yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] Joven2468:
Sorry I meant the " Terminal Emulator " App... is there a command I can enter to generate a log or something ? Or are there other apps which I could use to input the which killall command without me plugging it to a com ( I don't have a com readily available now) ?

Anyway I would like to say thanks too ... Must be pretty tiring working round the clock on this project... !!
[Android Apps and Games] evilsocket:
Yep the terminal emulator will be fine, run those commands:

echo $PATH
which killall
su -v
busybox

And paste here the output please.
[Android Apps and Games] Joven2468:
Oh my busybox version is 1.18.4

Is this compatible?
[Android Apps and Games] evilsocket:
Could you PLEASE just give me that output ?
[Android Apps and Games] Joven2468:
Ok here are the results from entering those commands .

( attached screenshots)
[Android Apps and Games] evilsocket:
Seems like your busybox doesn't have the required applets, install BusyBox Installer, launch it, select busybox version 1.20.2 and then install it.

I would upgrade the SU binary to version 0.96 if i were you.
[Android Apps and Games] Joven2468:
Ok I think the issue is solved. Couldn't install 1.20.2 so I just went with 1.20 ... Anyway there is no killall error message anymore... Thanks !!
[Android Apps and Games] zirrus:
Hey man. Saw you've been pushing a few updates. Hard at work, keep it up, man. I've been putting it through the paces the last few days, seems to be working fine on my D3 and Acer A100. Are you trying to add SSL mitm with something like sslstrip or something?
[Android Apps and Games] evilsocket:
Well as far as dSploit works, any busybox version will be fine :)
[Android Apps and Games] evilsocket:
Yep, i'm gonna implement sslstrip features into dSploit transparent proxy ... don't know if before or after the 1.0 stable release.
[Android Apps and Games] Joven2468:
It works woo !!
[Android Apps and Games] evilsocket:
great, now try to enable wifi ... without it, dSploit is pretty useless :D
[Android Apps and Games] lumanz:
Great!
[Android Apps and Games] evilsocket:
the same of what ?
[Android Apps and Games] Guto ViP:
CM10 comes with Busybox so it's necessary reinstall? What can i do to see if DSploit works?

Enviado do meu Galaxy Nexus, via Tapatalk.
[Android Apps and Games] evilsocket:
It depends on the version of busybox installed ... first of all, install dSploit and try to run it, if your system is updated it will work :)
[Android Apps and Games] KcHappy:
Droid 3 beta tester? DROID 3 BETA TESTER!

So, I have no idea what exactly busybox is.. I'm pretty sure it was used when I used the script/program I found on these forums to root my phone.

That said, I installed the latest version of dSploit and it's working for me! Good job so far man! Keep up the good work! Didn't really play around with the functions since I'm on a work network, but I will try to play with it later.
[Android Apps and Games] evilsocket:
great :highfive:
[Android Apps and Games] KonstantinKeller:
Okay, wow. This is an AMAZING app. I just used the session hijacker to get into my sisters Facebook account. Once I get some money, I WILL donate, for sure. I love this app. Runs FLAWLESSLY on my Galaxy Tab 10.1 P7510 (ICS) and my T-Mobile Galaxy S2 SGH-T989 (JB).
[Android Apps and Games] metalwraith:
LOL was trying to scan the subnet here at the house, the roommate come's out complaining her connection was slow and thought it was the belkin router she's plugged into... she thought it was offline but the light is still blue (good) both my routers and the cable modem are right behind my desk in the front room as it is. I'll just try scanning the router itself, may take less time..
[Android Apps and Games] evilsocket:
yeah i've noticed that some routers just freezes when a broadcast scan is performed ... dunno why, guess it's a router bug :D
[Android Apps and Games] metalwraith:
Even if she thinks she's getting knocked offline, just as comical... :p
[Android Apps and Games] DriftorX:
Is dSploit a good alternative for droid sheep on jb. Seems like it does not work well when running that function. Or maybe it just wasn't updated for jb ROMs yet. Idk
[Android Apps and Games] ArmedandDangerous:
I installed busybox installer, and I already had busybox installed. Tried installing the latest one (Mine was at 1.8.4) then it said it failed. From then on the app detects I have no busybox installed, but Titanium Backup still shows I have 1.8.4 >.> So I tried reinstalling 1.8.4, it downloaded then it restarted my launcher. Launched Busybox Installer again and it still shows no busybox installed ):

I reinstalled busybox from a different app and I'm on 1.20.2 right now. Will try dsploit again when I'm home.

Sent from the pits with ViperX 2.7.1
[Android Apps and Games] Guto ViP:
I tried to use some functions of DSploit but it don't give me any information, like session hijacker.

Enviado do meu Galaxy Nexus, via Tapatalk.
[Android Apps and Games] Joven2468:
Yup just tested it out...the image injection works perfectly !!
[Android Apps and Games] evilsocket:
Yep, probably :)

Do you have any traffic on your network ?

Great :D
[Android Apps and Games] riahc3:
Not yet. It isnt that easy as droid sheep; It was said that it will be implemented.
[Android Apps and Games] evilsocket:
what are you talking about ? dSploit already has every feature droidsheep has ... hasn't it ? O.o
[Android Apps and Games] riahc3:
I remember my other suggestion:

When hitting the menu button a "Exit" button that simply stops monitor mode and exits the program would be nice. Makes it a lot easier and doesnt leave things in the background sucking memory.

BTW, for some odd reason, the update download is INCREIBLIBLY slow. I actually download it from your site and pass it via FTP wifi to update it. A lot quicker.
[Android Apps and Games] evilsocket:
Will think about it ... anyway, the update server is on github, so not my fault :P
[Android Apps and Games] riahc3:
Droidsheep scans and shows if someone is using Facebook for example. If you hold it with your button and press the option (I dont remember the name but) "Open Browser" it opens the default browser, getting the session and using that to browse.

Im not sure if that option is SO easyly implemented.....

Thats what I ment, didnt mean to offend you.
[Android Apps and Games] evilsocket:
dSploit has a Hijacker module which does the same ....
[Android Apps and Games] dexter93:
Awesome app, everything works nicely

Feature requests:

Mac changer

Cookies export on session hijack

Hijacked session open in web browser instead of in app webview

Keep up the good work . Thanks again for this awesome app
[Android Apps and Games] evilsocket:
Mac changer : I've tried to implement it, but on many devices changing the mac will make the wifi go crazy.

Cookies export on session hijack : Mh will do, even if i think it's kinda useless since many cookies expire quickly.

Hijacked session open in web browser instead of in app webview : Dunno if can be easily done, i should set the browser cookies ...
[Android Apps and Games] riahc3:
Ah, I have to do it against the router instead of the device. Sorry about that! :)
[Android Apps and Games] evilsocket:
No, Session Hijacker is available for the subnet, the router or single target ... just go to MITM -> Session Hijacker ( this module is available since version 1.0.22b ) .
[Android Apps and Games] riahc3:
Tried that Session Highjacker, a HTTP only site (non HTTPS) and it ddint detect anything.

I think this generally happens thruout the program: Sometime works and sometimes doesnt. One of the reasons may be that is scanning nonstop all the time. Maybe overloads some things.

These are theories..

---------- Post added at 11:39 AM ---------- Previous post was at 11:36 AM ----------

Ah ok! I never saw the option! Its new, ok ok.

Well Im going to try again one device....
[Android Apps and Games] evilsocket:
Yep i've noticed it too, don't know if it's a spoofer issue or, as you said, just a network overload ... i will try to disable the scanning service and we will see, anyway, if it's not workin, just stop and restart the module, usually this fixes the issue.
[Android Apps and Games] riahc3:
Same thing, doesnt work against one device either.

With DroidSheep, Ive been able to snif this site and hijack the session.
[Android Apps and Games] DnaPolymerase:
Actually I prefer to have hijacked cookies into the in app browser, but that's just me.

Inviato dal mio LG-P500 usando Tapatalk
[Android Apps and Games] evilsocket:
Well, i guess you'll have to spoof your whole subnet then ( droidsheep uses arpspoof, dsploit ettercap ).

I'd prefer it too, but i don't know if it can be done, i'll do some research about it ;)
[Android Apps and Games] riahc3:
Nope, it seems the Session Sniffer isnt working. Restarted module, login/logged out, etc........Nothing.
[Android Apps and Games] evilsocket:
other mitm modules are working ?
[Android Apps and Games] riahc3:
Well theres a feature request :P Give the user a option to select one or the other. I believe DroidSheep's code is open so just implement it for your program as well and give the option to choose one or the other in case it doesnt work....

---------- Post added at 11:49 AM ---------- Previous post was at 11:45 AM ----------

They have in the past. Let me confirm....
[Android Apps and Games] evilsocket:
btw check you are not on https but http, every mitm modules support only http for now ...
[Android Apps and Games] riahc3:
Custom Filter: Doesnt seem to work anymore.

Script Injection: Broken too

Do you want me to keep testing them all?

This is against ONE device....
[Android Apps and Games] evilsocket:
no it's okay ... kinda strange, since i haven't changed anything there :S
[Android Apps and Games] ArmedandDangerous:
My experience on previous versions is that when 1 fails, other modules tend to fail too. Even a phone restart, cache and dalvik clear doesn't help ):
[Android Apps and Games] riahc3:
Yup, mentioned this: http://xdaforums.com/showpost.php?p=32911296&postcount=689 as I wanted to make sure it wasnt a HTTPS problem.

---------- Post added at 12:00 PM ---------- Previous post was at 11:57 AM ----------

If you clear the program's cache and restart the phone, I DOUBT it wouldnt work. If so, then there are issues.....

Then again, this is a beta and thats what we are here for: Finding bugs! :)
[Android Apps and Games] MaxRabbit:
I'm on a network with 100-200 clients on at a time and I get swamped in notifications :-/
[Android Apps and Games] evilsocket:
You can disable them in dSploit settings menu.
[Android Apps and Games] riahc3:
You can turn off the notifications.

---------- Post added at 12:14 PM ---------- Previous post was at 12:08 PM ----------

Nothing. Still glitches after clearing program data and restarting the phone.....

My recommendations from a programming point of view (as this wont overload the device/network so much):

1: Make the user press a start button to scan the subnet, gateway and all the devices.

2: As soon as the user selects a target. STOP SCANNING FOR NEW DEVICES. I think this is critical and may be the root of all problems as when you try a MITM attack, it may STILL be scanning or finishing scanning and problably conflicts.

I just see too much overload for the device and network. One thing at a time.

Im not sure in what enviroment you test but there are so many variables to consider: A small network this will probably be enough but if it is huge....

Also, dont see it as stealing if you get code from other programs that already work! Just leave a small credit note and be done :) This is refrence to DroidSheep which always worked perfect: Use that method that be done with it :) Why reinvent the wheel?
[Android Apps and Games] evilsocket:
You are probably ( surely XD ) right ... anyway, you can stop the network monitor manually from the options menu ... in the next release will be implemented an "auto stop" when you select any "overload sensitive" module.
[Android Apps and Games] ArmedandDangerous:
Just reached home and tried it. Still can only see myself,subnet and router ): Will just wait for a working version while testing every new version that comes out :P

Cleared cache and dalvik cache and fixed permissions through recovery, same thing ):
[Android Apps and Games] riahc3:
CONFIRMED

I have repeated the process about 3 times: Open the program, monitor starts, as soon as I see the target I stop the monitor, select the target and 2 attacks have worked perfectly (javascript and replace text)

Also, the program in general is MUCH quicker when the monitor mode is stopped.

Solution: As soon as the target is selected, stop the monitor mode. If someone crazy wants to keep it on, make a option for it in the menu.

Tell us about your phone :)

ROM, kernel, version of Android, etc........

Also open a terminal and ping a device that isnt on the list to make sure it replies.

---------- Post added at 12:59 PM ---------- Previous post was at 12:55 PM ----------

Confirming that Session Hijacker works too with my method.
[Android Apps and Games] ArmedandDangerous:
Android 4.0.4

Busybox 1.20.2 installed in system/xbin

ViperX 2.7.1

Faux kernel 11m

Pinging from Terminal Emulator, I'm getting a Destination Host Unreachable. Not sure why cos 1-2 days ago I could see my desktop on the network ):
[Android Apps and Games] riahc3:
(I dont mean this in a rude way as internet doesnt have tone of voice :P )

As soon as you fix that, then you can come back :) If it doesnt reply, there is no way dSploit is going to work...
[Android Apps and Games] dexter93:
An option to show the app in the notification bar, so that you can leave it working in the background and restore it later would be nice :)
[Android Apps and Games] riahc3:
BTW, session hijacker has a glitch: When searching the subnet mask network (and a specific target) it says the site but it always says the IP of the Android device.

Example if Im sniffing 192.168.1.98 and my android has 192.168.1.52

it says

192.168.1.52

facebook.com

192.168.1.52

google.com

instead of 192.168.1.98

I say this because if im sniffing the entire 192.168.1.0 submask, i should recieve things like

192.168.1.52

facebook.com

192.168.1.52

google.com

192.168.1.50

facebook.com

192.168.1.50

xda-developers.com

etc.

This way we can know what PCs are going to what sites....
[Android Apps and Games] dexter93:
Confirm that
[Android Apps and Games] riahc3:
Also, this might be site specific but if Bob is surfing xda on PC 1 and I sniff his session and rob it and navigate as Bob on Android 1, if Bob on PC 1 tries to Quick Reply it glitches/doesnt work. That might be site specific if it checks for duplicate sessions.

In DroidSheep I remember that this was possible (surfing two sites with the same session at the same time) but I dont remember what sites.....

---------- Post added at 01:13 PM ---------- Previous post was at 01:12 PM ----------

Are you asking me to confirm that or are you saying that you yourself confirm that this glitch exist as well on your device?
[Android Apps and Games] dexter93:
Im confirming it ;)

I have the exact same issue. On hijack it shows host device's ip, not target's
[Android Apps and Games] riahc3:
OK :)

It should show the target IP, the MAC address and the session ID (besides detecting what site/page/domain/etc is)
[Android Apps and Games] ArmedandDangerous:
Ok, disabled my router's built-in firewall, I can see my desktop again. However I can only port scan, vulnerability scan and inspect. Nothing else seems to work ): I've got no firewall nor AV installed on desktop.
[Android Apps and Games] riahc3:
Searching around Ive found this:

busybox ifconfig wlan0 hw ether 00:11:22:33:44:55

The interface should be detected (as some dont use wlan0) and thats it.

BTW, I know this is a temp solution; It wont permantanly change your MAC address.....

Im just mentioning it as I imagine you looked into it but just commenting it.

---------- Post added at 01:30 PM ---------- Previous post was at 01:28 PM ----------

Did you do what I confirmed?

As soon as you see your desktop in the list, stop the monitor mode and then select it to attack it and run whatever attack you want.

Test this first :)
[Android Apps and Games] ArmedandDangerous:
Yup, I selected then I stopped network scan. Trace,Port Scanner, Inspector and Vul Finder works, but none of MITM works ): Does it matter that my desktop is using an USB WiFi antenna?

EDIT 1 : I somehow managed to do a session sniff, caught my own FB account, but it takes ages @_@ I thought it was gonna be near instant like droidsheep haha. Took the better part of 3-5 minutes to get my FB account.
[Android Apps and Games] Ruzzah:
Could we have the ability to have multiple sessions open, aka password sniffer and session hijacker. It would also be a neat feature to have a mac changer, for some devices so you can set it to 00:11:22:33:44:55 or any other number to prevent capturing of the real mac address. Plus, on crashes or killall errors, you should have some sort of automatic script that runs the busybox commands, etc checks versions and alerts the user that they need to update, and gives them an option to download the busybox installer app on the play store.

This seems like a neat app, sometimes it doesn't work for me, maybe Cisco routers are more secure and prevent this type of injection, however it still logs network activity? Weird...

Session hijacker is a bit weird too, it doesn't show the correct ip, when I used session hijacker, it reported all ips to be mine, even when I scanned a specific person it seemed to have logged everyone else too.

Good luck, when I have money I'll donate it towards this project.
[Android Apps and Games] evilsocket:
Issue opened https://github.com/evilsocket/dsploit/issues/71 .

Mac changing is unstable on many devices .
[Android Apps and Games] riahc3:
Shouldnt matter at all.

Its beta software so there is a lot of code problably in testing/debugging/etc.......For me it was near instant, results as such may vary.

That issue should be pretty easy to fix because the attacks are based on MAC address and its easy to sniff a MAC address and find its IP :)

Ah, its unstable, thought that it was undobale.

It would then a feature that simply says "Do at your own risk". There have been A LOT of requests about that so maybe you should just put it in (with the UNSTABLE tag added in big bold red text black background)

---------- Post added at 04:22 PM ---------- Previous post was at 04:09 PM ----------

Related to the scanning all the time, I think it asks for permissions way too often which at the same time creates glitches. I know you said that it is currently nonavoidable but there has to be some way to make it ask less...
[Android Apps and Games] evilsocket:
eheheheh ok :)
[Android Apps and Games] Ruzzah:
I know the mac changer will work successfully on my device, galaxy s2, if you can implement it and ask for feedback from people asking if it worked or not and putting a list together of devices supported and putting it in the application to alert users, about their device and if it is allowed.

busybox ifconfig eth0 hw ether 00:11:22:33:44:55

Also let people "copy" other mac addresses on the network, that'd be a really cool feature to have. Good luck
[Android Apps and Games] riahc3:
There are A LOT of variables when it comes to spoofing a MAC address. I can understand everyone wanting it but he might want to aim for something stable and 100% working so....
[Android Apps and Games] evilsocket:
exactly
[Android Apps and Games] riahc3:
Quick article on ideas on how to implement IP to MAC discovery:

http://compnetworking.about.com/od/networkprotocolsip/f/convertipmacadd.htm
[Android Apps and Games] evilsocket:
I know how to do this, it's quite simple. tnx anyway
[Android Apps and Games] riahc3:
Maybe in the menu (where that "Exit" option is going to be ;) :p ) you can add a unstable MAC changer in the future. But I agree with your viewpoint of aiming for a solid 100% stable release THEN going for things like this....
[Android Apps and Games] Ruzzah:
You're right, if evil was to implement something to check network names, theres a few different ones such as eth0, wlan0 etc on android devices, with busybox updated shouldn't evil give it a go. This feature is apart of busybox, so I don't believe there will be a risk in this? What's the worst that can happen, the mac not being changed?
[Android Apps and Games] riahc3:
I ment no direspect at all :) Simply trying to help :)
[Android Apps and Games] evilsocket:
No, your connection not working until reboot :)

Yeah i know, i'm kinda busy right now ( at work ) so i may seem rude, but trust me i'm only full of work to do :D
[Android Apps and Games] riahc3:
Worst that can happen is Android messing up its TCP/IP connections. And, I personally dont know Android's API in and out, but god knows how that will effect the cache....

IMO, if evilsocket is so reluctant to add it, there must be a reason. lets trust the devs.

---------- Post added at 04:49 PM ---------- Previous post was at 04:48 PM ----------

Damn it, stop replying so fast :laugh: :p
[Android Apps and Games] Ruzzah:
I tested that MAC changing line, and it seems that the mac address gets reset back to original once you turn wifi on/off. Also storing the original mac address and setting that back will fix the internet connectivity?

Always I reckon this would be a pretty nice feature. I believe every other phone should also reset the mac address. Can you have a go yourself, using the ifconfig in terminal.

ifconfig wlan0 hw ether 00:11:22:33:44:55

and type ifconfig again to see if the mac address changed, try restarting wifi and see if it reset. I hope you add this feature in, I'll stick to running the script for now on until you decide.
[Android Apps and Games] evilsocket:
1.0.23b is out!

Changelog:

Some LD_LIBRARY_PATH issue fixing attempts.

Now the Hijacker shows facebook profile picture and name, the same for XDA accounts :D

Fixed issue #71 : Hijacker shows host device's ip, not target's .

Fixed issue #70 : Auto stop network monitor when user selects a target ( you can manually restart it from the options menu, or use the manual scan icon ).

Fixed issue #36 : Unexpected application restart.

Misc fixes and code refactoring/optimization.
[Android Apps and Games] metalwraith:
Nice, That gave me a laugh when I saw my face pop up next to the xda website link... lol

When I get back to work and get some money rolling in again, I'll definitely donate to this. Keep up the nice work.
[Android Apps and Games] evilsocket:
:highfive: tnx dude
[Android Apps and Games] :
Is this rom or kernel related or something third?

I mean the issue
[Android Apps and Games] evilsocket:
I'm trying to understand that yet, but i suppose is something rom related since it's the linker which is bugged.
[Android Apps and Games] :
I'll try changing rom then and see if it works. :)

Edit: It's definitely rom issue, just tried to scan my net with zAnti and same problem, zAnti worked before.
[Android Apps and Games] evilsocket:
Let me know :)
[Android Apps and Games] dt0x:
Don't really post much, but I wanted to thank you for all your hard work on this app!
[Android Apps and Games] evilsocket:
i really appreciate it :) :good:
[Android Apps and Games] rootdnbootd:
Hi

Works absolutely fantastic on my gingerbread HTC Wildfire Nightly =D

I'm curious thou, due to my limited internal memory is there any way of forcing the app to do everything from the SD Card?
[Android Apps and Games] Ruzzah:
Do you know why ARP doesn't work with EAPS TLS WiFi at my school, they have Cisco routers if that makes any difference, and multiple AP's too. Thanks
[Android Apps and Games] MemoryController:
Can't arp spoof on eap tls protected networks, it's not a bug
[Android Apps and Games] riahc3:
It needs documentation but not a seperete forum and/or website. XDA is home for MANY projects like yours.
[Android Apps and Games] Ruzzah:
Is there some alternative methods of using mitm on TLS eap?
[Android Apps and Games] riahc3:
Ive seen youve implemented the Monitor autostop........

For some reason, it stops but it still says "Stop Monitor Mode".
[Android Apps and Games] Ruzzah:
When you mitm a specific IP, it still records all