WiFi Pineapple NANO: Persistent Recon DB

Malware Analysis
1

The WiFi Pineapple’s recon DB (recon.db) is volatile, because it is stored (by default) in the /tmp folder.

I store my recon.db on the SD card to make it persistent (survives a reboot).

First the SD card has to be formatted:

Then the “Scans Location” field can be changed from /tmp/ to /sd/:

20180815-132713.png?w=1024&h=3981024×398

20180815-132839.png?w=864&h=229864×229

recon.db is an SQLite database, that can be browsed with tools like sqlitebrowser:

20180902-141504.png?w=1024&h=5341024×534

Article Link: https://blog.didierstevens.com/2018/09/11/wifi-pineapple-nano-persistent-recon-db/