Create Rogue Networks on the WiFi Pineapple (PineAP KARMA Attacks)

On this episode of HakByte, @AlexLynd demonstrates how to use the PineAP module on the WiFi Pineapple to run a KARMA WiFi Attack. This allows an attacker to trick your WiFi device into connecting to a malicious access point, by spoofing networks its connected to before.
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Chapters:
Intro @AlexLynd 00:00
What is the WiFi Pineapple? 00:17
What are KARMA Attacks? 00:39
What You'll Need 00:58
Connecting your Pineapple 01:18
PineAP Interface 02:01
How PineAP Works 03:12
Using the Scanners 03:51
KARMA Attack Requirements 06:45
Broadcasting Open Networks 07:14
Setting up Filters 08:44
Deauthing our Victim 09:37
KARMA Attack Demo 10:18
MITM & WiFi Radios 10:53
Attack Implications 11:45
Mitigating KARMA 12:14
Outro 12:38

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

[josecarrillo]

THANKS A LOT Alex, I requested a fresh PineAP tutorial several times on both channels, nice to see that you finally found some time... you guys are always great at answering questions live and from this comments, plus here you covered few other topics at once, like a practical use for those probe requests and a quick overall view of the mark7, Once again killing it with this content...

[nicolascaferatta]

Great video, i hace a pineapple and id love if you can make more videos about it!! Thanks a lot

[whoislookup]

I love that “SMC” is on your network list!!! Go Corsairs!

[serkanonf]

My neighbour hacked my network with this. What can I do against it ? Can I counter attack ?

[ovalwingnut]

Clear and Concise. Good job. Like a 3rd date... lots of crack (hopefully)

[coolergappney]

Why is it when I plug my pineapple into an AC power source, I'm never able to access the login portal. Not from my laptop, VM, or cellphone. I let the boot up process do it's thing, and the light is solid blue

[deucekiller]

Anyway you can show yourself catching a handshake because once I press the capture handshake nothing happens but when I run it through the CMD line it works .and any reason why I get kicked off the manage AP

[Gonga_P]

I don't understand the marketing or target customer, please advise.

This is LEA or just a straight phish? 😮

It's interesting for sure. Good luck with whatever

[Dot_Neith_EesdnakAch]

thank you from Vietnam with love <3

[emmy]

knowing the mdp of the wifi, is it possible to force client to wifipineapple without clicking?

[weirdsciencetv]

Phones change their MAC now to avoid being tracked, usually every time they connect. I am making an anti-stalking suite that uses a beacon swarm to get cellphone MAC addr, among other measures like correlating BT traffic.

Any ideas on how to get a unique identifier from wifi traffic?

[accesser]

Very nice, Mine just arrived last week so this helps

[Antonio-yptj]

Also hot tip for all of you: deny your own devices or devices your connecting to or using in an engagement.

I’ve ran into some speed bumps where my phone or tablet to control the pineapple is joining a blank fake network while the connection to the real pineapple manage, ent network is being dropped, essentially locking me out and adding precious time to an engagement by fixing the issue.

[rationalbushcraft]

thanks man this is great. I will need to update my pineapple and give it a shot.

[shadowbrother]

Sadly deauthenication doesn't work on my devices somehow. Also my phone warns me that the network is suspicious if it's trying to connect to a pineapple AP .
All in all I never made a successful attack in my own environment, which is kinda disappointing

[hack-talk]

Do a video on how to use the geolocation packagr

[Nabsc]

I dont understand. How can you disable the management access point but still interact with GUI

[justinboss]

What’s the point of the video if your blurring out the SSIDs we are suppose to see

[mfrederickson]

Can you do the same demo but from the C2 framework? Or if that's out there and I just missed it, give me the link? Thanks! Great video by the way...

[topsecret]

On my desktop I can't see the SSID Pool window on the right, all I see is Status!?