bzuccaro
85be12d2df
The stock daemon's enterprise config generation is broken on this firmware (it hardcodes eap_server_erp=1, which hostapd rejects), so the enterprise attack now runs its own karma+PineAPE hostapd instance on wlan1ent/phy1: iw-created iface, EAP config with catch-all user file, pineape+auth capture enabled via ctrl, mgmtiface registered in pineapd UCI so captured creds flow into recon.db (hostap_basic/hostap_chalresp). Boot-recovery redeploys a live attack after a Mark VIII restart.
Mark VIII
Mark VIII is a community web-management payload for the WiFi Pineapple Pager.
It runs locally on the Pager and exposes its interface on port 8080.
Install
Copy this complete directory to either:
/root/payloads/user/remote_access/pager-webui/
/mmc/root/payloads/user/remote_access/pager-webui/
Ensure payload.sh is executable. It will then appear under Remote Access in
the Pager payload menu.
Run
Run Mark VIII from the Pager. Choose background mode to install and enable its
procd service, or foreground mode to keep it attached to the payload screen.
Open http://172.16.52.1:8080/ and authenticate with the Pager's device
password. Re-running the payload stops and removes the background service.
Requirements and security
- WiFi Pineapple Pager firmware 24.10.1
python3(included with the supported firmware)- Access to port 8080 should be limited to trusted management networks
Mark VIII runs as root because it manages the device. Review the source before installation and use it only on systems and networks you are authorized to administer.