yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] anastasiszn:
I can't update ruby in nightly csploit 1.7.0 any idea?

Στάλθηκε από το GT-I9105P μου χρησιμοποιώντας Tapatalk
[Android Apps and Games] Raid7_:
Help

soo i finally rooted my phone with Kingo Root and all.. and got my self Dsploit and opened it and it worked fine

sooo i pressed on settings (dsploit just restarted)... uhmm okay that's werid let's trying to press on a target and see what we can do *Presses on a target* the window opens for a split secend then Dsploit just restarts and Kingo root says "Root Permissions allowed" every time it restarted..

now im not here like i never tried solving it... i tried restarting my phone and tried to reinstall the app and even told Kingoroot to always give it access but still it keeps restarting.. please help ;-;
[Android Apps and Games] :
I am able to do these things with network spoofer...however nothing seems to work with this app. I am not getting any errors or crashes but everything I have tried and every target I try them on does nothing what am I doing wrong?

Network spoofer works

droid sheep works

Wifikill works

dsploit does nothing

I really want to use dsploit and uninstall these other tools.

EDIT On a hunch I updated busy box to latest version and that did it, its working great now. For reference I'm running 1.20.2

Thanks!
[Android Apps and Games] toastAndJam:
I am also having the same issue as Bomblader where only my subnet, router, and phone show up without any errors showing up.

Motorola Atrix 4G

Cyanogenmod 7.2 (Android 2.3.7)

Rooted

I'm testing at home so there's no fancy protection going on. Fing can detect all the devices on my network just fine. If there are any other details I can provide, let me know.
[Android Apps and Games] defconoi:
mac changing is easy, should work for 90 percent of all devices, been able to change my mac with ifconfig iface hw ether mac with my g1, vibrant, sgs2, g2x, and galaxy nexus. Also, im damned sure we could get metasploit up and running on android, nothing is impossible.. hell they got apt, dpkg, ruby, and more with metasploit running on iOS: https://community.rapid7.com/community/metasploit/blog/2012/08/21/metasploit-portable-ios

Looks like the ifans beat us to it. But anyways implementing metasploit into this app seems like a great idea.

---------- Post added at 01:10 AM ---------- Previous post was at 12:31 AM ----------

metasploit running natively on android with botbrew: http://xdaforums.com/showthread.php?t=1446541&page=20

---------- Post added at 01:18 AM ---------- Previous post was at 01:10 AM ----------

nmap6 in botbrew and more should be added to the functionality of this app if possible! http://xdaforums.com/showthread.php?t=1446541 damn this is exciting!
[Android Apps and Games] getdead69:
Thank you, finally there is someone that is putting together all of those great hacking tools. :)

Tapatalking from my HTC Desire
[Android Apps and Games] haxin:
very nice, well done so far. first i installed his on my hp touchpad 32gig running a recent cm9-nightly version. i tried to run the app and it flashed real fast on the screen then stopped. tried one more time and same thing then the touchpad rebooted. now the boot gets stuck on the cyanogen splash logo. so im working to fix that and figure out why. i can still get ./adb connections and boot into cwm recovery just fine. i havent tried booting into webos yet though.

as for my asus tf101 funning E0s 4.1 jellybean. working awesome so far so good and looks great. ill post more info on the touchpad failure.

well i just did a dirty reflash of the latest nightly on the touchpad and everything is working just fine. including the dsloit app. im not sure what exactly wrong before. but the issue is so far resolved
[Android Apps and Games] riahc3:
This is not a "hacking tool". This is to test your network's security.

---------- Post added at 10:03 AM ---------- Previous post was at 09:57 AM ----------

The autoupdate downloader function is VERY slow and I think I know why.....

If you are running the Network Monitor mode in promiscuous mode (when you start the app, it automatically starts promiscuous mode), the download is way slower.

---------- Post added at 10:05 AM ---------- Previous post was at 10:03 AM ----------

As a simple addition, you could add a "Exit" option in the menu that stops monitor and kills the application. A lot more "user friendly"
[Android Apps and Games] evilsocket:
The password sniffer already supports SSL protocols, such as imaps, https and so on :)

Will do.

Already implemented.

Already implemented.

Not so easy to implement without a standard framework.

I'd need each interpreter and the app would be > 100MB ... not going to be implemented.

Will do

Dunno, maybe

Will do.

Will do

Nice, will do :)

Mmmm why ?

Maybe

I'll try

Mh, could be painful a metasploit porting ... i'll see if i can do something with jruby

Will do.
[Android Apps and Games] gabrielex:
Is there a way to replace just one specific picture instead of all of them (for example the google logo in google search page)?
[Android Apps and Games] evilsocket:
Yes, you should use the custom filter module.

from:

src=['"]http://the-google-logo-image-url['"]

to:

src="http://your-image-url"

Note that if the image is not a html img tag but a css background, you should use a different expression.
[Android Apps and Games] mathias_leb:
test on asus transformer prime and htc sensation

Hello,

I tried the application version 1.0.16b on both, it freeze when i open the app for the second time.

Second issue, i found some devices but i get nothing when i snif the network, replace by an other picture, ...

i hope this will help
[Android Apps and Games] evilsocket:
It's a known issue, gonna fix it asap
[Android Apps and Games] riahc3:
Thats at least 6 new features for the future. Thanks!

As a suggestion, maybe the custom filter module, should be retouched to be for user friend.

different templetes that do different things.

Example, If you choose a templete that says "Expression to change a image"

Automatically in the from field the following is filled out:

src=['"]http://insert-the-url-to-the-image-you-want-to-replace['"]

(obviously something a lot shorter but just so you get the idea

And in the to field, the following is filled out:

src="http://insert-the-url-to-the-replacement-image"

Just to make things a lot easier to understand :)

Once again, thanks for the great tool. If you can put this on the Play Store, I highly suggest a free (ad supported) version and a paid (no ads) version.
[Android Apps and Games] evilsocket:
Great idea!!! :D

Shamefully i can't take dSploit to the Play Store since new rules do not allow such tools :'(
[Android Apps and Games] riahc3:
7! :D

What a shame :( You deserve to make money off this since it is great.

Congrads on getting a article on the XDA front page: http://www.xda-developers.com/android/dsploit-android-based-network-penetration-suite/
[Android Apps and Games] evilsocket:
I could put ads anyway i guess ... but before doing something like this, i want to offer something perfectly stable ... probably 1.0.0 stable will be ad supported :)
[Android Apps and Games] riahc3:
Sound like a good plan :)
[Android Apps and Games] shirioko:
And since this app requires a rooted device, most users will have AdAway installed. So you'll need an ad-blocker-blocker:laugh:
[Android Apps and Games] evilsocket:
Ahahahah it's ok, if a user wants to contribute he can click on the ads, otherwise he can block them ...
[Android Apps and Games] nelsonw:
It's possible to remotely enable RDP?
[Android Apps and Games] shirioko:
no, not unless you have valid credentials

---------- Post added at 01:39 PM ---------- Previous post was at 12:50 PM ----------

I tried to get the app to work in Eclipse last night, so I apologize for flooding your error reporting document with my build and runtime errors :x

And the bloody app still won't run D:<
[Android Apps and Games] exc1d1us:
Just a heads up..

Dsploit is no longer being developed and has been forked.. further development is done under Csploit.

http://www.csploit.org/downloads/
[Android Apps and Games] Team Pentagon:
help

I didn't find any link in the description rather than the link of the website. and visited the link but found links to use it in Linux.

Where is the APK link. Is there any apk link?
[Android Apps and Games] bombadier:
Post before yours gives the link to the homepage, download page for the apk
[Android Apps and Games] Team Pentagon:
Thanks

My bed, I saw this thread and started searching. anyway, thanks for letting know.
[Android Apps and Games] hijackerdev:
Dsplpit is not workin.correctly .

Like when I chosse th3 device to atk on conneted on same.wifi .

And when I chose optios to do .it goes back to

The select traget ...plz help to solve this .

My device is rooted
[Android Apps and Games] evertking:
Right now.. non of them work csploit, zanti non.. I don't know why but these apps are useless and not worked for me since KitKat.
[Android Apps and Games] Lukis24:
It's strange. cSploit and zanti work for me in KK, L and M.
[Android Apps and Games] rchtk:
Also works on N but I will have to try Kali (either already packaged or through Linux Deploy)
[Android Apps and Games] FurySh0ck:
I see I can install cSploit either with cSploit-release.apk or cSploit nightly.apk . Which of them should I use to install it?
[Android Apps and Games] exc1d1us:
The nightliess are more buggy.

Go for stable.
[Android Apps and Games] FurySh0ck:
Hey guys.

The application seems to work fine, but I couldn't actually try.

Whenever I try to activate a MITM, the internet broswers are blocking the sites claiming "your connection is not safe" (sometimes a slighty different message pops up but it's with similar meaning).

Any ideas how I can surpass this? (I am currently using cSploit v1.6.6 rc2).
[Android Apps and Games] 678GUY:
can someone plz help me?

i have a galaxy s6 running android 6.1

and noting is working most of the stuff i do i click start i see the loading and then half a secend later it disappers and thats it noting is happaning why?
[Android Apps and Games] FurySh0ck:
Hey again guys.

I've did a bit of research but couldn't find answers. I'll ask my questions about cSploit here and on the main cSploit thread. Hopefully someone reads and answers.

-I tried using cSploit for testing. The problem is with MITM attacks. If I try to attack a computer \ net, the internet browser seems to notice. Google chrome and FireFox prevent me from using the internet claiming "Your connection is not secured \ private". It is important to say that connection kill for single devices works with no problems. It is also important to say that zANTI2's MITM attacks work. Chrome and Fox doesn't seem to notice zANTI2.

-the second question was what is the difference between nightly release and stable release. I think I already get it, but I would like someone to explain it to me in-depth.

Thanks for anyone who answers!
[Android Apps and Games] raza3434:
I cant find the download link ?
[Android Apps and Games] :
There you have http://www.csploit.org/downloads/ ?
[Android Apps and Games] rchtk:
Csploit 2.0 is close to being release. See http://www.csploit.org/csploit_2-updates/

hope they fix the fdroid build !
[Android Apps and Games] brain.atomic:
Thanks for the app!
[Android Apps and Games] FurySh0ck:
Looking forward to try a new cSploit. Thanks for posting!
[Android Apps and Games] kos25k:
Will i be able with 2.0 version to find my wifi password?thanks.
[Android Apps and Games] kos25k:
what is this? ?
[Android Apps and Games] emlin:
Beta Tester

I want to be a beta tester... i have a rooted j3 and the app DsPloit :D
[Android Apps and Games] TheMatador153:
Hello, I had dsploit installed on my previous Sony Xperia TX that worked well, now, I got a Sony Xperia z5 that is rooted and has busybox correctly installed but there is an error that says that my processor is not arm, but it is! Running dsploit 1.1.3c
[Android Apps and Games] AlanCho17:
I have the same error :(
[Android Apps and Games] KD6266:
Please help me whenever I try to open dsploit it shows LD_LIBRARY_PATH Bug
[Android Apps and Games] mhd 12:
well i think csploit project is better , they're adding mitmf to the project so that gonna make it amazing
[Android Apps and Games] Kiran Amin:
I am Getting LD Library Patch Bug On My Custom ROm how Can I Solve This

Redmi note 4 RR Custom ROM
[Android Apps and Games] anastasiszn:
Use csploit ;)
[Android Apps and Games] Kiran Amin:
Where Can I Get Csploit
[Android Apps and Games] anastasiszn:
http://www.csploit.org/downloads/

Στάλθηκε από το MHA-L29 μου χρησιμοποιώντας Tapatalk
[Android Apps and Games] AmirRouichi:
nothing works :/ im using android 7.0 nougat
[Android Apps and Games] DragonFire1024:
Same here. Can't get it to work on at least marshmallow 6.0.
[Android Apps and Games] RussianSolja:
I don't believe it works anymore.
[Android Apps and Games] DragonFire1024:
Seems csploit does. The issue is dsploit doesn't download the required binaries anymore. Csploit does. Everything appears to work, but I guess my devices and others at home are pretty secure as I can't get most of the tools to produce results, but they do 'work.' however if I'm at work, the story is different. Results are produced, but it seems to take a good deal of time to get them. I'll do some more testing and let you guys know.
[Android Apps and Games] ronak123456:
Whenever i run the scan it shows 0 ports? How to fix this?
[Android Apps and Games] EagleProx:
Loading Problem dsploit

Hi i have installed dsploit and i have root too and busyboxy installed too but when i open it up and try something like MITM/Session Sniffer or Kill connections and anything when i run it its loading nothing happens just the sign of loading and running when i click on start and nothing happens can someone help me?

-Samsung Galaxy S5 mini

-Android Version 6.0.1

-Device Rooted

-BusyBox Installed
[Android Apps and Games] jonnie77:
This project is dead look at github for csploit but still is been fixed...
[Android Apps and Games] Lossyx:
(nevermind, ignore this comment)
[Android Apps and Games] pol-der:
Can someone share dSploit latest apk file? I guess 1.0.31c

Thanks..
[Android Apps and Games] HogFrog:
intresting project, didn't expect that you'll be able to do such things using just your phone.
[Android Apps and Games] McSpidey95:
Ld library path bug

[*]Fixed issue #35 : LD_LIBRARY_PATH bug ( well it's not really fixed, but the user gets a message if his rom is not compatible due to this bug ).

This appears on my screen. Is there any way to fix it??

Pls help.
[Android Apps and Games] joluke:
Use csploit since this is an abandoned project. Google: csploit
[Android Apps and Games] DragonFire1024:
Even cSploit doesn't all work. However you can copy the scripts and binaries from the apps /data/data directory to /data/local/nameyourdirectory and execute them from the command line in terminal emulator. Doesn't work on all devices though
[Android Apps and Games] McSpidey95:
Root apps

Do you know any Android root apps that can control phones???
[Android Apps and Games] joluke:
No sorry :(
[Android Apps and Games] wentik:
Dzięki za link
[Android Apps and Games] Biggerdull:
Pls I want to hack the WiFi in my area can someone help me pls
[Android Apps and Games] Antu 123:
Nice
[Android Apps and Games] joluke:
dsploit domain is up for sale (domain expired aparently).

Csploit is the new alternative which replaced this: http://www.csploit.org/downloads/

Source for it from xaitax: https://github.com/xaitax/android
[Android Apps and Games] beratiskoalfanso:
Hey, i'm a new user and i can't seem to find the download link can you guys help me
[Android Apps and Games] RussianSolja:
The app hasn't worked in years
[Android Apps and Games] DragonFire1024:
cSploit still works. The only thing that doesn't work at least to the full extent it should, is the metasploit connection. And I'm pretty sure the reason why it no longer works is because the dependencies are severely outdated. And unless they are recompiled in an updated form for Android then that will never work on csploit again. I had attempted to do this upgrade a few times, and I forget why I wasn't able to. But if I recall correctly it had to do with dependencies that are no longer available.
[Android Apps and Games] sharafatqureshi:
Just wifi hacking
[Android Apps and Games] Smileysmiley:
How to download it
[Android Apps and Games] evilsocket:
Why on planet earth are you trying to run the app with eclipse? There're precompiled APKs in the download section O.o
[Android Apps and Games] shirioko:
So I can make changes to the code, and debug and stuff?
[Android Apps and Games] evilsocket:
Ops i see :o well start by setting the java compiler version to 1.6 ( project -> settings -> java compiler -> switch every 1.5 to 1.6 and apply ), then make sure you have the necessary sdk installed.
[Android Apps and Games] MegaHz:
testing in htc one x. no crash, seem sto be working ok. ill test sniffing and mitm functionality tonight. you are performing arp spoofing for all these?

what about ssl support ;)
[Android Apps and Games] evilsocket:
yep it's using arp spoofing ... and the password sniffer already supports SSL :)
[Android Apps and Games] MegaHz:
thanks, what about the mitm images replace and video replace?? does it do ssl?

you could implement facebook/twitter/linkedin sniffing and session hijacking support. similar to faceniff..
[Android Apps and Games] evilsocket:
no https support yet in mitm filters, will be implemented soon, same for session hijacking.
[Android Apps and Games] rirozizo:
by "supports SSL" do you mean cracking the login codes even if the user is using HTTPS? why iis thiiis possibe? ii always thought that SSL has encrypted cookies which can't be decrypted... am ii riight?

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] evilsocket:
Yep https, imaps, ssh and so on ... SSL are based on keys exchange between two endpoints ... if i'm the man in the middle, i can intercept those keys and switch them to known keys ( mine ) so i can decrypt the traffic in real time :)

The inconvenience is that in protocols like https, the user will get the classic untrusted certificate warning ( because it's our certificate ) .

Here a little paper about SSL mitm attacks.
[Android Apps and Games] MegaHz:
The classic message that we get and we always click "continue anyway" :D
[Android Apps and Games] evilsocket:
exactly :good:
[Android Apps and Games] rirozizo:
nice, i'm contributiing for a tester :D

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] francescomm:
Roma, qui Milano

Ciao, just downloaded the app on rooted SGS3 GT-i9300 stock 4.0.4 and everything looks fine.

Port scanner is quite fast!

Some error messages in red are too quick to read:

"The Cisco, oracle-listener, snmp and vnc modules are only using the -p or -P option, not login (-l, -L) or colon file"

(whatever that means, I had to press the Start button a hundred times to read it!)

I was trying the Login Cracker on vnc, port 5900, charset a-z, username admin (but also with my real user name) min l. 1 max l. 1 (but also 6) against my Mac

Image substitution works great on some images but ot all.

I don't understand if it is html <IMG tags vs. css backgrounds? or images with correct mime tag vs images with wrong mime (application/octet-stream) or images with correct extension (.jpg) vs. images with script extesion (generated_image.php)...

For instance Facebook doesn't seem to be affected at all, while Apple website still has the iPhone 5 image in the middle (others are replaced).

Un saluto e complimenti per l'app.

Francesco
[Android Apps and Games] Shyael:
In newest version :

*Image replacement don't work

*Video replacement don't work

On my SE Live With Walkman, ICS 4.0.4.
[Android Apps and Games] evilsocket:
thanks, fixing asap
[Android Apps and Games] evilsocket:
Nothing changed on those modules in newest version ... anyway i'm gonna check this, thanks.
[Android Apps and Games] Skale89:
My experience

First of all I want to congratulate you guys! Hope you can develop this further so it becomes a need-to-have for any pentester.

My experience:

-The SYN port scanner seems to work fine (although the Fing app gave me more results).

-The Inspector didn't work.

-Vulnerability Finder neither.

The Man in the Middle suite is awesome.

-Simple Sniff works great

-Password Sniffer also great, I've been able to sniff lots of passwords for non-HTTPS sites and many cookies. This is for me the greatest feature!

-Kill Connections also works great, but I have one doubt: Is it works applying DoS?

-Replace Image/Videos and Inject Code; I couldn't get this work.

My device is a rooted Galaxy SII (unbranded Argentina Android 4.0.3 Rom)
[Android Apps and Games] evilsocket:
- The inspector is based on nmap, if it's not possible to fingerprint a host, the inspector will fail.

- Vuln finder doesn't work if the inspector doesn't find anything.

- No DoS, acting as the network router the device running dSploit just drops connections :)

- Sometimes you just need to wait your arp cache to be restored ( some routers auto restore it after a certain amount of time ) an try again with replacements.
[Android Apps and Games] francescomm:
Gosh you're fast :)

Gosh you're fast :)

Just edited my message to add this:

Image substitution works great on some images but ot all.

I don't understand if it is html <IMG tags vs. css backgrounds? or images with correct mime tag vs images with wrong mime (application/octet-stream) or images with correct extension (.jpg) vs. images with script extesion (generated_image.php)...

For instance Facebook doesn't seem to be affected at all, while Apple website still has the iPhone 5 image in the middle (others are replaced).
[Android Apps and Games] evilsocket:
dSploit only replaces images <img tags with standard extensions, so as you've just said, css backgrounds and php generated images won't be replaced ... gonna implement this in the near future anyway.
[Android Apps and Games] MegaHz:
you need to also implement a "check for updates function" or add it to the market (which i doubt they'll accept it) or a black market (blackmart maybe) :D
[Android Apps and Games] evilsocket:
The app checks for update every startup ... this is configurable in the preferences panel.
[Android Apps and Games] francescomm:
regexp

My two cents:

/background *:[^},;]*url\(([^)]+)\)/

(roughly tested) will find the URL in CSS backgrounds

php generated images should have no problems as long as they are used in html image tags if you don't check for file extension.

You will never catch images loaded with javascript though, there is no file referencing them. You could test for src="[^"]" in script files but it is dangerous (not used only for images).

Ciao,

Francesco
[Android Apps and Games] evilsocket:
Right now dSploit filters only html pages, no css files therefore this regexp will work only for inline css rules.

The regexp check for image extension too, so php generated images won't be replaced as i said :)
[Android Apps and Games] defconoi:
Also see if u can add the ability to view open sessions on the Lan and inject data in streams
[Android Apps and Games] rirozizo:
ooohhh, that'd be sweeeet.

ii really want that, and.. again.. i'm ready to test.

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] Wazza26:
Tested on a Samsung S2 running Android 4.0.4.

Installation was fine although "super root" permission bubble appears every three seconds which is to be expected according to the OP.

My phone only seems to show my IP, the Routers, and Gateway. No other IPs shown.
[Android Apps and Games] thehighlk:
First of all, this app is awesome. Thank you.

But as I was playing with it last night, I blocked my own phone from any type of connection. I can't open dSploit because I'm not connected to any networks. Is there any fix for this?

Thank you.
[Android Apps and Games] shirioko:
close the app in settings->apps or reboot the phone