Monday, January 20. 2014

Nodogsplash is a program that creates a captive portal.

Captive portals are the controls / webpages that restrict access to wifi networks. Modern devices auto detect captive portals and even prompt you to enter the web page. So combined with karma on the pineapple, we now have a device that actively is trying to show content to wifi devices.

One of the basic uses of the wifi pineapple is to "rick-roll" visitors to the site. This doesn't require nodogsplash as the pineapple has a different infusion for that.

So, why use nodogsplash? Well, one reason is to try to emulate free wifi hotspots. With a little bit of grabbing of pages and images, you can make the pineapple look like most other free wifi networks out there. Of course, you can always add your own little bit of code, like a javascript hook...

What is Karma?

Sunday, January 19. 2014
Security Wifi

"KARMA is a set of tools for assessing the security of wireless clients at multiple layers. Wireless sniffing tools discover clients and their preferred/trusted networks by passively listening for 802.11 Probe Request frames. From there, individual clients can be targeted by creating a Rogue AP for one of their probed networks (which they may join automatically) or using a custom driver that responds to probes and association requests for any SSID.  Higher-level fake services can then capture credentials or exploit client-side vulnerabilities on the host." -

 So, running Karma on your wifi router allows you to entice users on your network. Once onyour network, the real fun can begin.

Wifi Pineapple

Saturday, January 18. 2014
Security Wifi

Over Christmas, I decided to buy a new Wifi Pineapple from Hak5's hakshop. For the uninitiated, the wifi pineapple is a tool for pen testing wireless. 

Essentially, the tool is a wifi router with twin 802.11 radios, running openwrt supporting karma and a variety of modules ready to use.

  • CPU: 400 MHz MIPS Atheros AR9331 SoC.

  • Memory: 16 MB ROM, 64 MB DDR2 RAM

  • Disk: Micro SD support up to 32 GB, FAT or EXT, 2 GB Included

  • Mode Select: 5 DIP Switches - 2 System, 3 User configurable

  • Wireless: Atheros AR9331 IEEE 802.11 b/g/n + Realtek RTL8187 IEEE 802.11 a/b/g

  • Ports: (2) SMA Antenna, 10/100 Ethernet, USB 2.0, Micro SD, TTL Serial, Expansion Bus

  • Power: DC in Variable 5-12v, ~1A, 5.5mm*2.1mm connector, International Power Supply

  • Status Indicators: Power LED, Ethernet LED, Wireless 1 LED, Wireless 2 LED