yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] virus786:
DroidSheep is an Android app for Security analysis in wireless networks and capturing facebook, twitter, linkedin and other accounts.

DroidSheep requires ROOT!

​

Please note:

DroidSheep was developed as a tool for testing the security of your accounts.

This software is neither made for using it in public networks, nor for hijacking any other persons account.

It should only demonstrate the poor security properties network connections without encryption have.

So do not get DroidSheep to harm anybody or use it in order to gain unauthorized access to any account you do not own! Use this software only for analyzing your own security!​

Here are videos of what it does:

www.youtube.com/watch?v=B4ROlCgTr80

www.youtube.com/watch?v=mIWkee7RjbU

www.youtube.com/watch?v=z7NUluxUORs

Here is a video Tutorial on how to use it:

http://www.youtube.com/watch?v=4N-SBx5EF3g
​

How does this work?

As already announced DroidsSheep supports almost every website – also “big” webservices like facebook and Yahoo.​

How does that work this simple?

There are many users that do not known that air is the transmission medium when using WiFi.

Therefore information is not only transfered to its receiver but also to any other party in the network within the range of the radio waves.

Usually nothing special happens because the WiFi users discard packets that are not destined to themselves.

DroidSheep does not do this. It reads all the packets looking at their contents.

Is a website sending a clear recognition feature within a message’s content, which can identify a user (“SessionID”), then DroidSheep is able to read it although it is not intended to external users.

Moreover DroidSheep can use this token to use it as its own.

The server can’t decide whether the authorized user or DroidSheep has sent the request.

​

How can I protect myself?

The only satisfying answer is: SSL respectively HTTPS.

Many providers already offer HTTPS, even facebook, however it must often be enabled in the settings first.

When using HTTPS the data are still sent to alle participants in the WiFi-network, too, but because the data has been encrypted it is impossible for DroidSheep to decrypt the contect of a message - remaining only a complete mess of letters, with which an attacker can’t do anything.

The real problem is that not every website provides SSL. What to do when you are in a public network (hotel, airport, etc.), you also want to use this and the site does not offer HTTPS though?

You can use a VPN-connection

For this the computer sets up an encrypted channel to a confidential computer which again transfers the data to the website.​

Please note this is

NOT

my work I am simply sharing this and giving a direct link to the APK (it was removed from droidsheep.de because of German rules).

Source: http://droidsheep.de

Build 14: http://www.iuptech.com/public/SD/download/droidsheep-current.apk <-- Thanks mbirth for build 14 link.

Build 15: Attached to this post - compiled by mbirth <-- Thanks

All credit goes to Andreas Koch for this amazing app! - Thanks a million!

​
[Android Apps and Games] hanschke:
build 13 is the latest? not 15 :confused:
[Android Apps and Games] virus786:
If there is a newer version, please post a link of the apk here and I will add it to the OP.
[Android Apps and Games] mbirth:
There's build 14: http://www.iuptech.com/public/SD/download/droidsheep-current.apk

Build 15 is nowhere to be found for now…
[Android Apps and Games] virus786:
OP updated with build 14 ;)
[Android Apps and Games] NS4G.John:
Im having no luck with this app on my nexus s 4g. Which is a shame. I can post debugging info if somebody could help me out.
[Android Apps and Games] mbirth:
The v15 is in the official SVN: https://code.google.com/p/droidshee...idsheep/DroidSheep_public/AndroidManifest.xml

And since there's no official APK, you have to compile it yourself. Thus the different signature.

Attached is v15 compiled by myself.
[Android Apps and Games] mobile-freak:
Does it work on ICS?

I want to be sure if it works befor im rooting my Note :D
[Android Apps and Games] californicated:
Yes :D
[Android Apps and Games] innocence07:
not working xperia neo cant search for anything i leave it for about 10min still nothing i also done what youtube tells me to do still nothing im using my home router with password....
[Android Apps and Games] bbttss:
Is that working on ics?
[Android Apps and Games] virus786:
Updated OP with v15 apk, thank mbirth.

Also I don't know of ICS support as I am still running Good'ol Gingerbread.
[Android Apps and Games] safeelhd2:
Ive just come accross this app and have downloaded, but Nobody tested this with ICS? thats surprising! lol

Will test it this eve and report tomorrow.
[Android Apps and Games] safeelhd2:
It doesnt work.lol

I connected to wifi and did some browsing on other devices. I.e tablets.

didnt find anything.:mad:
[Android Apps and Games] pandata000:
It works for me, but there's a mess with sessions. Probably you should consider mapping each session to each Wifi network and not showing old ones with new networks... Just a suggestion
[Android Apps and Games] cajkovski:
It is working on ICS, perhaps you have IP client isolation on WiFi router...
[Android Apps and Games] Emaaans:
Not working for me on Galaxy Note ICS... Do you think it's related to my conection? How should I change it?

EDIT i installed the v15 version and know it's perfect!
[Android Apps and Games] crxforya:
It shows up under my kapersky as potential virus, any reason for this??
[Android Apps and Games] zeroprobe:
nm
[Android Apps and Games] MrSerious92:
Thats normal for Droidsheep.

+ working on my SGS2 (ICS)
[Android Apps and Games] userdsp:
Send one to me too please! user***@gmail.com
[Android Apps and Games] surajshar:
Send me too
[Android Apps and Games] anastasiszn:
And me please

Anastasiszn@gmail.com

Στάλθηκε από το GT-I9105P μου χρησιμοποιώντας Tapatalk
[Android Apps and Games] julle131:
Ahem. Who are these guys talking to? They could just simply compile the app themselves.
[Android Apps and Games] Sid Droid:
norton deems this apk as a trojan..any truth on that??
[Android Apps and Games] mbirth:
Well, you can sniff Internet traffic with it. So yeah, it's a malicious app. Norton also complains about other totally legit administration tools ... so decide for yourself.

---------- Post added at 11:02 AM ---------- Previous post was at 11:01 AM ----------

Pssssst … don't let them know! :D
[Android Apps and Games] GEKTHEBOSS:
just tested all of those and no'one do what i need!

i need something like HTTPFOX, live HTTP Headers (firefox adds) , i have to check a POST of my android device...if anyone have LMK!
[Android Apps and Games] mubeenshahid:
Send me too guys plz mubeenshahid10@gmail.com
[Android Apps and Games] userdsp:
Send me a file please! userdsp@gmail.com
[Android Apps and Games] abo 7aydar:
Droidsheep doesnt work on my phone it takes hours and hours in spoofing but shows nothing help plz :(

Sent from my GT-I9082
[Android Apps and Games] sedardna:
Im a forensic, and wahnt to use it in a quick pentration test (as a demo) if you can send me an apk to s e d a r d n a ( @ ) gmail . c o m
[Android Apps and Games] keatlck:
Send me a file please! keatlck@gmail.com
[Android Apps and Games] santi9604:
Send me a file santiago960414@gmail.com thanks
[Android Apps and Games] The~Skater~187:
Hook me up Theskaterdad187@gmail.com

Beamed From My:

KLTESPR/Fusion4.4.4/Fusion Kernel v2.0/NK4 firmware/NKD Modem using Xparent Skyblue Tapatalk
[Android Apps and Games] iruiz2:
Please guys, stop this nonsense! Nobody's sending apks by email. Download it from the OP like everyone else!!
[Android Apps and Games] julle131:
Come on, no ruining the fun :D
[Android Apps and Games] Utini:
Why is the droisheep_15.apk's md5 hash different from what droidsheep.de tells us ?
[Android Apps and Games] nori971:
Because he recompiled the source, since his computer, compiler version,date of compilation, OS version etc.. differs the md5 hash will never be the same as the original. the only way for you to be sure it cointain no malware is to compile it by your own :)

If you do compile it twice and you'll see what i mean
[Android Apps and Games] coolbeans2016:
??

I downloaded the v15 zip, but there is no apk for installing on my phone....?
[Android Apps and Games] chcknsld:
Some people still using this? Switch to dSploit's successor -- cSploit and you'll get much more than this. It's like Network Spoofer + Droidsheep + Faceniff + zAnti = all-in-one tool. And did I mention it has a Metasploit Framework? :good:
[Android Apps and Games] Rommel Espinosa:
apk please? :D
[Android Apps and Games] Portgas D. Ace:
Running a quick Google search results in this ;)
[Android Apps and Games] androdever777:
Compilation error

Does anybody compile sources? I have many errors when gradle trying to compile c code by ndk. Can someone help me?:confused:
[Android Apps and Games] coolbeans2016:
anti-virus

does the same with Norton

even if it does no harm (in windows environment) to your android, these have community watch in finding malware and if it is listed as such the anti-virus will grab it, you can set desktop anti-virus to ignore certain files by name, don't know about mobile ones tho.

---------- Post added at 02:32 PM ---------- Previous post was at 02:03 PM ----------

downloaded the v15, thanks. While running it tho it is same as other download of it, never lists anything?

Don't other phone/computers on the network supposed to show?
[Android Apps and Games] Obagleyfreer:
latest CSploit apk.

Can someone who has already compiled V15 kindly upload the APK for us folk who have no knowledge of compiling from source.

Thank you in advance :)
[Android Apps and Games] alandd86:
:good:
[Android Apps and Games] alandd86:
hi [MENTION=367287]mbirth[/MENTION] and guys any1 can make it work on android 5.1?

THANKS ALL
[Android Apps and Games] alandd86:
no one knows :D ?:confused:

---------- Post added at 03:48 PM ---------- Previous post was at 03:47 PM ----------

i was hoping for that 2:good:
[Android Apps and Games] daniel11609:
hi there, same happened on my notebook to me, I backuped my sd files with the apk on and what does kaspersky deleted the file, reason "hacking tool".

just switch the anti virus off for like 5 minutes and redownload it:)

---------- Post added at 08:14 AM ---------- Previous post was at 08:06 AM ----------

i havent even known that it not working on android 5.... you tried it?
[Android Apps and Games] alandd86:
yea and didnt work
[Android Apps and Games] daniel11609:
The only idea i got is droidsniff http://xdaforums.com/showthread.php?t=1759187

It it really similiar to droidsheep, but maybe it works. I dont know, if you like you can try :)
[Android Apps and Games] alandd86:
it doesnt work2 ,!! cz non of them updated !
[Android Apps and Games] androier:
Now it's not necessary to root, some Android market have its apk. I have installed it on an Android market.

Here is the link to get it and download the apk you want:

www.mobomarket.net/download.html
[Android Apps and Games] androier:
I have installed the lastest version. I find it on MoboMarket.

Maybe you should try this:

www.mobomarket.net/download.html
[Android Apps and Games] alandd86:
can u tel me the build plz ? if its 15 then means its the same! BTW what is ur android version ?

BTW that droidsheep was a fake !
[Android Apps and Games] TylerDurben:
hi all :)

version 14 and 15 doesn't work on

dhd with ics (ice-cold)

greetings Tyler
[Android Apps and Games] virus786:
OP updated and cleaned up a bit.

Enjoy ;)
[Android Apps and Games] ArmanUV:
Beautiful.

It worked on my galaxy nexus running cm9 4.0.4 at starbucks.
[Android Apps and Games] iniz94:
Tried this once and it only worked for public hotspots. Is it limited to that or can it also get cookies from WEP and WPA-secured networks?
[Android Apps and Games] eoinzy:
Picks up sessions on my HTC Desire (bravo) at home on my WPA2 network.
[Android Apps and Games] jerryhou85:
Base on this app, I'm very sure the author can get his degree. :P
[Android Apps and Games] muamers:
It works on both (secured/unsecured/WPA/WPA2/WEP), tested it myself ;)
[Android Apps and Games] BigGhostx:
Thanks for the app works great on ics.. run some experiment at home and worked perfectly spoofing computers but had no luck spoofing phones, like iphone my other sgs2 ... so is there something wrong on my side or the app doesnt support spoofing phones?
[Android Apps and Games] Newklearx3:
Testing this out.
[Android Apps and Games] ArmanUV:
Does anyone know how to get the "export email" function to work?

I got an output that looks like this:

[Cookie:
domain: blah.com
path: /
datr=blahblahblahblahblahblah;]
[Cookie:
domain: blah.com
path: /
lu=blahblahblahblahblahblah;]
[Cookie:
domain: blah.com
path: /
c_user=11111111;]
[Cookie:
domain: blah.com
path: /
xs=60%blahblahblahblahblahblahblahblahblah;]

How can I import this into a desktop browser?
[Android Apps and Games] nismax:
Interesting.... if this app gets in wrong hands. I can see bad thing happening.
[Android Apps and Games] nismax:
Cant spoof wireless devices.
[Android Apps and Games] MoscowMaxim:
it detected my sister's iphone and her instagram account... it seems like it's not consistent though... not sure why it gets at at one time but not another...
[Android Apps and Games] lowandbehold:
Because when people are using their phones they are usually accessing the site through an app. I don't know the specifics of why..but it can't intercept the packet traffic for most apps.
[Android Apps and Games] Areg8_6:
hey guys is the v15 normal one ???

cuz i saw droidsheep tweet that v15 is fake ...

http://twitter.com/#!/droidsheep
[Android Apps and Games] chvash:
I think this tweet is from november? maybe at that time it was fake. Please comment if you know something about the v15 which is in this thread.
[Android Apps and Games] mbirth:
The attached v15 is pulled from the official SVN and compiled by myself. If you have doubts, get Android SDK, pull the source and compile it yourself.
[Android Apps and Games] Burn2Hell:
Working on 'Galaxy Nexus' with 'AOPK 4.0.4 build 39'.
[Android Apps and Games] sinatra_shinoda:
Awesome!

Tested on my X10i with CM7.2 & it's working charm! ;)
[Android Apps and Games] frenzyboi:
This does not sniff wireless connection I suppose? Sorry kinda noob to this ):
[Android Apps and Games] brainard52:
I'll test when I get a new kernel. Wifi is broken ATM. I'm going to have a lot of fun at my mom's house >:D I'll let you know how it goes.I'm using CNA on my R800x, by the way.
[Android Apps and Games] k.janku1:
Wow! It worked really fast in generic mode, but not with my mothers Mac as it has https as default
[Android Apps and Games] Seion:
Working on Galaxy Nexus with v15, with Slim rom and franco kernel. +1 :D
[Android Apps and Games] iamjerry123:
is it just me or does the sites load REALLY slowly?
[Android Apps and Games] ArmanUV:
it's fine here. Try loading the mobile version.

Does anyone know how to import the captured cookies into a desktop browser like safari or chrome?
[Android Apps and Games] iamjerry123:
i do load it with the mobile version
[Android Apps and Games] LuisUrrutia:
me too, i dont know why, i try the mobile version too, but is REALLY slowly like u say
[Android Apps and Games] williamwd:
Well this is not correct but if you google a little, there're some great examples about how doing it with this data.. just think before doing anything with your friend's fb account :angel:

BTW great app, runs really well on my CM9 Xperia Neo
[Android Apps and Games] ahmedsalem89:
I Tried it in my home network it captured almost everything from laptops to Iphones and and HTC as long as they are using the browser to access websites not apps llike Facebook, It even captured a PC that was wired to my 4 port WIFI Router how is that?
[Android Apps and Games] nurihodges:
Should work with no problems on ICS.
[Android Apps and Games] adempozhari:
good question.

i tried it on three different wifi networks and worked well with Facebook and Hotmail.

i have no luck with gmail.
[Android Apps and Games] virus786:
This is because Gmail uses SSL by default. :good:
[Android Apps and Games] ATMOSF3AR:
Great

It's Pretty Cool !!
[Android Apps and Games] regenboognl:
is it possible that all ARP stuff is blocked by my router? it says: spoofing ip.. but not showing any list of devices or what so ever. Motorola Defy with ICS , on a WPA2 network.
[Android Apps and Games] gayanaji:
@Virus786 i have my GNOTE with kaspersky mobile security installed after i try to run the droidsheep (de.trier.infsec.koch.droidsheep-15.apk), kaspersky seems to deny it...could you please explain that before i'm going to far...

it going to force close when i tried to open it...
[Android Apps and Games] Cookie Ninja:
Same here, my avast mobile version reports the app as a potential malware and deletes it in sd card and prevents the app from installing.

Sent from my HTC Incredible S
[Android Apps and Games] Pons:
Security and pentesting software such as this are generally flagged as PUP by av software since the average user doesn't need it. The more experienced users who do this type of thing know what it is and how (and why) to get around this.
[Android Apps and Games] virus786:
Thanks for explaining to them :good:
[Android Apps and Games] gayanaji:
im sorry for my misunderstood...have i should disabled my AV to run this..??? cause it keep fc everytime i try to run it...
[Android Apps and Games] harveydent:
Works on JB 4.1.1!
[Android Apps and Games] Grnfinger:
Works very well...this will be interesting to play with at work :D
[Android Apps and Games] hadejr:
Hah, now i know how to prank my friends :)
[Android Apps and Games] Matt08642:
Quick question before I install, why does it ask for permission to "modify gmail"

http://i.imgur.com/ZfA3F.png
[Android Apps and Games] virus786:
honestly I am not sure why, i am sure there is a very reasonable reason for this. afaik the source code is available so if you want to have a look though it for any malicious code, go for it.
[Android Apps and Games] Matt08642:
i was told elsewhere its for the "export to gmail" function
[Android Apps and Games] virus786:
ahh i see, thanks for that bit of info. :good:
[Android Apps and Games] Defyreddy:
Look to the Droid

sniff

thread. Droidsniff is a better clone from Droidsheep. I had the same problem with blocking my router. On site 10 I wrote a todo how it will work with targeting ONE single computer without blocking the router.

greets,

Defyreddy
[Android Apps and Games] theonlyanil:
Thanks. but the file cannot be copied to elsewhere. what to do?
[Android Apps and Games] ironia.:
working also on jb stock?
[Android Apps and Games] bmsthlm:
do any one know if you can be tracked by the network admin if you use it?
[Android Apps and Games] mid-kid:
I've never been tracked
[Android Apps and Games] hotboy_ist:
It does not show any session on JB... I do not understand why
[Android Apps and Games] amnya:
The MD5 should be F0A647E720A5EDDCE04D95D0E4C4E2AD as per the original developers page, the attachment on page one does not match. Beware!
[Android Apps and Games] mbirth:
To quote myself (back in May):

So if you find the original one, we'd be happy to attach it here…
[Android Apps and Games] AshishKumar1:
Works on Jelly bean

Hey Guys I can Confirm That the App Works On jelly Bean Version

I have a HTC One X Running MIUI ROM On Jelly bean and it works flawlessly :)
[Android Apps and Games] JeepFreak:
Well, its not working for me! Wish I knew why. I'm on JB and it justmdoesnt find any sessions at all.

Billy
[Android Apps and Games] ratatattata:
Avast security sais this is a potential virus-program, should I be concerned?

It really looks like a neat app!
[Android Apps and Games] randomvector:
Same for me as well with AVG. I am using build 15.
[Android Apps and Games] The~Skater~187:
I got the same thing. I uninstalled it for now just to be safe. :D

Sent from my LG-LG855 using Xparent ICS Tapatalk 2
[Android Apps and Games] CBRRider:
Really you guys? Look what the app does, of course it comes up as a POTENTIAL virus program.
[Android Apps and Games] Pons:
If you have to ask and state this (even though I'm pretty sure it's been covered in this thread and others), you don't understand the underlying concepts of security, anti-viruses, and potentially unwanted programs, aka PUPs. As such, you probably shouldn't use this app, honestly.
[Android Apps and Games] Grnfinger:
I use it a lot on JB and it works just fine

Just check ARP Spoofing and leave generic mode unchecked.

make sure busybox is updated
[Android Apps and Games] gandaran:
Hi

how do you compile the Droidsheep source code? any link to full easy instructions? I cant seem to find one, I use mainly Ubuntu.

thanks
[Android Apps and Games] JamesDin:
Hey, can I use the exported cookies on my pc and how?
[Android Apps and Games] namklis:
is there a similar app for unrooted phones?
[Android Apps and Games] Grnfinger:
I dont think so
[Android Apps and Games] Athoomas:
Is it the build 15 apk attached to the first post the one I need to download? Or what is the difference between build 14 and build 15?
[Android Apps and Games] :
Anybody knows why after using Droidsheep v15,terminating the app and toggling off wifi data on my device,I can't connect to wlan again and I have to manually restart my modem in order to connect?
[Android Apps and Games] eddieson:
Hello there..

I ran the app, found 2-3 accounts but when i turned off wifi the found accounts dissapeared...

Is there a way to retrieve them?

Also i cant find the directory that this app got installed in my phone..

Please help me if you can

Thanks in advance :)
[Android Apps and Games] theFRANCHESCO:
AVG found it as a virus. just so you all know.
[Android Apps and Games] CBRRider:
Please read about 9 posts up....
[Android Apps and Games] Grnfinger:
FFS people its not a virus

Google the thing and read the authors web site. You think XDA would leave this thread up if it was a virus.
[Android Apps and Games] Icculus574:
Removed for derpitude.
[Android Apps and Games] thedisturbedone:
Same here. Device: Xperia T with 4.1.2

My old Gingerbread device seems to fins sessions though.
[Android Apps and Games] dinvisble1:
confirmed not working on JB 4.2 (nexus 7)
[Android Apps and Games] my own name:
is there any latest version that's computable with JB 4.1.2? im usin this with JB 4.1.2, but make my phone auto reboot
[Android Apps and Games] gamaprob:
thx for app. is there any difference with build 14 and 15 ?
[Android Apps and Games] riahc3:
Is there a sub for this? dSploit doesnt work correctly either and Faceniff only does social networks.
[Android Apps and Games] Ralkkai:
I've been testing this off and on today on my school's network assuming that with the huge amount of student's contantly connecting to the network, I'd get a decent amount of hits but that doesn't seem to be the case. I'm testing on JB 4.2 and GB 2.3.6 and neither seem to work. On the flipside, it sangs my Facebook session almost instantly on my own network and I picked up some of my wife's web surfing also. I might try it on an actual open network sometime soon before I give my final opinion. Sucks that I don't exactly have friends that do this stuff that i can ask lol. :P
[Android Apps and Games] virus786:
Your school network (and most corporate / universities) probably uses WEP encryption. AFAIK this app only works with WPA and weaker network encryption methods.
[Android Apps and Games] Ralkkai:
Well what's the fun in that if you can't exploit WEP? I did notice that even on my WPA2 network that it seemed to stop working and I needed to reinstall it and it would work again.

EDIT: Just realized that my school's network uses EAP...
[Android Apps and Games] Pons:
Just for the record, WEP is a weaker encryption than WPA. From worst to best of the basic three:

WEP < WPA < WPA2