WiFi Pineapple: Targeted MitM, Credential Harvesting, and More Fun

Webinar Registration

Most hacking and pentest tools are just software, but WiFi Pineapple is actual hardware - a rogue access point and WiFi pentest device that allows you to perform targeted man-in-the-middle attacks and facilitates many different ways to harvest credentials for websites, cloud platforms, SaaS portals, and on-prem extranet portals. The project started in 2008 and is still being actively maintained and developed by Hak5.

The Pineapple’s firmware is basically an embedded flavor of Linux, and the device itself comes in 2 variations:

  • Tetra – has 4 long range antennas, supports both 2.4 and 5GHz, and can run off USB or a DC adapter. It’s about the size of a consumer WiFi router
  • Nano – is pocket-sized and only supports 2.4 GHz, running off USB for power

The WiFi Pineapple has an API and support for extensions like the Evil Portal module, which is a collection of portals that can be loaded and used for phishing attacks against WiFi clients to obtain credentials or infect the victims with malware using the Hak5 WiFi Pineapple Tetra and Nano. It has pre-built, realistic-looking sign-in portals for Google, Starbucks, Twitter, Yahoo, Facebook, and many more.

Joseph Carson, who you may remember from some other great hacking webinars (e.g., hacking that power station) we’ve done together, will be joining me. Joseph will dive into how the Hak5 WiFi Pineapple works, including:

  • Overview of the Hak5 WiFi Pineapple
  • Configuring WiFi as Rogue WiFi Access Point
  • Setting up Credential Capture Portal
  • Stealing Cloud Credentials
  • Using Credential to steal privileged accounts

This is about much more than just the risks of public WiFi hotspots; it’s also about how users and endpoint devices can be duped into connecting to rogue access points that appear to be part of your trusted network.

Please join us for this real training for free session.

First Name:   
Last Name:   
Work Email:  
Phone:  
Job Title:  
Organization:  
Country:    
City:  
State:  
Zip/Postal Code:  
Industry:  
Company Size:
 

Your information will be shared with the sponsor.

By clicking "Submit", you're agreeing to our Privacy Policy and consenting to be contacted by us.

 

 

Additional Resources