yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] evilsocket:
Mh no unless you install dSploit on a sd card ( dunno if it can be done ).

I would like to offer a solid update server instead of the github one ...

Will fix it ;)

Did you select your router ? :)
[Android Apps and Games] Ruzzah:
No, it shows all...

Maybe it would better for a detailed analysis when you watch a specific person. And that would be nice if you could see detailed when you click on the ip when you press on it when sniffing a router
[Android Apps and Games] evilsocket:
what details you'd like to see ?
[Android Apps and Games] Ruzzah:
I don't know if its possible, but could you show details such as what website, upload/download speed, how much bandwidth is done on that website, and a sorting function.

I'm not sure if this is possible but it would be nice to see more detailed stuff about where that bandwidth is going.

Thanks for the quick response.
[Android Apps and Games] evilsocket:
will think about it
[Android Apps and Games] Ruzzah:
What about nmap for port scanning ports and getting more information of a device, so if its a Mac, android, iPhone, windows, server etc with unique pictures to tell which is which.
[Android Apps and Games] evilsocket:
this is an improvement of the inpsector.
[Android Apps and Games] Ruzzah:
Do you reckon you can consider that for later updates?
[Android Apps and Games] evilsocket:
Sure
[Android Apps and Games] riahc3:
I thought about this but are you going to make a dedicated server just for updates (I really think the site and/or forum isnt neccesary).
[Android Apps and Games] evilsocket:
I have a vps, so i think it will be fine :)
[Android Apps and Games] DowneyJM:
This iz a great app, when compared to all teh other ghetto apps out there that don't do ****, this is miles ahead, IMHO its already betta than ANTI, great werk its very appreciated
[Android Apps and Games] Ruzzah:
ANTI is a greedy software, it wants you to pay to use the program.
[Android Apps and Games] evilsocket:
that's why dSploit was born :)
[Android Apps and Games] :
Just flashed JB AOKP and it works, showing all my devices:D:D:Dso its definitely rom issue

Finally

But sense 4 is a lot more stable on my device...:crying:
[Android Apps and Games] evilsocket:
great :)
[Android Apps and Games] Ruzzah:
Do you mind me asking where you learnt to develop in android?
[Android Apps and Games] evilsocket:
I've learnt by myself, surfing the internet searching for examples :)
[Android Apps and Games] metalwraith:
Nothing like being self-taught... it's a good thing.

How I learned html yrs ago back when I was on a webtv... Granted it pissed people off when they'd get emails with music blasting on it and they couldn't shut it off... :p
[Android Apps and Games] marcell39:
why you don't make an option to choose all devices
[Android Apps and Games] evilsocket:
because multi target is not yet supported, you have to select your whole subnet.
[Android Apps and Games] omgomg:
This is already hands down the best network pentesting utility for android so far.

It has a great lot of potential to become the reference utility regarding this type of app, if it already isn't so. Probably will make it to other android blogs soon as bugs are ironed out and features are added.

I do have mixed results with the application though, and I've tested it on a galaxy s3 and the optimus 3d, one on ICS and the other on GB.

I'm pretty sure sooner or later these issues will be addressed and in the mean time I will keep testing every single release as I've done so far.

Great job indeed and a big thank you from me! Keep up!
[Android Apps and Games] evilsocket:
what do you mean with "mixed results" ? ^^
[Android Apps and Games] metalwraith:
Was testing out the replace images feature... works nice.... the cnn page was nothing but this t-shirt image... http://www.tshirthell.com/funny-shirts/pirating-movies-saves-lives/ LOL
[Android Apps and Games] evilsocket:
lold
[Android Apps and Games] bonanza123:
in the case i want to kill the connection of a complete network / router a feature would be great where i can select something like "kill connection for all IPs except xyz". Will this be possibly integrated in your great project?
[Android Apps and Games] evilsocket:
Multi targeting is not going to be implemented in the 1.0.0 stable release, maybe in future stable releases.

Anyway, if you want to kill everyone connection except yours, you can just launch the kill module on the whole subnet ... you will be the only one surfing the net :)
[Android Apps and Games] ByteSizeSln:
Whoops! Wrong forum - deleted :)
[Android Apps and Games] metalwraith:
I like that option... I see many drunken nights doing this... probably get the crap kicked outta me.. oh wait my friend will usually be drunker than me... lol he'll just be all confused and reboot his pc numerous times to no avail... :eek:
[Android Apps and Games] evilsocket:
ehm ... what the hell are you talking about ? XD
[Android Apps and Games] DnaPolymerase:
I've tried to inject a simple script via dSploit; it didn't work. I've tried to load the default script and it worked after minutes and minutes. Is this a normal behaviour or a known bug?

Also, a little suggestion on the session hijacker: it could be useful to display not only http traffic but also the https one, even if cookies are not hijackable. Maybe by putting an X near it or something similar, that would still show the app itself it's fine and working.
[Android Apps and Games] evilsocket:
Regarding this issue, do you have some kind of memory optimization application running ? I'm starting to think this is caused by a static object in dSploit being externally freed when it shouldn't be ...
[Android Apps and Games] codesplice:
Sweet! Last bit of input (for now, at least): I'd like an option for enabling/disabling the notifications. I'm not particularly interested in seeing a notification each time a new endpoint is detected. I would possibly like the option for a persistent notification to keep the network scanner service alive though.

I'm not sure if I've mentioned it yet, but you've got a really solid thing going here. I'm really impressed at the number of features you've crammed into this package. Bravo, good sir.

---------- Post added at 02:29 PM ---------- Previous post was at 02:28 PM ----------

Nope. I do have Watchdog running to monitor memory and processor usage and look for misbehaving apps, but I don't have any evil task killers or even memfree tweaks enabled.
[Android Apps and Games] evilsocket:
Will be in one of the next releases :)

Thanks for your words :)
[Android Apps and Games] darkfloo:
Try on galaxy tab and network scan working it is maybi my device ?

I have an htc evo 3d gsm with miui ics
[Android Apps and Games] evilsocket:
I really don't know ... may i have some more specs about the device is not working ? Such as device model, android version, and so on ...
[Android Apps and Games] darkfloo:
I used an htc evo 3d gsm with miui
[Android Apps and Games] evilsocket:
Ok i finally found the problem which caused this and generally speaking issue 15 ( i was starting to get mad on this :S ) ... when the network has a lot of traffic ( i started a debian iso download from 3 computers ) the gui "freezes" and all goes s**t ... this is a buffering issue on android gui components, they are not made to be refreshed too often with too many bytes of live stream of data ... so i think i have to rewrite this module, i think instead of all the connections ( kinda useless anyway ), i will show a list of alive endpoints and their network statistics ( download/upload speed, # of packets, etc ) while dumping all the traffic to a file ( like the app already does ).

This will be nicer to see and will solve that f***ing issue #15 ! XD
[Android Apps and Games] codesplice:
Sounds like a good solution. There's no way that a person could watch all those scrolling connections and get anything useful from it - much better to just show a counter so they can see which hosts may be interesting to watch more closely.

You're on it dude!
[Android Apps and Games] MeatsticK:
Hey this is a great idea I was wondering why nobody has started this yet. I was even thinking of doing this myself kinda like ported a whole bunch of security programs to the android into one app.

One question though would it be possible to get the network card on some phones into monitor mode? Because then it would just be a matter of porting the aircrack suite over I think.

I did a search and found this but it's a year old: http://xdaforums.com/showthread.php?p=17750634
[Android Apps and Games] evilsocket:
Well, i'm not an expert in this field, but i think that even if it's theoretically possible ( you'd need the proper driver compiled with injection support ), it's not practically doable since you'd need a different driver for each device, or at least for each chipset, just like it is on computers.

In any case, the main thing about air*-ng suite is not the feature to put the interface in monitor mode, but the packet-injection capable drivers.
[Android Apps and Games] Pons:
I'm just going to leave this here...

Working wifi monitor mode
[Android Apps and Games] PieR:
very interesting.. and btw.. welcome Simone!
[Android Apps and Games] MeatsticK:
Awesome proof of concept.

And since the ability to put into monitor mode and inject will depend on the model of phone I think the best way to include something like aircrack in the set of tools would be to include the cracking tools in the app but it will be up to the user to set up the network card for that. Kind of like you can download a free wifi tether program but it is up to the user to have the phone rooted in order for it to work properly. I'm sure you have other stuff to work on before you begin thinking about implementing a feature like this but just throwing it out there.
[Android Apps and Games] krilov:
ciao simo,

[ita] allora ho provato giusto un pajo di cose al volo xkè è tardi...domani ci smanetto meglio.

telefono Galaxy GT-i9000 su cui gira I9000XWJW7_ITA_ValuePack_Gingerbread-2.36 montata di fresco.

versione apk 1.0.8b - nel mentre che istallavo GB e rootavo hai uppato la .9 ;)

-L'update dall'interno dell app (come ti hanno detto già) non va;

-la fase di initializing a volte crasha se in sottofondo il tel sta a fa altre cose.Tipo app quali MyAndroidProtection..che non è proprio istantanea nei suoi controlli iniziali...(ma credo è dovuto ai limiti del dispositivo +che all' app tua.)

-Usando inspector "service of deep detection"...e vedendo scritto un semplice OS: windows sono rimasto un po' deluso - sarebbe fico se specificasse addirittura il tipo di win x intenderci.

-Il tempo di una sigaretta a.f.k ed il tel è crashato; stavo sempre sotto inspector a scansione fatta...ho sbloccato il tel e poi schermata nera.

- All'inizio, tutti gli avvisi di notifica relativi al super user mi erano simpatici xkè ti danno l'idea di quello che fa l'app..però a lungo andare sono un po' noiosi.

Domani cmq provo x bene la nuova ver.

[eng]

- the update doesn't work as pointed before

- if there's some other process/app running in the background, dsploit 1.08b crashed few times during the initial stage. but i guess it's just due to the device itself. Tried running a common MYandroidProtection app.

- inspector could serve more detailed info or i would like so; expl. a simply " Windows OS" sounds too general. imo.

- as soon as the screen gets locked the phone crashes.

Just tested the 1.0.8b ver for a few; ' going to check deeply tomorrow the newer version...it's fkng late here atm ...gotta go sleep xD
[Android Apps and Games] codesplice:
Feedback from my buddy testing 9b on his Thunderbolt:

Also, as was just mentioned, I have also notice that the app closes if/when the display times out.
[Android Apps and Games] frenzyboi:
Finally working on my 2.3.4 phone. Thanks for the fix!

Please forgive me. I'm just a noob at all these wireless stuff.

My PC and Android phone is both connected to the internet. Yet when I tried to port scan it, it said "No open ports found ,check if target is reachable".

Am I doing something wrong here?
[Android Apps and Games] drego85:
Great App ;)

Andrea
[Android Apps and Games] NicholasQ:
Awesome app, definitely going to test it thoroughly.
[Android Apps and Games] evilsocket:
Test 1.0.9b please.

Ok, gonna inspect the display issue.

Well, maybe your pc has no open ports or a really good firewall .. it wouldn't be so strange
[Android Apps and Games] stkfigure:
I'd love to be a tester. :) downloading.

_________________________________

Hit thanks if I helped.

@the_stkfigure on twitter.

Running the Blade with CM10 KonstaKANG.
[Android Apps and Games] evilsocket:
Probably you entered a wrong js string ;)

I'm working on https support RIGHT NOW ... stay tuned, big update is coming :D
[Android Apps and Games] dt0x:
Can't wait for the update! Its been amazing watching this app grow to what it is now :good:
[Android Apps and Games] ByteSizeSln:
Sorry - post edited/deleted. I'm following this quite closely though :) Thank you!
[Android Apps and Games] evilsocket:
Just a little preview ... ladies and gentlemen, i'm proud to announce ... drum roll ... that from now on dSploit supports HTTPS!

Stay tuned for the next release ;)
[Android Apps and Games] DarkShadowMX:
Really nice stuff! Can't wait for the update =)
[Android Apps and Games] evilsocket:
1.0.24b is out ( big update ) !!!

Changelog:

Implemented sorting in the Sniffer module.

Implemented full HTTPS support in all the MITM modules !!!

:highfive:
[Android Apps and Games] Ruzzah:
This doesn't pick up multiple subnets on the network, I have 10.137.164.0/22 10.137.165/22 10.137.166/22

Only the first one gets picked up.
[Android Apps and Games] evilsocket:
Forgive me for my ignorance, but actually i didn't even know an android device could run on multiple subnets O.o you have better network skills than me :)
[Android Apps and Games] Ruzzah:
Sorry, what I meant was they run on the same subnet 255.255.252.0 however it doesn't pick up the full IP range

wlan0 Link encap:Ethernet HWaddr 98:0C:82:9B:75:3E

inet addr:10.137.164.164 Bcast:10.137.167.255 Mask:255.255.252.0

inet6 addr: fe80::9a0c:82ff:fe9b:753e/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:45353 errors:0 dropped:55 overruns:0 frame:0

TX packets:14765 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:22237784 (21.2 MiB) TX bytes:1241973 (1.1 MiB)

Wifikill picks them up

http://db.tt/vEnlfWgx
[Android Apps and Games] 6d21otb:
WOW full HTTPS MITM thats pretty cool !! :D great work! :good:

haha it means i have to mess with /system/lib a bit again ;)
[Android Apps and Games] dorqus:
Can you please add the ability to port scan custom port ranges? That would be useful for machines that don't have services running on standard ports.

Thanks!
[Android Apps and Games] metalwraith:
Awesome man.
[Android Apps and Games] arion604:
Definitely a hit and miss for me as well. I'm using s2 with custom ROM. Is there any particular firmware you recommend. Great work thus far by the way!
[Android Apps and Games] chatfan:
@evilsocket

there is chance to add same functions but for mobile data (GPRS, EDGE, 3G, 4G, 4G LTE...etc...)

believe me, this will be really great

waiting for your reply

thanks
[Android Apps and Games] asicman:
Just installed this app and playing around with it. The sniffer doesn't work. Nothing shows up when I try to use http sessions from the target machine. Also hijack shows nothing for sites like facebook, xda, etc. What I am doing wrong?
[Android Apps and Games] ArmedandDangerous:
I doubt that would be possible, cos everyone isn't on the same network as you are.
[Android Apps and Games] waiters:
Would you be able to have it change mac and host name on start (would require to disable and reconnect to wifi) but would be cool to be "iphone" or something.

Random mac might be overkill, but still cool :)
[Android Apps and Games] MegaHz:
https!!!

Awesome! gonna test it and post results later on.

btw. quick question, don't know if it was mentioned before and i missed it:

while in dsploit (scanning running) pressing the "back" button of android to go to home screen, does it exit the problem (killing the process)? or just stops the scanning? It seems that it kills the program but i think not always..

If I want it to keep on running on the background, this is helpful while on password sniffing etc, does it work ok when running in the background? It's good to show an entry in notification that is running in background. when taping that notification then it takes you again into the program. what do you think?
[Android Apps and Games] evilsocket:
Yeah i know, it seems an ettercap issue, gonna switch to arpspoof ;)

Will be done

No

See previous quote/answer.

It's been already discussed, mac changing is very unstable on most devices, so, no.

Generally speaking, on every screen you have a Stop button, the back will trigger the stop action if something is running, so yes, it will kill whatever process the application spawned.
[Android Apps and Games] evilsocket:
Seems you have another application listening on port 8080 of your device, i will make dSploit ports configurable ;)

For now, just check what application is ( open http://your-device-ip:8080/ in your browser ) and stop it while dSploit is running.
[Android Apps and Games] EdgaBimbam:
hmmm strange session hijacker isnt working like it should i think. For example i have started sniffing and opened gmail, hotmail, xda sites with logged acc. On session hijacker i can see those links but when i open them, hotmail isnt logged, gmail doesnt open, opens google.com and xda forum isnt opening, only xda portal. I think there wasnt any problem with session hijacker on v23b
[Android Apps and Games] evilsocket:
The hijacker just open the domain, will be fixed soon.
[Android Apps and Games] m7md88:
Image verification, i hate you !

Yeep , after searching on google about this problem

it seems that another app is using the same port .. :mad:
[Android Apps and Games] virtualflyer:
Ciao evilsocket, I've got a problem with the MITM Session Hijacker, if I'm assuming well it should catch a pwd whenever I connect to a site from the device I'm targeting. Right? because I've tried to do this with facebook, xda and so and nothing appears in the session hijacker window. it should work also because I've seen that you've just implemented https for MITM!

btw a changelog everytime the app updates would be fantastic(o) :D
[Android Apps and Games] evilsocket:
Not exactly, the session hijacker keeps sniffing for cookies and let you use them as if they were yours, consequentially logging to the cookie website.

If you don't see anything, restart the hijacker, sometimes a mitm attack is not successful the first time you lanch it.
[Android Apps and Games] giveen:
As a student in information security, I've been really impressed with this app. My security instructor has also been interested in your app.

Thanks for looking into the telnet password bug for me.

I also added on your git a request for bluetooth hacks.
[Android Apps and Games] Ruzzah:
Please add a feature to detect EAP TLS WiFi connections and notify the user that MITM has a chance of not working. I will test this app at my second school which has open wifi with edgeclient authentication and see if I can track anything, however they disconnected the lan connections from wifi, so fat chance.
[Android Apps and Games] evilsocket:
I saw you request, scheduled after the stable release ;)

Ok, i'm gonna check if this is doable :)
[Android Apps and Games] kosivi:
Hello! The app is great and does everything the description says, but I would like some more features to be implemented / bugs to be fixed:

1. When Session Sniffer is running, the text of the websites which are in cyrilic look strange (I guess it is a problem with the encoding)

2. Could you implement saving of sessions to a file on the sd card, and a new file to be created every time the sniffing is started and a session is found? Also, the possibility of opening the files, and hijacking the sessions in them.

3. There is one last thing I can remeber (for now) - In the current version, when Session Sniffer finds a session, it shows the ip of the device. Can you make it to show also the name (as it shows mac adress, name of device and ip on the main screen)?

Thank you and I hope you will continue developing this great tool!
[Android Apps and Games] evilsocket:
Gonna check this, yeah probably is an encoding issue.

Mmmm most of the time sessions have an expire time which is very short, so saving them to the filesystem would be useless ... anyway, i will think about it ;)

Network name resolution is something REALLY slow and not always doable, since if there's no netbios service available, you wouldn't have any name ... for instance, i only have a macbook pro and a mac mini server, no netbios, therefore no name resolution.
[Android Apps and Games] evilsocket:
Wanna inform you guys that dSploit has an official website now ... no forum, we'll keep using this thread until it will be fine to you guys :)

But i needed an update server so .... :)

http://www.dsploit.net/
[Android Apps and Games] MewRai95:
Not sure if this is a bug or just me being that I'm a complete novice when it comes to knowledge in network penetration, but it just seems like everywhere I go no matter what network I'm connected to the inspector shows the target's info as unknown and unable to find open ports.. any suggestions? I just updated to the latest patch, I've running this on my Atrix 4G.
[Android Apps and Games] evilsocket:
A logcat would be useful ....
[Android Apps and Games] MewRai95:
Sure thing, though I've never gotten a logcat for an application before, I'll do some searching really quick on how to do that and I'll bring it to you.
[Android Apps and Games] evilsocket:
Thanks to not asking me to do it for you XD People like you are very rare :highfive:
[Android Apps and Games] MewRai95:
Lol I agree, I know it's very frowned upon so I try my best not to get on people's nerves too badly :P
[Android Apps and Games] giveen:
Is there a version of Busybox you recommend that would go best with your app? I am wondering now if the issues I am having are caused by busybox

Right now I am on Stericson's BusyBox.
[Android Apps and Games] EdgaBimbam:
damn nice downloads score :D
[Android Apps and Games] evilsocket:
Read the FAQ about busybox here ;)
[Android Apps and Games] kosivi:
Thank you for the fast reply :) Droidsheep (which is also for session sniffing) allows the saving of sessions, and I have some from facebook that are maybe over a month old and I can still use them. So I think the saving won't be unuseful on dSploit. And just got one more idea - I always have to look at this thread to see what is the changelog, so it will be great if the app can show it itself (maybe on the screen where the new version is showed...
[Android Apps and Games] evilsocket:
Ok, gonna implement that! :D Maybe with a warning if the session expire time is too short.

I'm working on the dSploit website right now, you will find the changelogs there as soon as possible ;)
[Android Apps and Games] evilsocket:
Mmmm it seems normal ... just a question, when you are for instance in the inspector module and you press the Start button, does it goes to Stop and again to Start state in less than 1/2 seconds ?
[Android Apps and Games] evilsocket:
Here it is the full changelog since version 1.0.9b, i will update it every release ^^
[Android Apps and Games] MewRai95:
No, It takes about 3 maybe 2.5 seconds for it to return to Start.
[Android Apps and Games] evilsocket:
Ops ... your rom ( what rom you have ? ) probably is affected by this bug :(

I will try to work around this in the future, but it's not so simple.

GitHub issue about this.
[Android Apps and Games] MewRai95:
Ahhh alright then, well, currently I'm running on an unofficial CM10 ROM, there's a link to its dev thread in my sig. Thanks for letting me know though that there will soon be a work around :) I'll keep dSploit installed and continue to watch its progress.
[Android Apps and Games] evilsocket:
If you have about five minutes and adb installed on your pc, i could pm you some commands to confirm you have such bug ...