c4ch3c4d3
ed50cd7b5a
- deauth/kick: use full PINEAPPLE_DEAUTH_CLIENT hak5cmd app name (BUG 1)
- _allow_all_ssids: PINEAPPLE_NETWORK_FILTER_MODE deny so karma lets
clients associate after deploy (BUG 2)
- enterprise inner EAP (BUG 3), two root causes found by live experiment:
- hostapd never wildcard-matches a bare `*` identity for phase-2
lookups; eap_users now uses quoted empty prefix `""* ... [2]`,
which prefix-matches any inner identity
- pineape_auth_pass=1 forwards inner EAP to pineapd, which has no
standalone responder; deploy forces 0 and stop restores 1
Residual: plaintext MSCHAPv2 capture is firmware-blocked on 24.10.1
(MSG_DEBUG compiled out of the karma wpad; `-f` silently ignored);
documented in code comments and the validation report.
- ISSUE 4: point pineapd.@hostapd[0].mgmtiface at wlan1wpa during 5 GHz
WPA deploys so handshakes/loot populate; cleared on stop
- ISSUE 5: radio0 set_ap path polls 90 s across the wifi-reload window
and retries set_ap once if the iface still has not appeared
- ISSUE 6: skills docs use `llc && eth.type == 0x888e` (firmware tcpdump
matches 0 frames on `eapol`)
- ISSUE 7: capture state helper detects dead-pid / iface-down, cleans up,
status reports {running:false, stale:true} instead of zombie running
- tests: fix global os.path monkeypatch leaks between test modules that
broke test_mk8_events/test_reliability_api under discovery; add
regression coverage for all fixes above (463 tests green)
Live validation evidence and newly discovered firmware quirks
(DEVICE_FILTER_DELETE no-op, dropbear rate limiting) recorded in
docs/validation/2026-08-23-pineap-validation-report.md.
Mark VIII
Mark VIII is a community web-management payload for the WiFi Pineapple Pager.
It runs locally on the Pager and exposes its interface on port 8080.
Install
Copy this complete directory to either:
/root/payloads/user/remote_access/pager-webui/
/mmc/root/payloads/user/remote_access/pager-webui/
Ensure payload.sh is executable. It will then appear under Remote Access in
the Pager payload menu.
Run
Run Mark VIII from the Pager. Choose background mode to install and enable its
procd service, or foreground mode to keep it attached to the payload screen.
Open http://172.16.52.1:8080/ and authenticate with the Pager's device
password. Re-running the payload stops and removes the background service.
Requirements and security
- WiFi Pineapple Pager firmware 24.10.1
python3(included with the supported firmware)- Access to port 8080 should be limited to trusted management networks
Mark VIII runs as root because it manages the device. Review the source before installation and use it only on systems and networks you are authorized to administer.