Hacking WiFi with a Hak5 Pineapple

Public WiFi can be be very dangerous - especially if Cori is around with a hak5 wifi pineapple!
// MENU //
00:00 - Coming up
00:38 - Intro
00:49 - The WiFi Pineapple
03:21 - Hak5 tools
04:14 - WiFi Pineapple MK7 start-up demo
09:03 - Cori's favourite Alfa adapter
09:45 - Practical attack methods in pentesting
13:14 - WiFi Pineapple MK7 start-up demo (continued)
14:06 - Dumbest passwords (in the real world)
17:42 - How real-world pentesters crack WiFi passwords
18:24 - WiFi Pineapple MK7 technical demo
30:03 - Evil Portal
30:59 - WiFi Pineapple MK7 technical demo (continued)
33:12 - Your passwords aren't safe
35:03 - WiFi Pineapple MK7 technical demo (continued)
39:42 - Getting credentials with an Evil Portal
42:20 - WiFi cracking in real-world pentesting
46:44 - Conclusion
// Previous video //
She hacked me: • She hacked me!
// Buy Hak5 coolness here //
Buy Hak5: davidbombal.wiki/gethak5
// Recommended WiFi adapters //
Alfa AWUS036NHA: amzn.to/3wnyVen
Alfa AWUS036ACM: amzn.to/3fCL4WT
Alfa AWUS036ACH: amzn.to/3rLAjny or amzn.to/2PxkkMV
Others:
Alfa AWUS1900: amzn.to/31E0AtH
Alfa Long-Range Dual-Band AC1200: amzn.to/34UUCEL
Alfa AWUS036NEH: amzn.to/3sK2iW8
Panda PAU05: amzn.to/3ue23Da
Panda PAU06: amzn.to/3wwqRZ8
Panda PAU09: amzn.to/3wosx6X
WiFi Nation 802.11ac AC600: amzn.to/3cLQddm
WiFi Nation Atheros AR9271: amzn.to/3u8JUqm
// Cori's SOCIAL //
Twitter: / corg_e
Website: www.corgima.com/
// People Mentioned //
Blake: / blizzyblake278
Shannon Twitter: / snubs
Shannon KZbin: / shannonmorse
Matt Weir: • DEFCON 17: Cracking 40...
Darren: / hak5darren
// David's SOCIAL //
Discord: / discord
Twitter: / davidbombal
Instagram: / davidbombal
LinkedIn: / davidbombal
Facebook: / davidbombal.co
TikTok: / davidbombal
KZbin Main Channel: / davidbombal
KZbin Tech Channel: / @davidbombaltech
KZbin Clips Channel: / @davidbombalofficialclips
KZbin Shorts Channel: / @davidbombalshorts
Apple Podcast: davidbombal.wiki/applepodcast
Spotify Podcast: open.spotify.com/show/3f6k6gE...
// MY STUFF //
www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: [e-mail]
hack
hacking
wifi
phish
shark jack
lan turtle
evil twin
hak5
hak5 rubber ducky
hak5 wifi
wifi pineapple
hak5 wifi pineapple
alfa network
Disclaimer: This video is for educational purposes only.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#wifi #hak5 #hack

[@davidbombal]

Public WiFi can be be very dangerous - especially if Cori is around with a hak5 wifi pineapple! // MENU // 00:00 - Coming up 00:38 - Intro 00:49 - The WiFi Pineapple 03:21 - Hak5 tools 04:14 - WiFi Pineapple MK7 start-up demo 09:03 - Cori's favourite Alfa adapter 09:45 - Practical attack methods in pentesting 13:14 - WiFi Pineapple MK7 start-up demo (continued) 14:06 - Dumbest passwords (in the real world) 17:42 - How real-world pentesters crack WiFi passwords 18:24 - WiFi Pineapple MK7 technical demo 30:03 - Evil Portal 30:59 - WiFi Pineapple MK7 technical demo (continued) 33:12 - Your passwords aren't safe 35:03 - WiFi Pineapple MK7 technical demo (continued) 39:42 - Getting credentials with an Evil Portal 42:20 - WiFi cracking in real-world pentesting 46:44 - Conclusion // Previous video // She hacked me: kzbin.info/www/bejne/i2fTdaR8nbNraKs // Buy Hak5 coolness here // Buy Hak5: davidbombal.wiki/gethak5 // Recommended WiFi adapters // Alfa AWUS036NHA: amzn.to/3wnyVen Alfa AWUS036ACM: amzn.to/3fCL4WT Alfa AWUS036ACH: amzn.to/3rLAjny or amzn.to/2PxkkMV Others: Alfa AWUS1900: amzn.to/31E0AtH Alfa Long-Range Dual-Band AC1200: amzn.to/34UUCEL Alfa AWUS036NEH: amzn.to/3sK2iW8 Panda PAU05: amzn.to/3ue23Da Panda PAU06: amzn.to/3wwqRZ8 Panda PAU09: amzn.to/3wosx6X WiFi Nation 802.11ac AC600: amzn.to/3cLQddm WiFi Nation Atheros AR9271: amzn.to/3u8JUqm // Cori's SOCIAL // Twitter: twitter.com/corg_e Website: www.corgima.com/ // People Mentioned // Blake: twitter.com/BlizzyBlake278 Shannon Twitter: twitter.com/Snubs Shannon KZbin: kzbin.info Matt Weir: kzbin.info/www/bejne/Zoizn6xtrNBsbJI Darren: twitter.com/hak5darren // David's SOCIAL // Discord: discord.gg/davidbombal Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin Main Channel: kzbin.info KZbin Tech Channel: kzbin.info/door/ZTIRrENWr_rjVoA7BcUE_A KZbin Clips Channel: kzbin.info/door/bY5wGxQgIiAeMdNkW5wM6Q KZbin Shorts Channel: kzbin.info/door/EyCubIF0e8MYi1jkgVepKg Apple Podcast: davidbombal.wiki/applepodcast Spotify Podcast: open.spotify.com/show/3f6k6gERfuriI96efWWLQQ // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] Disclaimer: This video is for educational purposes only. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

[@billx4266]

Is a VPN enough?

[@user-vx1mx5og4h]

Cori is an absolute hacker beast and it's a pleasure seeing her again. Great content as always mr.David keep it up!

[@davidbombal]

Cori is amazing! I'm so grateful that she's willing to share with all of us!

[@jordankent853]

W

[@noirbl00d98]

🖤

[@balduron97]

i asume thats why she got the witch-like thumbnail as an tribute ;)

[@-tarificpromo-7196]

@@balduron97 bro is a female version of Rami Malek 😅

[@codygaudet8071]

I love what's going on with this channel. These videos are worth the effort to create.

[@davidbombal]

Glad you like them!

[@AliKhan-es4wc]

I love the way you ask questions, so smart, and your humble voice. Awesome video. Thanks you

[@Prasanna_Naik]

Great video David sir. Thank you for always bringing this type of content which helps us a lot.

[@davidbombal]

You're welcome! Glad you enjoyed the video!

[@JohnD0h_IT]

Great video as always again! Thanks, you! It could be great if you do a video with Cori about her choices of Laptop, OS, etc., for real world pentesting. Top 5 books, certs, path, etc... And show us how she uses her Alfa instead of the Pineapple, because I think you learn a lot more when you do the things instead of use something prebuilt. Already looking forward to your next videos!

[@4b5urd.]

Cori is such a joy to watch. Love her ❤️

[@jimweston6577]

I hope this is a another vid in a LONG list of upcoming series of videos featuring Cori ... she is an awesome guest !

[@davidbombal]

Agreed Jim! Cori is amazing!

[@juliusrowe9374]

David, Cori was awesome once again! Please have her come back to review and use some more of the Hak 5 products if it all possible.

[@DexieTheSheep]

You know, the genius part about hacking at your local McDonalds is that you can have high latency between your "middleman" system and the real network, and the victim will just blame it on McDonalds WiFi being slow as usual.

[@lachohernandez1316]

Gonna try this thanks

[@hackerhacker8578]

Yeah totally not legal mate.

[@AnnFranksUrn]

@@hackerhacker8578lmao good thing it’s virtually untraceable 😭

[@CentralBase]

The genius part is talking about it on the internet. Oh wait…

[@DexieTheSheep]

@@CentralBase I know, right? Nobody will find out! :P

[@goofballbiscuits3647]

Awesome, I loved the last video she was on! So down to earth and knowledgeable.

[@albertmontanasune6383]

I'd love to see the BashBunny using the HID in any other keyboard layout but us. Great content!

[@Demonic_Skidmark]

I just got a Mark VII for an early bday present and it is a DOA. I was super excited to utilize it and learn more about doing some pentesting. Your videos have really helped me learn a lot! Cori is super intelligent and love the knowledge!! Keep up the awesome content! Hope you do more content with Cori in the future!

[@melvinndlovu7083]

Yo from south africa here ... Looking on sharing pentesting ideas .. If you dont mind 🙏🏼🙏🏼

[@Demonic_Skidmark]

@@melvinndlovu7083 Of course! For starters, what kind of pentesting are you wanting to try? There a few different kinds of pentests you can practice just depends where you want to start

[@justind.8767]

I just got a Mark VII and this is great! Thanks for such great content!

[@martinkrabbe5006]

Great content David and Cori.Thank you for sharing

[@truthreigns7]

Thank you for this video. It is quite helpful. Thank you David for getting into the details and asking questions that help me because I am new to all of this.

[@duscraftphoto]

Wait a second... You mean to tell me that the "McCorgi Free WiFi" I've been connecting to every day might not be legit?.. Can't trust anything these days. Great content from you two, as usual! Love these segments!

[@davidbombal]

lol!! I'm sure that wifi is working well for you :)

[@PanicAcid]

Little bit of a mistake in the video, the MkVII (Mk 7) does NOT do 5Ghz out of the box, you need to install a compatible 5Ghz radio to use that, however the firmware supports it out of the box.

[@renn3014]

I love these videos! I’m learning sooo much

[@MFoster392]

Thanks, David I really enjoyed your last video with Cori

[@davidbombal]

Glad you enjoyed i Michael. Cori is amazing!

[@naicolas]

Please make a video regarding SPF, DKIM and DMARC and how important these are when it comes to Email Security!

[@saleemahmed8302]

Thanks a lot David for all your video.Being an absolute beginner myself your "boomer" questions help me a lot and has taught me those little intricacies that I mostly used to struggle with.

[@davidbombal]

Thank you Saleem! That means I'm doing my job right :)

[@lora4624]

@@davidbombal oh for sure!! i think you always ask the most relevant and interesting questions and it helps me understand so much!

[@incremental_failure]

Watching these videos I realise that there is nothing left of the 90s hacking culture.

[@betimz]

SubSeven got me into the game back then

[@emilianocorrea3267]

this is so entertaining to watch, i'm just preparing my ccna but i might get in this field in the future, who knows just starting hehe

[@andrewborntrager7909]

Great video. Was just curious, if you are in range with good signal, can you just use wireless adapter in the laptop ?

[@emmetgwilliam6527]

Great video David thanks for these

[@davidbombal]

You're welcome!

[@rosehacksyoutube]

Love this content! Very intelligent and talented woman. Corgi is awesome!

[@bp56789]

Corgi lol

[@sudo_jedi]

Should do a BASH BUNNY and or LAN TURTLE breakdown. Honestly any of the hak5 plug in tools. Corgi is awesome!

[@CalpeperMinutemen]

The Mark VII is trash (as of this posting). I was inspired to buy/try it and, while it worked the first time (out of the box), it quickly became incapable of doing anything (literally 'anything') and is now an expensive paper weight. As I think back to when I first watched this video, I should have known; (1) Corgi said at 1:25 that it's not something she actually uses (the device was her friend's) and (2) David thanked Corgi 46:59 for muscling through all of the 'technical issues' w/t device (which we did not see) during the making of this video. BUYER BEWARE! In any event, Corgi's insight and experience is always appreciated and worth listening to... thank you!

[@Animalis_Mundana]

Thx

[@MoorishMade]

I have to agree. There aren't enough lessons on the wifi pineapple to really make it useful. I found myself as well as others still using Kali Linux for many of the functions. I have a cyber security backgound, and this thing just isn't performing like it was hyped up to be. When i do find video lessons on using the pineapple, they always still use linux and only use the pineapple as a wifi interface.

[@savagepro9060]

David, you can use McDonald's Wifi but with a helping of Pineapple!

[@davidbombal]

lol... very good!

[@Naath000]

Love you sir and your all content

[@davidbombal]

Thank you!

[@_niha_.00]

Great video david sir. Thank you so much for sharing your knowledge. It's help me lot

[@TANKBM]

Congratulations, our dear teacher, he has reached a million subscribers. I am glad that I was a subscriber with him from the beginning

[@jimifly5241]

Great Video, David! Thanks, definitely gonna share this information

[@davidbombal]

Glad it was helpful!

[@travislodes5378]

Great vid, thanks to Cori for being there and showing us.

[@davidbombal]

Glad you enjoyed it

[@0xRuta]

Nice Interview David!! Many thanks and love from Uganda\

[@davidbombal]

Thank you JRR!

[@Zerback]

The evil twin part is a winner. thank you so much for this content David!!

[@davidbombal]

You're welcome Alex!

[@seif9923]

there are alot of written tutorials out there about diy pineapples why dont you make one in a video? there arent any videos about it afaik

[@BobBob-qm2bm]

Really David, do you have to ask which one! All of THEM!!!! Keep her coming back and sharing more of this hacking goodness!👨‍💻

[@davidbombal]

lol.... love it!

[@casperghost1467]

Very knowledgeable stuff, she knows her stuff

[@ghastlyo9284]

I like the way she demos this, she assumes you know what you're doing then shows you the cool stuff. I'm game

[@syedshirazi95]

As always great video ! How can we create a custom connection page for the Evil Portal ?

[@ahelalley]

The quality of this video is awesome

[@Krazeesik]

Side Note: you can also configure and access the Pineapple from a phone. You can also power it from a Power Pack and login to the SSID to configure and utilize the PineAP suite.

[@pcap_pirate960]

Most the time I am using it from my phone with it powered by a anker power pack.

[@Krazeesik]

@@pcap_pirate960 Same

[@joshuaerdrich5616]

Great video lots of information. It all seems very complicated to someone who's just starting down this rabbit hole cyber security.

[@godadawgashaw4965]

thanks a lot David .you always invite good guest

[@keithp7010]

Great video and info sir. Thank you David

[@cybericanintel]

Awesome job David, Cori is an amazing hacker so happy you brought her back. Keep up the amazing job in teaching us. You Rock!

[@davidbombal]

Thank you! Cori is such a rockstar!

[@scentilatingone2148]

Good stuff mate!

[@justineliason]

They both are insanely smart my goal is to learn as much as them

[@venus334]

Thanks guys, really appreciate it!

[@zecouto8058]

Cori is awesome!! Love to watch her

[@3eezie483]

great vid! is it possible to use the wifi pineapple and a second network adapter to connect to a different network?

[@terexkiller3847]

Great Video, David! Thanks

[@MilitiaEnt17]

I travel for work and keep a raspberry pi with me that I use as a router between the public wifi and my laptop while in hotels.

[@Alex-nq5nz]

Well done ! As usual great content ! Bravo to both of you! I have a question ...in order to become a real hacker, should I buy a hoodie or my shabby t-shirt could be just ok ? 🤣🤣🤣🤣🤣🤣

[@beastpov]

I would like to see work with bad usb scripts. Like a refreshing breakdown of that. Also thanks for this pineapple video. Hmmm maybe a video breaking down beginner scripts (windows ducky)

[@jackr9804]

Great video!

[@seanrendall5495]

I usually play informational videos in the background, and learn a little less for it. Thanks to Cori, I paid rapt attention.

[@kmk13542]

Great video! A question about connecting to pinapples or fake WIFIs in public places; what does this data look like when a user connects to the pinapple/ fake network capturing data then connects to their VPN? What is captured in the first few seconds before connection to the VPN and after connection to the VPN what can be seen?

[@crashtfa]

I would love to see the methodology behind doing this with wpa3 enabled ap’s

[@0x157]

Fire Video David !

[@davidbombal]

Thank you!

[@thumbtak123]

The Flipper can do Evil Portal, now.

[@TerryDeSimone]

What you covered with the Pineapple is all the info that's already on the internet & has been done a dozen times.. You should have gone more in-depth with the PineAP Suite 'Advanced Mode', using it with campaigns.. there is barely anything on the net about it, and it's weird bcuz that's like its main feature.. also more in-depth with campaigns.. Those would make good videos, bcuz there are *NONE* on the net.. some more video ideas (in-depth) would be like: PineAP Suite 'Advanced Mode', Campaigns, the generated Handshakes (Full/Partial PCAP & Full/Partial Handshake) & what to do after.., SSID Cloning (Karma attack), creating custom WIFI vendor pages (Linksys, TP-Link, etc) & apply them with the Advanced option in Evil Portal.. so when it does Karma attack & clones SSID it can use their WIFI Vendor correct router page... Basically start to finish like it was a client job.. I started with a 2mW WIFISky with a Yagi & Kali (Backtrack, yes that long ago)

[@LabGecko]

34:46 Just a note, Android has the ability to open Wifi settings and share your wifi setup with friends / family using a QR code so you don't have to struggle to share that crazy password. Reading a network QR is available on the same settings page.

[@doop00]

Yeah I really miss that feature on my current phone which isn't Android, it was very handy.

[@RandyHanley]

David is the real deal. Cori seems really cool too!

[@jamesos2744]

I like the EFF sweatshirt... I have the same one, too bad the material is so low grade (polyester-cotton). I would pay the EFF double for a good quality cotton version!

[@ajdinzutic]

really good contet. Do you recommend Pentest / Security Audit Solutions where we can generate PDFs? Im currently thinking to use Nessus and Cis Cat pro.

[@jonaswilliams4459]

Please do both shark jack and lan turtle! Thanks for your work

[@burime13]

Her facial expressions are completely insane, in a good way))

[@chaiyakorna]

Great job. Great content. Thank you. Could you do a video to demonstrate how to use sslsplit module with wifiPineApple MKVII ?

[@jasonhutchcraft]

it should be noted that 2.4 ghz works on the Pineapple out of the box, but the 5 ghz requires an additional adapter. idk if thats already been established, though.

[@MrKoblepot]

Thanks, i was confused by this and wondering too 👍

[@scentilatingone2148]

Cori im in Nashville too! Does she run seminars meetups etc!?

[@MiguelAngel123]

Hola señor David Bombal, Felicidades por su trabajo, soy un usuario que me gusta la seguridad informática, soy de España, quisiera preguntar si habría la posibilidad de activar la traducción de sus video en Español y que las personas hispano parlantes pudiéramos disfrutar de sus vídeos tan interesates, si no hay posibilidad de traducción de los videos lo entiendo, gracias de todas formas, estoy aprendiendo inglés pero falta mucho para poder entender, buenos días Señor David Bombal.

[@animationmann6612]

No if youre writing it in Spanish

[@faustteufel9727]

I like the "Hacky Hacks" sign behind her, lol.

[@gokumonki3]

She seems pretty cool and i think i can learn alot from her

[@gamingwithdestroyer9214]

love your content sir

[@davidbombal]

Very happy to hear that!

[@DavidStringham]

27:45 Unfortunately, most of the modules were not updated for the MKVII. Hak5 has stated that modules like SSLstrip, DWall, DNSspoof, and CursedScreech are outdated and deprecated.

[@PanicAcid]

Indeed and it's absolutely true, most of the great modules for older generations are now built into the PineAP suite out of the box and most of the modules that are missing are missing because they're useless in this day and age SSLStrip etc, absolutely useless since circa 2017. It's also worth noting that there's pre compiled packages too that users can install. So if there isn't a module for it there may well be a package for it (and you can just hit it via the CLI).

[@4b5urd.]

@@PanicAcid excellent explanation and suggested work around.

[@Nightfall-TCG]

I really want to see more demos on the hak5 omg cables. I really want to see just how far those cables can go. There isn’t too much information on them atm

[@fakhrioficial8061]

Thanks a lot man!

[@jasonmurdock776]

So... love the pineapple... but it doesn't come with 5ghz capabilities stock. You have to add the MKA7 adapter and then it has 5ghz capabilities as well. just fyi...

[@golvellius6855]

Thank you good video

[@jacquesb5248]

so even with all this can view encrypted traffic? aka https and or a vpn? i connected to mcD's wifi and they only ask to click yes on a webpage for confirmation. can it then capture say any credentials from my bank and or rdp connections credentials?..i did a basic scan but couldn't see any other clients on it.clients set to ne able to see each other...they slow as mudd tho, 5Mbps

[@swpyro]

Keep it up ❤

[@HeinrichDaHammer]

Lan turtle will be handy to see what she does with it. Rubber ducky is old but lovable.

[@marveII0us]

I was there in the last video with corgi too, and I gotta admit, I got some real info there I asked her on twitter how to actually send a phishing email without it ending up in the spam box of Gmail, and got help with it too!

[@davidbombal]

Cori is great! I'm grateful that she's willing to share her knowledge and experience with all of us :)

[@tigreonice2339]

So what to do if you travel to other country? Hotel for example

[@gallerksee]

Beautiful and dangerous, how cool is that

[@shortvids5825]

When I saw her I was like wait she seems familiar then later realized she looks like Inbar Lavi from Lucifer series

[@ebriquet]

Is there any wifi pineapple module to gain access to an Intelbras security camera dvr?

[@zaccampa4055]

My wife makes the craziest complex passwords it’s funny lol she makes me proud.

[@guilherme5094]

Nice.

[@tyrantcyber6239]

HELLO TEACHER DAVID AM SO GLAD AND AM INTEREST IN YOUR CLASS

[@regulariousweedimaximus9495]

Wish I had a cool mentor like her

[@kapzvara5732]

Great video thanks for this guys. On my todo list to get a wifi pineapple. Waiting on my Rubber Ducky to come through. I am having issues with my Raspberry pico where when plugged in does not execute the script.

[@ethicalhackerwhitehat]

instead of commenting "I love you, I like you" etc stuff, just press the like button

[@PirateSimulator]

Is termux good to use as linux terminal for android? Or should i use others because im hacking 2 years with termux

[@BobBob-qm2bm]

If it's real, if it's relevant, then David B is in the house!!!!

[@dinmamma740]

could you make the auth button on the evil portal, a download of some sort?

[@AliKhan-es4wc]

You should do more videos with Cori, she is really smart. Does Cori have a youtube channel?