[Android Apps and Games] 6d21otb:
Hi evilsocket, great job! The subnet is now correctly displayed! :laugh: :highfive:

I encountered another issue: although there are other live hosts with open ports on the network I still only see the gateway and my own android device (Huawei U8510) in the target list. The MITM attacks on specific targets or the entire network dont work and when I portscan the gateway it doesnt show any open ports although the web interface is reachable in the browser on the same android device on standard port 80.

According to arp -a the arp table on the targets doesnt change at all while running some MITM attack on the entire network, neither on linux nor on Windows.

After adding a live host target IP manually to the dSploit target list and running a port scan or a MITM, no traffic shows up in Wireshark on the target, neither filtered for the IP address nor when filtered for the MAC address of the attacking android device (using the display filter "ip.addr == 192.168.0.233" and "eth.addr[0:3]==F4:C7:14" respectively). Nothing shows up when filtered for the MAC address and running a MITM on the entire network either.

When I run a httpd or something on the android device, I can perfectly connect to it from the targets and the other way around, so it is properly sitting in the network..

My logcat output gets spammed with countless su lines:

--------- beginning of /dev/log/main
E/su ( 7746): sudb - Database closed
D/su ( 7746): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7750): sudb - Opening database
E/su ( 7750): sudb - Database opened
E/su ( 7750): sudb - Database closed
D/su ( 7750): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7754): sudb - Opening database
D/dalvikvm( 1316): GC_CONCURRENT freed 1255K, 39% free 6385K/10439K, external 122K/573K, paused 5ms+8ms
E/su ( 7754): sudb - Database opened
E/su ( 7754): sudb - Database closed
D/su ( 7754): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7758): sudb - Opening database
E/su ( 7758): sudb - Database opened
E/su ( 7758): sudb - Database closed
D/su ( 7758): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7762): sudb - Opening database
E/su ( 7762): sudb - Database opened
E/su ( 7762): sudb - Database closed
D/su ( 7762): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7766): sudb - Opening database
E/su ( 7766): sudb - Database opened
E/su ( 7766): sudb - Database closed
D/su ( 7766): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7770): sudb - Opening database
E/su ( 7770): sudb - Database opened
E/su ( 7770): sudb - Database closed
D/su ( 7770): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7774): sudb - Opening database
E/su ( 7774): sudb - Database opened
E/su ( 7774): sudb - Database closed
D/su ( 7774): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7778): sudb - Opening database
E/su ( 7778): sudb - Database opened
E/su ( 7778): sudb - Database closed
D/su ( 7778): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7782): sudb - Opening database
E/su ( 7782): sudb - Database opened
E/su ( 7782): sudb - Database closed
D/su ( 7782): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7786): sudb - Opening database
E/su ( 7786): sudb - Database opened
E/su ( 7786): sudb - Database closed
D/su ( 7786): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7790): sudb - Opening database
E/su ( 7790): sudb - Database opened
E/su ( 7790): sudb - Database closed
D/su ( 7790): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7794): sudb - Opening database
E/su ( 7794): sudb - Database opened
E/su ( 7794): sudb - Database closed
D/su ( 7794): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7798): sudb - Opening database
E/su ( 7798): sudb - Database opened
E/su ( 7798): sudb - Database closed
D/su ( 7798): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7802): sudb - Opening database
E/su ( 7802): sudb - Database opened
E/su ( 7802): sudb - Database closed
D/su ( 7802): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7806): sudb - Opening database
E/su ( 7806): sudb - Database opened
E/su ( 7806): sudb - Database closed
D/su ( 7806): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7810): sudb - Opening database
E/su ( 7810): sudb - Database opened
E/su ( 7810): sudb - Database closed
D/su ( 7810): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
W/ProcessStats( 146): Skipping unknown process pid 7810
E/su ( 7814): sudb - Opening database
E/su ( 7814): sudb - Database opened
E/su ( 7814): sudb - Database closed
D/su ( 7814): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7818): sudb - Opening database
E/su ( 7818): sudb - Database opened
E/su ( 7818): sudb - Database closed
D/su ( 7818): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7822): sudb - Opening database
E/su ( 7822): sudb - Database opened
E/su ( 7822): sudb - Database closed
D/su ( 7822): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7826): sudb - Opening database
E/su ( 7826): sudb - Database opened
E/su ( 7826): sudb - Database closed
D/su ( 7826): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7830): sudb - Opening database
E/su ( 7830): sudb - Database opened
E/su ( 7830): sudb - Database closed
D/su ( 7830): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7834): sudb - Opening database
E/su ( 7834): sudb - Database opened
E/su ( 7834): sudb - Database closed
D/su ( 7834): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7838): sudb - Opening database
E/su ( 7838): sudb - Database opened
E/su ( 7838): sudb - Database closed
D/su ( 7838): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7842): sudb - Opening database
E/su ( 7842): sudb - Database opened
E/su ( 7842): sudb - Database closed
D/su ( 7842): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7846): sudb - Opening database
E/Sensors ( 146): ProximitySensor: unknown event (type=0, code=0)
D/dalvikvm( 7407): GC_CONCURRENT freed 390K, 51% free 3017K/6087K, external 0K/0K, paused 34ms+151ms
E/su ( 7846): sudb - Database opened
E/su ( 7846): sudb - Database closed
D/su ( 7846): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7850): sudb - Opening database
E/su ( 7850): sudb - Database opened
E/su ( 7850): sudb - Database closed
D/su ( 7850): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7854): sudb - Opening database
E/su ( 7854): sudb - Database opened
E/su ( 7854): sudb - Database closed
D/su ( 7854): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7858): sudb - Opening database
E/su ( 7858): sudb - Database opened
E/su ( 7858): sudb - Database closed
D/su ( 7858): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7862): sudb - Opening database
E/su ( 7862): sudb - Database opened
E/su ( 7862): sudb - Database closed
D/su ( 7862): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7866): sudb - Opening database
E/su ( 7866): sudb - Database opened
E/su ( 7866): sudb - Database closed
D/su ( 7866): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7870): sudb - Opening database
E/su ( 7870): sudb - Database opened
E/su ( 7870): sudb - Database closed
D/su ( 7870): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7874): sudb - Opening database
E/su ( 7874): sudb - Database opened
E/su ( 7874): sudb - Database closed
D/su ( 7874): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7878): sudb - Opening database
E/su ( 7878): sudb - Database opened
E/su ( 7878): sudb - Database closed
D/su ( 7878): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7882): sudb - Opening database
E/su ( 7882): sudb - Database opened
E/su ( 7882): sudb - Database closed
D/su ( 7882): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7886): sudb - Opening database
E/su ( 7886): sudb - Database opened
E/su ( 7886): sudb - Database closed
D/su ( 7886): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7890): sudb - Opening database
E/su ( 7890): sudb - Database opened
E/su ( 7890): sudb - Database closed
D/su ( 7890): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
D/dalvikvm( 1316): GC_CONCURRENT freed 1348K, 39% free 6369K/10439K, external 122K/573K, paused 5ms+20ms
E/su ( 7894): sudb - Opening database
E/su ( 7894): sudb - Database opened
E/su ( 7894): sudb - Database closed
D/su ( 7894): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7898): sudb - Opening database
E/su ( 7898): sudb - Database opened
E/su ( 7898): sudb - Database closed
D/su ( 7898): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7902): sudb - Opening database
E/su ( 7902): sudb - Database opened
E/su ( 7902): sudb - Database closed
D/su ( 7902): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
D/dalvikvm( 4841): GC_CONCURRENT freed 458K, 53% free 2890K/6023K, external 0K/0K, paused 4ms+20ms
E/su ( 7906): sudb - Opening database
E/su ( 7906): sudb - Database opened
E/su ( 7906): sudb - Database closed
D/su ( 7906): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7910): sudb - Opening database
E/su ( 7910): sudb - Database opened
E/su ( 7910): sudb - Database closed
D/su ( 7910): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7914): sudb - Opening database
E/su ( 7914): sudb - Database opened
E/su ( 7914): sudb - Database closed
D/su ( 7914): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7918): sudb - Opening database
E/su ( 7918): sudb - Database opened
E/su ( 7918): sudb - Database closed
D/su ( 7918): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7922): sudb - Opening database
E/su ( 7922): sudb - Database opened
E/su ( 7922): sudb - Database closed
D/su ( 7922): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7926): sudb - Opening database
E/su ( 7926): sudb - Database opened
E/su ( 7926): sudb - Database closed
D/su ( 7926): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7930): sudb - Opening database
E/su ( 7930): sudb - Database opened
E/su ( 7930): sudb - Database closed
D/su ( 7930): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7934): sudb - Opening database
E/su ( 7934): sudb - Database opened
E/su ( 7934): sudb - Database closed
D/su ( 7934): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7938): sudb - Opening database
E/su ( 7938): sudb - Database opened
E/su ( 7938): sudb - Database closed
D/su ( 7938): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7942): sudb - Opening database
E/su ( 7942): sudb - Database opened
E/su ( 7942): sudb - Database closed
D/su ( 7942): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7946): sudb - Opening database
E/su ( 7946): sudb - Database opened
E/su ( 7946): sudb - Database closed
D/su ( 7946): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7950): sudb - Opening database
E/su ( 7950): sudb - Database opened
E/su ( 7950): sudb - Database closed
D/su ( 7950): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7954): sudb - Opening database
E/su ( 7954): sudb - Database opened
E/su ( 7954): sudb - Database closed
D/su ( 7954): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7958): sudb - Opening database
E/su ( 7958): sudb - Database opened
E/su ( 7958): sudb - Database closed
D/su ( 7958): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7962): sudb - Opening database
E/su ( 7962): sudb - Database opened
E/su ( 7962): sudb - Database closed
D/su ( 7962): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7966): sudb - Opening database
E/su ( 7966): sudb - Database opened
E/su ( 7966): sudb - Database closed
D/su ( 7966): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7970): sudb - Opening database
E/su ( 7970): sudb - Database opened
E/su ( 7970): sudb - Database closed
D/su ( 7970): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7974): sudb - Opening database
E/su ( 7974): sudb - Database opened
E/su ( 7974): sudb - Database closed
D/su ( 7974): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7978): sudb - Opening database
E/su ( 7978): sudb - Database opened
E/su ( 7978): sudb - Database closed
D/su ( 7978): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7982): sudb - Opening database
E/su ( 7982): sudb - Database opened
E/su ( 7982): sudb - Database closed
D/su ( 7982): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7986): sudb - Opening database
E/su ( 7986): sudb - Database opened
E/su ( 7986): sudb - Database closed
D/su ( 7986): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7990): sudb - Opening database
E/su ( 7990): sudb - Database opened
E/su ( 7990): sudb - Database closed
D/su ( 7990): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7994): sudb - Opening database
E/su ( 7994): sudb - Database opened
E/su ( 7994): sudb - Database closed
D/su ( 7994): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 7998): sudb - Opening database
E/su ( 7998): sudb - Database opened
E/su ( 7998): sudb - Database closed
D/su ( 7998): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8002): sudb - Opening database
E/su ( 8002): sudb - Database opened
E/su ( 8002): sudb - Database closed
D/su ( 8002): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8006): sudb - Opening database
D/dalvikvm( 7407): GC_CONCURRENT freed 442K, 51% free 3135K/6279K, external 0K/0K, paused 5ms+7ms
E/su ( 8006): sudb - Database opened
E/su ( 8006): sudb - Database closed
D/su ( 8006): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8010): sudb - Opening database
E/su ( 8010): sudb - Database opened
E/su ( 8010): sudb - Database closed
D/su ( 8010): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8014): sudb - Opening database
E/su ( 8014): sudb - Database opened
E/su ( 8014): sudb - Database closed
D/su ( 8014): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8018): sudb - Opening database
E/su ( 8018): sudb - Database opened
E/su ( 8018): sudb - Database closed
D/su ( 8018): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8022): sudb - Opening database
E/su ( 8022): sudb - Database opened
E/su ( 8022): sudb - Database closed
D/su ( 8022): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8026): sudb - Opening database
E/su ( 8026): sudb - Database opened
E/su ( 8026): sudb - Database closed
D/su ( 8026): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8030): sudb - Opening database
E/su ( 8030): sudb - Database opened
E/su ( 8030): sudb - Database closed
D/dalvikvm( 1316): GC_CONCURRENT freed 1273K, 39% free 6391K/10439K, external 122K/573K, paused 5ms+18ms
D/su ( 8030): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8034): sudb - Opening database
E/su ( 8034): sudb - Database opened
E/su ( 8034): sudb - Database closed
D/su ( 8034): 10058 it.evilsocket.dsploit executing 0 /system/bin/sh using shell /system/bin/sh : sh
E/su ( 8038): sudb - Opening database
E/su ( 8038): sudb - Database opened
E/su ( 8038): sudb - Database closed
...

As others do and have mentioned I get the toast notifications once every few seconds saying "DSploit has been granted su permissions" which I know is normal. Maybe it is relevant to mention that the toasts also keep popping up after I explicitly stop the network monitor and exit dSploit. Even when I uninstall dSploit the toasts still keep popping up, now saying "Unknown has been granted su permissions" until I reboot.

I granted dSploit permanent su permissions in Superuser and full BusyBox 1.20.2 is installed.

Very much appreciated if you find some time to look into my issue or tell me which tests I could run or which data I can provide! Thank you :good:

EDIT: I played with adb shell a little, maybe this helps:

C:\>adb shell
$ su
# cd /data/data/it.evilsocket.dsploit/files/tools/nmap
# ./nmap
link_image[1966]: 1695 could not load needed library 'libpcap.so' for './nmap' (load_library[1108]: Library 'libpcap.so' not found)CANNOT LINK EXECUTABLE
#

EDIT2: I think I found a bug in it.evilsocket.dsploit.core.ToolsInstaller.java:

public boolean needed( )
{
return !( new File( mDestPath + "/libs" ) ).exists();
}

# cd /data/data/it.evilsocket.dsploit/files
# ll
drwx------ app_58 app_58 2012-10-11 01:29 tools
drwx------ app_58 app_58 2012-10-11 01:28 __MACOSX
# cd tools
# ll
drwxrwxrwx app_58 app_58 2012-10-11 01:28 arpspoof
drwxrwxrwx app_58 app_58 2012-10-11 01:28 ettercap
drwxrwxrwx app_58 app_58 2012-10-11 01:28 hydra
drwxrwxrwx app_58 app_58 2012-10-11 01:28 libs
drwxrwxrwx app_58 app_58 2012-10-11 01:29 nmap
drwxrwxrwx app_58 app_58 2012-10-11 01:29 tcpdump
#

This always seems to return true because mDestPath always points to the /data/data/it.evilsocket.dsploit/files directory but "fileName = mDestPath + "/" + zipEntry.getName();" in ToolsInstaller.install() puts the libs folder into /data/data/it.evilsocket.dsploit/files/tools, so that might explain why it takes so long to initialize every time I start the app (because the "else if( installer.needed() && installer.install() == false )" in MainActivity.java always runs the install() method) and why it doesnt find the libpcap.so because it expects it somewhere else? cheers