Tospo Virus: Weaponizing WiFi Pineapple Vulnerabilities into a Self-Replicating Worm
Catatonic details the responsible disclosure of vulnerabilities in the Hak5 WiFi Pineapple and demonstrates 'Tospo', a self-replicating wireless worm.
Summary
Auditing Offensive Security Hardware Platforms
Security assessment hardware devices often run full Linux operating systems and web services that are themselves susceptible to critical software vulnerabilities.
Discovering Remote Code Execution in the WiFi Pineapple
Catatonic details uncovering unauthenticated command injection and CSRF vulnerabilities in legacy WiFi Pineapple web management interfaces.
Weaponizing Exploits into the 'Tospo' Wireless Worm
The researcher demonstrates developing Metasploit exploit modules and crafting a self-propagating payload that infects adjacent Pineapples over wireless management interfaces.
Coordinated Disclosure and Vendor Patching
The presentation reviews the coordinated vulnerability disclosure timeline with Hak5 and discusses hardening practices for penetration testing hardware.
Related talks
Voting Village·27 min
Tod Beardsley
Tod Beardsley examines the cultural shift in election vendor vulnerability disclosure, tracing progress from adversarial hostility to coordinated CVD programs.
Village Presentations·53 min
Sebastian Kinne · Darren Kitchen
Hak5 founders Darren Kitchen and Sebastian Kinne dissect the WiFi Pineapple, demonstrating rogue AP deployment, PineAP reconnaissance, and captive portals.
DragonJAR - Hacking y Seguridad Informática·9 min
Hak5 Field Kit
Evaluates unboxing WiFi Pineapple NANO Basic with Hak5 Field Kit and evaluates key implications for security practitioners.