Wireless devices conveniently search for Wi-Fi networks that they remember connecting to in the past, so when the router tells the device ‘Yes, I’m your corporate wireless network,’ then your device’s network software automatically connects to that familiar network. While that connectivity feature makes it easy for your smartphone, laptop, tablet or other computing device to get online, it’s also a vulnerability that should make you slightly suspicious of any Wi-Fi. If another device is between you and the router, but says ‘Oh yes I’m the familiar such-and-such wireless access point’ and you connect to it instead? Then say hello to a man-in-the-middle attack. A MITM attack allows a hacker to secretly nab passwords and all other data off your device. One such “hot spot honeypot” device that can easily exploit that vulnerability is Hak5’s WiFi Pineapple which Revision3 Tekzilla host Patrick Norton called the “the little plastic Pineapple of Doom.”
Well the Pineapple is back and in hacker-loving black. If you are a geek, IT ninja, security professional, hacker hobbyist or hardcore gamer, then it’s likely you have heard of the great tech show Hak5 and Darren Kitchen who is one of the Hak5 hosts. At the hacker convention ShmooCon, Kitchen gave a sneak peak of the new WiFi Pineapple Mark IV which “is a huge leap forward for the fruitful Wi-Fi-focused penetration testing platform.” With the new and improved Pineapple, “gathering interesting packets, spoofing DNS, watching web traffic and more is just a click away.” Previous WiFi Pineapple hacks included auto-Rickrolling, phishing and session hijacking. I had the pleasure of interviewing Darren Kitchen about the soon-to-be-available WiFi Pineapple Mark IV.
Source:http://blogs.computerworld.com/19671/sneak_pineapple_peak_hak5_creates_even_more_lethal_wi_fi_hot_spot_honeypot_hacking_tool?source=rss_blogs
