How to Build a Pumpkin Pi — The Rogue AP & MITM Framework That Fits in Your Pocket « Null Byte :: WonderHowTo

A man-in-the-middle attack places you between your target and the internet, pretending to be a Wi-Fi network while secretly inspecting every packet that flows through the connection. TheWiFi-Pumpkinis a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target.Today, we'll learn to set up this framework on alow-cost Raspberry Pi running Kali Linux. You may want to look into getting aRaspberry Pi 3 kitorRaspberry Pi 3 B+ kitfor this guide. If you already have one, great, let's go!Man-in-the-Middle Pumpkin PieOn the Raspberry Pi 3 running Kali Rolling, some Kali Linux tools can be broken out into standalone, almost disposable devices. One perfect example is theWiFi-Pumpkin, an attack framework for creating rogue access points to stage man-in-the-middle (MitM) attacks. This allows an attacker to lure victims to their evil access point and begin monitoring internet traffic, effectively seizing control over the flow of data to any connected victims.A rouge device for creating fake Wi-Fi hotspots from a Raspberry Pi.Image by SADMIN/Null ByteWhen to Use the WiFi PumpkinThe WiFi-Pumpkin is a great tool to use when you can bridge an existing Ethernet or Wi-Fi connection, serving internet access to anyone willing to connect to an open network without asking too many questions. It comes stuffed with features, including rogue Wi-Fi access points, deauth attacks on client APs, a probe request and credentials monitor, transparent proxy, Windows update attack, phishing manager, ARP Poisoning, DNS Spoofing, Pumpkin-Proxy, and image capture on the fly.Following up froma previous tutorial, wireless probe frames can reveal networks a phone or laptop is probing for. One way we can use the WiFi-Pumpkin is to monitor probe frames and create a network in response. We can use the WiFi-Pumpkin to conduct a "Karma" attack and create a network with the same SSID that the target device is expecting, or has connected to before.Don't Miss:Log Wi-Fi Probe Requests from Devices with ProbemonThe name of your network will have a significant effect on how people interact with it. If you are in a crowd, creating a network with names like "Starbucks" can cause a startling number of devices to connect to you in under a minute. Be creative in how you trick users into connecting to your evil AP. When you want precision control over the various elements of a man-in-the-middle attack, the WiFi-Pumpkin's easy GUI is straightforward enough for most beginners to grasp.What You'll Need to Get StartedThe setup to create a WiFi-Pumpkin is minimal and requires only a few components. To put this together, you'll need the following.wireless network adapterEthernet cableRaspberry Pi 3or3 B+microSD cardpower sourceUSB keyboard/mouse interfaceSD card adapterlaptop to load files on the SD cardA simple setup for a portable rouge AP, easy to hide or leave behind.Image by SADMIN/Null ByteOn Amazon:CanaKit Raspberry Pi 3 B+ Starter Kit (32 GB EVO+ Edition, Premium Black Case)Installing & Running WiFi-Pumpkin (Kali Linux)As before any new install, ensure that your system is fully updated. WiFi-Pumpkin will require that you have an up-to-date Python installed on your machine.sudo apt-get updateWiFi-Pumpkin has a number of dependencies you will need to have installed before it can run smoothly. Install the following if you don't already have them on your Kali-Pi.Step 1: Install DependenciesPython's package manager, Pip, will help us manage the rest of the installation. To install it on Kali Linux, run the following commands.sudo apt-get install -y python-pipThe next three dependencies will allow WiFi-Pumpkin to verify certificates, add HTTP layer support, and intercept and inspect traffic flows. Install each as shown below.pip install service_identity

pip install scapy_http

sudo apt-get install mitmproxyStep 2: Install WiFi-PumpkinDownload WiFi-Pumpkin by cloning the GitHub repository:git clone https://github.com/P0cL4bs/WiFi-Pumpkin.gitThengo insidethe folder:cd WiFi-PumpkinAndchange the permissionof the installer file:chmod +x installer.shAnd then run the installer by entering the following../installer.sh --installThis may take a little time, during which you can go grab a cookie.Step 3: Run WiFi-PumpkinWhen it's complete, run WiFi-Pumpkin by simply entering the following.sudo wifi-pumpkinYou're ready to get started creating fake APs!The Wi-Fi Pumpkin in action.Image by Sadmin/Null ByteSome Considerations with the WiFi-PumpkinKeep in mind, in order for WiFi-Pumpkin to work, you will need to have access to at least one Kali Linux compatible wireless adapter with AP/Monitor mode support. You will need your Pi to be connected to the internet while also capable of monitoring wireless traffic around you.You can achieve this by using one wireless network adapter and your Pi's internal Wi-Fi card in tandem or a wired Ethernet connection and one wireless network adapter. In the case your particular Pi isn't Wi-Fi capable, you'll need two wireless network adapters. If you are unsure if the wireless adapter you have supports AP/Monitor mode, you can check in terminal withiw list. If there is an "AP" in the list of "Supported interface modes," then your device supports it.If you're in need of a Kali Linux compatible wireless adapter with the appropriate functionality, check out the following linked article. You can ask me questions here or @sadmin2001 onTwitterorInstagram.Don't Miss:Choosing a Wireless Adapter for HackingFollow Null Byte onTwitter,Flipboard, andYouTubeSign up forNull Byte's weekly newsletterFollow WonderHowTo onFacebook,Twitter,Pinterest, andFlipboardWant to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover photo by SADMIN/Null ByteRelatedHow To:Null Byte & Null Space Labs Present: Wi-Fi Hacking, MITM Attacks & the USB Rubber DuckyHow To:Create an Evil Access Point with MitmAPHow To:Hack WPA WiFi Passwords by Cracking the WPS PINRaspberry Pi:MetasploitHow To:Discover & Attack Raspberry Pis Using Default Credentials with Rpi-hunterHow To:Make pumpkin pie & pumpkin whoopie pies for ThanksgivingHow To:Build a Beginner Hacking Kit with the Raspberry Pi 3 Model B+How to Hack Wi-Fi:Breaking a WPS PIN to Get the Password with BullyHow To:Make Pumpkin Spicy SoupHow to Hack Wi-Fi:Creating an Invisible Rogue Access Point to Siphon Off Data UndetectedHow To:Make pumpkin & pecan piesHow To:Set Up a Headless Raspberry Pi Hacking Platform Running Kali LinuxHow To:Prepare squash for cookingHow To:Make mini pumpkin piesHow To:Boil or steam a pumpkin for Halloween or ThanksgivingRaspberry Pi Alternatives:10 Single-Board Computers Worthy of Hacking Projects Big & SmallNews:Katie's FarmVille Themed Pumpkin Patch CowHow To:How Hackers Steal Your Internet & How to Defend Against ItHow To:Carve the Perfect Halloween PumpkinHow To:Carve a Halloween Pumpkin or Jack-O-LanternHow To:Make pumpkin whoopie piesNews:Zombies and Demons Carved Out of 1,818.5 lb PumpkinMinecraft:Pi Edition, Coming Soon to a Raspberry Pi Near YouHorror Photography Challenge:Moldy PumpkinPost Pi Day Coding Project:Let's Uncover the Hidden Words in PiHow To:Carve Polyhedral PumpkinsNews:Happy Pi/Half-Tau Day!News:Rogue CopHow To:Carve Fractals and Stars on PumpkinsNews:Nature Makes Jack-O'-Lanterns Way CreepierNews:Do You Think It's To Early For Halloween?News:Soon To Be Famous Pumpkin Bread PuddingHow To:Paint Mini Pumpkins as Angry Birds DecorationsNews:Pumpkin Patch with a Bubbling IntroNews:FarmVille Fall/ Autumn Theme