yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] shockem:
You are right, many people don't 'use' the thanks button. II hope more will make better use of it. I mean common its just a button that requires a single click!
[Android Apps and Games] cracksmurf:
Well i agree that it can get a little crowded in the notification bar. One nice fix i saw on a notifcation bar shortcut app is to give the option to make the notification icon either the same color as the notifacation bar or fully transparent. However, since this can result in a weird blank spot between icons, the ability to set the icon as either the first or last one was added. ie left or rightmost icon.
[Android Apps and Games] forceu:
Does not work if you have two routers sharing the same BSSID.

For example I have a FritzBox 7270 and a TP Router, but after connecting to one of them, I get an BSSID alarm.

This is often used in hotels as well (one router for each floor), so I had to disable it.
[Android Apps and Games] ell3:
I agree, the dev is making the app more lightweight, so hopefully will run on your phone without consuming too much ram!

@aloy99 Countermeasures are taken running almost the same commands as you were protecting a linux box, so you can do it even manually, but be aware that they are discarded at reboot, and anyway need to be changed every time you change AP. That's why it's convenient for the app to handle it :)

PLUS the app gives you real time attack notify.
[Android Apps and Games] gurkedev:
Indeed. I'm still looking for a better solution.
[Android Apps and Games] gurkedev:
If you mean a WDS configuration (two APs sharing authentication), you're absolutely right.

If you configure the root AP as WDS and the second AP as repeater and connect your phone to the repeater, then the gateway MAC ist the MAC of the root AP and the BSSID comes from the repeater. Conclusion: You cannot use BSSID analysis with this configuration.
[Android Apps and Games] zieaditya:
great apps..,i'll try it :))
[Android Apps and Games] forceu:
yep, though this is a great app, thank you very much :) It will definitely make me use public wifis more often :)
[Android Apps and Games] ridethisbike:
awesome app. thanks are incoming!

i have no idea how to use my computer to trigger an alarm so the only thing I can do is make a false positive. i set the analysis type to extreme and a false positive is triggered on my home network. no biggie. i read the entire thread and saw it mentioned.

the reason for my post is to say that when the false positive IS triggered, the main app screen doesnt do what its supposed to. the shield flashes red very quickly and then goes back to blue. then turns red and stays that way. meanwhile the attacker information flashes very quickly and then goes away and back to "Normal | Attack prevention active". then when i switch it back to analysis: deep, the shield stays red.

it does the same thing if i back all the way out before the alarm is triggered.

it seems kind of hit or miss. most of the time it does this craziness, but not all the time.

On another note, what should one do if it is ACTUALLY triggered (ie not me or someone else actively TRYING to set it off.)? Stop browsing/using sensitive apps (ie paypal)? disconnect from the network? turn off wifi entirely?
[Android Apps and Games] ell3:
If you have taken countermeasures, there is nothing to worry about because spoofed arp packets are dropped by your phone. Keep in mind that arp spoofing is different from sniffing anyway.... Your phone connection can't be hijacked by the attacker, but he could still see your traffic, the only countermeasure for that is using an enctrypted connection/tunnel.
[Android Apps and Games] ridethisbike:
Well countermeasures is checked in the settings, so i guess i'm good.

i guess i better just hope all the important stuff is encrypted... the rest of it i dont really care about.
[Android Apps and Games] ell3:
Well, some is, some isn't. I heard for example, the mobile version of facebook still doesnt use httpS. This means it's all sent in plain text. Want to test out what anyone can see sniffing your net ? Well, use another PC to passively sniff your traffic (or just run tcpdump on your device), then load the .pcap dump in Wireshark or NetMiner on a PC... you will be surprised how many things you will see without even hijacking the network.
[Android Apps and Games] ridethisbike:
Will look into it tomorrow. If there is any specific app I can use on my pc, let me know. I tried a couple but had no clue how to use them so I left it alone.

I did, however, download droidsheep and WiFi kill... I'm amazed at how easy it is to do this stuff.... I really had no idea before now. Xda has clued me in to so much its not even funny....
[Android Apps and Games] avgjoemomma:
Yeah, one of the best ways to help prevent sniffing from droidsheep, etc would be to set up a VPN or ssh tunnel to your home network
[Android Apps and Games] Greenturtle23:
I have a question, am i really under attack? because i using my school wifi~ and there is a Cisco name under the "attacker".

-i'm using the paid version if that make any differences.
[Android Apps and Games] Halvarez:
Same here, got under attack alert using LIGHT bssid analysis (v1.1.2) and connected to my D-link home router.

Attack from D-link mac address (??).

gateway mac is like: xx:xx:xx:xx:xx:xx

802.11 bssid is like: yy:xx:xx:xx:xx:xx

countermeasures gives "error executing command", phone is rooted.

EDIT: Tried v1.1.1 and reported attack from 02:50:f3:00:00:00 (unknown) mac but countermeasures started successfully.

any idea?
[Android Apps and Games] Cilraaz:
I'm seeing the same thing on version 1.1.2 while using Deep BSSID analysis. I can confirm that I'm connected to my home router by monitoring traffic on my hardwired desktop. When I enter expert mode, I see my router's MAC listed under "Gateway MAC", but under "802.11 BSSID" is a MAC with a different last 2 octets. While differing from the Gateway MAC, it's the same, regardless of how many times I disconnect and reconnect to WiFi. I also had my phone forget the WiFi connection and re-establish (as a "refresh" of sorts), but with the same results.

I also had the same "error executing command" when trying to use countermeasures.
[Android Apps and Games] gurkedev:
Thank you very much for trying out Wifi Protector.

This could be a virtual WLAN (avgjoemomma's post), a Wireless Distribution Sytem (forceu's post) or a buggy AP (my post).

Edit: Light means vendor compare. The vendor is identified by the first three octets of the MAC address. xx:xx:xx is not equal to yy:xx:xx, that's why you get the alert. Recommendation is to disable BSSID analysis in this environment.

Solution explained by Michal102 in this post.

v1.1.1 had a bug and did not report "error executing command". Fix was mentioned in this post.
[Android Apps and Games] Cilraaz:
I'm getting the same error while using busybox 1.18.4 with a confirmed working arp command, symlinked in /system/xbin.

[edit: "Confirmed working" meaning verified as a valid busybox module. Sorry for the poor wording.]

[edit2: Oops, I just double checked and I'm running 1.18.2, not 1.18.4. Unfortunately, I need to keep 1.18.2 for the V6 Supercharger Script, but it still has arp and arping as valid modules.]
[Android Apps and Games] kwazi:
Hmm.. any chance we can get some kind of dismiss button? or a silent mode? Keep the notification message reporting the status, but just have a dismiss button in the app or maybe a full silent mode option? (or both)

I had the BSSID check go crazy this morning, thinking my home router has been compromised. And it just kept playing the warning sound.. drove me a little nuts; especially at 7am in the morning :P

anyways just my two cents :)
[Android Apps and Games] gurkedev:
For silent mode just uncheck Settings/Notification/Ringtone on attack.
[Android Apps and Games] gurkedev:
FAQ section has been updated and explains reasons for false positives. Please read if you have BSSID analysis enabled and get false positives.
[Android Apps and Games] gurkedev:
v1.1.4 released today.

It comes with bugfixes for Ice Cream Sandwich as well as a new feature, an independent arp command, that works regardless of the busybox version you may have installed.
[Android Apps and Games] Koloses:
Another useful thing for geek's phone. :D
[Android Apps and Games] E:V:A:
Hey! Thanks a zillion!

Very educational and useful in these rough times of electronic warefare.

Now I can café surf in peace again, knowing I got some KungWiFu in my pocket!
[Android Apps and Games] kenpen:
i have my desk top connect to my wireless router and my phone.

i then hook up my laptop and connect it but no alert or isnt it how it works?
[Android Apps and Games] poofish:
this is nowhere near how it works haha.

you're simply connecting a laptop to the network. what this program does is alert you if someone is attempting to hijack your phone's connection through ARP spoofing, and possibly using a denial of service attack to block your connection. if you're at home, with your own network and devices, and aren't trying to hijack your phone's connection, obviously there will be no alert.

this program is mainly for using on public wifi networks, in case someone is sniffing around for your data etc.
[Android Apps and Games] gurkedev:
v1.2.0 released today.

It fixes issues with phone silent mode and comes with a new logging feature. Please see changelog for details.
[Android Apps and Games] :
I have just purchased the app, thank you. The knowledge being exchanged in this thread alone by XDA members deserve its own "Thank you".
[Android Apps and Games] gurkedev:
Version 1.3.0 is ready and comes with two new features: disable Wi-Fi and app to front (log).

As usual a free copy is donated to the XDA community.
[Android Apps and Games] iXNyNe:
Tried free for a few hours, liked it, paid in for market updates :) great app! Keep up the good work!
[Android Apps and Games] gurkedev:
Beta testers wanted. The next version of Wifi Protector will come with a huge new feature that needs extensive testing in different environments before public release. Therefore more testers are needed. Requirements: Rooted phone, basic network, security and linux knowledge, familiar with logcat. Nice to have: SDK and ICS installed. If interested please PM me with device model, ROM name and version as well as your email address.
[Android Apps and Games] :
That is a good idea. :)
[Android Apps and Games] gurkedev:
This is probably one of the most requested features. The reason it's not yet possible to hide the notification icon is of technical nature. But this will be changed in the near future.
[Android Apps and Games] iXNyNe:
what exactly do countermeasures do? Just protect me more? Or actually attack back in some way?
[Android Apps and Games] :
Sounds good! Knowing this I am going to go ahead and purchase in the Market to show support. Thank you sir.:)
[Android Apps and Games] gurkedev:
The "Countermeasures" feature was renamed to "Immunity" in v1.3.0 to make it more clear what it does. It configures your phone, so that forged ARP packets, which are sent from an attacker's device, won't interfere with the way the phone communicates with it's gateway.

The app doesn't attack back in any way. It doesn't even send a single frame towards the network.
[Android Apps and Games] iXNyNe:
Bravo for the passive approach promoting friendlier protected wifi experience! This should be adopted by android right into the OS!
[Android Apps and Games] generalist:
Hello, and thank you for creating Wifi Protector. It fills a need so obvious, I wonder why no-one did it much sooner. Thanks, too, for providing a free version for XDA users.

On my rooted SGH-T989, I tried 1.3.0 with some success, but it would crash sometimes. Also, using Deep BSSID analysis, it gave false positives when I was connected to a wifi repeater. I sent you a crash report, uninstalled the app and waited.

Today I checked your thread, saw 1.4.0 and tried it. Violà! No more crashes or false positives. I uninstalled the free version and bought the paid one. "Hide notification icon" makes the app a class act. ;)

Now, using TCP/IP hardening and Wifi Protector, and with my habit of not connecting to open networks unnecessarily, I feel much safer. :D

I have one feature request, though I believe it is out of scope (please note that my understanding of TCP/IP and OS kernels is almost nil). Re TCP/IP hardening, the kernel I am using does not implement SYN cookies. Could Wifi Protector be made to synthesize SYN cookies for kernels that don't implement them?
[Android Apps and Games] generalist:
Speaking of false positives... :) Here is an update:

It turned out that the paid version of 1.4.0, though it did not crash, did give false positives for the wifi repeater. So I reverted to the free version; but I got the same results. Then I reinstalled the paid version and noted three conditions:

1. false positives for the wifi repeater

2. false positives for the wifi router to which the repeater was connected

3. tapping the red shield icon threw a toast message, "Countermeasures: Error executing command".

In all cases, I used Deep BSSID analysis.

I support your development and want this app to work well for me! If I can send you any logs for debugging, please let me know. Thanks.
[Android Apps and Games] DarkhShadow:
Umm you know the one on here is the paid one don't you?

Sent from my ice cream powered Nexus S
[Android Apps and Games] generalist:
Hello and thanks.

Though the paid and free APKs have the same version number, they behave differently on my phone: only the paid version exposes the "Notification icon" settings.

Since there is that difference, I allow for the possibility of there being other differences.
[Android Apps and Games] cajunflavoredbob:
He probably just wanted to support the developer. Aside from that, he was listing the steps he took to replicate his problem.
[Android Apps and Games] gurkedev:
Thank you very much for your support.

I'm afraid you're right. If the kernel doesn't support SYN cookies, Wifi Protector can hardly add this feature. Please correct me if I'm wrong, but I'd say that it's quite uncommon to have software running on the phone which binds to non-loopback interfaces and accepts TCP connections. So you'll rarely need SYN cookies in my humbly opinion.

You will always get false positives if you're connected to a repeater that belongs to a Wireless Distribution System with BSSID analysis deep level enabled. The reason is quite simple: BSSID analysis compares the gateway MAC with the BSSID. In a Wireless Distribution System the gateway MAC comes from the root Access Point while the BSSID comes from the repeater. So in this environment it's best to disable BSSID analysis to avoid false positives (FAQ).

This message is in need of improvement. It should better read "Countermeasures error: Trusted gateway unknown". This will be changed. You get this message because the app has no knowledge of a trusted gateway MAC and can't configure the phone for immunity. This is typical with BSSID analysis and Immunity enabled when connecting to a repeater of a Wireless Distribution System. Solution: Disable BSSID analysis.

Donate and free versions are exactly the same to the last bit. The confusion may be because the free version is released a little bit later than the donate version and you commented on a version that was released to Android Market but not yet released to XDA. This is the release schedule: Beta testers get new releases first. After that Android Market donors get their release. Some time later releases are donated to XDA.
[Android Apps and Games] generalist:
Thank you for your detailed reply. You won't believe it, but my intuition about the false positives was essentially what you described; though I lacked the technical knowledge to say why, I felt the problem was in the nature of the repeater's function.

I will keep in mind the release schedule and look for new releases that apply to me. Thanks again for the excellent software and support!
[Android Apps and Games] DarkhShadow:
Well this sucks, I gotta contact Google market...... went to purchase app and it says already purchased..... says this for a few apps now :/

Sent from my ice cream powered Nexus S
[Android Apps and Games] gurkedev:
Because so many want to hide the notification icon it's now possible in v1.4.0. Your free copy is here.
[Android Apps and Games] generalist:
Hello again. Here is another feature request:

If ever you add widgets or shortcuts to this app, one should toggle BSSID analysis.

My motive should be obvious. ;) Thank you!
[Android Apps and Games] gurkedev:
A widget? Good idea.

This has been changed in v1.4.1 (log).
[Android Apps and Games] gongoscho:
A merger with PDroid - The Better Privacy Protection would be c00L :cool:
[Android Apps and Games] gurkedev:
PDroid is a great project and svyat has my deepest respect for creating such an impressive patch. His implementation is nearly perfect and I can only encourage all geeks, freaks and enthusiasts to check out this super patch.

However, we have different audience. While svyat's excellent patches are currently mainly for geeks (hopefully Google adopts the changes to the trunk), Wifi Protector targets the main stream user, who is not willing to patch/install-special-rom/do-anything-uncommon to his phone.
[Android Apps and Games] gurkedev:
Version 1.4.2 is ready. It fixes two minor bugs.
[Android Apps and Games] davidyannick:
Thanks for this gonna test it Now :-)

Envoyé depuis mon GT-I9100 avec Tapatalk
[Android Apps and Games] Gargantuantua:
detections at home

hey,

Thanks for this awesome app! I have the donate version, and when I connect to my home network I get numerous detections throughout the day. It usually has the attackers MAC but vendor, and attacker IP are usually blank. Should I worry?
[Android Apps and Games] gurkedev:
Thank you very much for your support.

Where do you see the detections? In the log? Or have you configured the app for popup? Is the MAC vendor really blank or does it read "Unknown"?

The attacker IP is in most cases blank and only shown if the attacker tried to communicate on OSI layer 3 or 4 with your phone.

Do you have a WDS with multiple APs at home? Do you have BSSID analysis enabled?
[Android Apps and Games] cajunflavoredbob:
I've been using the free version for quite some time. It has always worked perfectly. I've checked the market version every now and then to see if it was installable, and it finally was today. I normally use either 140 or 160 DPI on my HD2, so it usually shows up as incompatible. I wouldn't mind buying it, but it wouldn't have made since if there was no way other than this thread to update it.

Anyway, that limitation seems to have been lifted finally, so I've purchased the app from the market. Thanks again.
[Android Apps and Games] hotsync100:
Hi, installed wifi protector on my Galaxy Tab 10 " P7500, but it did not show any on screen. Only black screen.

Any suggestion?
[Android Apps and Games] gurkedev:
Thank you very much for your feedback.

Do you have Android 3.x or 4.x on your P7500?
[Android Apps and Games] hotsync100:
Android 3.2 with Overcome 2.2 rom
[Android Apps and Games] gurkedev:
I cannot reproduce this with 3.2. Anything interesting in the logs?

Anyone else having this issue?
[Android Apps and Games] SektorZero:
Tested and works in LG Optimus Pro c660h :)
[Android Apps and Games] travisross69:
Running on HP Touch pad running CM9 a2. Nice. Thank you.
[Android Apps and Games] jester888:
Doesn't seem to be able to help when I logged into a wifi connection that is already under attack...shows connected but cannot access the internet...did I miss something?:confused:
[Android Apps and Games] gurkedev:
Thanks a lot for the feedback.

There are many reasons why you cannot access the internet. Could you give us a more detailed (and if possible technical) description of the scenario please? Thanks.
[Android Apps and Games] jorricks:
So are you still trying this?
[Android Apps and Games] Concrete Donkey:
I think this app is excellent and provides good features, however I am worried about something. This may give some users a false sense of security, would it be possible for you to inform people that they need to protect their networks and that this isn't a substitute for good security? Even a small note saying you should use WPA2 on home networks with a good password and to always use HTTPS when possible on public networks.
[Android Apps and Games] gurkedev:
Version 1.4.3 is ready and of course free for XDA users.

Changes:

BUGFIX: Notification icon no longer disappears when "Clear notification" button is pressed

FEATURE: Added option to force start at boot, which is useful on devices that don't signal Wi-Fi start at boot

OTHER: Added CHANGE_NETWORK_STATE permission, which is required on some Samsung tablets running Android 3.2 in order to disable Wi-Fi on attack
[Android Apps and Games] ironia.:
Any problem if using droidsheep and WiFi protector on the same smartphone? Tnx
[Android Apps and Games] gurkedev:
No.
[Android Apps and Games] comfuzio:
Very good app thank you!
[Android Apps and Games] chitose_ndy:
Thanks

Will try this on my xperia s :)
[Android Apps and Games] Guto ViP:
Nice!

Enviado do meu Galaxy Nexus, via Tapatalk.
[Android Apps and Games] wirtzpeitz:
Is there an intent to start/stop the service? This would allow me to use Tasker to run the service only on specific WiFi networks.

I've emailed the dev, but no response.
[Android Apps and Games] gurkedev:
Thanks a lot for the feedback. Currently there's no public intent to start/stop the service. I'd recommend to always keep the service running, in particular when you join networks which you think are "safe" because there's no such thing like a safe network. ;)

The app is very resource friendly in general, it's using only a small amount of RAM and very little CPU ticks. Battery consumption has always been in mind while programming and is extremely low (nearly zero).

I'm afraid I've never received a mail with that question.
[Android Apps and Games] wirtzpeitz:
Thanks for the quick reply. I somehow assumed that battery use was significant, but if it is not I agree it is best to just run the service at all times.

Thanks, too, for developing this app.
[Android Apps and Games] Jeffreycat:
Can you explain in technical detail how the "Immunity" feature works?
[Android Apps and Games] memine:
Hello, great tool! Adds that extra layer of protection when you need to conect to a public or friends WAN.

As my own network has a second router setup as a repeater, different MAC, I get the false positive. Any thought about having an exception or white list to leave the BSSID on but skip listed items?

Just my .02 to help out.
[Android Apps and Games] Gargantuantua:
I know this reply took a long ass time but the phone I had before broke lol. Anyway, I have the same setup and no attacks get logged anymore at home. Thanks again!
[Android Apps and Games] gurkedev:
Thanks for the great suggestion. Since this is the most requested feature I'm working on it. I've also planned to implement some kind of learning mode which will allow zero-service lists.
[Android Apps and Games] memine:
Sweet, glad I could help out. I know I'll use it!

Now if LBE will play nice, bit agressive this release with stopping apps from loading, I think your good to go.
[Android Apps and Games] Jeffreycat:
Why not try Pdroid 2.0? Its much more configurable then LBE Privacy Guard. With the Auto Patcher its a breeze to install as well (look for the Windows GUI version.)
[Android Apps and Games] suyisaster:
In attach file, it is donate version for XDA users but it free?

Downloading ........

[ROM][AOKP][JB][RC]ARC S[Build 5]

[KERNEL][FUSION v3.7]