Skip to content

Add payload: Chasing Your Tail NG v4.6 - Counter-Surveillance Recon - #294

Open
tschakram wants to merge 1 commit into
hak5:masterfrom
tschakram:add-chasing-your-tail-ng
Open

Add payload: Chasing Your Tail NG v4.6 - Counter-Surveillance Recon#294
tschakram wants to merge 1 commit into
hak5:masterfrom
tschakram:add-chasing-your-tail-ng

Conversation

@tschakram

Copy link
Copy Markdown

Chasing Your Tail NG v4.6

Counter-surveillance payload for the WiFi Pineapple Pager. Detects whether you are being followed by analysing recurring WiFi Probe Requests across multiple scan rounds at different locations.

Based on the original Chasing Your Tail NG concept, fully rewritten as a native Pineapple Pager Framework payload.

What it does

  • Persistence scoring – devices seen across multiple rounds at different locations are flagged as suspicious
  • Bluetooth scanning – Classic + BLE with device fingerprinting (microphone/camera detection)
  • GPS tracking – coordinates per round, zone detection via GPS Haversine / IP geolocation fallback
  • OUI vendor lookup – offline IEEE database (~39k entries, auto-update weekly)
  • WiGLE API – MAC, Bluetooth and probe SSID geolocation (optional, requires API key)
  • Hotel-Scan mode – BLE camera detection, hidden SSID detection, beacon analysis
  • Watch-List – static/dynamic device tracking with GPS zones, managed from display
  • Quick-Start dialog – 1=Standard (WiFi+BT, 2 rounds) / 2=Manual full configuration
  • Auto-cleanup – configurable retention for old reports/PCAPs/logs
  • OPSEC – GPS coordinates, MAC lists and API keys are gitignored, never committed

Scan Modes

Mode Description
0 WiFi only
1 WiFi + GPS
2 WiFi + Bluetooth (default)
3 All modules (WiFi + GPS + BT)
4 Hotel-Scan (BLE camera detection, beacon analysis)

Tested on

  • WiFi Pineapple Pager (OpenWrt 24.10.1, mipsel_24kc)
  • Python 3.11.14, BlueZ 5.72
  • u-blox GNSS receiver (USB, gpsd 3.25)

Installation

cd /root/payloads/user/reconnaissance/
git clone https://github.com/tschakram/chasing-your-tail-pager.git chasing_your_tail
cd chasing_your_tail
cp config.example.json config.json

Launch from Pager Dashboard: Payloads → User → Reconnaissance → Chasing Your Tail NG

Credits

Detects surveillance/tracking via persistent WiFi Probe Request analysis,
optional Bluetooth scanning, GPS tracking, OUI vendor lookup and WiGLE
geolocation. Native Pineapple Pager Framework integration.

Features:
- WiFi probe request persistence scoring across multiple scan rounds
- Bluetooth Classic + BLE scanning with device fingerprinting
- GPS tracking with zone detection (Haversine / IP geolocation fallback)
- OUI vendor lookup (offline, ~39k entries, auto-update)
- WiGLE API integration (MAC / BT / probe SSID geolocation)
- Hotel-Scan mode: BLE camera detection, beacon analysis
- Watch-List: static/dynamic device tracking with GPS zones
- Quick-Start dialog: 1=Standard (WiFi+BT) / 2=Manual full config
- Auto-cleanup of old reports/PCAPs/logs
- OPSEC: all sensitive data (GPS, MACs, API keys) gitignored

Based on: ArgeliusLabs/Chasing-Your-Tail-NG (MIT)
Author: tschakram
Tested on: WiFi Pineapple Pager (OpenWrt 24.10.1, mipsel_24kc, Python 3.11.14)
@hak5peaks hak5peaks added the on hold pending review often for larger or more complex payloads label Mar 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

on hold pending review often for larger or more complex payloads

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants