Once your device is hooked to the Pineapple, the attacker can see and manipulate everything:
This is the critical question.
However, in the hands of a criminal, it is a surveillance device capable of harvesting credentials, intercepting communications, and violating privacy with alarming ease. It serves as a stark reminder of the fragility of wireless communication: in a world where we demand constant connectivity, convenience is often the enemy of security. The Wi-Fi Pineapple does not hack the computer; it hacks the trust the computer places in the network.
The Pineapple is not limited to passively waiting for victims; it can actively kick them off their legitimate networks. Using a technique called a deauthentication attack, the device sends management frames to a victim's laptop that appear to come from their real router. These frames tell the laptop, "You are disconnected." The laptop disconnects, and because humans are creatures of habit, the user will immediately try to reconnect. If the Pineapple is broadcasting a fake signal that looks like the real router, the victim may inadvertently connect to the attacker's fake network instead.
: Once a device connects, the Pineapple sits between the user and the actual internet. It relays traffic back and forth while allowing the operator to inspect every packet of unencrypted data passing through.
The WiFi Pineapple is a versatile tool that can be used in a variety of scenarios, including: