yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] calisro:
Read and learn. Linux distributions like Kali are chock full of tools.
[Android Apps and Games] ody12:
Um. I couldn't find any like this one?
[Android Apps and Games] orangeisnon:
Hey, tux, evil, androguide, or anyone else working on this- my request has been up on GH for 19 days and hasn't received so much as a label. For the record, it's the only issue in the past two months with no label, and four others have been posted since mine. Really hoping you can at least categorize this. It's a real request, and there's a lot of possibility if the feature is implemented.

Thanks.
[Android Apps and Games] jelle2503:
log of FC on hijacking an XDA session

youtube works
[Android Apps and Games] mcscruff:
[MENTION=5378477]orangeisnon[/MENTION], its probably because its a new feature and they are focusing on bug fixes 1st. It is a good request tho
[Android Apps and Games] metalwraith:
On Kali Linux it has tons of tools that are used in Dsploit, but it's doubtful there's one app that's all inclusive like this. There maybe, keep searching Google or inquire on the forums on Kali http://www.kali.org/ or skim through their documentation.
[Android Apps and Games] o0VIP0o:
Hey guys... So i tried to use this program yesterday it opened all networks shown everything was fine so i selected my laptop and if i use any mitm mode it will just cut off the Internet from the laptop and the mode won't work... Im running 4.1.2 s5 themed stock rom on s3 mini... Any idea? I really want to troll my friends and family :p thnx
[Android Apps and Games] CHEF-KOCH:
Not all chips or better driver's work in monitoring mode, that's the reason why linux (open source drivers), but as always also linux not working with all drivers/hardware. S5 is "new" so what some people expect, it always needs time to update things.

Try to troll you friends with you're Laptop that works with Kali. It has all tools build-in what you need.
[Android Apps and Games] o0VIP0o:
Well if that reply is for me then pls read carefully i have the S3mini but with s5 theme.. If not ignore this xD
[Android Apps and Games] CHEF-KOCH:
Was general speaking, imho only normal S3 works but not the mini. But last state was for you, it's still valid, you can use a laptop with kali which in fact is faster and have a lot or more benefits.
[Android Apps and Games] Left4DeadMW:
The "s5 themed" was totally unnecessary :p
[Android Apps and Games] o0VIP0o:
I know xD

Anyway i thought it was smthn due to the router firewall etc... Tho wifikill works perfectly on the s3 mini but i guess ima try this laptop way :d
[Android Apps and Games] Xorok:
Plz do this

Plz do this [MENTION=4875730]evilsocket[/MENTION]
[Android Apps and Games] USBhost:
Try script inject

To see if it kills Internet
[Android Apps and Games] o0VIP0o:
Nop not working just simply kills Internet! :(
[Android Apps and Games] alandd86:
not working on mine !!

using lg g2 4.4.2:confused:
[Android Apps and Games] jonnyh1994:
Session hijacker isn't functioning correctly. I tried logging into facebook on my computer with session hijacker on. It detected but only sent me to the login screen even though I logged into my facebook? My bet is that the sslStrip isn't doing its job correctly..this happening for anyone else?
[Android Apps and Games] ody12:
Mine won't even detect fb at all but it does a good job on youtube and some other random sites as well
[Android Apps and Games] jonnyh1994:
Mine does same with youtube...takes me to page but not logged in. It's a problem with SSlstrip. I have latest alpha build aswell.

xda just breaks my phone when i try to hijack that xD
[Android Apps and Games] ody12:
I wish that when we hijack a session we can open it in a browser of our choice, like chrome.

---------- Post added at 10:11 PM ---------- Previous post was at 10:09 PM ----------

Just curious have u tried any other session hijacker apps?

I like dploit the best tho scince its all the tools in one app.
[Android Apps and Games] o0VIP0o:
Is this working for any1 with the s3 mini?
[Android Apps and Games] thahim:
[MENTION=4875730]evilsocket[/MENTION] nothings working no replace images nothing.

Sent from Galaxy Note 3 SM-N9005
[Android Apps and Games] mickey4398:
pls allow to move app. to sd card. i have galaxy mini and latest nightly works fine but app is too big.
[Android Apps and Games] DimitrisGate13:
You can easily do that with Titanium Backup or Link2SD
[Android Apps and Games] DroneDoom:
This app works on sites that use https protocols?
[Android Apps and Games] USBhost:
No

Well it does not work for me
[Android Apps and Games] DroneDoom:
Post in this thread say Facebook and youtube don't work (which use https protocols) so you may not be the only one.
[Android Apps and Games] USBhost:
YouTube and xda hijack work just fine for me
[Android Apps and Games] TylerDurben:
AMAZING STREET HACK: http://youtu.be/1hpU_Neg1KA

I think we need a watch dog theme for dsploit ;)
[Android Apps and Games] SecUpwN:
Code such an App and I'll pay any price. ^^
[Android Apps and Games] jonnyh1994:
Think evilsocket should take off all the "sslstripping" features off his site till he fixes them. Some people may find it misleading in its current state :/

Also have an option similar to zAnti where you can command certain/all pc's to open disc tray/calender to show they're compromised would be pretty cool :)
[Android Apps and Games] jason2302:
How exactly would you do this with zAnti? I downloaded it and it barely seems to have any features and didn't work too well in general
[Android Apps and Games] AdamWalsh:
Im stuck :(

so i found dsploit recently and decided to give it a go however.... as it turns out using the "redirect" tool in the mitm tools ive managed to break my connection :[ basically every time i try to go to youtube.com im greeted by my test site :lolcats.com ...it seemed appropriate and now ive turned off the redirect and even turned n airplane mode but nothing seems to stop the redirect??? any clue how (other sites seem to work fine???

any suggestions?
[Android Apps and Games] mcscruff:
Your PC has probably cached the website, hit refresh a few times or clear cache
[Android Apps and Games] jonnyh1994:
Oh I don't know, I personally have never used zAnti but I remember at one point they claimed it had such features on their website and said they charged "credits" for the ability to use these options. Whether or not it's still available now, I'm not sure. Sorry
[Android Apps and Games] wartboof:
The link to the nightly build is throwing up a 404 error.
[Android Apps and Games] anastasiszn:
some dsploit features is fake http://dsploit.net/features/

HTTPS/SSL Support ( SSL Stripping + HTTPS -> Redirection )

MITM HTTP/HTTPS Session Hijacking

MITM HTTP/HTTPS Hijacked Session File Persistance

MITM HTTP/HTTPS Realtime Manipulation

MITM Multi Protocol Password Sniffing

NOT SUPPORT THAT!!!!!!!!!!!!!!!!!

test it to facebook and i can't view profiles!!!
[Android Apps and Games] julle131:
This link?

http://update.dsploit.net/nightly

You are fake. Those features are working. What websites did you try those features on? Only Facebook? How about XDA, YouTube, gmail or other sites with login?
[Android Apps and Games] anastasiszn:
the most important site is facebook!!!

youtube? what i can do with youtube account? nothing!!!

with facebook i can view private message from everyone and i know everything !!!!

those features working fine with droidsheep-droidsniffer-faceniff-zanti and more apps!!!

mr.Margariteli is a big liar!!!
[Android Apps and Games] bilgerryan:
Then use those apps and quit causing drama and calling names. Just because it doesn't work on one site doesn't mean it doesn't work on others.
[Android Apps and Games] orangeisnon:
In my experience, it's very very very inconsistent. Facebook has never worked for me (even after extensive testing ie an hour straight), Google or gmail sometimes work, and YouTube does 75% of the time. However, Google only treats that cookie as valid on YouTube, so I can't switch over to gmail or anything. I haven't tried XDA, but plenty of non-ssl sites work perfectly. Proboards worked fine. I've tried tumblr a number of times to no avail. It's not 100% guaranteed to work, but it does sometimes.
[Android Apps and Games] USBhost:
Same there

They used to work

until Facebook change a few things
[Android Apps and Games] orangeisnon:
From my testing, it looks like in order to get it working the victim would have to log out, clear cache, and open "http://www.facebook.com" AFTER dSploit is already running the hijacker (the only way I could get ssl stripping working). Even then, however, the victim seems to not be able to log in (I get "password incorrect" when using correct password). Looks like a security thing on Facebook's end, but I'll try it again someday.
[Android Apps and Games] wartboof:
Yes, thats the one thats not working
[Android Apps and Games] Bonzer1722:
please reply

Is there a way to root a samung galaxy tab 4? If there is please tell me how
[Android Apps and Games] iTchill:
.

you are so much in the wrong place you have no idea ..go ahead and ask the same thing to google , fly away little bird ,now that you know the secret of life
[Android Apps and Games] Jepediah:
First of all it would help to understand the information of this nice clip: http://youtu.be/wwleOote5M0
[Android Apps and Games] michelinok:
Does dsploit mitm support mediatek octacore?
[Android Apps and Games] michelinok:
Has someone tested dsploit on mediatek 8 core phones?

Inviato dal mio ZP990+
[Android Apps and Games] vipercoyote:
You guys do know that ssl stripper is for secure sites using https://

The ssl stripper will not work on xda or http: sites because they do not use sll and the password and information is sent in plain text you can see. You may think its working but really its not doing anything because it is plain text you can see already

:
[Android Apps and Games] orangeisnon:
Yes. The point of those posts were to explain my experience with a few of the sites I have attempted hijacking. Not just secure sites.

For reference, Facebook, Google, YouTube, twitter, and most sites where you ever personal information will use SSL.

Sites that do not ask for sensitive information usually don't use it, as there is little point in securing public data.
[Android Apps and Games] vipercoyote:
So this forum is OPEN no SSL, so anyone can get your password if you were on public wifi easily
[Android Apps and Games] ody12:
It would be cool to have a whatsapp and fb messenger sniffer in dSploit
[Android Apps and Games] EzEddie:
does this work for sniffing mobile app activity and not just browser activity? Meaning can you sniff/hijack other facebook info from another android on the same wifi if they are using the Android app and not the facebook website?
[Android Apps and Games] orangeisnon:
Kind of. It sniffs ALL network traffic, meaning anything from a browser, app, or service, as long as it goes over the network.

However, depending on the app, it may use a different protocol or encryption. I don't know which ones use what, but you can go ahead and try.
[Android Apps and Games] Noeljunior:
I have this app installed for some time and it is using 0.92GB of data usage. Anyone knows why?
[Android Apps and Games] julle131:
You have the metasploit framework installed? Because it looks like you have.
[Android Apps and Games] Noeljunior:
No, I do not have. Should I?
[Android Apps and Games] julle131:
Hmm... Then that usage is weird. I have metasploit framework downloaded than dsploit takes about that much space. I see no possible way to dsploit use that much space without having metasploit installed. Maybe you should just reinstall dsploit then?
[Android Apps and Games] Noeljunior:
Maybe if sniffing something and the dSploit cache that sniff... I don't know. I just cleaned the cache and it works normally.
[Android Apps and Games] mcscruff:
I believe its the metasploit download
[Android Apps and Games] Noeljunior:
Does dSploit install it by itself?
[Android Apps and Games] orangeisnon:
No, but it pops up in the beginning and then runs in the background, so there's a chance you hit it without realizing.
[Android Apps and Games] CHEF-KOCH:
Official nightly mirror seems down. Maybe someone can fix it. (Hope developer or webmaster will read it). IMHO it was already mentioned but it's still broken and long time no news on the blog about upcoming changes or plans.
[Android Apps and Games] Sejskaler:
For some reason it doesn't seem to work on my device.

I am running a rooted version of 17.1.1.A.0.402 Kitkat - Xperia z2

I have busybox installed, and I can scan for network, but as soon as I connect and go back to see the features, I get the error "only works on rooted devices"

Can someone explain this? O.o
[Android Apps and Games] Zkaar:
Just a quick question, was it ever possible on dSploit to view files sent over the network and even download them to your device? Was it on dSploit, other app or am I just dreaming about this?
[Android Apps and Games] orangeisnon:
The app is called Piik. It was abandoned by it's devs a long time ago, but it might still work.

Also it only works for images.

APK attached.
[Android Apps and Games] Zkaar:
It was this app, thanks.

It doesn't work anymore, though. But wouldn't there be a way, on dSploit, to sniff packets and get something like images or text?
[Android Apps and Games] RootTheMachine:
It doesn't parse images automatically, but you could do a packet capture and use some other utility to parse out the images, i.e. driftnet.
[Android Apps and Games] gantar8:
I cannot enter into sessions or sniff passwords from https sites. You guys have the same problem? Any fixes?
[Android Apps and Games] Moesappel:
I don't have this problem, I sniffed my own Hotmail/Outlook password with this app. What version off the app do you use?
[Android Apps and Games] gantar8:
1.0.31b, should I have an older version?
[Android Apps and Games] gantar8:
Is here anyone to answer me?
[Android Apps and Games] jonnyh1994:
I don't know. Just download nightly to be sure.
[Android Apps and Games] gantar8:
nope. does not work. I saw some people got the fix when they tried the v24 or v27. Does anyone have the download link for those. I cant find any link.
[Android Apps and Games] jonnyh1994:
odd. have you downloaded the stable release from dsploit's official site?
[Android Apps and Games] gantar8:
yes

---------- Post added at 07:02 PM ---------- Previous post was at 06:16 PM ----------

my modem is: Innbox V50U Home Gateway

my mobile phone: LG optimus L9 p649

Still no ideas why https sites dont work?(facebook, gmail, or any https..) does dsploit not have SSLstrip?
[Android Apps and Games] orangeisnon:
As of right now (4:02 EST June 18, 2014), the build server is experiencing an issue with building a zip file. As such, current nightlies will not work correctly. It is advised to stay on an older build until this problem is corrected. I will update again when it is.
[Android Apps and Games] gantar8:
Can someone just tell me if it works on https sites or not so Ill stop bothering.
[Android Apps and Games] infectedorganism:
Does anyone have an older, working nightly they could share in the meantime?

Thanks in advance.
[Android Apps and Games] khankk42:
not work on https
[Android Apps and Games] o0VIP0o:
THIS IS NOT WORKING! any help is appreciated... Ive got fully installed busybox the program opens but if i choose anything... ANYTHING it will just cut off the net on the "victim" ... Im running stock rom 4.1.2 s3 mini and my router is belkin THANKS
[Android Apps and Games] USBhost:
First do script injection then do what ever you want
[Android Apps and Games] o0VIP0o:
Well i wanted to try this but now it isnt showing any device on my network!!?? I clicked the wifi button in app and it shows my network marked red not green and i entered the password again... Still red...
[Android Apps and Games] hview:
Anyone can shared current stable and nightly version with MSF or whatever...
[Android Apps and Games] aveq8:
What if I don't have a sd card (nexus 7 2012)?Where should I extract gentoo to work? I tried on /data/media/0 and on /sdcard/ but I get the "plesae select a decent file system" error.What should I do?
[Android Apps and Games] rootbitch:
Source code and build server is fixed now.

Nightlies (incl. MSF & Ruby Gems) are back. Enjoy guys!
[Android Apps and Games] maxl96:
Session Hijacker is not working in the newest build on 2 phones. HTTPS redirection is not working. Even if I select a completely differentn port. After rollback to Version from 10.June its working again.
[Android Apps and Games] bombadier:
Downloaded the latest nightly 17:00 UK time and keep getting a failed download with the Ruby Gems, is there a manual download?
[Android Apps and Games] michelinok:
Has anyone tryed this sw on a zopo phone? (ZP990+, zp980+,zp998)

Inviato dal mio ZP990+
[Android Apps and Games] jelle2503:
Will not let me install Ruby. Said some error occured. Cleared all data of dsploit and tried again same result but some nag about killall missing. Installing busybox from playstore fixed that. Will get logs soon.

Edit: think it is related to these 3 lines

Spoiler content hidden.

Verstuurd vanaf mijn Nexus 5 met Tapatalk 4
[Android Apps and Games] hview:
I have same problem with newest builds..
[Android Apps and Games] ktetreault14:
Anyone try on a note 3 yet?
[Android Apps and Games] USBhost:
Yep
[Android Apps and Games] michelinok:
And on zopo phones?

Inviato dal mio ZP990+
[Android Apps and Games] gogozx:
Of course it works.
[Android Apps and Games] gagp2p:
finding the latest nightly - if u use a downloadmanager like jdownloader and kopy the nightly link inside

than jdownloder will look for download able files - and u get the nightly :D
[Android Apps and Games] ktetreault14:
First time testing out on note 3 at home. Can you guys give me a rough estimate of the time it should take to load
[Android Apps and Games] michelinok:
Hello,

i'm trying dsploit stable but i've a problem with MITM.

I'm trying in my lan, one pc, one phone and my router....when i download my email with microsoft outlook, imap account credentials are shown, but pop3 account's password are not shown.

Any idea?

Many thanks!
[Android Apps and Games] hview:
Most recent update mitm.
[Android Apps and Games] michelinok:
Just to let you know...

Using stable : MITM works for imap, not for pop3

Using nigthly build: MITM doesn't sniff anything at all

OF COURSE....this is MY situation.

What can i check?

What can I do to help you finding my problem?

My device is a Zopo ZP990+ (MTK)
[Android Apps and Games] newbkilla:
I'm trying to inject some javascript with MITM, sample here:

$(document).ready(function()

{

alert("Hello World");

});

Everything injects fine EXCEPT for the '$' sign, which breaks the code. Anyone else notice this? Any possible work-arounds?
[Android Apps and Games] Blazer17:
I have the same problem...what should i do ?
[Android Apps and Games] jonnyh1994:
Just downloaded the new nightly and lookout found malware 'EICAR' in the release.zip file. Should I be concerned?
[Android Apps and Games] Pons:
http://en.wikipedia.org/wiki/EICAR_test_file
[Android Apps and Games] jonnyh1994:
But why is it in dsploit? I'm just curious. I mean what purpose would it serve besides triggering my phones AV?
[Android Apps and Games] wadamean:
I downloaded and tried to install the msf update but when the app tries to install the msf gems it takes forever and ends up being error. LG g2 g3 port cloudy g3 Rom vs980
[Android Apps and Games] russtle:
DSploit wont load

so everytimei try to run dsploit it say it can only run on rooted devices my device is rooted but i cant seem to install busybox could that be an issue
[Android Apps and Games] joluke:
Yep. You need Busybox
[Android Apps and Games] russtle:
thanks ill try to get it working, and tips or troubleshoots for busybox? cause my busybox app says its not installed yet i have the option to uninstall it. Every time i try to install my phone just resets. i dont know what is wrong
[Android Apps and Games] michelinok:
Try busybox on rail, it's on The store

Inviato dal mio ZP990+
[Android Apps and Games] russtle:
i did, it said something about the system partition, then it just restarted before i could finish
[Android Apps and Games] joluke:
Download this app:

https://play.google.com/store/apps/details?id=stericson.busybox.donate

(yes i pointed the paid app, it is worth it believe me)

When installing make sure you hit smart install and do a clean install!

It will install all proper applets and you won't have any more problems!
[Android Apps and Games] russtle:
I was able to get it working thank you. My dspoilt works it show my network and whats one it l. but I can't seem to do mitm attacks, I tried to test it on myself but I didn't work. Session hijacking replace pictures nothing worked
[Android Apps and Games] jelle2503:
More errors installing Ruby latest nightly

Verstuurd vanaf mijn Nexus 5 met Tapatalk 4
[Android Apps and Games] jonnyh1994:
I think quite a few people (including myself) are running into this problem. Does an error come up after you accept the metasploit update saying error downloading file or something along them lines? If so I think it's the same thing we're all dealing with :)
[Android Apps and Games] Batnun:
Same problem here: Unable to create the HTTPS redirector

NExus 5, Android version 4.4.4
[Android Apps and Games] jelle2503:
Then why am I the only one posting logs? This is a dev thread after all, posting "it doesnt work" is noob.

Btw if you had read, my post said Ruby. Not msf.

Verstuurd vanaf mijn Nexus 5 met Tapatalk 4
[Android Apps and Games] evilsocket:
I don't want/care to be popular ( really ), i just like the idea of have made something a lot of people find useful :) it makes me feel satisfied of my work :)
[Android Apps and Games] riahc3:
Holy ****, you are going to incorprate DroidSheep's cooking function as well? Damn! Nice :)

No, thanks to you we have this :)

You talked about how your software uses promiscuous mode and not monitor mode. If your software matures enough, do you see it possible it supporting monitor mode? (with, of course, kernels and drivers that support it). Or is this way too out of the scope for the software?

Again, thanks for making this securit test penetration suite. Working OK so far :)
[Android Apps and Games] evilsocket:
Considering how dSploit is implemented, it's not hard at all :)

Well it would be very cool, but i don't see any standard way to interface dSploit to custom patched drivers ... anyway, who knows, maybe in the ( near ) future ... :D
[Android Apps and Games] baronsamedi:
deletttttteeee
[Android Apps and Games] sgtkid12:
Love this app. Its great. Keep up the great work! It keeps getting better and better. :)
[Android Apps and Games] riahc3:
Wow, quick reply! Lol....

Anyways, today I had a page running on a machine on the network. And there was a word that said "Hello" I went into the function of "Custom Filter" and tried typing in the from field "Hello" and replcing it with "Bye". Nothing happened. Cleared cache and everything.

Is it suppose to be like this or how Steve Jobs would say: "You are doing it wrong"?

---------- Post added at 08:46 PM ---------- Previous post was at 08:37 PM ----------

Never mind: Tried it here on this thread replacing the "had" for "love" and it worked.

Just some comments (might be normal)

1: The thread took a long time to load

2: The "quick reply" button didnt work (I imagine that if in the HTML code there is a "had" it would also give some problems with opening and closing tags correctly)

This is going to get very popular very soon :P

Two suggestions:

1: Autoupdate (althought you are problably going to have to use a alternative system because I think apps like these arent alloed on Google Play) Is it a update notifier or does it autoupdate automatically?

2: Translations (I can help you with spanish)
[Android Apps and Games] bomblader:
The tool cannot detect any connection...

Only the subnet mask, network router and my phone.

There are 2 computers connected on that wifi as well... but they aren't detected.

What's wrong?