yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] xDragonZ:
This is because that user is using HTTPS connection.

yes , the source code is public , I hope anyone can submit and pull and bug fixes too. If you don't know how to use GitHub don't worry just download the source and after you made some changes you can post it at xda forum, I or Aircondition will push the updates
[Android Apps and Games] prudhvi1105:
Good app:):):):)
[Android Apps and Games] speedracerbubba:
Thank you for this. I showed my dad brother why they should use https and how easy it is to see stuff sent over WiFi. Opened my eyes, too. Time to learn about network security.
[Android Apps and Games] RagnarDanneskjold:
Hey, thanks for the post, the link doesn't work. Could you post it somewhere else? Thanks.
[Android Apps and Games] NicholasQ:
Jellybean support coming soon?
[Android Apps and Games] speedracerbubba:
I'm using it on my galaxy nexus running 4.1
[Android Apps and Games] Aircondition:
Why shouldn't the current version work with Jelly Bean?
[Android Apps and Games] juancollado2003:
I de-compile facesniff.apk with Apk Manager but cant find the auth.xml, any clue? thanks
[Android Apps and Games] Aircondition:
It's in /res/raw/auth.xml.

You can also use Generic Mode but using it on a large network will capture everything such as ad-tracking cookies.

<auth>
<name>Facebook</name>
<domain>facebook.com</domain>
<url>http://www.facebook.com</url>
<mobileurl>http://m.facebook.com</mobileurl>
<idurl>http://m.facebook.com/profile.php</idurl>
<regexp><![CDATA[(<title>[:space:]*)([^<]*)(</title>)]]></regexp>
<cookiename>c_user</cookiename>
<cookiename>datr</cookiename>
<cookiename>lu</cookiename>
<cookiename>xs</cookiename>
</auth>
[Android Apps and Games] Defyreddy:
...

Me again, hallo.

The error (arpspoof 777 seen in debug-mode) continues... but sniffing works now.

But there is one problem. I only can sniff my wired homecomputer hanging at the router!

If I log in with a ´3rd device (wlan home computer)... I can`t sniff anymore.

I see one coockie then the internet connection breaks down (or the router?)

Tried without the wired computer (only the wlan home computer and the android device) an it´s the same problem.

Four different routers - everytime the same problem: Can´t sniff my wireless network!

Disabeld encryption: same problem.

The only thing for me thats works in MY network to sniff wireless devices is "Faceniff" in "steahth mode".

From the developer of Faceniff:

"What is stealth mode

- Some routers try to prevent the attack when they see spoofed ARP that is sent to broadcast. Stealth mode attacks every computer in network one by one. It's slower, but routers mostly ignore this. If you encounter problems with network or don't see any profiles popping up - use Stealth mode it might help"

Four routers... and all could prevent attack?

I know that Droidsniff makes a kind of DDoS attack...but with only two wlan devices the router should handle it?

faceniff.freeforums.org/facesniff-crashed-network-t70.html

------------------------------------------------------------------------------------------------------

Droidsniff works with arpspoof?

I installed Arpspoof as an standalone; from here:

.androidapps-home.com/arpspoof-android-1569611.html

Is it the same arpspoof that is used by droidsniff?

If I use Arpspoof it behaves exactly like Droidsniff with my routers.

But, but, but. In Arpspoof I could set one target IP for the device to sniff (advanced settings). If I do this everything wents fine!!! I could sniff in my network a wireless computer without crashing/ blocking the router!

Is there a chance to build this in droidsniff? Choose the/one(!) target computer from a list of avaible devices or put in the targets ip manually?

Would be a dream. :D

Please could you all post your routers? Brand and model? I will try one of these - maybe it´s my android device (Motoral Defy at cm 7.2) that causes all the issues.

The router I tried: Fritzbox Fon, Fritzbox 7140, XSBox®GO (mobil router with 3g) and an Aquiprouter.

greets,

Defyreddy
[Android Apps and Games] UEman:
No, it's not your device which causes the problem.

I have a defy too and it works. (Cm7,cm9,cm10... every cm works :D )

it's most probably a problem with your router, maybe it's preventing arp-attacks.

Check the settings , there could be an option for arp-spoofing.

My router has such an option.

I'll tell you later which router it is because i'm not home atm.
[Android Apps and Games] comingwinter:
is it possible to use this whilst tethering your internet to other people, eg they use facebook on their phone using the internet from my phone and i have droidsniff installed and running at the same time
[Android Apps and Games] NicholasQ:
I've always wondered this!
[Android Apps and Games] Pons:
Slightly off topic from the app, but same concept with more uses.

WifiPineapple.com
[Android Apps and Games] rand0m_insanity:
I tried this on my Desire Z running on CM9, and it initially works, when I start it. However, when I end the spoofing/attack, it crashes. Any idea why this happens?
[Android Apps and Games] MiStO99:
Gonna try it. Thanks
[Android Apps and Games] Defyreddy:
Sounds good but it´s hard to believe ;)

I tried the 5th router: Easybox 802

Same problem.

Could some please post a debug log, or look if he has the same error (chmod 777 for arpspoof) like I have?

And your routers please.

greets Defyreddy
[Android Apps and Games] UEman:
D-Link DIR 635 (with the latest firmware)
[Android Apps and Games] Defyreddy:
Thank you! But I guess it is my Defy!

NOW I find a way to log in my network without kicking the router. It sounds unbelievible...:confused:

1. Start Droidsheep (Arp-Spoofing and Generic mode on)

2. Run (Spoffing 192.168.2.1)

3. Found ONE cookie - the router hangs -wireless hangs -internet hangs...

4. Press STOP

5. Disable ARP-Spoofing

6. Press Start (Not spoofing any IP)

....BUT IT SPOOFS!!! Without kicking anything. It spoofs while saying "Not spoofing any IP"... :o

From wireless to wireless with wpa2

After 5-10 minutes spoofing stops - no coockies found anymore.

I can´t believe. If I beginn spoofing without steps 1-4 it wont work

It can´t be a bug of Driedsniff; Droidsheep acts the same way. Faceniff, too (not in stealth mode...described in one of the last postings).

Maybe doing step 1-6 forces Droidsheep too look for only ONE IP?

Mysterious.

I have a log from logcat. I will post it. Maybe someone could help me.

greetz,

Defyreddy
[Android Apps and Games] soundemonchan:
Do we need to compile kernels for our phones with ARP daemon support in order to use this?
[Android Apps and Games] Defyreddy:
My new router just arrived. It´s the D-Link DIR 635.

But NO success :( Same procedure like before: the intenet/ router hangs... ARP-Spoofing war not activated. Just out of the box.

On my Motorola Defy (mb 525) with CM 7 nighly.

Tried with the original firmware, the MIUI firmware, CM 7 stable... but no success.

Tried a linus bootable cd as my windows computers have already winpcap installed (maybe this would cause trouble)

Note: Droidsheep runs perfect on a very big free wireless network... but not at home. Now I tried 5 (!) different routers...

@ UEman: You have a Defy (mb525) an not an Defy+ (mb 526)?

------------------------------------------------------------------------

Now I will restart my Defy. Start Droisheep. Run it one with ARP-Spoofing & Generic Mode. Try to google something on the wireless Home-computer (Internet/ router will hang so lang as droidsheep runs...). Stop Droidsheep. Close it.

Make a catlog (with the app called catlog).

Post it (attachment)- hope it is not to long. I wonder why " D/DROIDSNIFF(2859)" and "I/dalvikvm(2859)" have the same number. Could this be correct?

-------------------------------------------------------------------------------------------

If somebod wants i could paste a log from the router about all conections. The D-Link captures them.

Droidsheep works. For me too. BUT NOT in MY home network. :eek:

greets,

Defyreddy
[Android Apps and Games] rirozizo:
so, now with build 16, what's the difference between it and droidsheep? SSLStrip?

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] UEman:
I have a normal defy, but for me it works with both kernels (froyo and gingerbread).

Your problem is really strange,

i don't understand why this keeps happening for you...

Did you try spoofing whith your pc with tools like cain&abel? Does it cause similar problems?
[Android Apps and Games] Defyreddy:
Argh - I believe I know why THIS happens. Running Droidsheep causes a DDOS. Will flood my router(s). They can´t handle it an the routing-finction breaks down. So they went from the switch mode to the hub mode. Hub mode sents ALL information to all the computers in the network. If they asked for it or not - they`ll will get them! That`s probaly the reason why I´ll get all the coockies WITHOUT beeing Arp-Spoofing activated. :D

A link about the difference beetween hub and switch:

Google: "how-do-hubs-switches-routers-and-access-points-differ" (I can´t paste url`s)

The only way for me in basic configuration of the routers is that way.... Steps 1-6.

But if Droidsheep gets a stealth mode (like facesniff) - only spoofing ONE target at the same time it will work, too. Would be a killer application... as Faceniff only spoofs a few sites, that are not very interesting. Manually input of the the target-computers IP would be no problem. There is a wonderfull freeware called "Fing - Network Tools" in the market. Test it! Shows your network with nice features...Could copy the IP of a computer to paste it somewhere you like....ping etc.

What are my next steps? I found a router that should work. I´ll tryed it at a friends home. It´s called Speedport 504. I´ll will buy me one an test it MY home network.

As the Dlink 635 won´t wor for me.... but why??? As all my routers hang up. Maybe it´s a kind of elektronic-smog? But the network seems to be stable. Sniffing from wireless to wireless don´t work. Sniffing the wired computer works with the Defy.

I´ll will try to configure some routers as Access-Points. But for the Dlink 635 I read that the wifi components could not communicate with each other... :crying: Would be no hub.

Cain & Abel was a good hint. Works on the home-pc to sniff in other networks (the same the Defy could). But sniffing in my wireless network (wireless to wireless - with only one target!!!) causes router problems.

I could try forwading? But if it works...I`ll only will solve the sniffing problem @home. ;) A router with stock settings has to be the working target...

@UEman Whats the name/ number of yor routers firmware. I know it´s the latest, but mine is the latest too. But it some like EU-version. Maybe you`re outside the EU and have another firmware?

greets,

Defyreddy
[Android Apps and Games] UEman:
Hardwareversion B3 & softwareversion 2.33EU
[Android Apps and Games] Bilgets:
whoa such a great app, downloading this app and will test it out tomorrow if i can get the password of my new school wi-fi :D
[Android Apps and Games] xDragonZ:
This tool is for educational purpose , and is not for you to hack or steal others user account without permission. You might get into trouble if you try to hack others user account using this tools.

In next version I might include an option to allow user to spoof target IP.

I also notice that I can't spoof my on computer and laptop with ESET antivirus enable, or Avira premium , so I think some antivirus also got with anti arp spoof too
[Android Apps and Games] hurin8:
Does the same apply for mobiles with antivirus?
[Android Apps and Games] kourampies:
Works fine, thanks for the development.

But as others mentioned, SSL strip is needed nowadays. And the ability to see the decrypted data, not cover the passwords in stars like Faceniff does...
[Android Apps and Games] Jesustheheretic:
Do you understand how any of this works....

Nope.

It won't happen unless you find a way of making session hijacking work completely different from the way it currently does.
[Android Apps and Games] kourampies:
I think I understand session hijacking, but I can't say the same about SSL strip.

I remember this feature existing on faceniff though, that is a session hijacker with SSL strip, so I thought it was doable.
[Android Apps and Games] Jesustheheretic:
You would have better luck with looking into phishing via SSID cloning, and a login Page hosted on your device (see honeypot)
[Android Apps and Games] Defyreddy:
Thank you, sir. :o

Another idea would be a `passive sniffing option`. An option to load pcap-files from sd-card and decrypt them. So you could ananlyse your own mobile traffic captured by "shark for root". Or analyse tethered data that have been captured by shark...

Somebody asked for tethering & Droidsniff running at he same time. If Droidsniff would know where to `find` the data...would this be possible?

Is it me being an idiot...but I believe I can save only one single cookie. Would be nice to save complet sessions.

SSL-strip. Here in the forum is a thread about "SSLstrip for android". Uses Arpspoof too. Not working for me - but for other it is. Maybe the code is interesting for you.

greets, Defyreddy
[Android Apps and Games] Aircondition:
You can use Shark for Android if you want to traffic sniff on your own tethered network. Only bad thing is that it doesn't have DroidSniff's filtering built-in and you can't inject the cookies into the WebKit browser that DroidSniff has. However you can easily transfer the .pcap file and open it in Wireshark on your desktop computer. Anyway why would you want to other people you dont know connect to your tethered network consuming your monthly data usage? You have to rewrite the app if you want it to work on your tethering mode only.

And for all people talking about SSLStrip here is what I wrote 1 month ago:

Google, PayPal and Twitter are using HSTS on their login pages. Facebook doesn't use SSL on their mobile app as far as I'm aware of but most people if not all are using wireless 3G on their phones so there's a very small chance to capture someone's Facebook account walking around on the streets cause he or she need to be connected to same WiFi network as you are and tell me, how many open networks can use see from your computer?
[Android Apps and Games] toxicpaulution:
go to McDonald's or at the library. I'm sure toms of unknowable people are there on wifi and on Facebook lol
[Android Apps and Games] supermario3:
What are the differences between this and droidsheep?
[Android Apps and Games] strtkempo:
Thanks I love tools like this ! Shows the importance of http!

Thanks button hit!
[Android Apps and Games] DnaPolymerase:
You mean making them easier to understand? It could get some work but it's not a bad idea. You can still use Shark Reader though.

Don't. Please don't.
[Android Apps and Games] toxicpaulution:
I was only joking around lol. It was to whoever asked how many people have wifi open around their house lol:p this is a learning tool not a black tool I know.
[Android Apps and Games] rirozizo:
typed a "you've been hacked" status on my bro's facebook account... does that count as illegal? i don't think so...
[Android Apps and Games] julle131:
Depending on laws. Propably yes, because you propably didnt have permission.
[Android Apps and Games] rirozizo:
well i consider it as a joke... imean, i won't behacking an anonymous person and do bad thing to his account

———————————————————

pm me if you need any app... ANY app
[Android Apps and Games] Intercrew:
Doesn't seem to work on galaxy s3. It runs and asked me to download busybox so I did and installed the stuff once busybox was opened. Anyone else having a problem?

Like the app opens up fine have both arp spoofing and generic mode checked and once i press start it just says spoofing ip with numbers but nothing comes up O_O
[Android Apps and Games] Jesustheheretic:
ROM and Phone Type pls :)
[Android Apps and Games] Rdogg112:
I'm using ICS 4.0.4(ROM named ColdFusionX which is based off CM9), phone is ZTE Blade. (I can run DroidSheep just fine btw)
[Android Apps and Games] Fotis_13:
What is the difference about droidsheep and droidsniff? (exclude the appearance)
[Android Apps and Games] v5HMeca:
You should read the first post.
[Android Apps and Games] Jeffreycat:
How is SSLStrip progressing? Or is there a separate working app?
[Android Apps and Games] Aircondition:
There will be no SSLStrip for DroidSniff. Google, PayPal, Twitter and many other sites are using something called HSTS to prevent SSL stripping and most people using session-hijacking tools are hijacking Facebook accounts, they dont use SSL on mobile devices or desktop computers (if the user haven't choosed to always use secure connection whenever it's possible so why do you want SSLStrip if it slows your phone down a lot and drains your battery in just some hours. Also it is unstable, even running it on Linux sometimes websites wont load and you'll have to refresh the webpage.
[Android Apps and Games] RagnarDanneskjold:
Great. When is the next build coming out?
[Android Apps and Games] Jeffreycat:
Perhaps you could add a "check for updates" option into this app? The debug option doesn't have an email to send to auto populated! Where should I send logs to?
[Android Apps and Games] hurin8:
Is there a way to use the integrated internet explorer, like faceniff does? It doesn't display well the Facebook site!
[Android Apps and Games] UEman:
No, as we don't have internet explorer on our phones :P

However if you want to open it with the browser than you should wait for next version. The developer listed it as feature for the next version.
[Android Apps and Games] Jeffreycat:
The dev hasn't posted in awhile, is there going to be another update anytime soon?
[Android Apps and Games] ShadowReaperGR:
Hello,

i want to compile droidsniff from source myself but I don't know how. When I started a new project in eclipse everything was configured automatically. I open the project in eclipse but I cannot build it. It says that there are problems with the build path.

Can you help me?
[Android Apps and Games] Aircondition:
1) Download the ActionBarSherlock library: https://github.com/JakeWharton/ActionBarSherlock

2) Import it into the eclipse project , and compile the .jar file.

3) Open DroidSniff project and link it to ActionBarSherlock libary.

4) Do a project clean for DroidSniff.
[Android Apps and Games] tiberian:
Suspicious Activity

Nice job. But why are the following happening:

- Runs automatically at phone startup (for what purpose)

- Avast! reports that it has access to my messages

Neither of these are listed in the app permissions. This is the same behavior as the fake DroidSheep v15 that is reported by Avast! and AVG as an actual virus.

Please explain this behavior.
[Android Apps and Games] Humzaman:
I'm using a sprint galaxy s3. Whenever I try to use the app, nothing comes up no matter how long I keep it running. And yes I am rooted.
[Android Apps and Games] xDragonZ:
The source code is open source, you can take a look and compile yourself. I can assure to you that this app does NOT access any message, I think is false positive.

SORRY , For anyone who waiting for an update, this few month I have many projects going on, so anyone who wanted to fork the project, you are welcome to fork it at the github, its released under GPL license
[Android Apps and Games] syedkamal92:
any other app out there that have same hacking function?
[Android Apps and Games] frenzyboi:
Faceniff
[Android Apps and Games] Galaxysm:
Tried that. Seems not to work.

Sent from my SAMSUNG-SGH-T989 using Xparent SkyBlue Tapatalk 2
[Android Apps and Games] bel3atar:
no

crashes at startup in gnex 4.1.1
[Android Apps and Games] rirozizo:
can you please record a logcat when it crashes?

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] Humzaman:
Can someone help me??

Sent from my SPH-L710 running FreeGS3 v0.1.1
[Android Apps and Games] Rayman96:
Router may have EAP (PEAP) security enabled. Then you will catch nothing.
[Android Apps and Games] krustbr:
Can someone tell me how to log just one pc at time? cuz my router just go down seconds later i start the spoof, looks like he'd been flooded.
[Android Apps and Games] kalkih:
Awesome app, Any updates soon?
[Android Apps and Games] riahc3:
I agree. Any updates coming soon? Or maybe someone can get the source and continue the project?
[Android Apps and Games] Geo1997:
Here what has said xDragonZ a page before about the developement of the app :

"The source code is open source, you can take a look and compile yourself. [...]

SORRY , For anyone who waiting for an update, this few month I have many projects going on, so anyone who wanted to fork the project, you are welcome to fork it at the github, its released under GPL license"

So if you can continue the project, it would be great :good: :fingers-crossed: :p
[Android Apps and Games] riahc3:
Well I could always take a look even though I cant promise anything....
[Android Apps and Games] that1guyty:
I'm having the same thing happen on my att gs3. Running cm10 m2. My friend with the gs2 can be sitting right next to me and he picks up all kinds of stuff while mine sits silent.
[Android Apps and Games] mobile-freak:
Hello @ all,

does this APP work in a EAP Network?
[Android Apps and Games] invision2003:
I had lots of fun with this tool. I currently have a Nexus 7 and I was wondering if this works with jelly bean ?

Thanks
[Android Apps and Games] UEman:
Why don't you try it yourself?

It works for me on jellybean.
[Android Apps and Games] invision2003:
I did but it doesn't work for me
[Android Apps and Games] dotamaple:
this will work if im the Hotspot and openning droidsniff?

or hotspot is safe from arp spoofing?

Edit:

And also will work for those open wifi connection that need to sign in?
[Android Apps and Games] IImanuII:
Ill try but do not work for me

EDIT: work in wi-fi not with mobile connection (Hotspot )

Inviato dal mio GT-I9300 con Tapatalk 2
[Android Apps and Games] hotboy_ist:
It doesnt work galaxy note N7000 JB 4.1.2
[Android Apps and Games] Jeffreycat:
http://techcrunch.com/2012/11/18/facebook-https/

Looks like we won't be able to snoop on peoples facebook accounts anymore :( at least until SSL strip is added.
[Android Apps and Games] xDragonZ:
Please use dsploit http://www.dsploit.net/ this project will be discontinued temporary.
[Android Apps and Games] Galaxysm:
What's dspoit? O.o
[Android Apps and Games] xDragonZ:
Ops, link fixed -> http://www.dsploit.net/
[Android Apps and Games] Galaxysm:
Time to start reading :D. Thanks!
[Android Apps and Games] malicenfz:
Doesn't seem to be working on my EVO LTE. Do I have to be S-OFF for this to work?
[Android Apps and Games] soccerfan6789:
doesnt seem to work on hercules (Galaxy S2 T-Mobile)
[Android Apps and Games] mrboomboom:
This is not working with arp-mode disabled on an open network. Does it go in monitor mode?
[Android Apps and Games] julle131:
No. Monitor mode would require patched drivers and possibly kernel. If arp is not working, it does not work in that network/phone.
[Android Apps and Games] kirakun:
Is it possible to hack a wifi with this app? For educational and private use only of course.
[Android Apps and Games] julle131:
Well... how do you classify hacking wifi? This app can get sessions from it, but it does not get you the password of wifi or anything like that.
[Android Apps and Games] NicholasQ:
Have you guys ever noticed that after running this app that your device will become very laggy even after turning off the app and uninstalling it my entire device becomes very sluggish to the point where I have to factory reset to get everything smooth again.
[Android Apps and Games] julle131:
I haven't. I assume there would be multiple reports about that if it would be a common issue. I'd ask you to post a log cat, but the development of this app seems to be halted.
[Android Apps and Games] NoL1m1tZ:
Does anyone know how to import cookies into a desktop browser?
[Android Apps and Games] SecUpwN:
AW: [APP][ROOT] DroidSniff - Meet the little brother of DroidSheep - v1.0.0 Build 16

Isn't dSploit way better than DroidSniff?