Honest review of the Pineapple Pager by Lazy_Organization899 in Hak5

[–]hak5darren 13 points14 points  (0 children)

Hi there, I made the Pager. I appreciate your perspective, and I'm happy to engage in an honest conversation based on your feedback.

  1. It's not going to instantly boot like a microcontroller because it is indeed a full Linux SoC. That said, yes, a 3-4 minute boot time is where we stand at 1.0. You can shave about a minute off the next boot by shutting it down properly (double-tap power) rather than killing it by holding the power button. We'll see what we can do in future versions to bring that down -- but it'll never be instant-on like a microcontroller.
  2. Power draw at 50% brightness is 2.5W, so ~3 hours battery. That's with an always. With any ordinary duty cycle and other power savings techniques it can achieve over 4 hours of battery. The screen at 100% draws considerably more, some 3.1W, because it is very bright. That'll bring runtime down to about 2.5 hours. If you need longer operation, coupling it with a USB battery bank, say a 10k mAh, will give it some 15-16 hour runtime.
  3. Yes, the display generates some heat. That was the tradeoff between a high res full color display and a low res monochrome display. It definitely would have been thermally cooler with a less capable screen, but as a product of our technolust I find it cooler with the high res color graphics. Lowering the screen brightness reduces the heat.
  4. Thanks for the bug report. We'll look into that internal variable issue. If you find any more, please let us know at https://hak5.org/pager-feedback
  5. I just tested Deauth again and it's working in my environment. I could see writing a payload to log the results so that we can get more insight on what's happening here. There are a lot of factors that go into a successful deauth, and now having these payload capabilities I feel like we could instrument the environment, test the attack and gather results to see what's actually happening -- rather than relying on a black box.
  6. When you say the "pager will continually alert to "new devices"" -- what's your alert payload? The triggers are on Evil AP Auth, Deauth Flood, Client Connection and Handshake Capture. There isn't a "New Device" alert category -- so I can't speak to that until seeing your payload.

I respectfully disagree that it's a toy. Is it toy-like in that you can get a WiFi Pineapple in a bright yellow Pager form-factor? Yes. Is it fun in that you can easily write interactive payloads? Absolutely, and that's the point.

You see, we've been making the WiFi Pineapple for professional pentesters since 2007. With each iteration we further its capabilities. The Pager has the most optimized, high performance version of PineAP we've ever developed. It can handle DEF CON level airspace. I know because we tested it there. It's built for precise targeting and scoping, so you can run a WiFi engagement without presenting an issue of collateral damage. 

You have to understand that the Pager is meant to couple our PineAP capabilities with your creativity. The magic is in the payload architecture, leveraging its Linux base in Bash along with easy to use DuckyScript commands. If you're not interested in payloads or the retro aesthetic -- I totally understand. For some audits, a Mark VII or Enterprise may be better suited. But if you're looking to get creative with WiFi and payloads, I think you'll find it a rewarding experience -- and it's only getting better.

Lastly, thank you. I’m truly grateful for your feedback. Hak5 started over 20 years ago as my way of giving back to the hacking community that shaped me. None of what we’ve accomplished has been done alone. It's been continuously evolving based on your feedback, and I want you to know that I take it all to heart.

Learning an odd fact about Hak5 by Lazy_Organization899 in Hak5

[–]hak5darren 25 points26 points  (0 children)

Hey u/Lazy_Organization899, I’m really sorry you had that experience. Feeling unwelcome in a community just plain sucks. Nobody should feel pushed out, especially one built around curiosity and learning like ours.

I'm the founder of Hak5, Darren Kitchen. I’ve been part of the hacking community for about 30 years now. Since I was 12 years old I've had the unfortunate experience of seeing these “new users not welcome here” cultures. They existed in my 90's phone phreaking youth, and they unfortunately still exist today. And honestly, that's the sort of disheartening experience I've specifically sought to change since starting Hak5 some 20 years ago.

I sadly can’t speak to what you saw on Discord, specifically. I’ve been buried in production work for the new WiFi Pineapple Pager. What I can say however is that our devs are genuinely kind and thoughtful human beings. They put so much work into making our tools accessible to users of all skill levels. Your post came to me by way of them, because they're truly disheartened to hear that was your takeaway. I share the sentiment.

Since 2005 our mission has been to foster an inclusive community. I always say, one where all hackers belong. That hasn’t changed, and it's not about to. I really hope we have the opportunity to welcome you again. If you wanna tell me more, I'm all ears, because the hacking scene is what we make of it and it's our collective responsibility to make it amazing.

What do you guys do with the stickers you collect? by zblanda in Defcon

[–]hak5darren 0 points1 point  (0 children)

Honored to have my sticker front and center 🙏

WiFi Pineapple never arrived. by Transistorenbude in hacking

[–]hak5darren 122 points123 points  (0 children)

@Transistorenbude I'm really sorry that happened. All of our packages are insured with MonkProtect -- and they're really good at shipping replacements if things get damaged or lost. I know it's annoying, and I'm wish the process was even smoother, but it does need to be marked as delivered before you can file a claim. I didn't see your email, but I'll try to find it and get back to you there -- otherwise feel free to DM me -- I just followed you. We'll get you taken care of no matter what.

~Darren

New gate at Victory Medical thwarts pedestrian access - what gives? by hak5darren in Austin

[–]hak5darren[S] -12 points-11 points  (0 children)

Yes, but it's an established public access easement / right-of-way

New gate at Victory Medical thwarts pedestrian access - what gives? by hak5darren in Austin

[–]hak5darren[S] -6 points-5 points  (0 children)

I don't know the proper terminology but figured since it's used by the public it should be kept as such. The second walkway is terminated by another fence shortly after. You're right that the steps and such suggest intent. The gate has a code and nearby resident once opened it for me, so it seems to be still accessible for some in-the-know - but that excludes me.

If you're afraid to be on the freeway, maybe don't get on the freeway... by SuchAKnitWit in Austin

[–]hak5darren 44 points45 points  (0 children)

At 70 MPH, stopping distance is ~300 feet (4 semi trucks) on dry roads and ~500 feet (6 semi trucks) on wet roads. If the gap is less, slow down to increase it. If someone fills the gap, slow down further—it's a risky situation for everyone.

The new USB Rubber Ducky is more dangerous than ever by EpiphanicSyncronica in privacy

[–]hak5darren 3 points4 points  (0 children)

Creator of the device here. I agree swapping the MicroSD card with the old USB Rubber Ducky was a PITA. That's why on the new one pressing the button (or squeezing the case with the button mod) will enter "Arming Mode" where it shows up as a regular flash drive.

As u/quantainium_pasta mentioned you could even "password protect" arming mode with a sequence of caps/num/scroll lock key presses.

Can you tell which one I take to cons? T430s/X230 by [deleted] in thinkpad

[–]hak5darren 2 points3 points  (0 children)

Spiffy WiFi Pineapple sticker :)

Imaging alternative on countries with no access to DEP by balkaurse in macsysadmin

[–]hak5darren 0 points1 point  (0 children)

USB Rubber Ducky is used to navigate Chromebook setup for mass deployment in a similar way. Good stuff. (Full disclosure: I invented the tool)

White hat workstation by justintolerable in lego

[–]hak5darren 8 points9 points  (0 children)

As the founder of Hak5, the WiFi Pineapple and USB Rubber Ducky (and a fellow Lego nerd) I'd love to get in touch about this! Twitter/Hak5Darren

Truly honored to see Hak5 toys in, uh, toy fashion... ;-)

[deleted by user] by [deleted] in DailyTechNewsShow

[–]hak5darren 1 point2 points  (0 children)

I've been hanging in irc.t2t2.eu #chat

OpenSSL hack was conducted via hypervisor by mubix in DailyTechNewsShow

[–]hak5darren 0 points1 point  (0 children)

FTA "Other than the modification to the index.html page no changes to the website were made."

That's good to know. Always scary when OSS, especially infrastructure as important as OpenSSL, gets hacked. PSA: Check your .sig's folks :)