recon scanning.
    • Add dual-band scanning support for supported adapters.
    • Add the ability to download handshakes in hashcat format.
    • Improved the user experience for cloning access points.
      • Cloning options can now be fine tuned from inside Recon.
      • Add the ability to clone WPA/2 access points.
    • Fixed an issue where BSSIDs would not be highlightable in some browsers.
    • Fixed an issue where a handshake capture button might show for open APs.
    • Massively improved scanning performance by rewriting result de-duplication logic.
    • Massively improved WPA/2 Handshake capture performance.
    • Changed how partial and full handshakes are written to disk.
    • Fixed a rare crash when scanning in client-heavy landscapes.
    • Handshake MAC addresses are now censored when censorship mode is enabled.
    • Handshake MAC addresses now use colon seperators.
  • Logging
    • Improve default colours for log entries in dark theme.
    • Improve column width for the System Log.
    • Improve parsing of System Log.
    • Added the ability to specify PineAP log save location.
    • Added pagination and search functionality to the PineAP Log.
    • Create a new system module for logging.
    • Add ability to download and search the device system log.
  • Modules
    • Add hot-link support for Available Modules, Package Manager, and Develop tabs.
    • Move search box into table footer.
    • Add a new tab for package management.
      • Add the ability to search and download a wide variety of packages.
    • Improve user experience when the device is offline.
  • Settings
    • General
      • Improve user experience when the device is offline.
      • Added a scrollbar for longer changelogs such as this one.
    • Networking
      • Add a placeholder for when the Pineapple hasn't receieved a Client Mode IP address yet.
      • Add signal strength to discovered Client Mode networks.
      • Rewrote Client Mode handling to improve reliability of connection.
      • Improved reliability of automatic route setting when handling USB Ethernet, ICS, or Client Mode connections.
      • Disconnect button is now disabled after being clicked once.

 

Thanks,
foxtrot

  • Thanks 1
Link to comment
Share on other sites

AC Adapter Support

With the 1.1.0 release, enhanced support for compatible 802.11ac modules has been added out of the box to enable dual band Recon scans. Upon logging into the UI with a compatible adapter you will be presented with the following dialog. You can then click "Configure" where you'll be able to set the Recon Wireless Interface in the settings. Doing this will stop the dialog from showing in the future, otherwise it will show every boot when an adapter is connected.

image.png

Package Manager

To make the vast library of available packages easier to browse and install, the Modules page now includes a Packages tab that allows you to fetch a list of all available packages, and install them with ease.

image.png

WPA/2 Evil AP

The new WPA/2 Evil AP feature allows you to clone an access point discovered in Recon, enabling you to spoof an AP with a PSK you've already recovered, or with a default passphrase to trick clients into associating with the real passphrase, recovering enough of the 4-way handshake into a convenient .pcap or .22000 format file to crack with tools like aircrack-ng or hashcat.

image.png

  • Thanks 1
  • Upvote 1
Link to comment
Share on other sites

Nice improvements with on bug so far. Continuous Recon stops on it's own now after several min / hours. Started continuous recon and returned 30 min later to find the slider now in the off position and the recon file available for download. Retried several times with the same result. 

Link to comment
Share on other sites

30 minutes ago, sbaumeister said:

I have been unsuccessful at getting the update OTA.  Is there an alternative way to install the update?

 

Thanks,

Steve

Yep Steve. There is a way to do one.

https://docs.hak5.org/hc/en-us/articles/1260802858250-Firmware-Upgrade-via-USB

And the download file is here.

https://downloads.hak5.org/pineapple/mk7

Edited by Jtyle6
Link to comment
Share on other sites

I was setup and was doing my thing and I was going through the packages and having a hard time understanding what was what because there's not much up a description tbh. But thats besides the point and not the reason I'm even here rn. I was doing this on my phone in my web browser and I accidentally hit openwrt nodogsplash Hotspot gateway install when i totally thought it was something else. Didnt want to rip the usb out and figured well ill be able to remove it...nope. Immediately its messed up my morning. I can still connect to management ssid and the open ssid and can get it connected to my computer through USB ethernet, but I cant get in the web interface. Its redirected me to the dang splash screen no matter what ive tried. I cant find anything online of much help and it appears my only solution then is a firmware reset? I know theres got to be a way to login or who the heck would want this package? But the documentation is weak and my heads about to explode. Any help would be great. If flash recovery is my only option,  well it is what it is, but I do have to ask why? There needs to be a reset function like the nano and tetra in my opinion because this is way too much for a product over $100, way too complicated and time consuming. Maybe one day we can get some functionality like holding the button down for 7 seconds like past products? Right now that would be so nice? Ill settle though for some help to reverse this situation if at all possible before I flash recover the thing...

Thx

Link to comment
Share on other sites

  • Foxtrot changed the title to [RELEASE] WiFi Pineapple Mark VII Firmware 1.1.x
  • 2 weeks later...

So I came here since I've had a lot of problems since the update, and it seems others in this thread have had the exact same issues as me. APs not showing up in recon, buttons changing state, and a few other issues. Have these been addressed or will there be another update? 🙂

My current issues are:

* APs not showing up

* No handshakes are captured ever

* Recon slider keeps resetting

* Popup messages can't be closed

* Sometimes the reboot/shutdown message is empty and can't be closed or clicked

* Browser console has a bunch of error messages that keep spamming

* At times the whole UI just becomes unresponsive

Link to comment
Share on other sites

Figured I'd update a bit today after experimenting some more. I did a firmware reset of the device, hoping it would solve my issues. It did not. I couldn't find a way to NOT update to the latest firmware so the issues came back. 

This is the browser console at any point in the Pineapple Mark VII interface.

Screenshot-from-2021-09-12-13-57-44.png

 

And this is when I press certain buttons, like Reboot or Shutdown.

Screenshot-from-2021-09-12-13-57-57.png

Link to comment
Share on other sites

Hi @jderp

Thanks for the bug report. It would seem that all of the issues you are describing stems from one thing: the UI seems unhappy, which after some error is causing other elements (like buttons, recon data) to not load. I'm not quite sure what is causing the error yet, but I'll continue to try and debug it.

I appreciate the screenshot of the browser console, was there any more? Could you describe how you've configured your device and what browser you're using?

 

Thanks!

  • Upvote 2
Link to comment
Share on other sites

On 9/13/2021 at 3:46 PM, Foxtrot said:

Hi @jderp

Thanks for the bug report. It would seem that all of the issues you are describing stems from one thing: the UI seems unhappy, which after some error is causing other elements (like buttons, recon data) to not load. I'm not quite sure what is causing the error yet, but I'll continue to try and debug it.

I appreciate the screenshot of the browser console, was there any more? Could you describe how you've configured your device and what browser you're using?

 

Thanks!

Did some more testing to try and provide a bit more info.

* The config is default. Firmware reset and updated to latest version (v1.1.1), then connected to my Wifi, tried a few different settings by picking USB-tethering etc, but it makes no difference.

* Connecting through the Management AP makes no difference

* Browser is Chrome Version 93.0.4577.63 (Official Build) (64-bit)

* OS Ubuntu 21.04 if that helps

* Another screenshot of the console in Chrome (basically the same info though, but this really keeps spamming constantly on the recon page)

Screenshot-from-2021-09-14-15-45-39.png

 

* Using Firefox instead makes it worse. It doesn't even ask me for a password it just gives me an empty page, probably a view/template with no data.

Screenshot-from-2021-09-14-16-04-50.png

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...