yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] evilsocket:
Give me a concrete example of what you'd like :)

Known issue, gonna fix as soon as i can reproduce this.

Did you try to reboot your device ? Theoretically, you should flush both your arp cache AND your router arp cache ....
[Android Apps and Games] ron_hyatt:
good app. thanks
[Android Apps and Games] Geronimo.USMC:
I'm beta testing for you, as well.
[Android Apps and Games] Dr.69:
If you use SSLStrip the user doesn't get the message.
[Android Apps and Games] evilsocket:
Yes but sslstrip is not real ssl spoofing, it just forces the connection to be http instead of https and make the client think it's https ... sslstrip works only if the server has both http and https with the same service, therefore, honestly i prefer to implement real ssl spoofing with a certificate warning ( which is ignored most of the times anyway ) rather than a simple transparent proxy redirection which doesn't work most of the times.
[Android Apps and Games] chrlswltrs:
One thing I have noticed is that when I set an alias for a device it doesn't stick once the app is exited. When I open the app again, all the aliases are erased from the previous session.

That is how I found this app. I had been waiting for a year for something like this ever since WiFi kill quit being developed for ICS. And, this is so much better and replaces several apps. :D

I use AdFree. I despise ads! I ALWAYS buy paid versions of apps I use if available though, because good devs deserve to make money. If you do put ads in the app, can you please provide a way to remove them through some type of donation?
[Android Apps and Games] defconoi:
Ettercap :-p
[Android Apps and Games] evilsocket:
This is normal, if you want your aliases to be persistent just press the option key and Save Session in dSploit :)
[Android Apps and Games] mathias_leb:
source code

do you used the droidsheep source code for the MIM?
[Android Apps and Games] evilsocket:
I mean, are you sure would be confortable manipulating sessions in real time on a smartphone or a tablet with a software keyboard ?
[Android Apps and Games] evilsocket:
No i didn't, why ?
[Android Apps and Games] lncoln:
No problem. I love apps like this. They help me learn more about android and Linux.

asstastic!
[Android Apps and Games] DeathCzar:
Well that explains a lot. I'll keep testing it and report if I find something.
[Android Apps and Games] squigs:
Hey man, great to see more development towards this area, I personally feels mobile devices are great tools for professionals in this field.

Can you please give us some key comparesmants to the zAnti app? (http://zantiapp.com/anti.html)

(I'm of course not critiquing in any way, I warmly welcome more and more development in this field, I think there isn't nearly enough going on. this is just for curiosity).

I will happily join testings.
[Android Apps and Games] evilsocket:
Well zAnti is a commercial software, i think that even only this would be enough to develop something new ... zAnti MITM modules ( except for the image replacer which is almost identical ) are implemented as "proof of concepts", dSploit modules are fully functional.

Most of the zAnti features ( such as transparent proxying and traffic manipulation ) are delegated to binary tools compiled for ARM architectures, dSploit tends instead to integrate those functionalities, for instance it has its own builtin java transparent proxy and traffic manipulator ...

etc etc etc etc ... when the first stable release will be ready, i'll do a serious comparision with products like zAnti :)
[Android Apps and Games] squigs:
You got me there, absolutely true.

So, basically the entire app, module + infrastructure is developed in java? don't you have to resort to NDK for low level thingies? (arp poisoning and WIFI wep cracking would be two immediate examples I would think of, but I guess there are many more)

Also on the same topic, are you able to borrow code from related projects (granted respecting the license)? (nmap, metasploit etc)
[Android Apps and Games] evilsocket:
Obviously there are binary tools in dSploit too, ( /assets/tools.zip ) such as nmap, ettercap, and so on ... but everything that could be implemented in java was implemented in java, this to obtain a better control.

To do an example, with the builin java transparent proxy, there are practically no limits to filters you can apply, with zAnti you are very limited to what the binary tool can do and which functionalities are handled by the java counterpart/parser/spawner/whatever.

What you exactly mean with "borrow code" ? I have precompiled arm versions of tools and libraries for simplicity, distributing the code of everything would be really hard, to maintain especially, but everything is released under GPL, so i think i'm ok with licenses ... correct me if I'm wrong ^^
[Android Apps and Games] squigs:
My question was under the assumption you don't use NDK... I was asking if/how you could borrow code from other open source projects, but you clearly answered the question, thanks.

And AFAIK you are ok with the license.

Good luck with the project mate, I'll post my feedbacks.
[Android Apps and Games] evilsocket:
Thanks :)
[Android Apps and Games] evilsocket:
Just in case you are worrying about what data i can see from your crash reports, here it is a screenshot of the webpanel i've made to manage those reports, as you can see there's no private data ;)
[Android Apps and Games] MrFunman:
Hey guys, im new here, i have a Samsung S3 running BlackStar V3, can somebody help me installing this? thanks in advanced.
[Android Apps and Games] evilsocket:
Hi, just download this apk on your device and once the download is finished click on it to start the installation procedure.

Please make sure that your device is rooted and has a full busybox install before trying to run dSploit, or else it will warn you and just exit :)
[Android Apps and Games] krilov:
[ita]bella chicco! app parecchio intrigante te la testo sul Galaxy S1 ;)

[eng] intriguing app ...i'm going to test it on ma newb galaxy S1
[Android Apps and Games] evilsocket:
[ita]Ottimo, spero che non ti dia problemi :P[/ita]

[eng]Great, hope you won't have any problem :P[/eng]
[Android Apps and Games] codesplice:
Doing some light testing on my Galaxy Nexus this morning, seems to work pretty well. Keep up the good work!
[Android Apps and Games] evilsocket:
Wow that's cool, i'm receiving a lot of crash reports ( from 2.3 devices most of them ) since i posted here and i was starting to think that dSploit only worked on my Galaxy Nexus and Nexus 7 XD
[Android Apps and Games] codesplice:
I believe I read recently about modified broadcom drivers that enabled promiscuous mode on the GNex chipset - does that have anything to do with this?

So far most of the tests I've done have been successful. Though I did have a user come to me complaining that he was receiving a message about a website being hacked this morning - seems the MITM hacks work! It's fun being the company's BOFH ;)
[Android Apps and Games] evilsocket:
Ahahahahahha funny, but i'll propose something else, try to imagine to use the script injection module with something like the Beef framework ( http://beefproject.com/ ) ... C&C the whole network!!! :D

Anyway no, dSploit uses ettercap + iptables to handle traffic forwarding ...
[Android Apps and Games] codesplice:
I like the way you think ;)

PS - still haven't broken the app yet, which is really quite impressive. I'm usually pretty good at that. I've shared a link to this thread on my little G+ thinger so maybe some other folks will come along.
[Android Apps and Games] evilsocket:
Happy to hear ( read ) that, beta testers are never enough, thanks :)
[Android Apps and Games] evilsocket:
Version 1.0.9b is out, hopefully fixing many issues on 2.3 devices :)

https://github.com/evilsocket/dsploit/downloads

Changelog:

Fixed issue #16 : UI defect on mitm custom filter

Fixed issue #18 : Invalid BigInteger when a session with a custom ip address without mac is restored.

Fixed issue #15 : java.lang.RuntimeException: Unable to start activity ...

Fixed issue #14 : java.lang.RuntimeException: Unable to start service ...
[Android Apps and Games] Dr.69:
Yes, you're right. But browsers these days don't just warn you, they make you make an exception for this. From my experience most people don't understand what to do and just exit the browser. Furthermore, I tried to sniff open networks with ettercap alone and with ettercap combined with sslstrip, the second method gave a lot more accounts. Maybe we can have both options.
[Android Apps and Games] evilsocket:
Sure, in a future release i want to give the most complete support with SSL :)
[Android Apps and Games] :
Awesome app, im a network Admin. Testing your software on 300+ machines network. It's working really fine so far.
[Android Apps and Games] evilsocket:
Great, your testing contribution is really appreciated :D
[Android Apps and Games] rirozizo:
i definitely wanna test that... could you make a "beta" release wiith new yet untested features?

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] mathias_leb:
their code could help you, it works perfectly for retrieving facebook, youtube, yahoo, ... packages
[Android Apps and Games] evilsocket:
This is a beta release, and i have to focus on bug fixing first of all :)

Yeah thanks :)
[Android Apps and Games] 6d21otb:
First of all, very cool app!

But it doesnt seem to detect the network subnet mask correctly.

For example if your IP address is 192.168.0.235 and your subnet mask is 255.255.255.248 (that is 29 bits) then your subnet ID is 192.168.0.232 and your host address range is 192.168.0.233 - 192.168.0.238 with 192.168.0.239 being your broadcast address.

The first row of the dSploit home view should therefore correctly be 192.168.0.232/29 but it incorrectly displays 192.168.0.0/29 and further doesnt detect all the active hosts in the network, nor does any MITM attack on specific detected hosts nor the entire network work. (I guess because it uses the wrong network ID 192.168.0.0 and wrong address range and wrong broadcast address internally). Maybe you have any idea what causes this and how to fix it?

Thanks
[Android Apps and Games] evilsocket:
Thanks for bringing this out, the subnet is calculated like this:

private static int countBits( int n ){
int bits, i;

for( i = 0, bits = ( n & 1 ); i < 32; i++, n >>= 1, bits += n & 1 );

return bits;
}

...

public String getNetworkRepresentation( )
{
int bits = countBits( mInfo.netmask );

return ( mInfo.gateway & 0xFF) + "." + (( mInfo.gateway >> 8 ) & 0xFF) + "." + (( mInfo.gateway >> 16 ) & 0xFF) + ".0/" + bits;
}

So as you can see, there's always a ".0/" at the end, which is wrong ... but i don't know how to calculate the last octet XD

Anyway, issue opened on this, thanks again :)
[Android Apps and Games] defconoi:
I have the same issue, no hosts are scanned/discovered other than router and own device in latest build, busybox is latest
[Android Apps and Games] thehighlk:
Yes i rebooted but my phone still doesnt connect to other wifi networks. I can see them but it wont connect. I cant connect to my mobile network or even bluetooth. But i can still text and make calls.
[Android Apps and Games] riahc3:
It seems it doesnt detect the submask correctly yet. Patience young grasshoper....

---------- Post added at 08:44 PM ---------- Previous post was at 08:42 PM ----------

Im NOT sure if I understood correctly and/or if this is what you are looking for:

http://stackoverflow.com/questions/...bnet-mask-details-in-android-programmatically
[Android Apps and Games] evilsocket:
Well in this case i don't think it's something that dSploit caused O.o
[Android Apps and Games] evilsocket:
Nope, that stackoverflow thread ( which i've already seen ) talks about netmask ( he incorrectly calls it subnet mask but he prints the netmask ) :(
[Android Apps and Games] 6d21otb:
I think this should fix it:

public String getNetworkRepresentation( )
{
int bits = countBits( mInfo.netmask );
int networkID = mInfo.gateway & mInfo.netmask;

return ( networkID & 0xFF) + "." + (( networkID >> 8 ) & 0xFF) + "." + (( networkID >> 16 ) & 0xFF) + "." + (( networkID >> 24 ) & 0xFF) + "/" + bits;
}

I will test it if you can publish a new built.
[Android Apps and Games] evilsocket:
It seems to work on my network ( but i have a standard 192.168.0.1/24 ), i don't know how to thank you!!!! Gonna fix some other issue then i will release a new version :highfive:
[Android Apps and Games] thehighlk:
How is it not? Thats the only thing that has changed on my phone.
[Android Apps and Games] evilsocket:
dSploit arp poison is router specific, so you should be able to connect to other networks with no problems at all.

dSploit does not handle/touch/modify mobile network settings.

dSploit does not handle/touch/modify bluetooth settings.
[Android Apps and Games] 6d21otb:
Great! You dont have to thank me, I have to thank you for the cool App! :laugh: OK I will be glad to test the new version :highfive:
[Android Apps and Games] :
Just tested this part of code on a Dummy android app. It's working.
[Android Apps and Games] admiralspark:
Well, all droidsheep does is provide an interface for arp spoofing, and an easy-to-use browser built in for using the information caught right away. For instance, Facebook logon cookies can 2-tap open to someone's facebook page.

It's cool for the effects, I guess, but not that hard to do the same thing with a few more steps on evil's app.

By the way, kudos to you for developing this. I also use a GNex and have been having very few issues with the app. I might look into enabling some other kernel options to see if I can add some more functionality from the GNex phones, but this is excellent as it is!
[Android Apps and Games] evilsocket:
I'm gonna implement 2-tap session hijacking then :good:
[Android Apps and Games] admiralspark:
You're the man! :highfive:
[Android Apps and Games] Wazza26:
evilsocket - Looks like your program is very much in demand! Well done! When you hoping to release an update. Can't wait to test it out. :good:
[Android Apps and Games] thehighlk:
I'm just gonna reset and reflash my phone then I guess. Thanks for your time.
[Android Apps and Games] evilsocket:
I'm sorry for this, but really dSploit can't be the cause of what happened...
[Android Apps and Games] Dr.69:
I've scanned my windows OS. My god, so many vulnerabilities. Glad I'm using Ubuntu most of the time.

evilsocket, thank you very much :)

One little question, can you make a feature to attack a range of hosts (or even to select only the hosts I want to attack).
[Android Apps and Games] evilsocket:
Multiple target selection will be implemented in a future release.
[Android Apps and Games] Dragery:
How do business wifi networks protect from MITM attacks? At my work, I'm able to go through the network gateway/router and gather any of the passwords being transmitted through devices connected to the wifi. I'm fairly new to actual infrastructure security so what would be a way to prevent/block this?

Thanks!
[Android Apps and Games] evilsocket:
There's no standard way to protect against arp spoofing ... many devices ( like cisco's ) have their own protection, or you have to use some arp watch daemon which checks every N seconds that the arp table is not malevolently changed.
[Android Apps and Games] Dragery:
Thanks! Also great work with the app. Aside from messing with my wife (oh boy did she freak out), this has made me very aware of some vulnerabilities around the office.
[Android Apps and Games] waiters:
Most newer routers will block (or have the option). Additionally, Kaspersky, symantec and other anti virus programs will stop arp spoofing attacks from happening.
[Android Apps and Games] devrruti:
Please consider to add the option to do various things at the same time if possible. Netspoof has this, so you can replace videos, images, words, searches... at the same time.

Sometimes you just want to mess with someone in all the possible ways, looking innocent and you are not looking at the attacked screen.

Maybe someone can make a page with feature requests, votes and discussions about the code involved. Too many things to do, I hope more people join you in git. Also you need a monument.
[Android Apps and Games] evilsocket:
As you said, so many things to do, so little free time i have ... i work all day, but when i come back home, i dedicate almost all of my free time to dSploit now ( a little bit for my girlfriend, friends and dogs too! :D ) ... i'll try do to my best :) :good:
[Android Apps and Games] DarkShadowMX:
I've been following the thread closely, i've been testing the app and everything seems to work out great =)

But the attacked network goes really slow when sniffing and doing MIM stuff... i'm assuming that's normal? Also, password sniffer doesn't seemed to work for me, i tried with IE logging into a FB account (without HTTPS) and nothing was captured.

Oh, and of course, great work here! =)
[Android Apps and Games] evilsocket:
Yes it is normal and, as it's been already said, facebook has a non standard login procedure ... anyway, i will try to fix this ;)
[Android Apps and Games] evilsocket:
1.0.18b is out!

Changelog:

Fixed issue #33 : Application.onCreate being called multiple times.

Fixed issue #32 : IllegalStateException: The content of the adapter has changed but ListView did not receive a notification.

Fixed issue #38 : Inspector module screen doesn't scroll up to see services off page.

Fixed issue #39 : Make the image replacer process other content types ( this means image replacing on CSS too !!! :D ).

Fixed issue #35 : No alive endpoints found.

Fixed issue #46 : Wrong subnet ( tnx to 6d21otb :highfive: ).

Fixed issue #43 : Redirect to specific ip/port ( new MITM > Redirect module available ! ).
[Android Apps and Games] Ulv123:
:)

Utility meaning "Applets" ?

Tnx for a great app and a great thread:cyclops:
[Android Apps and Games] evilsocket:
Yep, every applet
[Android Apps and Games] MegaHz:
new realease works awesome! Check if you can interprete the sql scan/injection tool "sqlmap" (written in python) which is great for sql pen-testing.
[Android Apps and Games] vpetrov:
Hello evilsocket,

Thumbs up for the great app.

Currently I am using version 1.0.18b, installed on android 4.0.4 | soft. number 2.17.401.2 on htc one x (tegra 3 version)| busybox ver. 1.20.2-Stericson installed in /system/xbin.

Unfortunately the password sniffing is not working on my device. I started sniff on specific host or network, generate traffic from the host to web server but the dsploit -password-sniff.log remains 0 Bytes. Also the redirect options is not working for me.

Could you please considering increasing the length of the passwords generated by the Login Cracker with at least two symbols. Also a big plus will be web forms addon for the Login Cracker.

So in my attempts to debug further why my pass sniffing does not work, I've enable the debug error logging.

I am sending you the debug log for further investigation.

Could you please tell me from where I can get "network sniffer like 'Sharp' for android" ?

Looking forward to see where this project will go!

Regards, Petrov !
[Android Apps and Games] DarkShadowMX:
Sorry,i thought it worked in a similar way like Faceniff or stuff like that, sorry :o

Can't wait to get home and try the new version =)

I'm assuming it's a typo and he meant "Shark", since a good google search for Sharp came up with nothing and there is a Shark for Root sniffer in the play store.
[Android Apps and Games] defconoi:
Latest version isn't detecting endpoints on Lan, same as before
[Android Apps and Games] clarity1:
Just grabbed this, looks great on CM10 nightlies. Sadly I'm on a client site all week and have nothing to test against so that will have to wait till next week.

Very interested in contributing as I've run out of my own ideas currently. Is there anything specific you need help with or want to implement?
[Android Apps and Games] renannery:
Samsung Galaxy SII Test

I tested in samsung galaxy SII with CyanogenMod 10 and worked perfectly!

Congratulations developer!

It's a amazing app!
[Android Apps and Games] riverstudd:
Incredible 2. Works great so far, only problem was with the update to .18. The OTA from the app itself didn't work when i tried it (a couple times). Had to just use the QR code. I hope it was something from my end, but I thought it was worth telling you
[Android Apps and Games] evilsocket:
I often use sqlmap so i know what you're talkin about, but that would need a python interpreter ... don't think will be ever implemented.

Will check ;)

Will check ( the nmap error is normal, i use the LD_LIBRARY_PATH env variable to start binaries correctly ) ;)

Can you code ? :D

From which version you were updating ?
[Android Apps and Games] mathias_leb:
display problem

I have some display problems when I launched the application, someone has already had this problem?
[Android Apps and Games] evilsocket:
screenshot and logcat please
[Android Apps and Games] klaydze:
Its a very nice and great app. However after selecting the target or even searching for open ports it always return none. Im using CM10 base ROM in my Nexus One.

Thanks

Sent from my Nexus One
[Android Apps and Games] riahc3:
Using latest version and on a linux box, it saw that VNC has a BUNCH of vulnerabilities so that part is working as well :)

Will do more testing....
[Android Apps and Games] killerdan56:
Dont....

Please dont add any ad's to this app of yours. Instead put an annoying message in start up asking to donate, then when u donate it will remove annoying message. And if you dont donate that you wait like 4 seconds or something to continue. Ad's = battery drain
[Android Apps and Games] evilsocket:
I don't have a paypal account :(
[Android Apps and Games] 6d21otb:
Maybe this helps:

# cd /data/data/it.evilsocket.dsploit/files/tools/nmap
# LD_LIBRARY_PATH=../libs:$LD_LIBRARY_PATH
# ./nmap 192.168.0.232/29
Starting Nmap 6.00 ( nmap.org ) at 2012-10-11 15:25 CEST
Target* nexthost(HostGroupState*, const addrset*, scan_lists*, int): failed to determine route to 192.168.0.232
QUITTING!
# ./nmap 192.168.0.235
Starting Nmap 6.00 ( nmap.org ) at 2012-10-11 15:26 CEST
Target* nexthost(HostGroupState*, const addrset*, scan_lists*, int): failed to determine route to 192.168.0.235
QUITTING!
#

:fingers-crossed:
[Android Apps and Games] evilsocket:
tnx, this evening i will check this out :good:
[Android Apps and Games] evilsocket:
Seems like a routing table issue anyway ... could you please check if your /proc/net/route is correct ?
[Android Apps and Games] 6d21otb:
Oh sorry, nmap now works from the adb shell! For some reason the wlan adapter on the device went to sleep or something after being idle and after unlocking the screen it now works:

# ./nmap 192.168.0.235
Starting Nmap 6.00 ( nmap.org ) at 2012-10-11 15:33 CEST
Nmap scan report for 192.168.0.235
Host is up (0.068s latency).
Not shown: 998 closed ports
PORT STATE SERVICE
23/tcp open telnet
80/tcp open http
MAC Address: 00:0F:66:00:00:00 (Cisco-Linksys)

Nmap done: 1 IP address (1 host up) scanned in 5.85 seconds
#

Weird that dsploit doesnt show the live hosts and a portscan on the gateway (192.168.0.235) returns nothing... I cant think of other diagnostics, please tell me which data I could provide.

BTW:

# getprop ro.build.version.release
2.3.3
[Android Apps and Games] evilsocket:
Mmmm maybe it's just a parsing issue of this piece of code, gonna check this evening ;)
[Android Apps and Games] evilsocket:
May i have your

nmap --max-retries 1 --max-rtt-timeout 250ms -sn -n -T4 --system-dns 192.168.0.232/29

output please ? :)
[Android Apps and Games] riahc3:
Not really. They can just be read from a file and shown statically. Even though they are ugly