Public WiFi can be be very dangerous - especially if Cori is around with a hak5 wifi pineapple! // MENU // 00:00 - Coming up 00:38 - Intro 00:49 - The WiFi Pineapple 03:21 - Hak5 tools 04:14 - WiFi Pineapple MK7 start-up demo 09:03 - Cori's favourite Alfa adapter 09:45 - Practical attack methods in pentesting 13:14 - WiFi Pineapple MK7 start-up demo (continued) 14:06 - Dumbest passwords (in the real world) 17:42 - How real-world pentesters crack WiFi passwords 18:24 - WiFi Pineapple MK7 technical demo 30:03 - Evil Portal 30:59 - WiFi Pineapple MK7 technical demo (continued) 33:12 - Your passwords aren't safe 35:03 - WiFi Pineapple MK7 technical demo (continued) 39:42 - Getting credentials with an Evil Portal 42:20 - WiFi cracking in real-world pentesting 46:44 - Conclusion // Previous video // She hacked me: th-cam.com/video/U6pDqFhN82I/w-d-xo.html // Buy Hak5 coolness here // Buy Hak5: davidbombal.wiki/gethak5 // Recommended WiFi adapters // Alfa AWUS036NHA: amzn.to/3wnyVen Alfa AWUS036ACM: amzn.to/3fCL4WT Alfa AWUS036ACH: amzn.to/3rLAjny or amzn.to/2PxkkMV Others: Alfa AWUS1900: amzn.to/31E0AtH Alfa Long-Range Dual-Band AC1200: amzn.to/34UUCEL Alfa AWUS036NEH: amzn.to/3sK2iW8 Panda PAU05: amzn.to/3ue23Da Panda PAU06: amzn.to/3wwqRZ8 Panda PAU09: amzn.to/3wosx6X WiFi Nation 802.11ac AC600: amzn.to/3cLQddm WiFi Nation Atheros AR9271: amzn.to/3u8JUqm // Cori's SOCIAL // Twitter: twitter.com/corg_e Website: www.corgima.com/ // People Mentioned // Blake: twitter.com/BlizzyBlake278 Shannon Twitter: twitter.com/Snubs Shannon TH-cam: th-cam.com/users/ShannonMorse Matt Weir: th-cam.com/video/0WPny7wk960/w-d-xo.html Darren: twitter.com/hak5darren // David's SOCIAL // Discord: discord.gg/davidbombal Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal TH-cam Main Channel: th-cam.com/users/davidbombal TH-cam Tech Channel: th-cam.com/channels/ZTIRrENWr_rjVoA7BcUE_A.html TH-cam Clips Channel: th-cam.com/channels/bY5wGxQgIiAeMdNkW5wM6Q.html TH-cam Shorts Channel: th-cam.com/channels/EyCubIF0e8MYi1jkgVepKg.html Apple Podcast: davidbombal.wiki/applepodcast Spotify Podcast: open.spotify.com/show/3f6k6gERfuriI96efWWLQQ // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Disclaimer: This video is for educational purposes only. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Wait a second... You mean to tell me that the "McCorgi Free WiFi" I've been connecting to every day might not be legit?.. Can't trust anything these days. Great content from you two, as usual! Love these segments!
Thanks a lot David for all your video.Being an absolute beginner myself your "boomer" questions help me a lot and has taught me those little intricacies that I mostly used to struggle with.
Little bit of a mistake in the video, the MkVII (Mk 7) does NOT do 5Ghz out of the box, you need to install a compatible 5Ghz radio to use that, however the firmware supports it out of the box.
I just got a Mark VII for an early bday present and it is a DOA. I was super excited to utilize it and learn more about doing some pentesting. Your videos have really helped me learn a lot! Cori is super intelligent and love the knowledge!! Keep up the awesome content! Hope you do more content with Cori in the future!
@@melvinndlovu7083 Of course! For starters, what kind of pentesting are you wanting to try? There a few different kinds of pentests you can practice just depends where you want to start
Great video as always again! Thanks, you! It could be great if you do a video with Cori about her choices of Laptop, OS, etc., for real world pentesting. Top 5 books, certs, path, etc... And show us how she uses her Alfa instead of the Pineapple, because I think you learn a lot more when you do the things instead of use something prebuilt. Already looking forward to your next videos!
You know, the genius part about hacking at your local McDonalds is that you can have high latency between your "middleman" system and the real network, and the victim will just blame it on McDonalds WiFi being slow as usual.
Thank you for this video. It is quite helpful. Thank you David for getting into the details and asking questions that help me because I am new to all of this.
Side Note: you can also configure and access the Pineapple from a phone. You can also power it from a Power Pack and login to the SSID to configure and utilize the PineAP suite.
27:45 Unfortunately, most of the modules were not updated for the MKVII. Hak5 has stated that modules like SSLstrip, DWall, DNSspoof, and CursedScreech are outdated and deprecated.
Indeed and it's absolutely true, most of the great modules for older generations are now built into the PineAP suite out of the box and most of the modules that are missing are missing because they're useless in this day and age SSLStrip etc, absolutely useless since circa 2017. It's also worth noting that there's pre compiled packages too that users can install. So if there isn't a module for it there may well be a package for it (and you can just hit it via the CLI).
34:46 Just a note, Android has the ability to open Wifi settings and share your wifi setup with friends / family using a QR code so you don't have to struggle to share that crazy password. Reading a network QR is available on the same settings page.
it should be noted that 2.4 ghz works on the Pineapple out of the box, but the 5 ghz requires an additional adapter. idk if thats already been established, though.
So... love the pineapple... but it doesn't come with 5ghz capabilities stock. You have to add the MKA7 adapter and then it has 5ghz capabilities as well. just fyi...
Well done ! As usual great content ! Bravo to both of you! I have a question ...in order to become a real hacker, should I buy a hoodie or my shabby t-shirt could be just ok ? 🤣🤣🤣🤣🤣🤣
What you covered with the Pineapple is all the info that's already on the internet & has been done a dozen times.. You should have gone more in-depth with the PineAP Suite 'Advanced Mode', using it with campaigns.. there is barely anything on the net about it, and it's weird bcuz that's like its main feature.. also more in-depth with campaigns.. Those would make good videos, bcuz there are *NONE* on the net.. some more video ideas (in-depth) would be like: PineAP Suite 'Advanced Mode', Campaigns, the generated Handshakes (Full/Partial PCAP & Full/Partial Handshake) & what to do after.., SSID Cloning (Karma attack), creating custom WIFI vendor pages (Linksys, TP-Link, etc) & apply them with the Advanced option in Evil Portal.. so when it does Karma attack & clones SSID it can use their WIFI Vendor correct router page... Basically start to finish like it was a client job.. I started with a 2mW WIFISky with a Yagi & Kali (Backtrack, yes that long ago)
Hola señor David Bombal, Felicidades por su trabajo, soy un usuario que me gusta la seguridad informática, soy de España, quisiera preguntar si habría la posibilidad de activar la traducción de sus video en Español y que las personas hispano parlantes pudiéramos disfrutar de sus vídeos tan interesates, si no hay posibilidad de traducción de los videos lo entiendo, gracias de todas formas, estoy aprendiendo inglés pero falta mucho para poder entender, buenos días Señor David Bombal.
The Mark VII is trash (as of this posting). I was inspired to buy/try it and, while it worked the first time (out of the box), it quickly became incapable of doing anything (literally 'anything') and is now an expensive paper weight. As I think back to when I first watched this video, I should have known; (1) Corgi said at 1:25 that it's not something she actually uses (the device was her friend's) and (2) David thanked Corgi 46:59 for muscling through all of the 'technical issues' w/t device (which we did not see) during the making of this video. BUYER BEWARE! In any event, Corgi's insight and experience is always appreciated and worth listening to... thank you!
I have to agree. There aren't enough lessons on the wifi pineapple to really make it useful. I found myself as well as others still using Kali Linux for many of the functions. I have a cyber security backgound, and this thing just isn't performing like it was hyped up to be. When i do find video lessons on using the pineapple, they always still use linux and only use the pineapple as a wifi interface.
Great video! A question about connecting to pinapples or fake WIFIs in public places; what does this data look like when a user connects to the pinapple/ fake network capturing data then connects to their VPN? What is captured in the first few seconds before connection to the VPN and after connection to the VPN what can be seen?
I find this very interesting, however it is difficult (for me) to understand Cori due to the echo in her room/mic. Maybe next time, she can use a better room
Cori was correct. The gui version of nmap is called zenmap, however they do the same thing so my guess is, if pine-ap is using a gui-based nmap, its probably just simpler to call it Nmap because most beginner cybersecurity enthusiasts know Nmap but don't know zenmap.
I was there in the last video with corgi too, and I gotta admit, I got some real info there I asked her on twitter how to actually send a phishing email without it ending up in the spam box of Gmail, and got help with it too!
Pineapple has very low gain antennas and actually is not that useful against WPA Enterprise networks where computers use certificates to authenticate. Sure, you can set up an evil captive portal but pineapple's range is so poor that it's hard to really attract people to join your evil portal because almost noone will be in the range :-/ Also, be aware that Pineapple Enterprise is much more superior to Pineapple Mark VII in terms of network interfaces but... apps (modules) are not necessarily aware of that and e.g. EvilPortal works only as 5 GHz because it uses the last openAP interface and you cannot have only one OpenAP interface (you can try shut down something with ifconfig but it's not that easy. At the end it takes quite a time to have it all running. From my experience it's good to have Pineapple but Alfa adapter is a must because of it's portability. And you really want to buy those Alfa directional antennas with 8-10 dBi gain, it makes a difference :-) I would recommend having two Alfa adapters (more interfaces= more flexibility) and a Pineapple, preferrably Enterprise for it's capabilities, but a detrimental thing is it's lack of portability.
I really want to see more demos on the hak5 omg cables. I really want to see just how far those cables can go. There isn’t too much information on them atm
I would like to see work with bad usb scripts. Like a refreshing breakdown of that. Also thanks for this pineapple video. Hmmm maybe a video breaking down beginner scripts (windows ducky)
I like the EFF sweatshirt... I have the same one, too bad the material is so low grade (polyester-cotton). I would pay the EFF double for a good quality cotton version!
i was the opposite. I started with a hak5 pineapple and learned more from using tools like the aircrack suite and fern then went back to the pineapple to apply what i had learned. I guess it was just the lack of real documentation and youtube videos that made all that happen the way it did .
I feel like that whole "setting the IP" bit at the start was extremely poorly explained. It looked like she was giving her own Windows machine that IP that ended in .42 but for some reason kept saying that's the IP that was assigned to the pineapple. The pineapple clearly had the IP that ended in .1 and that's why that's what she connects to in the browser. Maybe just a communication issue or me misunderstanding what she was saying but idk it didn't fill me with confidence that I was going to get good technical info from the rest of the video
I purchased the Wifi Pineapple Mark VII, never worked could not get support for it the firmware re-flashing thing never worked either and to this day it has only ever been a paper weight. I would recommend you looking on reddit for other peoples' experience with it also. Kind of amazed me how many people are in the same boat. And yes I have emailed them directly and they send me to the forum which leads only to more frustration. buyer beware.
I see a lot of apps that work on Android and I'm sure there are also some for Apple that give much more information about the WIFI without the need for Kali or typing, they may be based on NMAP and I would be happy if you did a review of these programs.
so even with all this can view encrypted traffic? aka https and or a vpn? i connected to mcD's wifi and they only ask to click yes on a webpage for confirmation. can it then capture say any credentials from my bank and or rdp connections credentials?..i did a basic scan but couldn't see any other clients on it.clients set to ne able to see each other...they slow as mudd tho, 5Mbps
really good contet. Do you recommend Pentest / Security Audit Solutions where we can generate PDFs? Im currently thinking to use Nessus and Cis Cat pro.
Logins to my guest network are isolated from other devices so I use a nothing password for guests. But how reliable is that setting? Sure, I set it in my router, but does someone just need to be in security kindergarten (as opposed to security preschool special ed like me) to know how to over-ride and connect to other devices?
I would like to see Cory demonstrate EVERY ONE of the Hak5 tools. Esp some more advanced scripting with the RubberDucky. .ps Thank you David for another great video!
Quick question, a lot of people use multiple words combined together, but what about using a different language? I'm in America and speak English, but I know a couple other languages, would it help me/ hurt me/ or be indifferent to my password strength of I used words in different languages?
Public WiFi can be be very dangerous - especially if Cori is around with a hak5 wifi pineapple!
// MENU //
00:00 - Coming up
00:38 - Intro
00:49 - The WiFi Pineapple
03:21 - Hak5 tools
04:14 - WiFi Pineapple MK7 start-up demo
09:03 - Cori's favourite Alfa adapter
09:45 - Practical attack methods in pentesting
13:14 - WiFi Pineapple MK7 start-up demo (continued)
14:06 - Dumbest passwords (in the real world)
17:42 - How real-world pentesters crack WiFi passwords
18:24 - WiFi Pineapple MK7 technical demo
30:03 - Evil Portal
30:59 - WiFi Pineapple MK7 technical demo (continued)
33:12 - Your passwords aren't safe
35:03 - WiFi Pineapple MK7 technical demo (continued)
39:42 - Getting credentials with an Evil Portal
42:20 - WiFi cracking in real-world pentesting
46:44 - Conclusion
// Previous video //
She hacked me: th-cam.com/video/U6pDqFhN82I/w-d-xo.html
// Buy Hak5 coolness here //
Buy Hak5: davidbombal.wiki/gethak5
// Recommended WiFi adapters //
Alfa AWUS036NHA: amzn.to/3wnyVen
Alfa AWUS036ACM: amzn.to/3fCL4WT
Alfa AWUS036ACH: amzn.to/3rLAjny or amzn.to/2PxkkMV
Others:
Alfa AWUS1900: amzn.to/31E0AtH
Alfa Long-Range Dual-Band AC1200: amzn.to/34UUCEL
Alfa AWUS036NEH: amzn.to/3sK2iW8
Panda PAU05: amzn.to/3ue23Da
Panda PAU06: amzn.to/3wwqRZ8
Panda PAU09: amzn.to/3wosx6X
WiFi Nation 802.11ac AC600: amzn.to/3cLQddm
WiFi Nation Atheros AR9271: amzn.to/3u8JUqm
// Cori's SOCIAL //
Twitter: twitter.com/corg_e
Website: www.corgima.com/
// People Mentioned //
Blake: twitter.com/BlizzyBlake278
Shannon Twitter: twitter.com/Snubs
Shannon TH-cam: th-cam.com/users/ShannonMorse
Matt Weir: th-cam.com/video/0WPny7wk960/w-d-xo.html
Darren: twitter.com/hak5darren
// David's SOCIAL //
Discord: discord.gg/davidbombal
Twitter: twitter.com/davidbombal
Instagram: instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
TH-cam Main Channel: th-cam.com/users/davidbombal
TH-cam Tech Channel: th-cam.com/channels/ZTIRrENWr_rjVoA7BcUE_A.html
TH-cam Clips Channel: th-cam.com/channels/bY5wGxQgIiAeMdNkW5wM6Q.html
TH-cam Shorts Channel: th-cam.com/channels/EyCubIF0e8MYi1jkgVepKg.html
Apple Podcast: davidbombal.wiki/applepodcast
Spotify Podcast: open.spotify.com/show/3f6k6gERfuriI96efWWLQQ
// MY STUFF //
www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Disclaimer: This video is for educational purposes only.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Is a VPN enough?
Cori is an absolute hacker beast and it's a pleasure seeing her again. Great content as always mr.David keep it up!
Cori is amazing! I'm so grateful that she's willing to share with all of us!
W
🖤
i asume thats why she got the witch-like thumbnail as an tribute ;)
@@balduron97 bro is a female version of Rami Malek 😅
I love what's going on with this channel. These videos are worth the effort to create.
Glad you like them!
Wait a second... You mean to tell me that the "McCorgi Free WiFi" I've been connecting to every day might not be legit?.. Can't trust anything these days.
Great content from you two, as usual! Love these segments!
lol!! I'm sure that wifi is working well for you :)
Great video David sir. Thank you for always bringing this type of content which helps us a lot.
You're welcome! Glad you enjoyed the video!
I hope this is a another vid in a LONG list of upcoming series of videos featuring Cori ... she is an awesome guest !
Agreed Jim! Cori is amazing!
Cori is such a joy to watch. Love her ❤️
David, Cori was awesome once again! Please have her come back to review and use some more of the Hak 5 products if it all possible.
I love the way you ask questions, so smart, and your humble voice. Awesome video. Thanks you
Thanks a lot David for all your video.Being an absolute beginner myself your "boomer" questions help me a lot and has taught me those little intricacies that I mostly used to struggle with.
Thank you Saleem! That means I'm doing my job right :)
@@davidbombal oh for sure!! i think you always ask the most relevant and interesting questions and it helps me understand so much!
Little bit of a mistake in the video, the MkVII (Mk 7) does NOT do 5Ghz out of the box, you need to install a compatible 5Ghz radio to use that, however the firmware supports it out of the box.
I just got a Mark VII for an early bday present and it is a DOA. I was super excited to utilize it and learn more about doing some pentesting. Your videos have really helped me learn a lot! Cori is super intelligent and love the knowledge!! Keep up the awesome content! Hope you do more content with Cori in the future!
Yo from south africa here ... Looking on sharing pentesting ideas .. If you dont mind 🙏🏼🙏🏼
@@melvinndlovu7083 Of course! For starters, what kind of pentesting are you wanting to try? There a few different kinds of pentests you can practice just depends where you want to start
Great video as always again! Thanks, you!
It could be great if you do a video with Cori about her choices of Laptop, OS, etc., for real world pentesting.
Top 5 books, certs, path, etc...
And show us how she uses her Alfa instead of the Pineapple, because I think you learn a lot more when you do the things instead of use something prebuilt.
Already looking forward to your next videos!
Really David, do you have to ask which one! All of THEM!!!! Keep her coming back and sharing more of this hacking goodness!👨💻
lol.... love it!
You know, the genius part about hacking at your local McDonalds is that you can have high latency between your "middleman" system and the real network, and the victim will just blame it on McDonalds WiFi being slow as usual.
Gonna try this thanks
Yeah totally not legal mate.
@@hackerhacker8578lmao good thing it’s virtually untraceable 😭
The genius part is talking about it on the internet. Oh wait…
@@CentralBase I know, right? Nobody will find out! :P
Thanks, David I really enjoyed your last video with Cori
Glad you enjoyed i Michael. Cori is amazing!
Please make a video regarding SPF, DKIM and DMARC and how important these are when it comes to Email Security!
I just got a Mark VII and this is great! Thanks for such great content!
Watching these videos I realise that there is nothing left of the 90s hacking culture.
SubSeven got me into the game back then
Nice Interview David!! Many thanks and love from Uganda\
Thank you JRR!
Great video David thanks for these
You're welcome!
Thank you for this video. It is quite helpful. Thank you David for getting into the details and asking questions that help me because I am new to all of this.
Congratulations, our dear teacher, he has reached a million subscribers. I am glad that I was a subscriber with him from the beginning
Love this content! Very intelligent and talented woman. Corgi is awesome!
Corgi lol
Great Video, David! Thanks, definitely gonna share this information
Glad it was helpful!
Love you sir and your all content
Thank you!
Side Note: you can also configure and access the Pineapple from a phone.
You can also power it from a Power Pack and login to the SSID to configure and utilize the PineAP suite.
Most the time I am using it from my phone with it powered by a anker power pack.
@@pcap_pirate960 Same
Great vid, thanks to Cori for being there and showing us.
Glad you enjoyed it
Should do a BASH BUNNY and or LAN TURTLE breakdown. Honestly any of the hak5 plug in tools. Corgi is awesome!
Great content David and Cori.Thank you for sharing
The evil twin part is a winner. thank you so much for this content David!!
You're welcome Alex!
27:45 Unfortunately, most of the modules were not updated for the MKVII. Hak5 has stated that modules like SSLstrip, DWall, DNSspoof, and CursedScreech are outdated and deprecated.
Indeed and it's absolutely true, most of the great modules for older generations are now built into the PineAP suite out of the box and most of the modules that are missing are missing because they're useless in this day and age SSLStrip etc, absolutely useless since circa 2017.
It's also worth noting that there's pre compiled packages too that users can install. So if there isn't a module for it there may well be a package for it (and you can just hit it via the CLI).
@@PanicAcid excellent explanation and suggested work around.
Awesome job David, Cori is an amazing hacker so happy you brought her back. Keep up the amazing job in teaching us. You Rock!
Thank you! Cori is such a rockstar!
The quality of this video is awesome
David, you can use McDonald's Wifi but with a helping of Pineapple!
lol... very good!
I like the way she demos this, she assumes you know what you're doing then shows you the cool stuff. I'm game
Awesome, I loved the last video she was on! So down to earth and knowledgeable.
this is so entertaining to watch, i'm just preparing my ccna but i might get in this field in the future, who knows just starting hehe
34:46 Just a note, Android has the ability to open Wifi settings and share your wifi setup with friends / family using a QR code so you don't have to struggle to share that crazy password. Reading a network QR is available on the same settings page.
Yeah I really miss that feature on my current phone which isn't Android, it was very handy.
As always great video ! How can we create a custom connection page for the Evil Portal ?
Great video david sir. Thank you so much for sharing your knowledge. It's help me lot
it should be noted that 2.4 ghz works on the Pineapple out of the box, but the 5 ghz requires an additional adapter. idk if thats already been established, though.
Thanks, i was confused by this and wondering too 👍
I'd love to see the BashBunny using the HID in any other keyboard layout but us. Great content!
So... love the pineapple... but it doesn't come with 5ghz capabilities stock. You have to add the MKA7 adapter and then it has 5ghz capabilities as well. just fyi...
Well done ! As usual great content ! Bravo to both of you! I have a question ...in order to become a real hacker, should I buy a hoodie or my shabby t-shirt could be just ok
? 🤣🤣🤣🤣🤣🤣
there are alot of written tutorials out there about diy pineapples why dont you make one in a video? there arent any videos about it afaik
What you covered with the Pineapple is all the info that's already on the internet & has been done a dozen times.. You should have gone more in-depth with the PineAP Suite 'Advanced Mode', using it with campaigns.. there is barely anything on the net about it, and it's weird bcuz that's like its main feature.. also more in-depth with campaigns.. Those would make good videos, bcuz there are *NONE* on the net.. some more video ideas (in-depth) would be like: PineAP Suite 'Advanced Mode', Campaigns, the generated Handshakes (Full/Partial PCAP & Full/Partial Handshake) & what to do after.., SSID Cloning (Karma attack), creating custom WIFI vendor pages (Linksys, TP-Link, etc) & apply them with the Advanced option in Evil Portal.. so when it does Karma attack & clones SSID it can use their WIFI Vendor correct router page... Basically start to finish like it was a client job..
I started with a 2mW WIFISky with a Yagi & Kali (Backtrack, yes that long ago)
Hola señor David Bombal,
Felicidades por su trabajo, soy un usuario que me gusta la seguridad informática, soy de España, quisiera preguntar si habría la posibilidad de activar la traducción de sus video en Español y que las personas hispano parlantes pudiéramos disfrutar de sus vídeos tan interesates, si no hay posibilidad de traducción de los videos lo entiendo, gracias de todas formas, estoy aprendiendo inglés pero falta mucho para poder entender,
buenos días Señor David Bombal.
No if youre writing it in Spanish
If you use closed captioning CC > select auto translate > select the language you desire, then you will see the captions translated.
The Mark VII is trash (as of this posting). I was inspired to buy/try it and, while it worked the first time (out of the box), it quickly became incapable of doing anything (literally 'anything') and is now an expensive paper weight. As I think back to when I first watched this video, I should have known; (1) Corgi said at 1:25 that it's not something she actually uses (the device was her friend's) and (2) David thanked Corgi 46:59 for muscling through all of the 'technical issues' w/t device (which we did not see) during the making of this video. BUYER BEWARE!
In any event, Corgi's insight and experience is always appreciated and worth listening to... thank you!
I have to agree. There aren't enough lessons on the wifi pineapple to really make it useful. I found myself as well as others still using Kali Linux for many of the functions. I have a cyber security backgound, and this thing just isn't performing like it was hyped up to be. When i do find video lessons on using the pineapple, they always still use linux and only use the pineapple as a wifi interface.
David is the real deal. Cori seems really cool too!
I love these videos! I’m learning sooo much
I like the "Hacky Hacks" sign behind her, lol.
Great video. Was just curious, if you are in range with good signal, can you just use wireless adapter in the laptop ?
I would love to see the methodology behind doing this with wpa3 enabled ap’s
They both are insanely smart my goal is to learn as much as them
Great video! A question about connecting to pinapples or fake WIFIs in public places; what does this data look like when a user connects to the pinapple/ fake network capturing data then connects to their VPN? What is captured in the first few seconds before connection to the VPN and after connection to the VPN what can be seen?
Thanks guys, really appreciate it!
I find this very interesting, however it is difficult (for me) to understand Cori due to the echo in her room/mic. Maybe next time, she can use a better room
Maybe a mic
The closed captions are pretty accurate. Not 100% but close enough. Better than I expected anyway.
I travel for work and keep a raspberry pi with me that I use as a router between the public wifi and my laptop while in hotels.
Cori was correct. The gui version of nmap is called zenmap, however they do the same thing so my guess is, if pine-ap is using a gui-based nmap, its probably just simpler to call it Nmap because most beginner cybersecurity enthusiasts know Nmap but don't know zenmap.
thanks a lot David .you always invite good guest
I was there in the last video with corgi too, and I gotta admit, I got some real info there
I asked her on twitter how to actually send a phishing email without it ending up in the spam box of Gmail, and got help with it too!
Cori is great! I'm grateful that she's willing to share her knowledge and experience with all of us :)
Pineapple has very low gain antennas and actually is not that useful against WPA Enterprise networks where computers use certificates to authenticate. Sure, you can set up an evil captive portal but pineapple's range is so poor that it's hard to really attract people to join your evil portal because almost noone will be in the range :-/
Also, be aware that Pineapple Enterprise is much more superior to Pineapple Mark VII in terms of network interfaces but... apps (modules) are not necessarily aware of that and e.g. EvilPortal works only as 5 GHz because it uses the last openAP interface and you cannot have only one OpenAP interface (you can try shut down something with ifconfig but it's not that easy.
At the end it takes quite a time to have it all running.
From my experience it's good to have Pineapple but Alfa adapter is a must because of it's portability. And you really want to buy those Alfa directional antennas with 8-10 dBi gain, it makes a difference :-)
I would recommend having two Alfa adapters (more interfaces= more flexibility) and a Pineapple, preferrably Enterprise for it's capabilities, but a detrimental thing is it's lack of portability.
Is there anyway to upgrade the antennas to gain more range or add wifi 6e compatibility?
Very knowledgeable stuff, she knows her stuff
I really want to see more demos on the hak5 omg cables. I really want to see just how far those cables can go. There isn’t too much information on them atm
I would like to see work with bad usb scripts. Like a refreshing breakdown of that. Also thanks for this pineapple video.
Hmmm maybe a video breaking down beginner scripts (windows ducky)
Great video lots of information. It all seems very complicated to someone who's just starting down this rabbit hole cyber security.
Cori is awesome!! Love to watch her
I like the EFF sweatshirt... I have the same one, too bad the material is so low grade (polyester-cotton). I would pay the EFF double for a good quality cotton version!
great vid! is it possible to use the wifi pineapple and a second network adapter to connect to a different network?
Her facial expressions are completely insane, in a good way))
Cori im in Nashville too! Does she run seminars meetups etc!?
Fire Video David !
Thank you!
Great video and info sir. Thank you David
Great Video, David! Thanks
The Flipper can do Evil Portal, now.
i was the opposite. I started with a hak5 pineapple and learned more from using tools like the aircrack suite and fern then went back to the pineapple to apply what i had learned. I guess it was just the lack of real documentation and youtube videos that made all that happen the way it did .
I usually play informational videos in the background, and learn a little less for it. Thanks to Cori, I paid rapt attention.
love your content sir
Very happy to hear that!
I feel like that whole "setting the IP" bit at the start was extremely poorly explained. It looked like she was giving her own Windows machine that IP that ended in .42 but for some reason kept saying that's the IP that was assigned to the pineapple. The pineapple clearly had the IP that ended in .1 and that's why that's what she connects to in the browser. Maybe just a communication issue or me misunderstanding what she was saying but idk it didn't fill me with confidence that I was going to get good technical info from the rest of the video
If it's real, if it's relevant, then David B is in the house!!!!
instead of commenting "I love you, I like you" etc stuff, just press the like button
Please do both shark jack and lan turtle! Thanks for your work
You should do more videos with Cori, she is really smart. Does Cori have a youtube channel?
Great job. Great content. Thank you. Could you do a video to demonstrate how to use sslsplit module with wifiPineApple MKVII ?
I purchased the Wifi Pineapple Mark VII, never worked could not get support for it the firmware re-flashing thing never worked either and to this day it has only ever been a paper weight. I would recommend you looking on reddit for other peoples' experience with it also. Kind of amazed me how many people are in the same boat. And yes I have emailed them directly and they send me to the forum which leads only to more frustration. buyer beware.
Wht specific problem are you having?
I see a lot of apps that work on Android and I'm sure there are also some for Apple that give much more information about the WIFI without the need for Kali or typing, they may be based on NMAP and I would be happy if you did a review of these programs.
so even with all this can view encrypted traffic? aka https and or a vpn? i connected to mcD's wifi and they only ask to click yes on a webpage for confirmation. can it then capture say any credentials from my bank and or rdp connections credentials?..i did a basic scan but couldn't see any other clients on it.clients set to ne able to see each other...they slow as mudd tho, 5Mbps
I do t think it does support 5ghz without also having the MK7AC adapter. Cool kit though.
really good contet. Do you recommend Pentest / Security Audit Solutions where we can generate PDFs? Im currently thinking to use Nessus and Cis Cat pro.
Logins to my guest network are isolated from other devices so I use a nothing password for guests. But how reliable is that setting? Sure, I set it in my router, but does someone just need to be in security kindergarten (as opposed to security preschool special ed like me) to know how to over-ride and connect to other devices?
Lan turtle will be handy to see what she does with it. Rubber ducky is old but lovable.
So what to do if you travel to other country? Hotel for example
Is there any wifi pineapple module to gain access to an Intelbras security camera dvr?
I would like to see Cory demonstrate EVERY ONE of the Hak5 tools. Esp some more advanced scripting with the RubberDucky.
.ps Thank you David for another great video!
She's smart. And pretty to ! Great video. Usefull spend time. As always whit your channel David. Happy subscriber.
Please make a video with the shark jack 🥺
Quick question, a lot of people use multiple words combined together, but what about using a different language? I'm in America and speak English, but I know a couple other languages, would it help me/ hurt me/ or be indifferent to my password strength of I used words in different languages?
Yeah it would help but i think the point is to not use words at all.
Good stuff mate!
My wife makes the craziest complex passwords it’s funny lol she makes me proud.