Skip to content

Recon Output and Loot

Qwavey edited this page Aug 23, 2026 · 1 revision

Recon Output & Loot

Everything captured this session, and getting it off the device.

Every command block below is that script's own --help output on the real device, pulled straight from its header comment - not retyped.

  • loot.sh - List and archive collected loot (handshakes, pcaps, wardriving logs).
  • wigle.sh - Wardriving log control + Wigle.net upload.
  • report.sh - Generate one readable engagement report from everything captured this session.
  • gps.sh - List/configure the USB GPS receiver, show live status.

loot.sh

List and archive collected loot (handshakes, pcaps, wardriving logs).

loot.sh - List and archive collected loot (handshakes, pcap, wigle logs).
Wraps PINEAPPLE_LOOT_ARCHIVE; listing/download itself is just standard
file access under /root/loot/ (also reachable via scp/sftp or the
Virtual Pager's Download Loot button).

Usage:
  loot.sh --list          summarize what's in /root/loot
  loot.sh --archive [-y]    archive current loot to a timestamped folder
  loot.sh                     interactive mode

wigle.sh

Wardriving log control + Wigle.net upload.

wigle.sh - Wardriving log control + Wigle.net upload. Wraps WIGLE_LOGIN /
WIGLE_LOGOUT / WIGLE_START / WIGLE_STOP / WIGLE_UPLOAD.

Needs a GPS lock to produce non-empty logs, and an internet connection
for login/upload. Hak5 is not affiliated with Wigle - see wigle.net/eula.html.

Usage:
  wigle.sh --login [user] [pass]     (blank = interactive Wigle login prompt)
  wigle.sh --logout
  wigle.sh --start
  wigle.sh --stop
  wigle.sh --upload [--archive] [--remove] FILE [FILE2 ...]
  wigle.sh                             interactive mode

report.sh

Generate one readable engagement report from everything captured this session.

report.sh - Generate a single readable engagement report from everything
this toolkit has captured this session: handshakes, LAN scans, sniff
captures, deadnet discoveries, wardriving logs, and loot in general.
Nothing invented here - it just reads and summarizes files this toolkit
(and stock PineAP) already wrote to /root/loot/.

Usage:
  report.sh                     print the report to stdout
  report.sh --save                save it to /root/loot/reports/report-TIMESTAMP.md
  report.sh --save --archive        save it AND archive all current loot after
  -h, --help                          this help

gps.sh

List/configure the USB GPS receiver, show live status.

gps.sh - List/configure the USB GPS receiver, show live status. Wraps
GPS_LIST / GPS_CONFIGURE plus the standard `cgps` tool the docs point to
for live status (not Pineapple-specific, but the documented way to check).

Usage:
  gps.sh --list                       list available GPS serial devices
  gps.sh --configure PORT BAUD          configure serial port + baud rate
  gps.sh --watch                          live status via cgps (Ctrl+C to exit)
  gps.sh                                    interactive mode

Clone this wiki locally