# Evil Portal

## Basic Portal

I was unable to clone the repoitory to my pineapple. so I glones them ot my machine and copied them to the pineapple under `/root/portals/`. I took some of [Kleo Evil Portals](https://github.com/kleo/evilportals) as I'm not skilled enough to make my own.

```bash
git clone <https://github.com/Th4ntis/Evil-Portals.git>
scp -r Evil-Portals/* root@172.16.42.1:/root/portals/
```

Download the Evil Portal module from the Pineapple Modules

<figure><img src="/files/uCqqpdgTO1ClRaKYiIv5" alt=""><figcaption></figcaption></figure>

Once installed open the module, and install dependencies. Now we can preview the portals by activating the Portal

<figure><img src="/files/xmNfyw1TmbYIeQ6QfDUx" alt=""><figcaption></figcaption></figure>

Once activated, start the web server, then we can preview it.

<figure><img src="/files/waUijanhQzB0LJrnqY4Z" alt=""><figcaption></figcaption></figure>

Now, we go to our OpenAP, set the desired WiFi name, BSSID, and channel.

<figure><img src="/files/zH8IDHSVRlBMb1Pi1Heq" alt=""><figcaption></figcaption></figure>

Start the server with the Evil Portal, now when a client is connected, on the home page we will see their MAC address and IP address.

<figure><img src="/files/KU3gGoc1TRjKHDSEkNg3" alt=""><figcaption></figcaption></figure>

Take the IP address and add it into the Evil Portals allowed clients.

<figure><img src="/files/khmJo4IzKAWONbTXvKeQ" alt=""><figcaption></figcaption></figure>

Now when the client is connected they are sent to an authorization login page, Google in the case.

<figure><img src="/files/FwaAZBbIe0U2mPZyzHUk" alt=""><figcaption></figcaption></figure>

If they enter their credentials, their page shows they aren't authorized.

<figure><img src="/files/OwlIciGsw37oB56VArB2" alt=""><figcaption></figcaption></figure>

We also get a notification our Pineapple page.

<figure><img src="/files/eBEC9rlgcXcwLtFV0Gum" alt=""><figcaption></figcaption></figure>

We can view the logs from the Evil Portal page to see the email, password, hostname, MAC, and IP that put in their credentials.

<figure><img src="/files/YgcwAYJFP0mgxmBMywGQ" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/lcTJvJgI9axyJFQOHG9J" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://cybersec.th4ntis.com/wireless/wifi-pineapple/evil-portal.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.