yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] crystal eyes:
Before I post. I un-install dsploit. Restart my phone then re install dsploit 25b. I test it with my own router. It works, I test it with our wifi with radius server it works. Also to make a comparison I run droidsheep and droidsniff even though they have only sessions hijacking. I'm not saying that droidsheep/droidsniff have other module.

But right now I'm on a public wifi. I run dsploit and found nothing, It cant detect any clients so as to sessions hijacking. Then I run wifi kill to see if there are clients connected to the public wifi and confirm as many as 150 clients connected. I restart my phone and test dsploit again but noting works. So I run droidsheep and it works, I can hijack facebook accounts. Run droidsniff and still it can hijack a facebook account. So I'm not comparing dsloit with droidsheep. I'm just trying to get help what went wrong. And for your information I think dsploit is a lot lot better that droidsheep in terms of funtionality
[Android Apps and Games] evilsocket:
Just to be sure ( never say never :) ) when you run dSploit, do you select the router or the whole subnet as your target ?
[Android Apps and Games] crystal eyes:
You are wrong. The radius server is my server. I am connected to it and do browsing. Dsploit works with this wifi. What I'm trying to say is when I'm on a public wifi and test again 25b. I found nothing but on 23b I found clients connected only I think mitm does not work at that time. By the way this public wifi I'm talking about uses rukus wireless. But When I test droidsheep, it is working. So I'm wandering what went wrong and asking for help
[Android Apps and Games] ciao99:
the app restarts itself when i go in settings or select a target..i'm on cm9
[Android Apps and Games] evilsocket:
logcat plz
[Android Apps and Games] ArmedandDangerous:
I've found this to work at a much higher success rate with SuperSU instead of the regular SU installed. :)
[Android Apps and Games] riahc3:
What is your mobile phone and what version of Android are you running?

You dont see ANY clients? At the very least, you should see yourself.

I dont remember too much how DroidSheep works, but does it show IP addresses? If so, please post them.

Odd. Im on CM9 as well. Does it show a message similar to "Ive crashed but Im going to send a email to the dev"?
[Android Apps and Games] crystal eyes:
I want to select specific client but no clients detected so I select the subnet and test if mitm works and no sessions appear. But On my private router which is Belkin it works. I can see clients ( on your dsploit it means end points). And I can hijack my own facebook account.

I think on my router I dont find any problem. Also I tried dsploit on our wifi ( means my business wifi runs on raduis server), dsploit is working fine.

So I decided to test it a litter further. I went to a mall connect to their wifi and brows internet. Then exit my browser run dsploit and no end point detected even though I bring my laptop to make it sure. So i run droidsheep to see what went wrong will happend. I can hijack my facebook with droidsheep
[Android Apps and Games] riahc3:
+∞

Like I mentioned before (and I think evilsocket should too) this works best with SuperSU. As soon as I installed it, it worked almost always and instantly.

crystal eyes - Just to see since you see NO clients at all, would you mind installing SuperSU and see if you see clients?
[Android Apps and Games] evilsocket:
Well at this point i'm curious too ... i've never imagined that supersu was so much better than super user ... i wonder why :confused:
[Android Apps and Games] riahc3:
OK but the subnet is detected. Something is something :) How about router and yourself? (If the subnet, router and yourself are detected, this is a known issue)

---------- Post added at 01:02 PM ---------- Previous post was at 01:00 PM ----------

I think you should mention it in the OP; The performance and success rate of dSploit multiplied as soon as I installed SuperSU.

I imagine that its because you test your app against SuperSU instead of super user (reason why some bugs appear and disappear)
[Android Apps and Games] ciao99:
this is what happens when i try to go in settings..i hope this logcat is right
[Android Apps and Games] crystal eyes:
Ok this is when running droidsheep
[Android Apps and Games] evilsocket:
Yeah but technically speaking supersu and super user should do the same ... i just spawn a su shell, maybe super user requires way too much time to spawn in therefore causing the endpoint monitor to be super slow to detect alive hosts ... dunno, gonna test it.
[Android Apps and Games] evilsocket:
on dsploit, are you targeting the router or the subnet ?
[Android Apps and Games] riahc3:
OK, I can completely confirm that the sniffer breaks internet access on the IP you are sniffing against. Not too effective.

Id state this bug as critical.
[Android Apps and Games] crystal eyes:


Im on 4.04 with supersu
[Android Apps and Games] riahc3:
Small feature request: In "Password Sniffer", holding down a entry should allow options such as Copy, Delete, Save to..., etc

---------- Post added at 01:13 PM ---------- Previous post was at 01:11 PM ----------

Known bug :) This has been reported: Showing the subnet, your mobile device and the router.

EDIT: It was actually a ROM issue; The last person it happened to changed/updated his ROM and it worked.
[Android Apps and Games] evilsocket:
Could you PLEASE answer my previous question ?!?!?!?!!? are you targeting the router or the subnet ?!
[Android Apps and Games] ciao99:
whatever target i select the app restarts almost immediately!

i'm sorry my connection is so slow today! i'm connected with cellphone!
[Android Apps and Games] evilsocket:
I'm not talking to you, read the quoted user plz
[Android Apps and Games] riahc3:
crystal eyes, answer him. Ignore me, Im noone.....He is the dev. If you dont answer, he cannot help you.
[Android Apps and Games] crystal eyes:
First I targeting the subnet nothing happens. then try targeting the the router, nothing happened.

Only on this public wifi but on my business wifi and my private router dsploit is working
[Android Apps and Games] evilsocket:
Ok could you please do a little test for me ? Stop the network monitor using the option menu and try a manual scan with the two arros icon on the action bar ... this will probably take a LOT of time.

I'm afraid that on some versions of Android/Cyano/Kernels/gotta-understand-this-yet processes output is not sent to the caller in real time, but only when the command has finished its execution.

Considering you have a LOT of clients on that public network, it may take a lot of time before you can actually see any endpoint ... tnx.
[Android Apps and Games] riahc3:
Suggestion (if you want me to shut up for a while say so :P ) : The Redirect function

Currently the function is subtitled "Redirect all the http traffic to another address" but you can redirect other things like FTP and things changing the port number.

The function is so slow you can just say it doesnt work. But....how about a function being a "DNS Spoofer"?

Everytime someone goes to a webpage "www.google.com" the page uses the mobile device as the DNS server and whatever the page is it redirects it to the website (or its IP) that you put in as the address box of the currentl Redirect function.

I BELIEVE this is a lot easier to implement the method you are currently using (which I currenty do not know)
[Android Apps and Games] evilsocket:
I absolutely do NOT want you to shut up :D but it would be very helpful to me if you open your requests on the github issue tracker or i'm probably gonna forget them :(
[Android Apps and Games] riahc3:
So thats what those two arrows are for :P I thought it was just a refresh!

Suggestion for the green plus: Be able to input a MAC address.

---------- Post added at 01:27 PM ---------- Previous post was at 01:26 PM ----------

Will attmpt :)

---------- Post added at 01:43 PM ---------- Previous post was at 01:27 PM ----------

Sorry for the noobish question, but I downloaded aLogcat and it has a filter: I put in dsPloit but I really dont see relevent information. Is that enough for the logcat to send you or should I send more or filter by something else?
[Android Apps and Games] evilsocket:
do not use the filter, send me the whole logcat
[Android Apps and Games] ArmedandDangerous:
This is droidsheep on my Desire Z, and this is how it shows IP. Droidsheep doesn't work on my HoX though /:
[Android Apps and Games] crystal eyes:
Ok thanks maybe theres a prblem with my phone. I will factory reset my phone and check again. have to go have to go now. Tomorrow I'll try to get in here again and test my phone.

Yes on this wifi lots and lots of connected clients (about 200 plus now as I scanned) and so with my business wifi ( as many as 200 plus also). But on my business wifi dsploit works, on this public wifi its not.

By the way thanks for the help
[Android Apps and Games] evilsocket:
thanks to you for testing ;)
[Android Apps and Games] metalwraith:
Scary what people are watching while at the laundromat..... mma fights is one thing that's cool. But adult sites...sheesh... lol no class....
[Android Apps and Games] crystal eyes:
This are on my business wifi. Almost 200 clients connected
[Android Apps and Games] crystal eyes:
And this from droidsniff.. (all on my business wifi)
[Android Apps and Games] riahc3:
Ran out of battery :( Couldnt get that logcat for you sorry.......

---------- Post added at 04:20 PM ---------- Previous post was at 04:05 PM ----------

BTW, was seeing your github.........

Is this your first version Java (Android) project?
[Android Apps and Games] MegaHz:
hey @evilsocket check this strange thing:

the newest version that i upgraded through the previous version, was not capturing any passwords, i was telneting to a local router and nothing. Also session hijacking was not warning, not even http.

i installed the oldest 1.0.24b and password sniffing worked flawlessly, also session hijacking worked (for xda-dev forum).

then i upgraded to 1.0.25b and password sniffing was still working, but session hijacking still not working.

i enabled debug and captured the following:

java.net.SocketException: Socket closed

at libcore.io.Posix.accept(Native Method)

at libcore.io.BlockGuardOs.accept(BlockGuardOs.java)

at java.net.PlainSocketImpl.accept(PlainSocketImpl.java)

at java.net.ServerSocket.implAccept(ServerSocket.java)

at java.net.ServerSocket.accept(ServerSocket.java)

at it.evilsocket.dsploit.net.http.proxy.Proxy.run(Proxy.java:117)

at java.lang.Thread.run(Thread.java)

java.net.SocketException: Socket closed

at libcore.io.Posix.accept(Native Method)

at libcore.io.BlockGuardOs.accept(BlockGuardOs.java)

at java.net.PlainSocketImpl.accept(PlainSocketImpl.java)

at java.net.ServerSocket.implAccept(ServerSocket.java)

at java.net.ServerSocket.accept(ServerSocket.java)

at it.evilsocket.dsploit.net.http.proxy.Proxy.run(Proxy.java:117)

at java.lang.Thread.run(Thread.java)
[Android Apps and Games] EdgaBimbam:
+111111111111111 btw works for you change pictures feature at v25? i have no problems with v24 while with v25 it isnt working
[Android Apps and Games] riahc3:
Other than slowness, session highjacking is working on the latest version: Google, Facebook, XDA, etc....

Is it me or are a lot of users with problems using a Samsung Galaxy Note?
[Android Apps and Games] EdgaBimbam:
i have galaxy note 2, but for me with 24v everything is working fine, with v25 not everything works.
[Android Apps and Games] riahc3:
Yes, I know but a lot have reports problems with v25b using a Note. In your case a Note 2....
[Android Apps and Games] :
I can confirm this. SuperSu makes dSploit runs way faster. 2 Builds ago it was fine, but them it became a bit "slowly" after switching to SuperSU everything is faster again.

I dont think this problem is related to dSploit, seems like Super user is a bit slowly running paralel/or spammed requests.

I was able to replicate this "laggy" of super user by just spamming su requests.
[Android Apps and Games] Ruzzah:
Why have you ignored my posts, I posted a bug that should be fixed in this version, and you haven't responded.

http://xdaforums.com/showthread.php?p=33098100#post33098100

Also please update sorting everytime data is updated on the bandwidth sniffer.

---------- Post added at 04:23 AM ---------- Previous post was at 04:21 AM ----------

From what I can tell, dSpoit is not using one connection for root access, and is constantly requesting access because its reopening commands. :(
[Android Apps and Games] riahc3:
Submit a issue in github. Its impossible for him to reread the whole thread.
[Android Apps and Games] evilsocket:
Not my first java project, but my first android project :)

That exception is normal ( it's happening when you stop a mitm module ), probably your installation has something weird, try to completely remove the app and then reinstall it.

Gonna check if i can work around this issue with super user.

First of all take it easy, i'm not ignoring you, it's you ignoring the fact that your issue was already submitted by something like dozen of users ... what you mean by update sorting ?! It's the user who has to select the sorting method he wants O.o

As i told hundred of times, the super user requests are normal, you can disable the toast notifications in the super user settings ... did you ever read the FAQ or checked the issues on github ?
[Android Apps and Games] purvish10:
Phone reboots when any attack is launched
[Android Apps and Games] purvish10:
Never mind it works now, I dont know why it did that. :) Thanks anyways!
[Android Apps and Games] evilsocket:
lol ok ... weird :P
[Android Apps and Games] ciao99:
@evilsocket was my logcat helpful?
[Android Apps and Games] evilsocket:
Thanks, let me know :)
[Android Apps and Games] ilMessia:
When i open 1.9b on my nexus, i get this:
[Android Apps and Games] evilsocket:
Yeah it's a known issue of 1.0.9b, gonna fix it in the next release, just restart the app and everything should be fine :)
[Android Apps and Games] Skar3:
excellent application, very light compared to many other similar :D

Ottimo lavoro!
[Android Apps and Games] evilsocket:
Thanks :)

Grazie :)
[Android Apps and Games] black_mambo:
Good Job!

Paolo ;D
[Android Apps and Games] diegosps:
Good job.

I tested it in one coorporation network with some cisco hardware. The network does also have a proxy.

The target was my friend's S3. I have a htc one x

In MITM functions, only the Simple Sniff worked.

Kill Conections, Password & Cookies, Replace images didn't work.

I didnt have time to test the other functions. I will test them later.
[Android Apps and Games] evilsocket:
I saw that in some kind of networks those kind of attacks don't work, anyway gonna check this, thanks.
[Android Apps and Games] evilsocket:
1.0.10b is out! ( Please download it manually from here, uninstall the old version and install the new apk, a bug in the update manager caused the auto update process not to work ).

Changelog:

Fixed issue #15: App crash when using network sniffer.

Fixed issue #19: Auto update issue due to wrong keystore.

Fixed an issue on update manager version code generation.

Fixed issue #23 : java.lang.OutOfMemoryError on StreamThread

Fixed issue #20 : ENOENT (No such file or directory)
[Android Apps and Games] pspunderground:
Dayum, nice job! I quickly tested this on my home network, and it worked wonderfully.
[Android Apps and Games] stkfigure:
_________________________________

Hit thanks if I helped.

@the_stkfigure on twitter.

Running the Blade with CM10 KonstaKANG.
[Android Apps and Games] ilMessia:
When i select a device in the main menu, i can see the new menu appearing only for a few moments, and then the app comes back to the main menu and restarts "initializing"
[Android Apps and Games] evilsocket:
ahahha i see you're having some fun there! :D
[Android Apps and Games] evilsocket:
Gonna check the crash reports
[Android Apps and Games] evilsocket:
Ok i'm gonna check, thanks
[Android Apps and Games] evilsocket:
1.0.11b is out.

Changelog:

Fixed an issue causing global static objects to be deallocated if one of the leaf activities ( modules ) crashes.

Implemented settings menu ( fixed issues #21 and #22 ).

Download it!
[Android Apps and Games] speedracerbubba:
Works great on our network at work and provided me with plenty of laughs being juvenile by changing the word Apple to penis and looking at Wikipedia.

I was able to show my co-workers why they want to use https when possible, too.

The more I learn about spoofing and the like the less I do anything on public Wi-Fi.

One question, what is the sharp application referenced in the app?
[Android Apps and Games] evilsocket:
Eheheheh you know what ? I'm working on HTTPS support for 2.0 release :D

Anyway, the Shark app is this one, and the reader here :)
[Android Apps and Games] evilsocket:
Mmmm seems like the app has issues attaching to the system wifi manager, this is kinda strange, do you have some kind of software like app armor which disables privileges for applications ?

It would be useful to have your logcat ...
[Android Apps and Games] purvish10:
Yah :) Also it would be nice to have SSL Strip integrated in dsploit and if there was an option to chose a browser when session hijacker launches because the default browser wont work with websites like facebook but Firefox does :)
[Android Apps and Games] evilsocket:
i'm still checking it
[Android Apps and Games] evilsocket:
sslstrip is already integrated, and hijacker browser is not the default one, but one builtin inside dsploit ... and for me it works pretty well with facebook.
[Android Apps and Games] ciao99:
ok..if you need something just ask
[Android Apps and Games] MegaHz:
I just did, password sniffing works flawlessly but session sniffer does not..

not even on http.

wait, during the sniffing, the mobile opens ports 8081 and 8080 ?
[Android Apps and Games] MegaHz:
yeah but the ports are open before it finds open ports? or it opens them when you click on a discovered session?
[Android Apps and Games] evilsocket:
The ports are open when you start a mitm module and closed when you stop it.
[Android Apps and Games] MegaHz:
well it doesn't seemm to listen to 8081:

MegaHz$ telnet 192.168.1.102 8081

Trying 192.168.1.102...

telnet: connect to address 192.168.1.102: Connection refused

telnet: Unable to connect to remote host

MegaHz$

where in 8080:

MegaHz$ telnet 192.168.1.102 8081

Trying 192.168.1.102...

telnet: connect to address 192.168.1.102: Connection refused

telnet: Unable to connect to remote host

MegaHz$

it listens to.

im in MITM > Session sniffer and i press Start.

---------- Post added at 12:22 AM ---------- Previous post was at 12:08 AM ----------

sorry, i have reinstalled dsploit latest version. trying to figure out the problem with session hijacking. are there any tests that i should perform to make sure it's not the rom or any other factor?
[Android Apps and Games] evilsocket:
try changing the ports
[Android Apps and Games] evilsocket:
1.0.26b is out!

Changelog:

Double pressure on back button will close the app ( with confirmation ).

Added progress loader in changelog dialog and hijacker web view.

Implemented HTTPS redirector ( redirects client from direct https requested url to http, still experimental ).

HTTPS redirector port now in app settings.

If wifi connection is not available on startup, dSploit keeps checking for a connection event and reinitialize once connected without the need of being restarted.

Some hijacker fixes.

Proxy optimization with a DNS cache manager.

Fixed issue #87 : Wrong domain in session hijacker.

Implemented stream gobbling ( should fix many "freeze" issues and hopefully super user issue ).

Fixed issue #93 : Glitch with "Start Network Monitor" and "Stop Network Monitor" text/function.

Fixed issue #80 : Save/Load sessions to/from sdcard in hijacker module.
[Android Apps and Games] Airjake:
Problem Parsing?

When I try to open the package it says There is a problem parsing the package.

How do i fix this?
[Android Apps and Games] evilsocket:
I've just downloaded it ( to test the update ) and it works ... try to re download it.
[Android Apps and Games] metalwraith:
Oh the fun... the runt at home has been disprectful lately.. while making his dinner tonight... i knew he was sneaking watch movies on his mom's tablet.. i killed the internet @ the router.. he comes out whining the internet wasn't working... i was trying so hard not to laugh my a** off...
[Android Apps and Games] evilsocket:
you are so evil my nick could be prettysocket if it wouldn't be gay
[Android Apps and Games] metalwraith:
lol To mess with him like that is more fun, than trying to mess with him on practical jokes... :silly:
[Android Apps and Games] evilsocket:
the more inconscious they are, the funnier it gets :highfive:
[Android Apps and Games] metalwraith:
Right.. Too bad I had no way to remotely reboot it unfortunately his mom's transformer isn't rooted or anything like that.. she fears it'll get f'd up... hogwash I say...
[Android Apps and Games] evilsocket:
you are starting to ask too much from your device :D
[Android Apps and Games] metalwraith:
I meant remotely reboot it from my desktop pc or netbook. ;)
[Android Apps and Games] evilsocket:
this you will need my friend http://beefproject.com/

( Subnet -> MITM -> Script Injection ... if what i mean you know )
[Android Apps and Games] metalwraith:
Nice... Thanks. Shall check it out. ... desktop pc running Debian... virtual box running Ubuntu just so i have access to my files on Ubuntu One... And a virtual session of XP in VBox as well... Then my netbook is just full Win 7... time to figure out which one to put it on.. decisions, decisions.
[Android Apps and Games] MegaHz:
hi,

thanks for the new release, i am testing session hijacking, it stucks at "loading page" after you select a session.

i press the back button of the phone and does not stop loading the page.

i need to kill dsploit from running to exit.
[Android Apps and Games] julle131:
If you want the bug to be fixed, you need logcat. Also, creating issue on github might help getting this fixed.
[Android Apps and Games] MegaHz:
yeah definitely, but with the rom that i have installed (viper for one x) when i run logcat i get "cannot open device /dev/log/main". anyway i am asking to see if anybody else has the same problem as me.

when you click a session hijacked website it says "loading page" and you cannot get out of there.
[Android Apps and Games] fishfuzz:
Awesome

Sent from my SPH-L710
[Android Apps and Games] metalwraith:
Yeah, it was funny, he thought it was just connection issues.... ;)

Still waiting to cut it off on her when she pisses me off royally.... while she's doing her online classes... *evil grin*
[Android Apps and Games] riahc3:
Its intention is not that...........even though it is funny :P

Congrads evilsocket on reaching 100 pages :)

---------- Post added at 09:12 AM ---------- Previous post was at 09:11 AM ----------

Going to test the latest version and see if some glitches exist or not.

---------- Post added at 09:13 AM ---------- Previous post was at 09:12 AM ----------

The "Stop Monitor Network" and "Start Monitor Network" text glitch still exists....

---------- Post added at 09:16 AM ---------- Previous post was at 09:13 AM ----------

Im not a "fan" of how you personally implemented the "Exit" function but its your program and your choice :)
[Android Apps and Games] evilsocket:
Yeah i've found that bug just 3 minutes after releasing the 26b, gonna fix.

omg ... ok gonna check it.
[Android Apps and Games] MegaHz:
another question:

password sniffer can also work in http applications? for example a website login?
[Android Apps and Games] evilsocket:
yep