yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] 6d21otb:
# ./nmap --max-retries 1 --max-rtt-timeout 250ms -sn -n -T4 --system-dns 192.168.0.232/29
Starting Nmap 6.00 ( nmap.org ) at 2012-10-11 17:03 CEST
Nmap scan report for 192.168.0.233
Host is up.
Nmap scan report for 192.168.0.234
Host is up (0.037s latency).
MAC Address: 00:0A:F7:00:00:00 (Broadcom Corp.)
Nmap scan report for 192.168.0.235
Host is up (0.015s latency).
MAC Address: 00:0F:66:00:00:00 (Cisco-Linksys)
Nmap scan report for 192.168.0.237
Host is up (0.026s latency).
MAC Address: 00:24:B2:00:00:00 (Netgear)
Nmap done: 8 IP addresses (4 hosts up) scanned in 0.65 seconds
#
[Android Apps and Games] evilsocket:
seems ok, tnx :)
[Android Apps and Games] dorqus:
ugh never mind... droidwall was blocking "applications running as root" :/
[Android Apps and Games] Guto ViP:
Very nice program!

Enviado do meu Galaxy Nexus, via Tapatalk.
[Android Apps and Games] zirrus:
Hey man. Great app. Works great on my Droid 3 and I love that you're working on SSL mitm. Problem though...

I love to use it on my tablet as well but the scanner does not seem to work. I have an Acer A100 with the Flex Reaper rom. How would I proceed to see what is happening when it calls nmap. It seems to try on the first time but then just automatically snaps back to stop on subsequent tries.

Also, sorry if this has Ben answered in previous posts, 45 pages is a lot to read
[Android Apps and Games] evilsocket:
You mean the network scanner or the port scanner ?

Do you have adb installed on your pc ?
[Android Apps and Games] zirrus:
Port scanner and inspector both do the same thing, they'll try the first time but then just snap from stop to start when the button is tapped. I do have adb installed.
[Android Apps and Games] evilsocket:
Great, could you please start an adb shell session ( adb shell ) then run the following commands:

su
export LD_LIBRARY_PATH=/data/data/it.evilsocket.dsploit/files/tools/libs:$LD_LIBRARY_PATH
cd /data/data/it.evilsocket.dsploit/files/tools/nmap
./nmap -sS -P0 --system-dns -vvv [B]the-ip-address-giving-this-problem[/B]

and give me ( even on PM if you prefer ) the output ?

Thanks for your help :)
[Android Apps and Games] evilsocket:
Mmmmmm could be that your environment is ignoring/not supporting the LD_LIBRARY_PATH variable ? try this, just before the "&& ./nmap ..." put a:

echo $LD_LIBRARY_PATH && ./nmap ...

So the command line would be:

LD_LIBRARY_PATH=/data/data/it.evilsocket.dsploit/files/tools/libs:$LD_LIBRARY_PATH && cd /data/data/it.evilsocket.dsploit/files/tools/nmap && echo $LD_LIBRARY_PATH && ./nmap --max-retries 1 --max-rtt-timeout 250ms -sn -n -T4 --system-dns 172.27.72.192/28

Then look at the output ... is the LD_LIBRARY_PATH correctly updated ?
[Android Apps and Games] evilsocket:
Maybe i've got it! Could you please check if with this last commit the libraries are loaded ( git pull inside your dSploit folder :) ) ?
[Android Apps and Games] 6d21otb:
LOL this is weird now I get this:

D/Tool cmd:(14410): LD_LIBRARY_PATH=/data/data/it.evilsocket.dsploit/files/tools/libs:$LD_LIBRARY_PATH && cd /data/data/it.evilsocket.dsploit/files/tools/nmap && echo $LD_LIBRARY_PATH && ./nmap --max-retries 1 --max-rtt-timeout 250ms -sn -n -T4 --system-dns 192.168.0.232/29
E/su (14851): sudb - Opening database
E/su (14851): sudb - Database opened
E/su (14851): sudb - Database closed
D/su (14851): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
D/NMAP (14410): /data/data/it.evilsocket.dsploit/files/tools/libs:/vendor/lib:/data/cust/lib:/system/lib:/data/datalib
D/NMAP (14410): link_image[1966]: 14853 could not load needed library 'libpcap.so' for './nmap' (load_library[1108]: Library 'libpcap.so' not found)CANNOT LINK EXECUTABLE
D/NMAP (14410): À€

So it does seem to populate the env var correctly but then doesnt use it... wtf
[Android Apps and Games] evilsocket:
Look at my previous post :)
[Android Apps and Games] Master_T:
I was searching for something like this, will check it out.
[Android Apps and Games] 6d21otb:
Yes sorry I was blocked from posting again, I had to wait a few minutes, I tried your latest commit and this is what I now get in logcat:

D/Tool cmd:(15674): LD_LIBRARY_PATH=/data/data/it.evilsocket.dsploit/files/tools/libs:$LD_LIBRARY_PATH && cd /data/data/it.evilsocket.dsploit/files/tools/nmap && echo $LD_LIBRARY_PATH && ./nmap --max-retries 1 --max-rtt-timeout 250ms -sn -n -T4 --system-dns 192.168.0.232/29
D/LD_LIBRARY_PATH(15674): LD_LIBRARY_PATH = /vendor/lib:/data/cust/lib:/system/lib:/data/datalib:/data/data/it.evilsocket.dsploit/files/tools/libs
E/su (16055): sudb - Opening database
E/su (16055): sudb - Database opened
E/su (16055): sudb - Database closed
D/su (16055): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
D/NMAP (15674): /data/data/it.evilsocket.dsploit/files/tools/libs:/vendor/lib:/data/cust/lib:/system/lib:/data/datalib:/data/data/it.evilsocket.dsploit/files/tools/libs
D/NMAP (15674): link_image[1966]: 16057 could not load needed library 'libpcap.so' for './nmap' (load_library[1108]: Library 'libpcap.so' not found)CANNOT LINK EXECUTABLE
D/NMAP (15674): À€

Maybe somebody can remove the minute ban for me? It said some trusted user has to remove it :good:
[Android Apps and Games] evilsocket:
And with this commit ? ( git pull again ... sorry if i'm stressing you, but i really can't reproduce this bug, you are my only hope to fix it XD )
[Android Apps and Games] 6d21otb:
I pulled it directly into my eclipse project folder and I still get:

D/Tool cmd:(19851): LD_LIBRARY_PATH=/data/data/it.evilsocket.dsploit/files/tools/libs:$LD_LIBRARY_PATH && cd /data/data/it.evilsocket.dsploit/files/tools/nmap && ./nmap --max-retries 1 --max-rtt-timeout 250ms -sn -n -T4 --system-dns 192.168.0.232/29
E/su (20328): sudb - Opening database
E/su (20328): sudb - Database opened
E/su (20328): sudb - Database closed
D/su (20328): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
D/NMAP (19851): link_image[1966]: 20330 could not load needed library 'libpcap.so' for './nmap' (load_library[1108]: Library 'libpcap.so' not found)CANNOT LINK EXECUTABLE
D/NMAP (19851): À€

No problem, I want to get it work too! :D Let me know if you have new ideas/commits

(BTW thx to whomever for adding me as a trusted user or something, I dont even see captchas anymore :laugh:)
[Android Apps and Games] evilsocket:
OMG i've tried to set the LD_LIBRARY_PATH in every way possible O___O maybe is my approach to spawning processes which is wrong ... :crying:
[Android Apps and Games] 6d21otb:
Yeah it's really weird, the LD_LIBRARY_PATH even seems to be properly set, but it just isn't used by nmap...

(I'm not trusted yet btw, the captcha disappeared for some other reason I guess, still had to wait before I could edit the post.. nvm)
[Android Apps and Games] evilsocket:
Ok third and last commit for tonight, if this doesn't work i really don't know how to fix this O.o
[Android Apps and Games] evilsocket:
Ok ok ok ok we're almost there ... even if i really can't understand this, i have no problems at all on both my galaxy nexus and nexus 7 O.o
[Android Apps and Games] drraptor:
Tried a MIMT, it stopped the browsing on my target machine. didn't redirect to the page I specified.
[Android Apps and Games] evilsocket:
Any better with this commit ? Seems like Runtime.getRuntime().exec needs absolute paths since it doesn't load the busybox $PATH correctly :(
[Android Apps and Games] 6d21otb:
Now the ToolsInstaller isnt installing anything any more, /data/data/it.evilsocket.dsploit/files is empty, I checked in the shell.

I PM'd you the full logcat, dont bother too much, apparently its a rare issue?
[Android Apps and Games] evilsocket:
Don't think it's so rare, i guess many of the other issues ( no alive endpoints, no open ports, etc ) are caused by this ... anyway, that's enough for today :)

Tnx again.
[Android Apps and Games] 6d21otb:
Maybe this is relevant: http://blog.cedarsoft.com/2010/11/setting-java-library-path-programmatically/

Also: http://stackoverflow.com/questions/...depend-on-other-shared-libs/11085509#11085509
[Android Apps and Games] zirrus:
Ok, so I was at school earlier and had to go to class. I tried youre commands from shell and it nmap ran fine. I cleared data, uninstalled and reinstalled from 1.0.18b and it seems to be working. I'll reboot the device and see if keeps. Thanks for your help and keep up the good work
[Android Apps and Games] cyclonmaster:
Looks like the same error that I get even full Busybox installed. My device is LG Optimus 3D P920.
[Android Apps and Games] ortrigger:
Finally had time to sit down and explore the app and I'm really impressed. Especially the man in the middle stuff. Great job.

I haven't gotten to play with some things but the inspector works for me, both sniffers, among other things. Thanks for all your work on this.

Sent from my sgt7'd n7.
[Android Apps and Games] deyna:
Ever heard of Scripting Layer for Android? (aka SL4A)

It can be used as a Python interpreter or, given the fact that it's open source, you might be able to use some of its code.

SL4A: http://code.google.com/p/android-scripting/

Plugin(s) that lets it run Python scripts: http://code.google.com/p/python-for-android/
[Android Apps and Games] evilsocket:
This doesn't make sense, how come then that the LD_LIBRARY_PATH si perfectly working on my two devi ces?
[Android Apps and Games] evilsocket:
Yep .. SL4A is basically only an installer for scripting languages, therefore in any case i'd have to install the whole python interpreter.
[Android Apps and Games] MemoryController:
libpcap.so not found
[Android Apps and Games] Ruzzah:
My phone gets really hot by sniffing passwords :S
[Android Apps and Games] metalwraith:
Works nice on my N7. Was testing it out at home. Looks nice too.
[Android Apps and Games] nikant:
congrats for the app! a multitool that many will need for vuln scan.. :good:

I'm having some problems running it..

device: HTC Incredible S (Vivo)

rom: Android Revolution HD 3.0.0 (rooted of course) with custom kernel

however when I run dSploit in alive hosts it shows only my netmask, my router and my device..

at the same time Fing for instance shows the correct alive hosts in my network (see attachment)

Even if I enter an IP manually and go to port scan it shows that host isn't alive and stops port scan..

I've attached debug.log but I don't think it's enough.. what else do you need in order to find out what's wrong..?

Thank you!
[Android Apps and Games] evilsocket:
A logcat would be useful :)
[Android Apps and Games] nikant:
ok I'm sending a PM
[Android Apps and Games] Mr.Krulez:
sorry for the noob question but i was sniffig for pass on the uni wifi and i got a community:public info : smnp v1

wat this mean?
[Android Apps and Games] evilsocket:
snmp auth
[Android Apps and Games] Mr.Krulez:
already readed

I would like to know if the network is safe since it use this protocol i don't know if with this information is still possible to get a login information
[Android Apps and Games] ArmorD:
Yeah.. Security testing...

Ha! I love this kind of apps! Can't wait to get to school(oh the irony) to play with this. Great job mate, keep the good work up :)

Sent from my premium potato
[Android Apps and Games] theevilworm:
Is "Kill connections" or "Custom Filter" or "Inject Script" working for everyone else? For me, only "Replace Image" has an effect when I test it on my Win7 PC. WiFiKill can disable my internet connection, but with dSploit just nothing happens (all the other functions except "Replace Image" in MITM have no effect either).

I can't provide a logcat I'm sorry (no time today), I just want to know if it works for everyone else.

Short info I can give:

Android 2.3.7 (CM7 build 135.2 by temasek, temasek's kernel)

baseband/RIL 725

Superuser app is SuperUser, will install SuperSU in a moment /Edit: does not work with SuperSU either.

Win7 x64, tried with Chrome 23 and IE 9

Edit: Quick look into my PC's ARP cache shows me that dSploit sometimes fails at ARP-Spoofing. About half of the the time I activate a function in MITM, the ARP cache on my PC does not change which results in the attack having no effect. Sometimes the ARP spoofing works and then all attacks work. I have no idea which fault this is, my PC's or dSploit's. WiFiKill however always manages to poison my ARP cache so I guess there is some problem with dSploit?
[Android Apps and Games] esc0rtd3w:
awesome project! checking it out now :good:
[Android Apps and Games] HulkSmashBurgers:
Replace image doesn't work for me. When I enable it Firefox stops loading pages.
[Android Apps and Games] wpra3:
I'm running it on my galaxy s3 i9300 (official JB + siyah kernel)

Most of the stuff doesn't work for me, the only thing that work are kill connection, redirect (very slow), and simple sniff on MITM section

My router is 2wire-2701HGV-W

However the Packet Forger is one of the best TCP/UDP packet transceiver THANK YOU VERY MUCH FOR THIS!!!

I'm working on a microcontroller project that is waiting for a TCP/UDP packet in order to do something, this app is really the best for testing!

Since this app can route all the traffic to the host device, why don't you add a bandwidth management tool to limit those network hoggers :D
[Android Apps and Games] ArmedandDangerous:
Installed it on my phone, HTC One X, ViperX2.7.1 ROM, Faux's Kernel. Launching the app I get 3 targets, one's a network subnet mask, another is my router, and 3rd one is my own device, I've tried everything there is to try but I can't seem to sniff my own password from my desktop that is connected to the same WiFi network. I can't even see my desktop from the app. Am I doing something wrong here? :)
[Android Apps and Games] nikant:
got the same problem as I described in previous page.. I think evilsocket is looking into it among others..
[Android Apps and Games] 6d21otb:
It's a known issue and currently about to be fixed, see my posts and evilsocket's replies :)

It will soon be solved I guess. I had another thought btw that it might be the fault of the specific su binary implementation/version that doesnt provide the envar to processes correctly... anyway need to check this tomorrow Im tired as ****
[Android Apps and Games] ArmedandDangerous:
It's weird cos droidsheep doesn't work either, but on my old trusty Desire Z, it still works perfectly fine. I think I read long ago it had to do with access to the hosts file, I might be wrong.
[Android Apps and Games] EdgaBimbam:
Amazing app, working on galaxy note 2
[Android Apps and Games] Mr.Krulez:
Rebumping the question XD
[Android Apps and Games] evilsocket:
SNMP network activity is normal if you have an UPNP router, so don't worry ;)

Known issue.

Known issue, bandwidth management is a work in progress :)

Known issue.
[Android Apps and Games] rirozizo:
i just tried it on Chrome, and IE... and some features didn't work:

image replacement.

password sniffing.

custom filter.
[Android Apps and Games] evilsocket:
Ok, i did some research and i'm starting to understand ... simply, some kernels support LD_LIBRARY_PATH, some don't ... so even setting this environment variable your kernel can't find where needed libraries are located .

I think the only solution is to precompile statically linked binaries, so there would be no library dependencies ...
[Android Apps and Games] Mr.Krulez:
No wait is not my router but is the university router and i was testing if someone can retrieve my password when i'm using the uni net but i didn't understand if it is possible with this data
[Android Apps and Games] evilsocket:
Absolutely not, this is simply a broadcast request that someone sent to discover router UPNP capabilities, that's all ... you should worry about http/imap/etc protocols :)
[Android Apps and Games] Thorbear:
java.net.socketexception

Hi, great idea and i really wold like to use it, BUT all i get is the: java.net.socketexception error when i try to run the app..

I have a galaxy S3 gt-i9300 with latest stock ics (4.0.4) and rooted, ofc.

when i looked through the thread i saw one previous S3 with problems but he/she at least got the app to start.

so is there any hope to get it up and running for me?
[Android Apps and Games] evilsocket:
logcat please
[Android Apps and Games] Mr.Krulez:
But since i was in the sniffing password mode... what's that mean?
[Android Apps and Games] evilsocket:
nothing, trust me, it's only an informational message that someone tried an SNMP discover on your network, that's all.
[Android Apps and Games] sotoskawasaki:
Could someone please direct me to the full busybox installation? Thank you!
[Android Apps and Games] Mr.Krulez:
So evilsocket in your opinion is still possible to sniff password on that network? or i will always get that type of message?

Thanks for all the answer and the optimus work on my local net at my house the sniff password work flawlessy... and i may need to change something about that...
[Android Apps and Games] evilsocket:
If dSploit can intercept SNMP messages than it can intercept everything, so yes, it is theoretically possible :)
[Android Apps and Games] Mr.Krulez:
I will try other time ... but the application on the uni net is a bit unstable (sometime it disconnect, and i don't know if they ban me from the network or is the application fault)

The uni use a 802.1 ca enterprise certificate don't know if this info is useful XD
[Android Apps and Games] evilsocket:
It's a network issue, not a dSploit issue :)
[Android Apps and Games] cuatrodosge:
"Killall binary not found"

Same error in Optimus 3D.
[Android Apps and Games] TheMasterIta:
Hello, i tried a MIMT, but it stopped the browsing on my target machine. can someone help me? thanks
[Android Apps and Games] metalwraith:
picked up alot of vulerabilities in my roomate's current computer... good ol Windows... lol They think it's safe just due to norton antivirus on it... :angel: But yeah, later on today I'll fire up virtualbox and give it a shot on XP Pro I have in that.
[Android Apps and Games] UEman:
Infact they could be safe if norton antivirus has an anti-spoofing feature. I know that some antiviruses have that.
[Android Apps and Games] metalwraith:
Just looked on symantec's site.. it shows it's only available on the enterprise level. I believe this is what you meant?

http://www.symantec.com/security_response/glossary/define.jsp?letter=a&word=anti-mac-spoofing
[Android Apps and Games] UEman:
Exactly. Some routers are having some options against arp-spoofing, too. However i don't turn them on because i love messing around with arp-spoofing.
[Android Apps and Games] shinkeel:
Great

Very great evilsocket ( i following you from years ago ( i'm italian too ) )

i like plugins idea, this provide modular framework like metasploit, good work!

but i've some problem with MITM and Portscanner

but this is good enought , this can be surely best

Complimenti and goodluck for your work, thanks
[Android Apps and Games] waiters:
Any way to incorporate something like wifi pineapple.. Where our phone will pretend it's any access point a pc is asking for and let us capture packets?
[Android Apps and Games] LEGOracer69:
feel like a hacker :D
[Android Apps and Games] evilsocket:
You are talking about a rogue ap, and yes, i guess it could be easily implemented in future releases :)
[Android Apps and Games] acedexplorerABL:
b-tester here :highfive:

Htc Explorer CyanogenMod9

a bit slow scrolling own the menus and very rarely hangs for a while... :angel:

but the features are working awesomely! :)

+1:good:
[Android Apps and Games] evilsocket:
great! i will optimize the whole thing before the stable release :)
[Android Apps and Games] MegaHz:
@evilsocket also i've noticed that it pops up a message like "dploit granted superuser permissions,," for every process running..
[Android Apps and Games] evilsocket:
It's been said hundred of times, it's normal ... please before creating a new post, use the search function.
[Android Apps and Games] evilsocket:
1.0.19b is out!

Changelog:

Fixed issue #54 : Make vulnerability finder font size smaller.

Fixed issue #49 : NullPointerException on MITM.setStoppedState.

Fixed issue #52 : MITM filters don't work the first time.

Fixed issue #50 : IllegalStateException on MainActivity ( TargetAdapter ).

Fixed issue #45 : Implement traceroute module.

Traffic redirection improvement.

Solved an issue causing the main task to lock while checking for updates.
[Android Apps and Games] defconoi:
Still having issues finding hosts and scanning open ports, this IP is my dd-wrt router that has telnet,ssh and port 80 open:
[Android Apps and Games] EdgaBimbam:
No problem here
[Android Apps and Games] evilsocket:
Guys if "Fixed issue #NN: No alive host found and no open ports" it's not written in the changelog list, what's the point on repeating the same thing again and again and again ?

This is a known issue, probably not a network issue but that thingy with LD_LIBRARY_PATH which seems a kernel related bug ... i'm trying to fix it.

As my signature says, before asking anything about dSploit, PLEASE check if it's not already in the issue/todo list.
[Android Apps and Games] Thorbear:
http://dl.dropbox.com/u/35805860/XDA/logcat.txt
[Android Apps and Games] evilsocket:
It seems the same as this bug ... are you on ipv6 ?

May i have your interfaces details ( even on PM if you prefer ) ?

adb shell
netcfg
[Android Apps and Games] loop4444:
Seems cool,will test and report back.
[Android Apps and Games] evilsocket:
Tnx :D
[Android Apps and Games] loop4444:
everything works. check my sig for details about my setup. anyway, it was not able to penetrate much of my network (im sys admin for a livin) but thats exactly what i expected it to do. interface os clean and sleek i shld say, and it actually works nice on poorly proteced networks (like my neighbour's for example)

anyway,nice little app. props.
[Android Apps and Games] evilsocket:
great, don't be too cruel on your neighbour !!! :angel:
[Android Apps and Games] loop4444:
hes a noob and he deserves it.

he still has almost ALL of his ports open cuz he tryin to host winamp radio :)

your app picked up his ports,fair enough for me :)
[Android Apps and Games] evilsocket:
well then, go ahead and kill him !!!!
[Android Apps and Games] EdgaBimbam:
it is the best tool to show that people should be hired for their knowledge not because of friendship. I went to electronic shop, all tablets, phones were connected to open free wifi. So i have redirected them all to http://trololololololololololo.com/ and employee were running and shouting wtf wtf.... xD
[Android Apps and Games] evilsocket:
ahahahahhaah OMG next time PLEASE record a video of this XD
[Android Apps and Games] mDroidd:
Lol I did this @McDonalds, same story.

Me and my friends could still reach it (=faster) and everyone was like sighing and stuff :p

Rofl
[Android Apps and Games] evilsocket:
1.0.20b is out!

Changelog:

New :

#51 : Custom charset selection for the Password Cracker module.

#61 : "Open service with" feature in Port Scanner module.

xxx : Now your device and your router have default aliases set in target listing.

xxx : Nicer action bar background :P

xxx : Minor fixes

Fixed :

#60 : java.lang.RuntimeException on NetworkMonitorService ( VIBRATE permission required ).

#59 : java.lang.NullPointerException on it.evilsocket.dsploit.core.System.getAvailableSessionFiles.

#57 : java.lang.NumberFormatException: Invalid int: "9999999999999".
[Android Apps and Games] Shyael:
Newest version FC on my LWW 4.0.4 (20b).
[Android Apps and Games] lobedoc:
1.0.20b causes force close on HTC Desire, and Galaxy SII using JB 4.1.2
[Android Apps and Games] evilsocket:
yeah i know, trying to upload again :S
[Android Apps and Games] EdgaBimbam:
Yeh same here
[Android Apps and Games] evilsocket:
Should be fixed now :)
[Android Apps and Games] evilsocket:
Uninstall and manually download from here https://github.com/evilsocket/dsploit/downloads