{"uuid": "a271f8a4-c1c4-47c3-8224-7dafefb8d21a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-4624", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pineapple_preconfig_cmdinject.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"catatonicprime\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability on WiFi Pineapples version 2.0 <= pineapple < 2.4.\\n          We use a combination of default credentials with a weakness in the anti-csrf generation to achieve\\n          command injection on fresh pineapple devices prior to configuration. Additionally if default credentials fail,\\n          you can enable a brute force solver for the proof-of-ownership challenge. This will reset the password to a\\n          known password if successful and may interrupt the user experience. These devices may typically be identified\\n          by their SSID beacons of 'Pineapple5_....'; details derived from the TospoVirus, a WiFi Pineapple infecting\\n          worm.\", \"disclosure_date\": \"2015-08-01\", \"fullname\": \"exploit/linux/http/pineapple_preconfig_cmdinject\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Hak5 WiFi Pineapple Preconfiguration Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/pineapple_preconfig_cmdinject.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/pineapple_preconfig_cmdinject\", \"references\": [\"CVE-2015-4624\"], \"rport\": 1471, \"session_types\": false, \"targets\": [\"WiFi Pineapple 2.0.0 - 2.3.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:51.991016Z"}