Public WiFi can be be very dangerous - especially if Cori is around with a hak5 wifi pineapple! // MENU // 00:00 - Coming up 00:38 - Intro 00:49 - The WiFi Pineapple 03:21 - Hak5 tools 04:14 - WiFi Pineapple MK7 start-up demo 09:03 - Cori's favourite Alfa adapter 09:45 - Practical attack methods in pentesting 13:14 - WiFi Pineapple MK7 start-up demo (continued) 14:06 - Dumbest passwords (in the real world) 17:42 - How real-world pentesters crack WiFi passwords 18:24 - WiFi Pineapple MK7 technical demo 30:03 - Evil Portal 30:59 - WiFi Pineapple MK7 technical demo (continued) 33:12 - Your passwords aren't safe 35:03 - WiFi Pineapple MK7 technical demo (continued) 39:42 - Getting credentials with an Evil Portal 42:20 - WiFi cracking in real-world pentesting 46:44 - Conclusion // Previous video // She hacked me: kzitem.info/news/bejne/tmymqqV8oYBpZX4 // Buy Hak5 coolness here // Buy Hak5: davidbombal.wiki/gethak5 // Recommended WiFi adapters // Alfa AWUS036NHA: amzn.to/3wnyVen Alfa AWUS036ACM: amzn.to/3fCL4WT Alfa AWUS036ACH: amzn.to/3rLAjny or amzn.to/2PxkkMV Others: Alfa AWUS1900: amzn.to/31E0AtH Alfa Long-Range Dual-Band AC1200: amzn.to/34UUCEL Alfa AWUS036NEH: amzn.to/3sK2iW8 Panda PAU05: amzn.to/3ue23Da Panda PAU06: amzn.to/3wwqRZ8 Panda PAU09: amzn.to/3wosx6X WiFi Nation 802.11ac AC600: amzn.to/3cLQddm WiFi Nation Atheros AR9271: amzn.to/3u8JUqm // Cori's SOCIAL // Twitter: twitter.com/corg_e Website: www.corgima.com/ // People Mentioned // Blake: twitter.com/BlizzyBlake278 Shannon Twitter: twitter.com/Snubs Shannon KZitem: kzitem.info Matt Weir: kzitem.info/news/bejne/kY2G1K1tsJ1qaWU Darren: twitter.com/hak5darren // David's SOCIAL // Discord: discord.gg/davidbombal Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZitem Main Channel: kzitem.info KZitem Tech Channel: kzitem.info/rock/ZTIRrENWr_rjVoA7BcUE_A KZitem Clips Channel: kzitem.info/rock/bY5wGxQgIiAeMdNkW5wM6Q KZitem Shorts Channel: kzitem.info/rock/EyCubIF0e8MYi1jkgVepKg Apple Podcast: davidbombal.wiki/applepodcast Spotify Podcast: open.spotify.com/show/3f6k6gERfuriI96efWWLQQ // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Disclaimer: This video is for educational purposes only. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
@billx4266
2 жыл бұрын
Is a VPN enough?
@user-vx1mx5og4h
2 жыл бұрын
Cori is an absolute hacker beast and it's a pleasure seeing her again. Great content as always mr.David keep it up!
@davidbombal
2 жыл бұрын
Cori is amazing! I'm so grateful that she's willing to share with all of us!
@jordankent853
Жыл бұрын
W
@noirbl00d98
Жыл бұрын
🖤
@balduron97
Жыл бұрын
i asume thats why she got the witch-like thumbnail as an tribute ;)
@-tarificpromo-7196
Жыл бұрын
@@balduron97 bro is a female version of Rami Malek 😅
@codygaudet8071
2 жыл бұрын
I love what's going on with this channel. These videos are worth the effort to create.
@davidbombal
2 жыл бұрын
Glad you like them!
@4b5urd.
Жыл бұрын
Cori is such a joy to watch. Love her ❤️
@Prasanna_Naik
2 жыл бұрын
Great video David sir. Thank you for always bringing this type of content which helps us a lot.
@davidbombal
2 жыл бұрын
You're welcome! Glad you enjoyed the video!
@jimweston6577
2 жыл бұрын
I hope this is a another vid in a LONG list of upcoming series of videos featuring Cori ... she is an awesome guest !
@davidbombal
2 жыл бұрын
Agreed Jim! Cori is amazing!
@saleemahmed8302
2 жыл бұрын
Thanks a lot David for all your video.Being an absolute beginner myself your "boomer" questions help me a lot and has taught me those little intricacies that I mostly used to struggle with.
@davidbombal
2 жыл бұрын
Thank you Saleem! That means I'm doing my job right :)
@lora4624
Жыл бұрын
@@davidbombal oh for sure!! i think you always ask the most relevant and interesting questions and it helps me understand so much!
@incremental_failure
Жыл бұрын
Watching these videos I realise that there is nothing left of the 90s hacking culture.
@betimz
Жыл бұрын
SubSeven got me into the game back then
@juliusrowe9374
Жыл бұрын
David, Cori was awesome once again! Please have her come back to review and use some more of the Hak 5 products if it all possible.
@DexieTheSheep
2 жыл бұрын
You know, the genius part about hacking at your local McDonalds is that you can have high latency between your "middleman" system and the real network, and the victim will just blame it on McDonalds WiFi being slow as usual.
@lachohernandez1316
Жыл бұрын
Gonna try this thanks
@hackerhacker8578
Жыл бұрын
Yeah totally not legal mate.
@AnnFranksUrn
Жыл бұрын
@@hackerhacker8578lmao good thing it’s virtually untraceable 😭
@CentralBase
11 ай бұрын
The genius part is talking about it on the internet. Oh wait…
@DexieTheSheep
11 ай бұрын
@@CentralBase I know, right? Nobody will find out! :P
@duscraftphoto
2 жыл бұрын
Wait a second... You mean to tell me that the "McCorgi Free WiFi" I've been connecting to every day might not be legit?.. Can't trust anything these days. Great content from you two, as usual! Love these segments!
@davidbombal
2 жыл бұрын
lol!! I'm sure that wifi is working well for you :)
@AliKhan-es4wc
2 жыл бұрын
I love the way you ask questions, so smart, and your humble voice. Awesome video. Thanks you
@PanicAcid
Жыл бұрын
Little bit of a mistake in the video, the MkVII (Mk 7) does NOT do 5Ghz out of the box, you need to install a compatible 5Ghz radio to use that, however the firmware supports it out of the box.
@savagepro9060
2 жыл бұрын
David, you can use McDonald's Wifi but with a helping of Pineapple!
@davidbombal
2 жыл бұрын
lol... very good!
@MFoster392
2 жыл бұрын
Thanks, David I really enjoyed your last video with Cori
@davidbombal
2 жыл бұрын
Glad you enjoyed i Michael. Cori is amazing!
@Naath000
2 жыл бұрын
Love you sir and your all content
@davidbombal
2 жыл бұрын
Thank you!
@BobBob-qm2bm
2 жыл бұрын
Really David, do you have to ask which one! All of THEM!!!! Keep her coming back and sharing more of this hacking goodness!👨💻
@davidbombal
2 жыл бұрын
lol.... love it!
@truthreigns7
2 жыл бұрын
Thank you for this video. It is quite helpful. Thank you David for getting into the details and asking questions that help me because I am new to all of this.
@0xRuta
2 жыл бұрын
Nice Interview David!! Many thanks and love from Uganda\
@davidbombal
2 жыл бұрын
Thank you JRR!
@emmetgwilliam6527
2 жыл бұрын
Great video David thanks for these
@davidbombal
2 жыл бұрын
You're welcome!
@justind.8767
2 жыл бұрын
I just got a Mark VII and this is great! Thanks for such great content!
@naicolas
Жыл бұрын
Please make a video regarding SPF, DKIM and DMARC and how important these are when it comes to Email Security!
@Krazeesik
2 жыл бұрын
Side Note: you can also configure and access the Pineapple from a phone. You can also power it from a Power Pack and login to the SSID to configure and utilize the PineAP suite.
@pcap_pirate960
2 жыл бұрын
Most the time I am using it from my phone with it powered by a anker power pack.
@Krazeesik
2 жыл бұрын
@@pcap_pirate960 Same
@seif9923
2 жыл бұрын
there are alot of written tutorials out there about diy pineapples why dont you make one in a video? there arent any videos about it afaik
@JohnD0h_IT
2 жыл бұрын
Great video as always again! Thanks, you! It could be great if you do a video with Cori about her choices of Laptop, OS, etc., for real world pentesting. Top 5 books, certs, path, etc... And show us how she uses her Alfa instead of the Pineapple, because I think you learn a lot more when you do the things instead of use something prebuilt. Already looking forward to your next videos!
@travislodes5378
2 жыл бұрын
Great vid, thanks to Cori for being there and showing us.
@davidbombal
2 жыл бұрын
Glad you enjoyed it
@jimifly5241
2 жыл бұрын
Great Video, David! Thanks, definitely gonna share this information
@davidbombal
2 жыл бұрын
Glad it was helpful!
@ghastlyo9284
9 ай бұрын
I like the way she demos this, she assumes you know what you're doing then shows you the cool stuff. I'm game
@rosehacksyoutube
Жыл бұрын
Love this content! Very intelligent and talented woman. Corgi is awesome!
@bp56789
Жыл бұрын
Corgi lol
@sudo_jedi
Жыл бұрын
Should do a BASH BUNNY and or LAN TURTLE breakdown. Honestly any of the hak5 plug in tools. Corgi is awesome!
@Jugg215
2 жыл бұрын
I travel for work and keep a raspberry pi with me that I use as a router between the public wifi and my laptop while in hotels.
@faustteufel9727
9 ай бұрын
I like the "Hacky Hacks" sign behind her, lol.
@LabGecko
2 жыл бұрын
34:46 Just a note, Android has the ability to open Wifi settings and share your wifi setup with friends / family using a QR code so you don't have to struggle to share that crazy password. Reading a network QR is available on the same settings page.
@doop00
2 жыл бұрын
Yeah I really miss that feature on my current phone which isn't Android, it was very handy.
@CalpeperMinutemen
Жыл бұрын
The Mark VII is trash (as of this posting). I was inspired to buy/try it and, while it worked the first time (out of the box), it quickly became incapable of doing anything (literally 'anything') and is now an expensive paper weight. As I think back to when I first watched this video, I should have known; (1) Corgi said at 1:25 that it's not something she actually uses (the device was her friend's) and (2) David thanked Corgi 46:59 for muscling through all of the 'technical issues' w/t device (which we did not see) during the making of this video. BUYER BEWARE! In any event, Corgi's insight and experience is always appreciated and worth listening to... thank you!
@MoorishMade
4 ай бұрын
I have to agree. There aren't enough lessons on the wifi pineapple to really make it useful. I found myself as well as others still using Kali Linux for many of the functions. I have a cyber security backgound, and this thing just isn't performing like it was hyped up to be. When i do find video lessons on using the pineapple, they always still use linux and only use the pineapple as a wifi interface.
@justineliason
Жыл бұрын
They both are insanely smart my goal is to learn as much as them
@Demonic_Skidmark
Жыл бұрын
I just got a Mark VII for an early bday present and it is a DOA. I was super excited to utilize it and learn more about doing some pentesting. Your videos have really helped me learn a lot! Cori is super intelligent and love the knowledge!! Keep up the awesome content! Hope you do more content with Cori in the future!
@melvinndlovu7083
Жыл бұрын
Yo from south africa here ... Looking on sharing pentesting ideas .. If you dont mind 🙏🏼🙏🏼
@Demonic_Skidmark
Жыл бұрын
@@melvinndlovu7083 Of course! For starters, what kind of pentesting are you wanting to try? There a few different kinds of pentests you can practice just depends where you want to start
@TerryDeSimone
Жыл бұрын
What you covered with the Pineapple is all the info that's already on the internet & has been done a dozen times.. You should have gone more in-depth with the PineAP Suite 'Advanced Mode', using it with campaigns.. there is barely anything on the net about it, and it's weird bcuz that's like its main feature.. also more in-depth with campaigns.. Those would make good videos, bcuz there are *NONE* on the net.. some more video ideas (in-depth) would be like: PineAP Suite 'Advanced Mode', Campaigns, the generated Handshakes (Full/Partial PCAP & Full/Partial Handshake) & what to do after.., SSID Cloning (Karma attack), creating custom WIFI vendor pages (Linksys, TP-Link, etc) & apply them with the Advanced option in Evil Portal.. so when it does Karma attack & clones SSID it can use their WIFI Vendor correct router page... Basically start to finish like it was a client job.. I started with a 2mW WIFISky with a Yagi & Kali (Backtrack, yes that long ago)
@seanrendall5495
4 ай бұрын
I usually play informational videos in the background, and learn a little less for it. Thanks to Cori, I paid rapt attention.
@_niha_.00
2 жыл бұрын
Great video david sir. Thank you so much for sharing your knowledge. It's help me lot
@RandyHanley
2 жыл бұрын
David is the real deal. Cori seems really cool too!
@goofballbiscuits3647
Жыл бұрын
Awesome, I loved the last video she was on! So down to earth and knowledgeable.
@TANKBM
2 жыл бұрын
Congratulations, our dear teacher, he has reached a million subscribers. I am glad that I was a subscriber with him from the beginning
@martinkrabbe5006
2 жыл бұрын
Great content David and Cori.Thank you for sharing
@ahelalley
2 жыл бұрын
The quality of this video is awesome
@marveII0us
2 жыл бұрын
I was there in the last video with corgi too, and I gotta admit, I got some real info there I asked her on twitter how to actually send a phishing email without it ending up in the spam box of Gmail, and got help with it too!
@davidbombal
2 жыл бұрын
Cori is great! I'm grateful that she's willing to share her knowledge and experience with all of us :)
@cybericanintel
2 жыл бұрын
Awesome job David, Cori is an amazing hacker so happy you brought her back. Keep up the amazing job in teaching us. You Rock!
@davidbombal
2 жыл бұрын
Thank you! Cori is such a rockstar!
@thumbtak123
Жыл бұрын
The Flipper can do Evil Portal, now.
@jasonmurdock776
9 ай бұрын
So... love the pineapple... but it doesn't come with 5ghz capabilities stock. You have to add the MKA7 adapter and then it has 5ghz capabilities as well. just fyi...
@Zerback
2 жыл бұрын
The evil twin part is a winner. thank you so much for this content David!!
@davidbombal
2 жыл бұрын
You're welcome Alex!
@crashtfa
10 ай бұрын
I would love to see the methodology behind doing this with wpa3 enabled ap’s
@renn3014
Жыл бұрын
I love these videos! I’m learning sooo much
@albertmontanasune6383
Жыл бұрын
I'd love to see the BashBunny using the HID in any other keyboard layout but us. Great content!
@zecouto8058
Жыл бұрын
Cori is awesome!! Love to watch her
@emilianocorrea3267
2 жыл бұрын
this is so entertaining to watch, i'm just preparing my ccna but i might get in this field in the future, who knows just starting hehe
@Alkaris
2 жыл бұрын
Free Wi-Fi is too tempting for people in large public places so they will always connect to them without thinking or protecting themselves if they do connect to them by using a VPN to hide what they're doing. Buses, trains and trams even provide free Wi-Fi these days, you literally cannot escape them because they're basically everywhere. I often notice people using their own Wi-Fi hotspots from their phones that aren't even Wi-Fi password protected, just open to anyone to connect. I often use my phone to scan the air for available networks using the Wifi Analyzer app and within minutes I can see every network around me in 2.4Ghz and 5Ghz network ranges and the channels they all broadcast on. Even with some Free Wi-Fi hotspots they provide a code to get access when you purchase a drink and food like Starbucks for example, but even they aren't safe either, because the codes can often be bypassed.
@jasonhutchcraft
Жыл бұрын
it should be noted that 2.4 ghz works on the Pineapple out of the box, but the 5 ghz requires an additional adapter. idk if thats already been established, though.
@MrKoblepot
Жыл бұрын
Thanks, i was confused by this and wondering too 👍
@syedshirazi95
2 жыл бұрын
As always great video ! How can we create a custom connection page for the Evil Portal ?
@casperghost1467
Жыл бұрын
Very knowledgeable stuff, she knows her stuff
@venus334
2 жыл бұрын
Thanks guys, really appreciate it!
@burime13
Жыл бұрын
Her facial expressions are completely insane, in a good way))
@shortvids5825
2 жыл бұрын
When I saw her I was like wait she seems familiar then later realized she looks like Inbar Lavi from Lucifer series
@ethicalhackerwhitehat
Жыл бұрын
instead of commenting "I love you, I like you" etc stuff, just press the like button
@DavidStringham
2 жыл бұрын
27:45 Unfortunately, most of the modules were not updated for the MKVII. Hak5 has stated that modules like SSLstrip, DWall, DNSspoof, and CursedScreech are outdated and deprecated.
@PanicAcid
Жыл бұрын
Indeed and it's absolutely true, most of the great modules for older generations are now built into the PineAP suite out of the box and most of the modules that are missing are missing because they're useless in this day and age SSLStrip etc, absolutely useless since circa 2017. It's also worth noting that there's pre compiled packages too that users can install. So if there isn't a module for it there may well be a package for it (and you can just hit it via the CLI).
@4b5urd.
Жыл бұрын
@@PanicAcid excellent explanation and suggested work around.
@joshuaerdrich5616
2 жыл бұрын
Great video lots of information. It all seems very complicated to someone who's just starting down this rabbit hole cyber security.
@andrewborntrager7909
Жыл бұрын
Great video. Was just curious, if you are in range with good signal, can you just use wireless adapter in the laptop ?
@PirateSimulator
Жыл бұрын
Is termux good to use as linux terminal for android? Or should i use others because im hacking 2 years with termux
@MiguelAngel123
Жыл бұрын
Hola señor David Bombal, Felicidades por su trabajo, soy un usuario que me gusta la seguridad informática, soy de España, quisiera preguntar si habría la posibilidad de activar la traducción de sus video en Español y que las personas hispano parlantes pudiéramos disfrutar de sus vídeos tan interesates, si no hay posibilidad de traducción de los videos lo entiendo, gracias de todas formas, estoy aprendiendo inglés pero falta mucho para poder entender, buenos días Señor David Bombal.
@animationmann6612
Жыл бұрын
No if youre writing it in Spanish
@jpo3811
21 күн бұрын
If you use closed captioning CC > select auto translate > select the language you desire, then you will see the captions translated.
@jacquesb5248
2 жыл бұрын
so even with all this can view encrypted traffic? aka https and or a vpn? i connected to mcD's wifi and they only ask to click yes on a webpage for confirmation. can it then capture say any credentials from my bank and or rdp connections credentials?..i did a basic scan but couldn't see any other clients on it.clients set to ne able to see each other...they slow as mudd tho, 5Mbps
@thatonedudemike3259
Жыл бұрын
i was the opposite. I started with a hak5 pineapple and learned more from using tools like the aircrack suite and fern then went back to the pineapple to apply what i had learned. I guess it was just the lack of real documentation and youtube videos that made all that happen the way it did .
@ebriquet
Жыл бұрын
Is there any wifi pineapple module to gain access to an Intelbras security camera dvr?
@godadawgashaw4965
2 жыл бұрын
thanks a lot David .you always invite good guest
@weirdstuffsforyou
2 жыл бұрын
I don't want to be a party pooper but for me, wifi pineapple is just a toy for noobs. It's not even near to call as hacking device. If someone has good knowledge then they can do most of these things just by a laptop and RPi (not required for most of the task).
@valdimer11
10 ай бұрын
Cori was correct. The gui version of nmap is called zenmap, however they do the same thing so my guess is, if pine-ap is using a gui-based nmap, its probably just simpler to call it Nmap because most beginner cybersecurity enthusiasts know Nmap but don't know zenmap.
@hoangbeat563
Жыл бұрын
Can i use my TP-LINK TL-WN722N (ver 1.10) on Kali Linux? does it support monitor mode and injection?
@HeinrichDaHammer
Жыл бұрын
Lan turtle will be handy to see what she does with it. Rubber ducky is old but lovable.
@truthreigns7
2 жыл бұрын
I find this very interesting, however it is difficult (for me) to understand Cori due to the echo in her room/mic. Maybe next time, she can use a better room
@Pdrum2
2 жыл бұрын
Maybe a mic
@_droid
Жыл бұрын
The closed captions are pretty accurate. Not 100% but close enough. Better than I expected anyway.
@kmk13542
Жыл бұрын
Great video! A question about connecting to pinapples or fake WIFIs in public places; what does this data look like when a user connects to the pinapple/ fake network capturing data then connects to their VPN? What is captured in the first few seconds before connection to the VPN and after connection to the VPN what can be seen?
@keithp7010
Жыл бұрын
Great video and info sir. Thank you David
@jamesos2744
Жыл бұрын
I like the EFF sweatshirt... I have the same one, too bad the material is so low grade (polyester-cotton). I would pay the EFF double for a good quality cotton version!
@Darkseid001
6 ай бұрын
So what if Mc Donald's already has an ssd that's called Mc Donald's free wifi can they both be named the same?
@gallerksee
Жыл бұрын
Beautiful and dangerous, how cool is that
@Alex-nq5nz
2 жыл бұрын
Well done ! As usual great content ! Bravo to both of you! I have a question ...in order to become a real hacker, should I buy a hoodie or my shabby t-shirt could be just ok ? 🤣🤣🤣🤣🤣🤣
@tyrantcyber6239
Жыл бұрын
HELLO TEACHER DAVID AM SO GLAD AND AM INTEREST IN YOUR CLASS
@terexkiller3847
2 жыл бұрын
Great Video, David! Thanks
@tigreonice2339
2 жыл бұрын
So what to do if you travel to other country? Hotel for example
@3eezie483
Жыл бұрын
great vid! is it possible to use the wifi pineapple and a second network adapter to connect to a different network?
@melanatedspy
2 жыл бұрын
I use the wifi pineapple evil portal and I can easily gather passwords spoofing public wifi....
@davidbombal
2 жыл бұрын
Thank you for sharing. This is one of the demos in this video and the reason I wanted to highlight this issue.
@zaccampa4055
Жыл бұрын
My wife makes the craziest complex passwords it’s funny lol she makes me proud.
@bassmaiasa1312
Жыл бұрын
Logins to my guest network are isolated from other devices so I use a nothing password for guests. But how reliable is that setting? Sure, I set it in my router, but does someone just need to be in security kindergarten (as opposed to security preschool special ed like me) to know how to over-ride and connect to other devices?
@beastpov
2 жыл бұрын
I would like to see work with bad usb scripts. Like a refreshing breakdown of that. Also thanks for this pineapple video. Hmmm maybe a video breaking down beginner scripts (windows ducky)
@regulariousweedimaximus9495
6 ай бұрын
Wish I had a cool mentor like her
@gokumonki3
Жыл бұрын
She seems pretty cool and i think i can learn alot from her
@zimthegoat7
2 жыл бұрын
love your content sir
@davidbombal
2 жыл бұрын
Very happy to hear that!
@r6scrubs126
Жыл бұрын
I feel like that whole "setting the IP" bit at the start was extremely poorly explained. It looked like she was giving her own Windows machine that IP that ended in .42 but for some reason kept saying that's the IP that was assigned to the pineapple. The pineapple clearly had the IP that ended in .1 and that's why that's what she connects to in the browser. Maybe just a communication issue or me misunderstanding what she was saying but idk it didn't fill me with confidence that I was going to get good technical info from the rest of the video
@wgtnsLive
Жыл бұрын
do you have the link to the Email script that your quest made ??
@jodybrookes
2 жыл бұрын
I'd like to know is it possible to capture https traffic somehow or is that not possible being encrypted?
@ahmadmalhadi194
Ай бұрын
thanks corge !
@scentilatingone2148
7 ай бұрын
Cori im in Nashville too! Does she run seminars meetups etc!?
@Nightfall-TCG
Жыл бұрын
I really want to see more demos on the hak5 omg cables. I really want to see just how far those cables can go. There isn’t too much information on them atm
@Premier-Media-Group
2 жыл бұрын
Unfortunately, the mk7 Pineapple is on 45 day backorder...
Пікірлер: 348