> For the complete documentation index, see [llms.txt](https://cybersec.th4ntis.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cybersec.th4ntis.com/wireless/wifi-pineapple/evil-portal.md).

# Evil Portal

## Basic Portal

I was unable to clone the repoitory to my pineapple. so I glones them ot my machine and copied them to the pineapple under `/root/portals/`. I took some of [Kleo Evil Portals](https://github.com/kleo/evilportals) as I'm not skilled enough to make my own.

```bash
git clone <https://github.com/Th4ntis/Evil-Portals.git>
scp -r Evil-Portals/* root@172.16.42.1:/root/portals/
```

Download the Evil Portal module from the Pineapple Modules

<figure><img src="/files/uCqqpdgTO1ClRaKYiIv5" alt=""><figcaption></figcaption></figure>

Once installed open the module, and install dependencies. Now we can preview the portals by activating the Portal

<figure><img src="/files/xmNfyw1TmbYIeQ6QfDUx" alt=""><figcaption></figcaption></figure>

Once activated, start the web server, then we can preview it.

<figure><img src="/files/waUijanhQzB0LJrnqY4Z" alt=""><figcaption></figcaption></figure>

Now, we go to our OpenAP, set the desired WiFi name, BSSID, and channel.

<figure><img src="/files/zH8IDHSVRlBMb1Pi1Heq" alt=""><figcaption></figcaption></figure>

Start the server with the Evil Portal, now when a client is connected, on the home page we will see their MAC address and IP address.

<figure><img src="/files/KU3gGoc1TRjKHDSEkNg3" alt=""><figcaption></figcaption></figure>

Take the IP address and add it into the Evil Portals allowed clients.

<figure><img src="/files/khmJo4IzKAWONbTXvKeQ" alt=""><figcaption></figcaption></figure>

Now when the client is connected they are sent to an authorization login page, Google in the case.

<figure><img src="/files/FwaAZBbIe0U2mPZyzHUk" alt=""><figcaption></figcaption></figure>

If they enter their credentials, their page shows they aren't authorized.

<figure><img src="/files/OwlIciGsw37oB56VArB2" alt=""><figcaption></figcaption></figure>

We also get a notification our Pineapple page.

<figure><img src="/files/eBEC9rlgcXcwLtFV0Gum" alt=""><figcaption></figcaption></figure>

We can view the logs from the Evil Portal page to see the email, password, hostname, MAC, and IP that put in their credentials.

<figure><img src="/files/YgcwAYJFP0mgxmBMywGQ" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/lcTJvJgI9axyJFQOHG9J" alt=""><figcaption></figcaption></figure>