Scott Helme - Scott Helme (Page 40)

The WiFi Pineapple - Using Karma and DNSspoof to snag unsuspecting victims

Karma is one of the best features of the WiFi Pineapple thanks to Jasager. Coupled with a tool like DNSSPoof it allows you to trick clients into connecting to your rogue access point and to then forge responses to DNS queries. With this you...

Free Post

cracking

WiFi (in)Security - Why WEP is no longer capable of protecting your WiFi

Wired Equivalent Privacy (WEP) was ratified in 1999 and intended to give WiFi users data confidentiality comparable to that of a traditional wired network. Although the name implies a high level of security, WEP has several serious and demonstrable flaws that result in it...

Free Post

2 factor authentication

Password security doesn't need to be difficult, looking at 2 factor authentication and password managers

Passwords protect all of your online life and using weak or duplicated passwords can leave you facing huge risks when it comes to security. 2 factor authentication and password managers provide easy ways to greatly increase your security online. Weak Passwords One of the...

Free Post

chrome

Why you shouldn't use your browser to store online passwords

A recently publicised "flaw" in Chrome and Firefox could allow someone with access to your computer to view all of your online passwords in a matter of seconds. Let's look at exactly what the problem is and what can be...

Free Post

occupineapple

The WiFi Pineapple - Occupineapple and broadcasting multiple SSIDs

One of the most simple and fun things to do with your WiFi Pineapple out of the box is the Occupineapple Infsusion. Simply put, this Infusion allows you to broadcast a whole host of SSIDs to make it look like there are multiple WiFi...

Free Post

ext4

The WiFi Pineapple - USB storage and Infusions from the Pineapple Bar

As an embedded device the WiFi Pineapple comes with very little storage onboard. Fortunately for us this can be easily expanded using the USB port found on the version IV hardware. In this blog I'm going to cover setting up USB storage...

Free Post

config

The WiFi Pineapple - Setup and introduction

The WiFi Pineapple has been a hot topic lately and I've managed to get my hands on one. Touted as a 'favourite among penetration testers and security enthusiasts' there's no arguing this little box packs a lot of...

Free Post

code injection

Code Injection - TLS (SSL) is not all about privacy, it's about integrity too

TLS isn't just about ensuring your data remains private whilst transiting the Internet, it's also about ensuring the integrity of the data. In this post I will demonstrate a HTML injection attack and show you what a man in the...

Free Post

exif data

EXIF Data and Geotagging - Can someone track you using your pictures?

I've seen a lot of concern online recently about the possibility of people tracking your physical location using the pictures you post online. This is made possible through the act of Geotagging and the EXIF data stored in images, but what'...

Free Post

cain

Advanced Session Hijacking - Is coffee shop WiFi such a good idea?

Learn just how easy it is to hijack sessions over the LAN or Wifi and why using that free WiFi at your local coffee shop could cost you more than you expect! In a previous blog post [https://scotthelme.co.uk/session-hijacking-ssl-doesnt-mean-secure/] I gave...