PiSavar

PiSavar - Detects PineAP module and starts deauthentication attack for fake access points - WiFi Pineapple Activities Detection About Project The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from bein...

Sweet-Pineapple-Builder

Sweet WiFi Pineapple Tetra Builder Sweet Pineapple Builder is a python script that automate the whole process of creating a custom WiFi Pineapple Tetra image. As the WiFi Pineapple Tetra firmware is a custom version of OpenWrt 19.07.2, it is therefore possible to create our own custom firmware...

WiFi-Pineapple-MK7_REST-Client

WIFI PINEAPPLE MARK VII - REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright :...

PiFinger

| \ | | | | | | | | .--. .--./ .---. .--. | / | | | | .-. | / /';/ /\ /'\ | | | | | | | | | | | | \ .//| ., | | || || ||.', '..' --- Just for fun and security @octosec --- --- W:besimaltinok.com | T:altnokbesim...

wifi-pineapple-cloner-builds

Wifi Pineapple Cloner: Builds For a long time I have noticed that there are people stealing the authorship of this project that started in 2018. Also there is people who go further and are selling the devices ready to use... So to prevent anyone from being scammed paying for something that is...

WiFi-Pineapple-MK7_Evil-Portal

WIFI PINEAPPLE MARK VII - EVIL PORTAL The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.0.0 Copyright :...

wifi-pineapple-cloner-builds

Wifi Pineapple Cloner: Compilaciones Durante mucho tiempo he notado que hay personas que roban la autoría de este proyecto que comenzó en 2018. También hay personas que van más allá y están vendiendo los dispositivos listos para usar... Así que para evitar que alguien sea estafado pagando por alg...

WiFi-Pineapple-MK7_REST-Client - WiFi Hacking Workflow With WiFi Pineapple Mark VII API

PINEAPPLE MARK VII REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright ::...

PiKarma - Detects Wireless Network Attacks

Detects wireless network attacks performed by KARMA module fake AP. Starts deauthentication attack for fake access points Working Principle for PiKarma Collects all the packets from Wireless Network. Probe Response Analyses all the packets in real time. If PiKarma finds more than one SSID info fr...

PiFinger - Searches For Wifi-Pineapple Traces And Calculate Wireless Network Security Score

The purpose of this project is to determine whether the network we are connected for is opened by Wifi- Pineapple. In addition, the tool analyzes the wireless networks you have previously connected and gives you a security score. Features Is this network opened by pineapple? Have you been connect...

Hak5 WiFi Pineapple Pre-Configured Command Injection Vulnerability

Hak5 WiFi Pineapple is a penetration testing tool used in offensive wireless campaigns. A command injection vulnerability exists in the Hak5 WiFi Pineapple preconfiguration, which can be exploited by an attacker to use predictable anti-CSRF tokens based on session IDs...

CVE-2015-4624

Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens...

Cross site request forgery (csrf)

Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens...

CVE-2015-4624

Summary (CVE-2015-4624): Hak5 WiFi Pineapple devices v2.0–v2.3 are affected by predictable CSRF tokens enabling command injection during preconfiguration. The issue stems from an anti-CSRF weakness and use of default credentials, allowing unauthorized command execution on vulnerable devices. Rela...

CVE-2015-4624

Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens...

PT-2017-6771

Name of the Vulnerable Software and Affected Versions Hak5 WiFi Pineapple versions 2.0 through 2.3 Description The issue concerns the use of predictable CSRF tokens. Recommendations For versions 2.0 through 2.3, consider disabling CSRF token generation until a patch is available, or apply...

CVE-2015-4624: Improper Access Control

Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens...

Hak5 WiFi Pineapple 2.4 - Preconfiguration Command Injection (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Hak5 WiFi Pineapple Preconfiguration Command Injection', 'Description' = %q This module exploits a command injection...

Hak5 WiFi Pineapple Preconfiguration Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Hak5 WiFi Pineapple Preconfiguration Command Injection', 'Description' = %q This module exploits a login/csrf check bypass...

Hak5 WiFi Pineapple Preconfiguration Command Injection 2

This Metasploit module exploits a command injection vulnerability on WiFi Pineapples versions 2.0 and below and pineapple versions prior to 2.4. We use a combination of default credentials with a weakness in the anti-csrf generation to achieve command injection on fresh pineapple devices prior to...