Jump to content

Can I remote capture clients traffic via ssh from pineapple using Wireshark ?


Mattew
 Share

Recommended Posts

hello everyone, this is my first post, can You help me to remote capture clients traffic via ssh (USBC or Wifi Managed AP) from pineapple using Wireshark ? What i supposed to do ? This is my first contact with Wifi Pineapple. Thx 4 help

Link to comment
Share on other sites

I'm new Wifi Pineapple user and I don't know how what i supposed to do in tcpdump module.

I am also curious if it is possible to capture traffic from pineapple live via SSH just like I would carry out an ARP spoof attack using bettercap

Link to comment
Share on other sites

I think there is a bettercap package for OpenWRT (opkg install bettercap), but Wireshark is a GUI tool. The Pineapple has no desktop, not even if you used VNC. And SSH is CLI anyway. There's tshark, but if you need to learn that anyway, it would be better to use tcpdump or the net.sniff module in bettercap if available.

Link to comment
Share on other sites

2 hours ago, dark_pyrro said:

And, yes, it's possible to use Wireshark remotely over ssh and get output from tcpdump running on the Pineapple.

I assume that would involve some kind of SSH forwarding to pipe or connect tcpdump to Wireshark.

Link to comment
Share on other sites

  • 2 weeks later...

As there is no specification how the client is connected, I will make an easy example here:

Let's assume the client is connected to Open AP using IP 172.16.42.175.
You are connected by USB.

Just start Wireshark on your box, then

image.png.807b52fe1ac1c0b8ef947c0d2af5b29e.png

image.png.dc39ca5c9bed575d7572947e4a04be36.png

image.png.3aa3f79ec8861d0297f1b9d5664f193d.png

image.png.cf6f67241c5d35f0334b32261f490828.png

This should work.

 

 

 

 

image.png

Edited by exec4
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...