WiFi Pineapple
World famous WiFi Man-In-The-Middle Platform. Imitate trusted networks. Click & covertly transfer clients to your Pineapple.
Perform advanced reconnaissance. Launch offensive attacks. Own the network, own the client.
Introduction
The Hak5 WiFi Pineapple is a highly advanced WiFi auditing and MITM platform. The original "RougeAP" device - the WiFi Pineapple provides an end-to-end workflow to bring WiFi clients from their trusted network to your rouge network.
The PineAP suite is a cross-platform control panel for the WiFi Pineapple devices, providing fine-grained control over all elements of your audit.
The elegance of the WiFi Pineapple Platform is in its simplicity. Previously onerous, inefficient and prone to collateral damage - WiFi Auditing and Offensive Operations are now highly targeted, covert and very simple.
Depending on your requirements, the WiFi Pineapple is available in different variations: Fixed, Mobile and Tactical.
Available with or without the official Hak5 Wifi Pineapple Field Guide (76 pages) - perfect for hitting the ground running.
Platform Overview
Leveraging the concept of Rouge Access Points into a fully-featured, reliable product suite, the WiFi Pineapple is used for:
Advanced MITM Attacks
Perfectly mimicks target networks, allowing for seamless client capture via the highly targeted deAuth mechanisms.
Once captured, all standard network vectors are available: DNSSpoofing, Packet Capture, etc.
WiFi Reconnaissance
Covertly discover, visualise and map WiFi networks and client hierarchies. Build lists of existing networks, and even client historical SSID connections.
Continuously scan, add notes, filter clients, networks, logs and more.
Automated WiFi Infiltration
Capture and pipe WiFi Encryption credentials in pcap / hashcat or JTR formats. WEP, WPA & WPA Enterprise.
Highly targeted, highly covert
Keep your "Get Out of Jail Free" letter firmly in your pocket. The PineAP suite allows for fine-grained, highly targeted actions, ensuring no detection and no collateral damage.
The Pineapple Platform consists of two elements:
The PineAP Suite is a purpose built platform, easy to use but incredibly powerful, designed to oversee and control your audit workflow.
Each WiFi Pineapple runs a highly modified version of OpenWRT on purpose-built hardware. Devices are equipped with multiple powerful radios (up to 800mW!).
Functionality Overview
Leveraging the concept of Rouge Access Points into a fully-featured, reliable product suite, the WiFi Pineapple is used for:
Patented Rouge AP Tech
Patented PineAP Platform software imitates trusted networks, allowing efficient MITM attacks
WPA / WPA Enterprise Attacks
Capture WPA Handshakes and Auth Frames. Imitate Enterprise APs, snatching credentials
Fine-grained Filtering
Respect engagement scope and limit collateral damage with MAC/SSID filtering.
Simple Control Panel
PineAP is organised to match your workflow. One-click setup, one click attacking.
Advanced Recon
Covertly discover and visualise the wireless environment; map relationships between devices.
Actionable Intel
Gather and spoof clients' preferred networks. Identify vulnerable devices passively.
Offensive Attacks
Trigger highly effective, highly targetted attacks tailored to your scope. Inject manipulated packets, including deauth.
Cross-Platform
No software, no apps required. Compatible with any platform and any browser.
Hardware Comparison
Tetra Edition
6th-generation: Dual-Band, Dual-Radio, Quad-Amplifiers. Suitable for permanent installation or RF-saturated environments.
| Industrial / Infrastructure Edition |
|---|
|
Dual Band 2.4/5 GHz 533 MHz Network SoC |
| Four Long Range Antennas up to 800mW per radio |
| USB Ethernet, USB Serial, USB Host and Ethernet Ports |
| 2 GB NAND Flash |
| Power via USB or DC |
Available as
Standard
Tactical
Nano Edition
6th-generation: Dual-Radio. Low power consumption, small physical footprint. Perfect mobile solution or covert red-teaming.
| Portable / Covert Edition |
|---|
| Single Band 2.4 GHz 400 MHz Network SoC |
| Two Standard Antennas up to 400mW per radio |
| USB Ethernet Plug, USB Host Port |
| MicroSD Expansion |
| Power via USB |
Available as
Standard
Tactical
What's included
- 1x WiFi Pineapple (version of your choice)
- 1x Quick-Start Guide
Technical Specifications
Tetra
- CPU: 533 MHz MIPS 74K Atheros AR9344 SoC
- Memory: 64 MB DDR2 RAM
- Disk: 2 GB NAND Flash
- Wireless: Atheros AR9344 + Atheros AR9580, both IEEE 802.11 a/b/g/n with quad integrated skybridge amplifiers and included 5 dBi antenna for a high 29 dBm gain EIRP
- Ports: (4) SMA Antenna, RJ45 Fast Ethernet, Ethernet over USB, Serial over USB, USB 2.0 Host, 12V/2A DC Power
- Power: Requires 18W: DC Barrel Port, USB ETH port, USB UART port. Configurable Status Indicator LED
- Configurable Reset Button
Nano
- CPU: 400 MHz MIPS Atheros AR9331 SoC
- Memory: 64 MB DDR2 RAM
- Disk: 16 MB ROM + Micro SD (not included. up to 200GB)
- Wireless: Atheros AR9331 (wlan0) + Atheros AR9271 (wlan1), both IEEE 802.11 b/g/n
- Ports: (2) RP-SMA Antenna, Ethernet over USB (ASIX AX88772A)
- USB 2.0 Host, Micro SD card reader
- Power: USB 5V 1.5A. Includes USB Y-Cable
- Configurable Status Indicator LED
- Configurable Reset Button
WiFi Pineapple Technical Resources
Tutorials & Guides- Getting Started (5 Articles)
- Setup (6 Articles)
- Establishing Internet Connectivity (7 Articles)
- Console Access (4 Articles)
- WiFi Basics (16 Articles)
- Development (9 Articles)
- FAQ / Troubleshooting (7 Articles)
Hollywood Cameos
Compatible Systems
- Windows: XP, 7, 8, 10 (All Versions)
- OS/X: 10.0 - 10.7 (All Versions)
- Linux: Debian, Ubuntu, CentOS, etc (All Versions)
- Android (All Versions)
- Hak5 Cloud C2 Compatible
Shipping & Packaging
- Each WiFi Pineapple is dispatched from Europe - no need to worry about slow shipping times, import duties or damaged goods.
- Packed in a sturdy compact 85x130x45mm box.
- We provide worldwide shipping with express options.
WiFi Pineapple Introduction Video
SHIPPING & PACKAGING
Where do you ship from?
All items are dispatched from our EU-based warehouse. You will receive a tracking number upon item dispatch. The address used on your purchase is printed as a label - please double check your address to avoid mistakes.
When will my order be dispatched?
Lab401 dispatches orders Monday - Friday.
All orders placed before 12PM GMT+1 will be dispatched the same day. All orders placed after this cutoff time will be dispatched the next business day.
For example:
- An order placed Friday, 9AM GMT+1 will be dispatched the same day.
- An order placed on Friday, 6PM GMT+1 will be dispatched Monday.
- An order placed on Saturday will be dispatched Monday
For any questions, please contact customer support.
What shipping options are available?
We provide four types of shipping:
- EU Standard Post
- EU Express Post
- International Standard Post
- International Express Post
How are import duties / customs handled?
For all European Union destinations, all shipments are DDP - Delivered Duty Paid. This means all applicable VAT/TVA, shipping costs and customs fees are pre-paid.
You will not be charged by the courier service / post office or customs.
For all destinations outside European Union, all shipments are DDU - Delivered Duty Unpaid. This means that your country's custom service impose a VAT/TVA/Import Duty on your shipment.
Please note - a purchase is an explicit agreement of our terms and conditions. Any products refused by clients will not be refunded.
Delivery Protection
Is my delivery protected?
For orders over 250 Euro, Lab401 automatically provides door to door delivery protection.
Lab401 Delivery Protection means we remain fully responsible for the package right up to delivery. If the package is lost or damaged, the package can be immediately resent upon receipt of proof.
For orders less than 250 Euro full responsibility for the package is transferred to you at the moment of shipping. Any claims for loss or damage must be addressed directly with the delivery agency.
Delivery Protection for orders under 250 Euro can be purchased at checkout easily and cheaply.