Evil Portal Module | Wi-Fi Pineapple Mark VII

hey hackers blue cosmo from ccs here

welcome back to the channel today we're

going to be playing around with evil

portal now if you don't know what evil

portal is it's probably one of the most

popular modules on the wi-fi pineapple

but um if you don't know what it is it's

basically kind of like almost like a dns

spoofer it kind of like um emulates

different portals um for your wi-fi

router and such um so we try to connect

to it um

it will open up like control webpage

asking you to log in to some sort of

portal um and we can capture those

credentials with wi-fi pi app was pretty

cool so let's go ahead and discover how

we run or how we can do this um quickly

if this is your first time with the

wi-fi pineapple i definitely suggest

checking out um our wi-fi pineapple

course on our website what um

cosmomcs.com

courses um there we have courses on the

wi-fi pineapple bash bunny usb rubber

ducky a bunch of other computer science

and cybersecurity related things so

definitely check that out but regardless

let's jump into the video um you guys

can see that i am on the wi-fi pineapple

page let me actually go down and uh

move my camera

perfect so you guys can actually see

what i'm doing um if you guys hit that

news and updates button it just kind of

make sure that or make sure that we are

connected to the internet so let's click

that button make sure that our wi-fi

pineapple is connected to the internet

and it is connected to the internet

awesome awesome awesome awesome awesome

what we're going to want to do is go to

the modules and packages section of um

the wi-fi pineapple it's that little

puzzle piece button um and then i'll

take you to our modules and packages uh

section now we don't have any modules

installed but let's go ahead and install

the yfr the evil portal module what

we're going to do is hit that modules

tab and hit get available modules

now you'll see all the modules we can

get feel free to play around with any of

them but the one that is

interesting or pertaining to us today is

the evil portal right there so

uh we can go ahead and hit install and

install it's a really quick install um

that really could it's a fairly quick

install that we don't worry about but we

do have to worry about is the

dependencies now i have installed this

before so it shouldn't ask me to install

the dependencies but if this is your

first time installing it make sure to

install those dependencies it should

only take about a minute maybe two

minutes to install

but

it should be fine now you can see it's

connected my um

uh client that i already have connected

to it right um make sure you have your

rogue access points set up and start it

up um stop the web server uh we just

started the video it's right trying to

get ahead of us now um

so make sure you have your

rogue access point started up right in

my pineapple suite i can go to access

points and you can see that i have my

open

access point set up for people to

connect to and my phone is currently

connected to that free wi-fi sss id um

so we can go back to our modules back to

evil portal and get everything ready um

so i want to show you two different uh

like ways we can have the portal set up

first i'll show you the basic default

portal that's really boring really lame

then i'll show you some of the cooler

portals that we have um like the ones

that look like google or facebook or

like starbucks and stuff um so people

think that they're logging into those

websites um instead of

you know some fake default page but to

get the idea to your brains um we're

going to make a default portal first and

kind of show you how it works

we can do a basic portal the targeted

portal can be used to target specific

ids and

peoples and such but the basic portal

will be fine um this is going to be an

example portal so we can just do example

and hit done um cool so what we can do

is actually start up evil portal

you can see that it started up awesome

awesome awesome so if we hit activate uh

it's going to activate that default

portal and this is what it's going to

look like right um when you go into the

e4 all right so

on my phone we've connected to

um my rogue access point i can actually

record my screen for you guys let's just

go on the ip address of the routers 172

uh that's

16.42.1 and if we go to that it's going

to ask us to authorize now i'm not going

to click authorize um because it already

added me to the allow clients but

basically when we go on the routers page

it's going to say

um this default evil portal like the one

that we have right here um

so that's cool

but that's not super useful other than

like you know letting them know that

we're using the evil portal right so now

that we have um this basic portal set up

let's go ahead and deactivate that one

it's pretty boring we can delete it um

and let's get some of the cooler ones on

our computer so uh you can click the

link in the description to take you to

this evil portals github repository and

here they have some of the coolest um

portals that you could have right you

can see uh we have ones for google

we have ones for uh whoops

oh that takes you two new tab got you so

we have one for google they have one for

uh

starbucks twitter

yahoo

facebook

and uh some day default like wi-fi

actual login page whatever um that one

has even a download theme i think you

can have like an apk if you want to get

like

um some sort of msf venom payload for

androids or something like that uh feel

free to do that but um we are going to

focus on this um we don't really need to

worry about all this stuff it's pretty

straightforward on how to do it um so

what i'll do is we'll open up a new uh

terminal and uh

if you have a wi-fi pineapple directory

i suggest going to it i have my own

wi-fi patent apple directory for videos

like this um but feel free to uh

just do it in your home directory or

whatever so what we're going to do is

get clone that directory so we can do

git clone let me make this a little bit

bigger for you guys as well get clone

and then we're going to do

https colon slash github.com

clio

slash evil portals all right and if we

hit that it's going to download that

repository to our

um directory so you can see we have that

evil portals right there um so if we see

the into our evil portals and list you

can see there's some portals there so we

can go into the portals and if we list

we can see some of the cool ones yes

there's the instagram one there's a

starbucks one twitter yahoo facebook and

the other ones we saw on the website uh

for this example i think i'm gonna just

use google because it's kind of like a

easily easy one that we can recognize so

first things first we need to get this

onto our wi-fi pineapple now if you

didn't know the wi-fi pineapple has ssh

which means we can use scp so let's use

scp to get our um

google bank on thing to our uh wi-fi

pineapple now to kind of help you

understand uh with the wi-fi pineapple

um i'll quickly ssh into the wi-fi

pineapple to help you guys understand

right so we'll do ssh and then we'll go

into our route

at

um with 172.44

i believe yes perfect now type in your

password for the wi-fi pineapple and now

we'll have

uh

ssh import will be ssh into our wifi

pineapple so we can list and we can see

there's this portals directory which is

specifically for

our um evo portal denim or evil portal

payload right so if i go out of my

terminal and we'll go back into this one

let's go ahead and take our google

login

directory and we'll put it onto

the wi-fi pineapple so we'll do um root

which is our username at our wi-fi apple

ip address which is 172.16.42.1

um and then we're going to specify the

directory which is the root directory

and then the portals directory which

which is within that root directory um

we can run that and type in the password

for our wi-fi pineapple

and there you go it sent all that

information to our wi-fi pineapple so if

i go into our wi-fi pineapple

i can see the intel portals

and if i list you can see we have that

google login

uh

portal right there so let's go back to

our um

our evil portal right now if i just hit

f5 and refresh the page you'll see that

we have our google login right there

perfect um so let's go ahead and

activate um our portal uh real quick i'm

going to delete my phone off of that

connection

and uh there you go so now if we go back

to our router through our phone we'll

see

a google login page that'll look kind of

like this right it's the google login

page it's going to ask you to put in uh

your email password and such so let's go

ahead on my phone cool so let's go ahead

and go back to the ip address of

172.16.42.1 which is the address of our

router and you can see that hey it looks

like a google sign-in so let's say uh

we signed into google we'll just say

email

at uh

gmail.com

right

and then the password will say the

password is uh

super

secure

so

and then it'll say you've not been

authorized right so you know

it's basically emulating a google login

page on the

through the wi-fi panel like a dns with

fanta it's pretty cool um so now that

that works we can actually view the log

and see hey this is what we just sent

out right this is our phone that we just

had connected to it and you'll see we

have that email at gmail.com and super

secure i misspelled my password but the

point is still there that hey uh

it got our email and our password from

our target

client um so you can try this with not

just the google login but with any of

the other logins that we have and feel

free to save it and

yeah that's pretty cool that's pretty

cool but

that's going to be it for this video

this very basic tutorial on how to use

the evil portal module on the wi-fi

pineapple um feel free to start creating

your own i might even try to create my

own because i'm going to be

a cool you know live stream or something

but hey that's for a future video uh but

regardless thank you so much for

watching and i will see you all in the

next one so stay happy stay positive and

as always happy hacking

hey hackers blue cosmo from ccs here and

i wanted to introduce you guys to the

happy hacker site plan the happy hacker

site plan is a plan where you guys can

support us for only one dollar a month

that's right one dollar with this comes

exclusive benefits like courses articles

videos and access to our entire cyber

security knowledge base um if this

interests you and you guys want to um

get access to all this check out the

link in the description it's only one

dollar so we definitely appreciate your

guys support um anyway enjoy the video

and happy hacking

[Music]

you