yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] julle131:
Sorry, I dont have answer for that. But, Dsploid is opensource, so anyone who doubts it has virus/troijan can just check the code. Link to the code: https://github.com/evilsocket/dsploit
[Android Apps and Games] hospos:
Any ETA on 4.3 support? Really missing this app...

Keep getting parsing error, won't let me install. I have unknown sources checked, and disabled Google verification on both panes (what caused errors with some other apps).
[Android Apps and Games] CoolApps:
Works fine here, what device?
[Android Apps and Games] hospos:
GS3 (d2spr)

If you have the latest vr can you upload it to like media fire and pm me the link so I can try a mirror

Its a lot to ask but I would be greatful...
[Android Apps and Games] CoolApps:
So you want the application itself?
[Android Apps and Games] hospos:
Yeah the .apk
[Android Apps and Games] CoolApps:
Here it is:

https://docs.google.com/file/d/0B0KEzbof7JW_RGVhMVhVRkNwTms/edit?usp=docslist_api
[Android Apps and Games] Fusions:
Doesn't seem to work?

Whenever I try to run this, It doesnt seem to do Anything. And other times, It just crashes my router and I have to restart it for it to get back online? Any ideas?
[Android Apps and Games] CoolApps:
Who asked for sharing on Google Drive?

EDIT: Never mind, you can download it now.
[Android Apps and Games] Ci-Fi:
Can you tell me what version this is?
[Android Apps and Games] hospos:
Thanks BTW I need permission I'm smartin
[Android Apps and Games] CoolApps:
1.0.31b

It works fine on my Nexus 4 with ParanoidAndroid 3.99.

---------- Post added at 09:52 PM ---------- Previous post was at 09:52 PM ----------

Permission granted to all.
[Android Apps and Games] hospos:
Thanks again dude it's working
[Android Apps and Games] CoolApps:
Keep in mind that dSploit can and most likely will crash your router so be careful.

dSplot crashed my router twice.
[Android Apps and Games] CoolApps:
Anyone can now use the link without authorisation. :)
[Android Apps and Games] sonyzl:
dsploit + kWS = funny ;)

Hello everyone, I am using this application and it is awesome. I would like to comment on use with a web server, an error occurs. The web server is KWS, and I have my index.html file in the www folder. And I can easily go from the computer, but if I want to do a mitm directing all traffic to the web server dsploit (KWS), does not work.

Appears this error: Server Internal Error: length=14; regionStart=0; regionLength=-1

Can anyone help, please?

(I'm new, I decided to register in the forum but not happens the browser is restarted constantly in chromium and firefox)

Greetings!
[Android Apps and Games] EkimPadd:
Tux-mind forked dSploit v1.0.31b. Tux-mind started at 19 July 2013 and already made a lot of changes. I tried to compile it from source, but i fail everytime. Can someone try to compile it from source and report us about the new features?

Link:

https://github.com/tux-mind/dsploit
[Android Apps and Games] CoolApps:
Which path exactly did you place index.html?, try making it index.php.
[Android Apps and Games] sonyzl:
Ok, thanks for your answer Andyabc. I think maybe i can not use web server (kWS) with dsploit?.

dsploit says: "MITM modules need all ports available." ¿maybe is this the prolem? (i use port 8090 in dsploit, but kWS working fine, i can go for computer, but attack not working in dsploit)

I modified the html to php and although i can access it to computer, but not see there text and photo, i see this:

(i can't post image)

I think the extension should be html

Greetings!
[Android Apps and Games] CoolApps:
So the HTML file extension works fine?

It is most likely ports, dSploit is suppose to work with websites, not web servers.

You see dSploit needs some critical ports to function correctly, you can check the ports using "Port Detective".
[Android Apps and Games] sonyzl:
Yes, html work's fine with kWS from browser of computer, in php files appear: index.php and "pic".jpg

I thought that redirect tab, could put any ip, thought it would be easier if the source of the ip's on my network, in this case a web server. Well, we're going to do, if i can't .. bad luck, would be nice to use a html for this particular attack.

I see the ports with Port Detective but i don't find problem.

Greetings!
[Android Apps and Games] julle131:
Check the attachment. This is the first time I built an android app, so I am not sure if it works :D

It does start on my phone. Note: you have to remove old dsploid before installing this, as I signed this with my own keys.
[Android Apps and Games] jlopez1286:
cool, does this one have new stuff added to it??
[Android Apps and Games] EkimPadd:
Yes, check github (commits):

https://github.com/tux-mind/dsploit
[Android Apps and Games] AndroTech:
Wrongly posted
[Android Apps and Games] FoulDroid:
"Original" dSploit-1.0.31b.apk attached

Working on my Nexus 7 2012/2013 & Nexus S CM 10.2 :)
[Android Apps and Games] SecUpwN:
Please tell me what you added. Thanks!
[Android Apps and Games] julle131:
You can see the changes/commits from https://github.com/tux-mind/dsploit/commits/master

In other news, i also found these:

https://github.com/alximw/DSPloit_TFG

-Has new extractor function

https://github.com/Androguide/dSploit_revamp

-Holo themed

-performance tuned

Revamp FCs when I try to open it, but it is possible that I missed some dependencies.

TFG version FCs when i try to use the new function it has.

TUX-mins one seems to be most stable and has most functions.
[Android Apps and Games] mohab1220:
awesome works great with CM 10.2 galaxy s3
[Android Apps and Games] EkimPadd:
I have the same experience! Tux-mind his build added a few functions and is the most stable application from the 3 versions above.
[Android Apps and Games] Viper The Ripper:
Doesn't work in I9100P running stock JB 4.1.2 + root + busybox

It constatly FC :eek:
[Android Apps and Games] julle131:
Weird. Here, have another apk:

http://d-h.st/U9d
[Android Apps and Games] WeRSpecialPeople:
Can you compile the revamped one? Kind of want to try it.
[Android Apps and Games] julle131:
There is no proper guide to compile it. I tried the same way I compiled others, but I only got force closes.

Sorry.
[Android Apps and Games] chack152:
i downloaded this app but i doesnt seem to work properly on my stock 4.1.2 rooted samsung galaxy s3 (+busybox) it doesnt find all of the devices using wifi and some feature dont work like redirect
[Android Apps and Games] Viper The Ripper:
:eek: :eek: :eek:

NO WAY!

I can open the app (in second time I push it) but when I select any net/device the app go back to scan the devices connected to the net, it's an endless loop :weird: :weird: :(
[Android Apps and Games] :
virus warning in dspoit , zitmo inside ?

A word of warning here !

For some reason the original APK is infected with Zitmo ... Be careful with this ! As far as I know , this has nothing to do with being a security app. There should be no zitmo signatures in any of the tools used by dsploit.

The tux-mind version seems not infected but all originals APKs in this thread are infected such as the two on page 222 of this thread ...

The original version from dsploit website is also zitmo infected !
[Android Apps and Games] hisname:
this app is open source, what prove do you have?
[Android Apps and Games] :
I know , but this is not a "open source" issue , the issue is that people do not use the source themselves but are used precompiled apks.

The source is not infected but the APKs generated are.

And no , I double checked , none of the tools used in dsploit should bring such a warning.

You can check for yourself by simply scanning the tux-mind dsploit apk and the original apk ... you'll see there are no such warnings in the tux-mind apk which seems clean

---------- Post added at 07:05 PM ---------- Previous post was at 06:59 PM ----------

Also ... I would add that this is not some "generic" trojan being detected, neither some "generic virus maker" you could find in any crack or illegal software. This is a very specific trojan being detected.

And if you want ... just compile the original code from github to an apk yourself ... you'll have no virus warning either. I don't.

Go ahead , check for yourself.
[Android Apps and Games] julle131:
Hello.

In this case, I highly suspect that the virus detection is based on the signed keys. The only difference with precompiled apk for evilsockets and apk made by you is the signature. Of couse, if you download dsploid apk from "suspicious" source, it might have been infected by someone else, but I have my trust on evilsocket

You are not the first one to inform us about the "troijan". Many android antivirus tools are triggered from tools like these, because of: Superuser(AV software does not like SU) and because of what they are mostly used for.

About this specific troijan, AV developers tend to use specific. Using something as "generic" does not sound good to user and there is no "generic" virus/troijan, as they are all named.
[Android Apps and Games] :
As far as I'm concerned ... I never had any anti-virus trigger on tools such as sslstrip, hamster/ferret, nmap, urlsnarf, ettercap, tcpdump, hydra, arpspoof which are the tools used by Dsploit anyway ?

The only non-windows pentool (that I'm aware of) that is (falsely) detected as a virus nowadays is basically metasploit (for obvious payload reasons) ?

Maybe in this case I'm just being paranoid :)

(great tool by the way)
[Android Apps and Games] EkimPadd:
Can you please tell me how you double checked the tools used in dsploit?

"simply scanning" an application isn't the correct way to check if an application contains malware.

Next time check some literature about how an anti-virus program works and scans for malware.
[Android Apps and Games] julle131:
Really? I am actually surprised. Maybe you use different AV than others :D.

I know wifikill, droidsniff, droidsheep and faceniff. All of them have been reported as viruses or Trojans by some people.

But for the detection, i still bet the signature. But I think we spoken enough of paranoid activity, as we have builds that do not show up. What do you think?
[Android Apps and Games] orangeisnon:
How did you manage to build it?

According to my Eclipse, Tux-Mind's source is filled with errors. Won't let me get near compiling it.

It pretty much says everything in src is wrong. And style.xml from /res/values . Every other line in that is "wrong".

Any ideas?
[Android Apps and Games] julle131:
Here is a compile guide:

http://dsploit.net/the-team/

Its not perfect. I think you are missing the dependencies. They are listed on that guide with links.
[Android Apps and Games] orangeisnon:
Okay, so Tux left out a single > in androidmanifest.xml which made Eclipse throw a hissy fit.

That fixes 98% of my problems. Now I'm having errors in the msf folder.

I'll let you know how that goes.

EDIT: Fixed everything. Had to add two libraries and delete one.

Everything was there, it was just configured wrong.

Once it's compiled and tested I'll up it to you guys.

---------- Post added at 06:46 AM ---------- Previous post was at 06:07 AM ----------

So, I have successfully compiled the Tux-Mind version of dSploit.

I'm gonna test it out today and get back to you with a link.

Unfortunately I've only posted about six times, so I'm gonna have to go post some more before I can post links.

You'll hear from me soon.
[Android Apps and Games] orangeisnon:
I believe I can post links now. If I can then the link should be up soon.

Sent from my 3D FM pentesting smartphone... With Google!
[Android Apps and Games] orangeisnon:
dSploit tux-mind

I stayed up all night doing this (literally, from midnight until now, 8AM), and finally I have something for you.

I present to you:

tux-mind's dSploit fork

In landscape

AND portrait
[Android Apps and Games] leio rusher:
Nice... Like the portrait.. Thanks!
[Android Apps and Games] orangeisnon:
I've been testing the portrait, and it's been FCing at random points, but only after I scan for exploits.

I haven't tested in landscape, and I've only had one target machine (with one service - Squid proxy), so it could be any number of things.

If anyone can test this on another device, that would be great.
[Android Apps and Games] :
seems ok for me, HTC One stock rooted running in portrait mode i scanned a win7 machine (2 instances of httpap found) then scanned for known exploits (none found) no crashes

:good:
[Android Apps and Games] FoulDroid:
Something new in this Fork or just a re-compilation ?
[Android Apps and Games] orangeisnon:
I just recompiled it, but fixed all of the errors in the source. Also created a forced portrait apk.

Nothing major, just fixing some stuff.

tux-mind actually added a full Metasploit install. That's pretty cool.
[Android Apps and Games] derride8:
Do this app crack network lock password (wps)
[Android Apps and Games] Rikyml:
hi, you can browse the folders and files from a PC connected to the network?

Inviato dal mio GT-I9505 usando Tapatalk 4
[Android Apps and Games] FoulDroid:
How to use MSF option? Dsploit ask for msf system image..
[Android Apps and Games] Cryceratops:
Need some help getting it working right

I'm wondering if anyone else is having this issue.. I can get the app running alright, but when I try to use any of the MITM attacks, all they do is essentially kill the connection to the target computer, for example using the redirect option to redirect to any site will only result in a 404 (Invalid URL) error when typing something into the affected computer's URL bar. For image replacement, the websites load, albeit very very slowly and with no images showing at all. Anyone else experienced this? I'm using a Tab 2 7" with CM 10.1, SuperSU.

Kind Regards,
[Android Apps and Games] orangeisnon:
Yes, I noticed this, and I'm talking with tux to figure it out.

He actually had to pause development for a while, he'll resume at the end of the month.

---------- Post added at 01:37 PM ---------- Previous post was at 01:27 PM ----------

I do see this sometimes, including once last night. Target was a Windows 7 laptop, expired AVG antivirus. Exactly the same thing you're saying. But most of the time it works perfectly. If I see it again I'll let you know.

For anyone else who thinks they have these symptoms:

Replace images makes the page load slow, does not replace images (or removes them)

Redirect results in a 404

Other MITM attacks kill connection (?)

Let me know you're exact issue, I'll see what can be done.

Thanks.
[Android Apps and Games] Viper The Ripper:
bump!

I'm using a SII running stock JB rooted + busybox installed :s

Any solution?
[Android Apps and Games] orangeisnon:
I have never seen this...

Which version are you using (evil, tux, etc)?

Evil's would be the original app.

Tux's is the one I uploaded (eleven posts back), or one of the earlier uploads by julle131.

Try mine. Works perfectly for me.
[Android Apps and Games] Viper The Ripper:
No one works! :eek:

Tested Tux, Evil, julle and your version...

The same stage, I install it then the app suddently is closed, so I open the app again without problem. It scan nets/devices connected (I can see them) but when I choose one of them the app refresh the list and again start to scan nets/devices...ENDLESS LOOP!
[Android Apps and Games] orangeisnon:
I can't see any reason for this, besides MAYBE that the target OS is 4.0.

Has anyone else with JB seen this?

Also, Viper, please try updating BB (there's an app on Play). Oh, and does dSploit ask for SU when you open the first time? If it's not getting SU, then it could be doing this. I'll check on a non-rooted phone later, see if that happens. But I think with no SU, it just won't open it...
[Android Apps and Games] Viper The Ripper:
I tried in Stock 4.0.4 (rooted + updated BB even) and didn't work...

Recently I updated to official JB (rooted and my BB is updated too) and tried again but it didn't work either :(

*Of course I agree Su permissions, The app asked for it at the first time, then the app is closed and I need to open again :weird:

dsploit is working in my old Ace running stock GB and CM10x...but not in my Galaxy II :(
[Android Apps and Games] orangeisnon:
Sounds like an incompatibility problem with the GSII in general.

I'll look into it, but there's other stuff I'm working on, too.
[Android Apps and Games] EkimPadd:
Nobody can help you without a logcat...

Here is a tutorial how to logcat:

http://xdaforums.com/showthread.php?t=1726238
[Android Apps and Games] rcoliveirajr:
I tested in my Nexus 4 (Jelly Bean 4.3 Stock Rooted) and it's very good, everything is working except that I cannot get any passwords using Password Sniffer, I tried a lot of sites using HTTP (Not HTTPS) and didn't get anything.. Does anyone have an idea?
[Android Apps and Games] Cryceratops:
Rankip conveniently

I wonder if the issue with MITM attacks killing the connection is to do with the app's proxy it uses. I tried to get the MITM redirect method to work and most of the time it just times out, but sometimes after waiting for the page for about 2 minutes it will eventually load. Is it possible that it's not able to put out the bandwidth necessary, and therefore the attacks end up just timing out or going really reallllly slow?
[Android Apps and Games] orangeisnon:
I was considering something like this, maybe our phones' Wi-Fi is slow, but I have n (which has a min data rate of 54Mb/s). So that's probably not it.

Sent from my 3D FM pentesting smartphone... With Google!
[Android Apps and Games] Viper The Ripper:
I'll provide you asap when I'll have free time ;)
[Android Apps and Games] darkchmatak:
any other MITM attack work ? if no then you have good AV or your network is protected
[Android Apps and Games] rcoliveirajr:
Yes other MITM's is ok, I've also disabled my computer firewall (COMODO) and Router Firewall but still doesn't detecting any passwords..

Sorry for bad English..
[Android Apps and Games] Viper The Ripper:
[MENTION=3122502]EkimPadd[/MENTION], [MENTION=5378477]orangeisnon[/MENTION], [MENTION=3850503]julle131[/MENTION]

Here is my logcat ;)

1. Installing dsploit, running it and selecting a net/device

2. Installed dsploit, trying again to choose a net/device

Hope it help you to fix the issue in Galaxy SII devices :)
[Android Apps and Games] julle131:
Thanks, I'll just checking them soon. I just replied to notice you that dSploit is working on my international Galaxy S2, running CM10.2. Meaning that its not on all SGS2 devices.
[Android Apps and Games] EkimPadd:
I'm not a coder nor a programmer (so please correct me if i'm wrong!), but my guess is that it has something to do with the bold line.
[Android Apps and Games] Viper The Ripper:
well... I'm running Stock JB ;) and my device is an Exyno's variant (I9100P) AFAIK it's identicaly as international version + NFC chip so it should work fine...but It is not the case :(

---------- Post added at 10:09 PM ---------- Previous post was at 10:07 PM ----------

This line got me round the bend too when I saw it :eek: :eek:
[Android Apps and Games] evilsocket:
Please everyone read this http://www.dsploit.net/2013/09/24/the-past-the-present-and-the-future-of-dsploit/
[Android Apps and Games] rirozizo:
that's sad... i wish i could've helped, but I'm considered as a power user, and not a dev.

Sent from my Mako
[Android Apps and Games] julle131:
I see. Thank you... For the time you actively developed it, for making it open source and updating us about the future of dsploit.
[Android Apps and Games] clonednull:
sad but true ;)

thank you mate for your work and inspiration! :highfive:

wish you all the best for the future! :fingers-crossed:
[Android Apps and Games] rirozizo:
hey, someone was working on your app, he released a modified version today

Sent from my Mako
[Android Apps and Games] evilsocket:
New (positive) updates in less than 24 hours http://www.dsploit.net/2013/09/25/thats-funny-somethings-moving-in-the-oss-community/
[Android Apps and Games] rirozizo:
well, someone knows how to code :P

Sent from my Mako
[Android Apps and Games] evilsocket:
seems definetly like so :)
[Android Apps and Games] Ci-Fi:
I just wanted to say thank you, [MENTION=4875730]evilsocket[/MENTION]. I appreciate your work and am glad to see your project continue. Good luck in your future endeavors.
[Android Apps and Games] leio rusher:
Yehey
[Android Apps and Games] Cryceratops:
Wonderful news. This is a great tool and it deserves to be maintained and fixed up, although just an inquiry to evilsocket... I had read a few pages back in this thread that the code for this program was difficult to work on for some reason or another... i.e. messy or difficult to translate. I am no dev by any means, but I am just wondering if there is perhaps a possibility of such a thing? In any case, if there is a donation page for dSploit I would be happy to fork over a couple bucks, and really look forward to any further development. Thanks to all involved.
[Android Apps and Games] ih8legal:
Link for the latest redesigned dsploit?
[Android Apps and Games] julle131:
Awesome.

But I have to ask this: Can it still be compiled with eclipse, or do I have to use gradle?

Edit: Got it working.

Building with gradle was easier than I though. Am I allowed to link the apk here?
[Android Apps and Games] evilsocket:
Please do not try to distribute homemade apks, I really do not have nothing against it, but signing an apk with a certificate which is not the original dSploit's one would break user installation during automatic updates.

Be patient and wait for an official release to be published.

PS: Could you please share the exact build procedure? I didn't have time to test it, so it would be useful to update the "how to contribute" section of the website :)
[Android Apps and Games] julle131:
Okay, I won't share it then.

Building in Windows 7 x64:

requirements:

Java SE 7 JDK

Android SDK

Procedure:

Add path to SDK to gradlew.bat. Do this by opening it in text editor and look for this part:

set DIRNAME=%~dp0
if "%DIRNAME%" == "" set DIRNAME=.
set APP_BASE_NAME=%~n0
set APP_HOME=%DIRNAME%

Make a new line after that and paste "set ANDROID_HOME=" without "". Then add path to android SDK to it. For example, my SDK is in the same folder inside folder sdk. That way my line looks like "set ANDROID_HOME=sdk/"

Then add java to your system variables.

Open start menu, right click computer and select properties. Then open advanced system setting from left side of the screen. In the new window click environment variables. Now create a new system variable called JAVA_HOME, and for value put the part to your java JDK. For example, my value is "C:\Program Files\Java\jdk1.7.0_40".

Now, log out and log in again.

Open CMD and cd to the folder with gradlew.bat and execute it by typing gradlew. It should work for 10-25 seconds and then give some info. Now type "gradlew build", which should trigger the compiling process. After about 1-2mins you should have the APK file in: dSploit/build/apk.

The apk file needs signing, so just sign it with your keys.

The guide is a bit messy, so I hope you can read it :D
[Android Apps and Games] evilsocket:
The code itself it's not hard to understand, but you need some security/pentesting/networking skills to understand how it all works.
[Android Apps and Games] evilsocket:
Important Note on the Incoming 1.1.0b Version

After more than a year a new beta version v1.1.0b is coming, featuring full localization for many languages, a complete graphical restyling and many minor optimizations and fixes.

Unfortunately I’ve lost the original certificate I used to sign dSploit packages on each release, this means that the auto update mechanism between the current 1.0.31b and the new 1.1.0b version will not work.

You will be prompted for the new update and you will be able to download it, but installation will fail since the two apks will have different signatures and Android considers this as APK tampering.

Therefore a manual installation for the new version will be required then, starting from 1.1.0b the auto update process will continue to work as usual since I’m gonna backup the certificate everywhere :D

Please do not ask when the new release will be available, multi languages localizations need to be finished and only then I will release the new APK.