Sniffin' WiFi, Sippin' Pineapple Juice: The Hak5 WiFi Pineapple Deep Dive
Hak5 founders Darren Kitchen and Sebastian Kinne dissect the WiFi Pineapple, demonstrating rogue AP deployment, PineAP reconnaissance, and captive portals.
Summary
The Philosophy of the WiFi Pineapple Platform
Rather than cracking individual WPA passwords, rogue access point attacks manipulate client connection algorithms by simulating trusted networks.
Inside the PineAP Reconnaissance Engine
Darren Kitchen and Sebastian Kinne explain PineAP's ability to passively collect probe requests and actively broadcast targeted beacon responses for every requested SSID.
Deploying Credential Harvesting and MITM Modules
The speakers demonstrate captive portal credential harvesters, automated DNS redirection, and injecting live payloads into connected victim traffic.
Wireless Hygiene and Defensive Precautions
The authors discuss client-side defenses—including forgetting open network profiles, utilizing VPNs, and verifying TLS certificates.
Related talks
Aerospace Village·24 min
Joshua Smailes
Joshua Smailes demonstrates injecting forged digital air traffic control messages via CPDLC, executing man-in-the-middle attacks on oceanic flights.
Wireless Village·23 min
Eric Escobar
Explores defensive techniques and sensor architectures for detecting rogue access points, evil twins, and wireless intrusions.
IoT Village·1 hr 9 min
Presenting Btlejuice, an open-source framework for intercepting, modifying, and proxying Bluetooth Smart (BLE) communications via MITM.