WiFi Pineapple: your first connection
So you’ve built, borrowed or bought a WiFi Pineapple and you’re new to OpenWRT and Jasager. Hopefully this guide will familiarize you with the many aspects of the the WiFi Pineapple. If you have specific questions please leave a comment or email feedback@hak5.org and we’ll try to keep this page updated.
This article will guide you through connecting to the WiFi Pineapple for the first time. For more in-depth how-to’s involving command line control, modules, using the white and black listing functions, sharing Internet access and more please consult the Jasager board on the Hak5 forums and keep an eye on the WiFi Pineapple category of the Hak5.org blog for future articles on these topics.
First and foremost
The WiFi Pineapple is a customized version of OpenWRT running the latest Jasager software by Robin Wood. Since OpenWRT is a Linux based wireless networking operating system you’ll want to be familiar with basic Linux and networking fundamentals.
Tools you’ll find handy
Right out of the box most everything can be configured with just about any web browser, but you’ll likely also want a tool or two to get a shell and transfer files. If you’re using Linux or Mac you already have the ssh and scp commands at your disposal. If you’re on Windows we recommend using the PuTTY and WinSCP GUI tools or the command-line equivelent Plink.
Battery Powering the Pineapple
The WiFi Pineapple requires 5V and 2A of DC power. If you’re looking to go mobile leave the wall-wart at home. Four AA rechargeable batteries work well at powering this puppy. It’s important to get AA batteries with a high mAh rating. We recommend no less than 2400, so pick up a few meant for digital cameras for best results. If your standard alkalines aren’t doing the trick it’s probably due to a low mAh rating. Check the packaging. Of course we recommend rechargeables over the landfill populating variety.
Connecting for the first time
There are many ways to connect to and configure a WiFi Pineapple. Here are a few:
Via Ethernet
Power up and connect an Ethernet cable between your computer and the router’s. In its stock configuration the WiFi Pineapple is configured with the static IPv4 address of 192.168.1.1. It is also setup to hand out IP addresses in the 192.168.1.0/24 range via DHCP. If your machine is configured to obtain an IP address automatically you should get something like 192.168.1.100 from it momentarily.
Configuring your interface to obtain an IP address from the WiFi Pineapple’s DHCP server
In case your computer is not already setup to obtain an IP address on the Ethernet interface from a DHCP server, here are quick instructions for some common operating systems.
Windows XP
Open Network Connections from the Control Panel. Right-click on the Local Area Connection and choose Properties. From the dialog select Internet Protocol TCP/IP and click Properties. From the General tab choose Obtain an IP address automatically and Obtain DNS server address automatically. Click OK twice.
Windows 7
Click Choose Network Status and Tasks from the Control Panel. Click Change adapter settings. Right click the Local Area Connection and choose Properties. Select Internet Protocol Version 4 and click Properties. Select Obtain and IP address automatically and Obtain DNS server address automatically, then click OK twice.
Linux / Mac
Open a terminal and issue ifconfig eth0 where eth0 is the Ethernet interface connected to the WiFi Pineapple. Check the inet addr reported. If it is not a 192.168.1.x address you’ll want to manually ask for an address from the DHCP server on the pineapple. Depending on your distribution the command to do this may be “dhclient eth0″ or “dhcpcd eth0″.
Via Wireless
By default the SSID of the WiFi Pineapple is either “Pineapple” or “OpenWRT” without encryption. Connect to it as you would to any ordinary wireless access point. The pineapple will assign you an IP address via DHCP. If for some reason your Wireless interface has not been configured to obtain an address automatically please consult the above instructions substituting your wireless interface for the Ethernet interface.
Via Serial
WiFi Pineapples bought or built on Fon 2100 or Accton MR3201A hardware sport shell access through a serial interface. For information on this access method please consult these fine documents:
Accessing the Jasager Interface
Once connected via Ethernet or wireless you can point your web browser at the Jasager management interface. Here you can configure the interface, karma, mac address filtering, ssid white/black listing and execute commands on connected clients.
By default the Jasager interface can be found at http://192.168.1.1:1471. It’s important to note the :1471 bit as that specifies the non-standard port number of this http interface. Any modern web browser will work, be it Firefox, Chrome, Safari, Opera or Internet Explorer. I’ve even successfully used it with the text-only browser Lynx! You’ll need to login. By default the username is root and password is “pineapplesareyummy” (sans quotes).
Status / Main Controls
The options in this section allow you to control the wireless card and karma features. The SSID list is a list of SSIDs that the interface will either accept (whitelist mode) or ignore (blacklist mode). One thing to watch out for is that changing from blacklist to whitelist mode, and vise-versa does not reset the SSID list.
Connected Clients
The list of connected clients comes from a merger of wlanconfig output, information in the log file and the ARP cache. A blank IP address may mean the client hasn’t got an IP address or hasn’t used it for a while so it has slipped from the ARP table.
The dropdown list of commands allows you to add the clients SSID to the watch list and kick the MAC address. Kicking is not blocking a MAC, just temporarily disconnecting it, most clients will attempt to reconnect within seconds of being kicked. Kicking can be useful if you blacklist a SSID and need to remove any currently associated clients. I have an idea that this list will grow with useful commands such as blocking MAC addresses and initiating things such as nmap scans. Watch out for new features in version 2.
Log
All activity is logged to /karma/log/status.log which gets dumped out to the log window.
I love how basic and easy to follow this season has become. Before I would watch each episode and get excited about the topic but soon become lost and frustrated when I was unable to follow along or learn the topic. I would spend many more hours searching for more information on the topics just to try and understand it. Here we have slower more in depth videos supported by great detailed write ups including links for even MORE information just in case I need further explanation or background. LOVE it. Thanks, Jerf.
Very cool device.
Is there a link to building your own? – I’ve searched the site and can’t find one.
This guide shows how to build one from scratch
http://hak5.org/hack/wifi-pineapple-flashing-guide
Cheers,
Darren
Thanks for the info on Serial connectivity.
Looks like the pins could be connected right to an Arduino or XBee
without any rs-232 line voltage conversions/max 232 chips in between…hehehe…
The jasager issues the IP addresses to my test computer which joins the wireless SSID (Pineapple), however, the test computer is not able to connect to the internet, its routes to the jasager and terminates their.
I added a staic route to the jasager which basically routes any other traffic (internet bound) via the gateway computer (connected to the jasager via the ethernet)
0.0.0.0 192.168.1.100 255.255.255.255 1 lan
Any ideas?
Great device,
I’ve just purchased one and I’m waiting on it to arrive. I’m wondering whats the likely-hood of modding this to support USB. This would open up the potential by allowing flash drives or even external harddrives for more storage space.
Thanks!
Assuming you have this baby connected to your lappy over a network, why not just offer an NFS or SMB mountpoint so it can store there? That’s probably lots of space and very convenient.
I just got my pineapple and I am very excited by the possibilities this compact device presents. I just have one question, can you attach any other external antennas to this device? I have a couple of 9db Alfa antennas and I was wondering if I could use them to extend the “reach” of the Pineapple.
Thanks for filling the vacuum that “The Screen Savers” left and thanks for the archive of great shows.
@avogodrohex : I assume by now you’ve tried your external antenna, but if you have not, and are waiting for an answer, Yes, it should work, As i myself have that exact setup, when i am not worried about being stealthy.
And if you really want to have some fun add an SD card to your pineapple. Confirmed this to work.Can anyone say lighttpd with a cron script to pull down cached pages daily… http://www.dd-wrt.com/wiki/index.php/Fonera_SD-Card_hack
Their out of stock any new ones WiFi Pineapple are coming up or this is a finish deal?
great guide
WiFi Pineapple is awesome
How is wifi-Pineapple different from airsnarf?
airsnarf – a script used to create a fake AP and do all the things that this device does and its FREE!!!
airsnarf.shmoo.com
Hey, just wondering if Jasager and OpenWRT work on the Fon Simpl?
Cheers
Hey Guys, I just received my new Pineapple Mark III but my default IP range is 172.x.x.x.x How do I login to Jasager?
to log in via ethernet cable direct your browser to
http://172.16.42.42
user name :root
password: pineapplesareyummy
Has anybody thought of using a standard jailbroken iphone as the internet (source)??
It would seem (mywifi is easily downloaded via cydia/sinfuliphone) set on (via cable) would provide the needed internet portal that would free
up the pineapples lan port.. a set it and forget it pineapple???
one could place it in a unobtrusive location…hidden from prying eyes
??? Any post regarding the pin out info on the iphone data cable
and the rs232 pin info for the original fonera wifi pineapple
would be greatly appreciated!!
I’m still waiting for the new version to come out. I want ONE!!! not fair all you guys having fun with it.
Very useful for pen testing
i did everything that the explication said but when it’s time to log in on the interface saids error:bad username/password
root
pineapplesareyummy