yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] Aircondition:
Without arpspoof running: http://www.speedtest.net/result/2053296350.png

With arpspoof running: http://www.speedtest.net/result/2053297706.png

You say it's slower? You're wrong.

I just tried the SSLSlip ported to Android and here are the results:

1. If you have your homepage as "https://www.google.com" it wont load. You have to start browsing on a non-SSL site and the web proxy NanoHTTPD will transform all https links to http.

2. When I logged in to Google the account name and password was shown in the GUI but it was logged out directly after the page refreshed. Maybe NanoHTTPD can't handle cookies correctly?

3. Much slower and battery is draining much more faster cause everything is going through the NanoHTTPD client.

FaceNiff is running the SSLStrip and webserver in the binary file (Linux kernel) and this port is running it inside the Dalvik virtual machine which will make it go slower. We already know that arpspoof is compatibility with this but not sure about the droidsheep binary...
[Android Apps and Games] rirozizo:
well, my experience with droidsheep was a slow surfing situation...

and you can't speed test it. explaination:

ARP-spoof is making the PC think that the phone is the router, instead of the actual router.

so with ARP-spoof on: PC---Phone---Router---Internet

now, the speed test is only between the Router and the internet. and with ARP-spoof on, it's between the Phone and the Internet.

the connection will still be slow, because having the Phone run as router is actually really hard to do, having the Phone track the PC's activity, and interfere with it is hard.

the phone gets the command from the PC, then send it to the router, the router responds to the phone, then the phone sends the data to the PC... so it's a slower process than without ARP-spoof.

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] DnaPolymerase:
This is rather interesting. Will you release the source code?
[Android Apps and Games] Aircondition:
The source code is already released here:

http://code.google.com/p/droidsheep/

Please note that xDragonZ is not the author of this project, he have only changed the GUI and improved it. Here you can see how it works:

http://droidsheep.de/download/Bachelorarbeit.pdf
[Android Apps and Games] julle131:
Can you exactly what did not work? Did the application start normally? Did it ask superuser?

What services did you try?
[Android Apps and Games] daron9:
Please author update this soft)))Evrybody wants new version,please))
[Android Apps and Games] v1d4l0k4:
Feature requests:

- User Agent switcher (I'd like to use some dummy user-agent)

- Better cookie exporting

I think they are must-have for now.

Please, provide any donation link to contribute to this awesome project! ;)
[Android Apps and Games] v1d4l0k4:
Not sure if it's a bug, but when I try to save the cookies from more than one Facebook session, it saves just the same session all the time. So if I have User 1, User 2 and User 3 and long tap "Save cookies" for User 3, it saves for the User 1. Then if I long tap "Save cookies" for User 2, it saves the User 1 cookies again and again. Have anyone experienced that issue?

Another feature request that I can suggest is to have an "Open site via proxy" option. Assuming that I capture some sessions through an insecure wi-fi on the way, when I go to home I can switch the wi-fi to my own and open sites without having to use my own IP address to open the saved sessions.
[Android Apps and Games] H4CK_H0PP3R:
App started without any issues but when i starts sniffing it did not sniffed anything & yes its asked me for superuser access also , I have tried facebook, gmail ,yahoo, twitter & Youtube but none worked , I tried all facesniff , droidsheep & droidsniff , & i tried all this on my own wifi network with my laptop , tablet & mobile still no success , Does these apps stopped working or i am doing something wrong ?
[Android Apps and Games] julle131:
Sounds like you are doing it right.

Can you try to enable generic mode, and just browse internet for a while? Generic mode captures all the cookies, so if it does not work, there might be a problem in the service.
[Android Apps and Games] riahc3:
This died right?
[Android Apps and Games] tk137:
Does this woek for Android 4 and higher?
[Android Apps and Games] RootTheMachine:
It should work fine.
[Android Apps and Games] ahb83:
are there any new builds for droidsniff or is the source available?
[Android Apps and Games] xDragonZ:
Sorry, no :(

Source Code : https://github.com/Evozi/DroidSniff

or you are suggested to try dsploit, check this out, I am sure you will like this : http://dsploit.net/
[Android Apps and Games] jonnyh1994:
I'm guessing you gave up on this development? :( Was really excited to use this and see if you had SSlstrip working :( Nothing out there has sslstrip functioning besides faceniff :/
[Android Apps and Games] tommybc:
Which is best, this faceniff or droidsheep?
[Android Apps and Games] anastasiszn:
Zimperium
[Android Apps and Games] Lossyx:
It's called zAnti, Zimperium is the company. Anyway, cSploit is the best (and open source unlike Zimperium products)
[Android Apps and Games] anastasiszn:
Have you better than zanti?
[Android Apps and Games] tmittelstaedt:
csploit does not work on my Droid but zANTI2 does.

---------- Post added at 06:18 PM ---------- Previous post was at 06:04 PM ----------

no scratch that - the two are incompatible apparently - force stop zanti2 and then csploit works fine
[Android Apps and Games] alandd86:
any1 got droidsniff work on android 5.1? i dnt realy like zanti or dsploit ! droidsniff and faceniff were the bestbut now non of them work with android lollipop !!

hope someone can make it work one day !

thanks all
[Android Apps and Games] LightHell:
why this aplication force close in my Nexus 5 root??

Why droidSniff In my Nexus 5 Root force Close??
[Android Apps and Games] alandd86:
still wanting this app :) but cant find any1 who made it work with lollipop!!
[Android Apps and Games] xDragonZ:
This project is outdated, check out http://www.csploit.org/ instead
[Android Apps and Games] anastasiszn:
Other apps about sniffing? I have csploit,zanti,intercepter ng

Στάλθηκε από το GT-I9105P μου χρησιμοποιώντας Tapatalk
[Android Apps and Games] jrno1:
I have the same question that you do. I need to find out what my step daughter is looking up on our Wi-Fi. Please apps don't seem to work like people say they do or as shown in videos
[Android Apps and Games] robot_head:
Wifi kill on kit kat, won't work on lollipop
[Android Apps and Games] anastasiszn:
Use zanti

Στάλθηκε από το GT-I9105P μου χρησιμοποιώντας Tapatalk
[Android Apps and Games] alandd86:
thanks for the reply but csploit not work the way droidsniff or droidsheep did before that is why i like droidsniff more
[Android Apps and Games] s!mon:
Recently there was a message after opening the app that there is a new update for it, tried to update it through my phone but it couldn't. The app on this page is posted in 2013. Where can I get the new update?
[Android Apps and Games] iyassamg:
u
[Android Apps and Games] Rdogg112:
The UI looks really nice! Good job.

Here are some suggestions (not sure if you have them yet or not):

SSLStrip (For https logins)

Tumblr

Blogger

Amazon
[Android Apps and Games] Aircondition:
It already has support for all of these with Generic Mode enabled. And if you want hard-coded filters for websites the developer dont support you can easily de-compile the apk with Apk Manager and edit the auth.xml to support the websites you want. ;)

Here is how you get SSLStrip working with the code from DroidSheep:

1. Flip your machine into forwarding mode. (echo "1" > /proc/sys/net/ipv4/ip_forward)

2. Setup iptables to redirect HTTP traffic to NanoHTTPD. (iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080)

3. Start the NanoHTTPD service. You can find the source of it in crazyricky's SSLStrip port to Android.

I'm still trying to figure out if you can include SSLStrip and merge the arpspoof and droidsheep binary files together running with superuser access in Linux kernel.

Edit: If you enable SSLStrip it doesn't take affect instantly, I think it has to do with the webbrowsers cache. Also when you disable it it you wont be able to access any websites for a short time. Sometimes the website uses a redirect to a https version of the site and therefore it will not work. On my Facebook account I have SSL enabled but when I login from a diffrent computer I only write "facebook.com" in the addressbar and then my webbrowser assumes I want to visit "http://www.facebook.com". First when I login it will refresh the page and enable SSL secured version but then it's already too late cause the data sent have already been interrupted and logged by the program. I dont know how it works with session identifiers sent from the server, I assume they're encrypted and cannot be spoofed. I'm gonna analyze the code a bit more to see how SSLStrip handles all the cookies and session identifiers cause I had to select "Keep me logged in", it was the only way to login.

It's much more slower than only using arpspoof and my AdBlock Chrome didn't work either. Maybe you can add filters to disable all flash ads and all other kind of ads all over the sites.
[Android Apps and Games] dave_k605:
Can't wait to try this!

Sent from my SCH-I500
[Android Apps and Games] rirozizo:
wait... SSLStrip means sniffing HTTPS websites too?

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] Aircondition:
It will make all traffic go through your phone where it's running a portable HTTP server which replaces every https with http. Only way to bypass this is when the user manually enters for example http://www.facebook.com or when a webpage use a redirect.

I have almost got it working but the SSLStrip ported to Android is very unstable so sometimes it just stops working but the webserver is still active and running. I'm trying to figure out why. Gonna see if there are any other open source webservers available for android that can process data.

If you want to help you can download SSLStrip for Android and test it out. Try to figure out what makes it crash and when. Basically if you go to Google and hover over the "Sign in" button you can either see http (still running) or https (crashed) link.
[Android Apps and Games] rirozizo:
well, right now i can't but i'll surely try this later

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] UEman:
Great, i really like the new look :D also i really would like to see the source.
[Android Apps and Games] xDragonZ:
Here's the latest useless changes that I made:

- When you saved a cookies it will show a green tick on the icon

- The session list will not jump back to the top when the list refreshed/new session added.

- WiFi SSID will now showed below the app title (subtitle)

- Moved hostname resolver to background thread to avoid ANR.

I will post the apk download link soon...

@Aircondition : check ur pm
[Android Apps and Games] rirozizo:
looking foward for the link...

and btw, those changes aren't useless

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] Kylobayd:
Looks great was looking for a improved versin of droidsheep :)

Well done!
[Android Apps and Games] rirozizo:
oh and keep it here safe at xda, don't bother putting it on the play store, as droidsheep already got removed

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] v5HMeca:
Are you going to make it open source?
[Android Apps and Games] UEman:
According to the GPL license he has to make it open source.

I'm also looking forward to it. I would love to see the changes because i made some small changes to droidsheep too but i got errors which i didn't get rid of. So i gave up and unfortunally i didn't have the source anymore.
[Android Apps and Games] Aircondition:
xDragonZ sent me the sources and I've been trying to add an port of SSLStrip to it but I cant compile it, there are too many errors. However the new GUI looks great. ;)

I've been working on a modded version of DroidSheep for a while so I thought I could try out it on this project instead. Unfortunately it's not 100% stable but you can try it if you want to. You will get a popup window with information how it works inside the application. When you pressed the start button just open Internet Explorer or another browser, open Google (MAKE SURE YOU'RE NOT ON HTTPS) and hover your mouse cursor over the "Sign in" button. If you see a "http://" link it's working. Make sure you enabled Generic Mode, when you login you should see your session in the GUI.

If it doesn't work just press stop and start it again. You may have to do that several times. For some reason it just stops working sometimes....

Here is the download link:

http://www.mediafire.com/?w379ji13u417ppp

If you're lazy to download and plugin the USB cable to your phone:

Edit: If you want the source just PM me. Maybe some of you are able to figure out what's wrong with it.
[Android Apps and Games] cabagekiller:
Any update to this? Was rather excited to see it due to facesniff not working Obb jelly bean.
[Android Apps and Games] xDragonZ:
Version 1.0.0 Build 16

This is the 1st release of DroidSniff , please report any problem/bugs at here.

[Added] Support for Reddit

[Added] Check Update with Updater

[Improvement] Actionbar for android below 4.0 with new sexy UI

[Improvement] The session list will not jump back to the top when the list refreshed/new session added.

[Improvement] Green tick on the icon will be showed when you saved a cookie

[Improvement] Arp Spoof Service - Cleaned up some code and added "killall arpspoof"

[Removed] Pop Up Activity

[Fix] Sniffed Google and Amazon URL

More will be added in the up-coming version:

- Pref Screen

- User Agent Changer

- and more!

Download : http://www.mediafire.com/?c3mr5lx34kpmp97

** if anyone want to help to develop this please PM me, I also will post to GitHub later since this is licence under GPLv3
[Android Apps and Games] Aircondition:
That looks great. I'm still trying to get SSLStrip working... may I have the source code for your project so I can work directly on that?
[Android Apps and Games] xDragonZ:
Sure, may I have your GitHub username? So that I can add you as admin
[Android Apps and Games] rirozizo:
thank you for this amazing work man! really, i appreciate it!

i don't know how to code, so i always feel like abusing other peoples work to my advantage.

however i'm really interested in the source code. can you send it please?

EDIT: plz fix the "disclaimer" window, it doesn't make a new line, just one straight line that is cut at the end (using CM7)

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] magno23:
i tried in my home network and some cookies appear several times(repeated) and i can save all of them but when i delete one of them they all get deleted at once
[Android Apps and Games] rirozizo:
please insist on saying that this is some kind of beta, i mean you still have SSLStrip, app's icon, app's name, fonts, text issues...

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] LGXX:
Why is this legal? Why can you easily publish an application like this on XDA?

I can't believe that everyone is just using this for testing his/her own accounts' security.

Gesendet von meinem Optimus 2X mit Tapatalk 2
[Android Apps and Games] Aircondition:
I thought it was something wrong on the SSLStrip port but now I realized after doing some tests with the Linux version that most large web services force the use of HSTS.

So if you don't already now SSLStrip works by changing any requests of SSL (HTTPS) secure URL's into insecure ones. Of course this isn't a problem if the user types in the URL with https:// first, but most users don't and that's a behaviour SSLStrip takes advantage of. The solution to stopping this is called HSTS as I said above. Basically the server responds telling the web browser to never use insecure URLs no matter what the server's response HTML says. Of course, the HSTS header can be stripped by the attacker if this is the user's first visit. Chrome, Firefox and Opera 12 attempts to limit this problem by including a hard-coded list of HSTS sites. Unfortunately this solution cannot scale to include all websites on the internet. HSTS can also help to prevent having one's cookie-based website login credentials stolen by widely available tools such as Firesheep (and DroidSheep).

I have the SSLStrip working now but since the most popular web services supports HSTS and with Chrome and Firefox using an hard-coded list of HSTS sites this isn't as useful like it used to be. And using it will also make your internet connection at least 200% slower depending how far you are from the phone which is acting as an in-between router processing all data received and replacing headers.

LGXX: This project was created to demonstrate how vulnerable open networks and non-secure websites are against session hijacking. If you want to protect you against this you can use HTTPS Everywhere. It will protect you on all major websites. ;)
[Android Apps and Games] el_bhm:
I also cannot believe people are using knives to make sandwiches. Or god forbid axes to chop wood.
[Android Apps and Games] LGXX:
Funny

Gesendet von meinem Optimus 2X mit Tapatalk 2
[Android Apps and Games] v5HMeca:
Penetration testing isn't just useful, it's necessary to ensure security and privacy.

If I were writing an app like this, though, I would have it silently email the Facebook user whose account has been hijacked (since the email address is the user name and shows up in plain text) to let them know what happened. This would help ensure that the app is only being used with permission.

But on the other hand, there are reasons to do it without their knowledge as well, and just so long as you're not accessing their account, there's nothing even ethically wrong with the attack.
[Android Apps and Games] Aircondition:
Lol. The source code have already been available for years now.
[Android Apps and Games] sirjoebob:
Trying

I am downloading to give this a shot. Will report any issues I have.
[Android Apps and Games] NicholasQ:
Wow, I was waiting for droidsheep to get updated. Thank you sir!
[Android Apps and Games] v5HMeca:
I know. Well, I didn't realize it was years old. I thought DroidSheep came out last year, but whatever. The point is that I'm aware that it's open source.
[Android Apps and Games] cabagekiller:
Anyone see how this is working? Tried it on my network but all it does is crash my Xbox. Could anyone compile faceniff source with the sslstrip source? Or try to see why it crashes in ics and jelly bean?
[Android Apps and Games] xDragonZ:
Hope you can provide the logcat / crashlog and enable debug mode and post the debug log at here or pm me, so that we can fix it
[Android Apps and Games] cabagekiller:
Oh no the app does not crash. My Xbox disconnects from live. The app works very well.
[Android Apps and Games] derride8:
I'm sorry I don't understand how to work the app. Any help please
[Android Apps and Games] Nightshadow931:
Not working for me.
[Android Apps and Games] Aircondition:
Ok.
[Android Apps and Games] dickmorgan:
hey guys...im in a internet security program for school and found out about Droid sniff and Droid sheep. I have zero experience with sniff programs on my phone and have only dealt with bt5 on a pc so I dont know what is required other than the droid sheep program.

I downloaded both sheep and sniff for my rooted atrix with the super charged ROM and when I run the program it spoofs the gateway but doesn't pick up any IP addresses. I tested it by going to websites on my laptop connected to the same network. sheep was just running and spoofing with no IP showing up. What am I doing wrong. I was reading something about having lipcap installed but havent had luck finding out a tutorial how to do that.. All the tutorials I come across are of people already having lipcap installed..

Any help in this or just a point to the right links will be appreciated. Im thinking of doing something with this program for my capstone

Sent from ricky's super charged ATRIX 2
[Android Apps and Games] julle131:
It seems you did it correctly. Maybe there is something preventing it from working in your schools wlan. If you have a smaller wlan, try using the app in there. If it still won't work, it might be something in your phone (maybe). You can also try wifikill and faceniff, if they won't work, there must be some kind of protectiob in you school.
[Android Apps and Games] dickmorgan:
Ive also done it in my home network as well same result

Sent from ricky's super charged ATRIX 2
[Android Apps and Games] julle131:
So it didn't work? I think bext step is to get logcat where yiu start the app & close it. That way the developer cab see where the problem is. BTW, what android version are you running? Some apps have problems with 4.0. IDK about this one. If you dont want to get ligcats and send it here, you can try faceniff. You can get it from http://faceniff.ponury.net/
[Android Apps and Games] dickmorgan:
Running 2.3 gingerbread.

Yeag ive tried facesniff . Droid sheep and Droid sniff nothing.

I was running arpspoof and did get a warning saying " arp 0 not supported by lipcap reverting back to cooked socket... Or something like that"

do you think cause i'm running a custom ROM that it's keeping it from working

Sent from ricky's super charged ATRIX 2
[Android Apps and Games] julle131:
It might be the custom rom. It sounds a bit stupid IMO. Maybe you can take a nandroid and install another rom to test it quickly?
[Android Apps and Games] rirozizo:
try dsabling the adblock, may help

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] Aircondition:
Why do you think that will make a difference? Post debug log or you'll get no help.
[Android Apps and Games] rirozizo:
because Adblockers can actually block some connections from and to your cellphone.

i'm talking about adblockers on the phone, not PC/victim

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] hurin8:
So, I had it running and it captured a Facebook account, though it doesn't give me access to enter, just sitting @ login screen. Does this mean that the user uses https, or that the cookie has expired?
[Android Apps and Games] regenboognl:
not to bad , installing it right now :)
[Android Apps and Games] Aircondition:
If you capture a Facebook account you should se the name of the user in green text, if it's yellow then the user visited Facebook but never logged in. Some websites use a Facebook plugin for commenting. The user can also select "kill all sessions logged in" and you wont be able to login.

May I ask if it's our own Facebook account cause this APP was not made to spy on other peoples Facebook account!!!
[Android Apps and Games] hurin8:
I use https when logging on FB, and it can't capture my account. My sister's account is on http and although I captured it some days ago it still can log in through droidsniff.

My question is, when a user using http is logging out, do the cookies become outdated?

The only way to protect ourselves is https?
[Android Apps and Games] pulser_g2:
As this code is licenced under the GPL, please post the modified versions' source code too :)
[Android Apps and Games] Aircondition:
So you think you can grab your account on an encrypted network? Don't think so...

And when you logoff the session identifier will be removed from their database so you aren't able to login on your smartphone. Only chance to keep it is when the user has checked the "remember me" checkbox when logging in.

I haven't asked xDragonZ for permissino to post the link here but as the original source is licensed under GLP the source code for this have to been public available:

https://github.com/Evozi/DroidSniff