yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] FoulDroid:
Good news !!! Thx :)
[Android Apps and Games] evilsocket:
Thanks! I've used your guide to create a "How to Contribute" section in the website, if you think there's something else to add, the website itself has its own github repository :)
[Android Apps and Games] evilsocket:
New How to Open an Issue website section.

If you find a bug, weird behaviour, missing translation, a feature not working or anything strange in the application you are encouraged to open an issue on the appropriate github page.

For your issue to be considered and solved ASAP please provide the following informations while opening it:

Your Device model.

Your ROM name and version.

The version of dSploit your are running.

As many details as possible on the network you are running dSploit on.

A description of the issue you have, if it is a MITM feature not working, please specify if the other MITM features are working on your network.

A logcat taken while the application was running and the issue happened.

Any issue which will not contain those details, will be signaled with a link to this page and closed from 24h to 48h later.
[Android Apps and Games] julle131:
What license does the website use? Mainly asking is I can use it for my school work. We have to make websites, and that would be a perfect base for them :D.

I am asking because I didn't see it in readme.
[Android Apps and Games] evilsocket:
Well "do with it what you want license" is ok? :)

Basically it's just a jekyll based website, so I don't think it will be any useful for your purpose since it's not html, but just a bunch of markdown files with a ruby templating system.
[Android Apps and Games] zuluman:
i flashed the last aokp night build. when session hijacker, apper "no alive endpoint" error.

this error occurrences from rom side or kernel side. ?
[Android Apps and Games] evilsocket:
Dude are you serious?!?!?!

I've just posted this.
[Android Apps and Games] Skoka222.:
Run on PC?

Is there any way to run .dhs on pc?
[Android Apps and Games] MegaHz:
.dhs is basicaly a .gz archive. unzip, hijack a random session on your pc, replace cookies and session values with the ones they are found in the unarchived files and if you are lucky enough you may get access.
[Android Apps and Games] tux_mind:
help me improving dsploit

hello guys, i'm developing an improved version of dsploit ( i'll send a pull request to the main repo once i finished writing code ).

my version adds:

- deeper services scan

- osvdb vulnerability lookups

- expoitdb search

- metasploit exploits search

- metasploit rpc daemon

- metasploit auto exploitation

- shell for handle opened remote sessions

i'm stuck on a big trouble: http://xdaforums.com/showthread.php?p=46031521

can someone help me?

my forked repo: https://github.com/tux-mind/dsploit

please write me on github if you want to join into repo collaborators.

any suggestion it's appreciated :)

thank you in advance :)
[Android Apps and Games] ArxDroid:
Great app :good:

+5 Thanks
[Android Apps and Games] tux_mind:
"Solved"

i'll push to my github repo ASAP.

bytes!
[Android Apps and Games] evilsocket:
wow that's great! please consider merging your branch with mine :) anyway, great job ;)
[Android Apps and Games] evilsocket:
A New Team Member … MetaSploit Coming to v1.1.0b!

http://www.dsploit.net/2013/10/02/a-new-team-member-dot-dot-dot-metasploit-coming-to-v1-dot-1-0b/
[Android Apps and Games] FoulDroid:
Excellent :good:
[Android Apps and Games] nyxzryu:
wanna try it :D

it will be more exciting if there's complete tutorial of what can we do using the apps
[Android Apps and Games] evilsocket:
the documentation, including textual and video tutorial is on the TODO list :)
[Android Apps and Games] TylerDurben:
F5, F5, F5, F5, F5, F5, F5, F5, F5, F5, F5, F5, F5.....

Good to See you back on the Road buddy ;)
[Android Apps and Games] julle131:
Compile it yourself? :D

I'm running latest version all the time, because I compile the releases myself :P
[Android Apps and Games] rirozizo:
if i had linux on my PC... i would've learned, compiled, and contributed.. STOP TEASING ME! :P
[Android Apps and Games] evilsocket:
You can compile it everywhere, I use Mac and Linux at home, Windows at work and I've compiled dSploit on every pc I use.
[Android Apps and Games] rirozizo:
really? i did not know that...

Back to google :P
[Android Apps and Games] evilsocket:
http://www.dsploit.net/how-to-contribute/ ... see "Contribute to the Code" section.
[Android Apps and Games] TylerDurben:
To bad, im in Hospital using my nexus 7... any chance to compile it on my device? *grin
[Android Apps and Games] evilsocket:
nope. I'm sorry ... well guys you made me think about starting to make nightly unstable apks ...
[Android Apps and Games] TylerDurben:
Peeeew, great idea!!!

Thumb's up!!
[Android Apps and Games] rirozizo:
yes, Yes, YEs, YES!!!
[Android Apps and Games] pan.droid:
YES!!!!!!! :thumbup: :sly: :D
[Android Apps and Games] evilsocket:
As you might notice from the right sidebar of the website, dSploit is now a Pledgie powered project, this means that you can now donate any amount you want with ease.

Please consider to make a donation to help us keeping the project alive and pay the monthly server and bandwidth price, or if you can’t afford a donation spread the word about dSploit and Pledgie donations … thanks! <3

To read the article and/or donate http://www.dsploit.net/2013/10/03/dsploit-on-pledgie-support-us/
[Android Apps and Games] julle131:
I sent you $3. I know it is not much, but might get you a cup of coffee or tea.
[Android Apps and Games] evilsocket:
Dude, one of the biggest monthly outgoing is coffee supplies XD seriously, thanks :) <3
[Android Apps and Games] rirozizo:
so i've been sitting on my PC trying to build dsploit.

i've cloned it, put my keystore there.

i got an error that androidmanifest.xml isn't found in the /dsploit folder, so i copied the one in /dsploit/dsploit folder.

i got another error saying that build tools 18.1.0 isn't found, so i edited build.gradle and changed buildToolsVersion "18.1" to 18.0.1... you should fix that in your website btw (i think, i'm still new to this)

now i have a new error "running aapt.exe failed see output".

---------- Post added at 05:57 PM ---------- Previous post was at 05:56 PM ----------

so i've been sitting on my PC trying to build dsploit.

i've cloned it, put my keystore there.

i got an error that androidmanifest.xml isn't found in the /dsploit folder, so i copied the one in /dsploit/dsploit folder.

i got another error saying that build tools 18.1.0 isn't found, so i edited build.gradle and changed buildToolsVersion "18.1" to 18.0.1... you should fix that in your website btw (i think, i'm still new to this)

now i have a new error "running aapt.exe failed see output". it seems this is because of the wrong android manifest.xml?
[Android Apps and Games] evilsocket:
You should import not the whole folder but just the build.gradle file, and for the buildToolsVersion matter, it's not something to be fixed but just something you have to install :)

Anyway I'm probably starting to make nightly releases so don't worry ;)
[Android Apps and Games] rirozizo:
i meant i copied /dsploit/dsploit/androidmanifest.xml to /dsploit/androidmanifest.xml...anyway, i'm tinkering with it, i don't know what the hell it would give me.

i've now copied /dsploit/dsploit/build.gradle to /dsploit/build.gradle and modified it, still androidmanifest.xml shows missing...

and btw, i have the latest build tools, which is 18.0.1 and not 18.1. EDIT: idiot... updating now... idiotic me

EDIT2: still getting missing androidmanifest.xml error... i give up
[Android Apps and Games] evilsocket:
You don't have to copy anything, everything is in the right folder, if you have such troubles this means you are importing the project in a wrong manner, or your IDE is not correctly configured, that's all.
[Android Apps and Games] rirozizo:
it worked, i misunderstood what you meant by saying dSploit/build.gradle in your guide, since there was two of them one inside dSploit, and one in the source code directory.

anyway, i got it to build, yay! that's my first time lol
[Android Apps and Games] julle131:
You are building under winders, am I right? After installing key storage and the details for it, ran gradlew.bat from cmd. For Java_home error, add java_home to system variables, and for android_home, add android_home system variable.
[Android Apps and Games] evilsocket:
Just for the record http://www.youtube.com/watch?v=Ow_R5HDYdwE :)
[Android Apps and Games] rirozizo:
now that's a fast internet! 2MB/s download speed while i have up to 128KB/s... life... it ain't easy
[Android Apps and Games] evilsocket:
I have a 100MB connection in my office :)
[Android Apps and Games] TylerDurben:
Can't wait to get my laptop to the rest of my fingers ;)

Could it be possible to build wit with https://play.google.com/store/apps/details?id=com.aide.ui ?

I own the pro version!

Sent from my Nexus 7 using my 7 fingers
[Android Apps and Games] evilsocket:
Honestly I don't know, never tried it ... but dSploit is really a complex project, I don't think something like that could build it.
[Android Apps and Games] :
I used to build older versions(before it was changed to gradle build system) without any problem. Aide is unfortunately not compatible with gradle, but you can always fix it manually so that it compiles.(which is probably not what you want :D)

Aide also supports ndk btw :)
[Android Apps and Games] julle131:
Well, the build started, but it takes a while with my S2.

The building started. You just have to go to dsploit/dsploit folder.

Edit: Nope, does not build without modifications.
[Android Apps and Games] TylerDurben:
This is what I got :'(
[Android Apps and Games] evilsocket:
Nightly Releases Available.

Since many of you asked how to compile dSploit themself to try the new features, and many of you had problems with that ( yeah I know, building an Android app is not as easy as compiling a “Hello World”, right? ), I decided to make nightly built apk available for everyone.

Continues here.
[Android Apps and Games] Kurre:
Nice work, thank you (and other contributors also of course) very much! :)

This app has been very useful for testing purposes and I'm glad to see it coming back. I'll try to remember to send few euros on the next payday :cool:

Btw, app wants to "update" to 1.0.31 version when launched, but most users probably know what's the case here ;)

Sent from my Nexus 4
[Android Apps and Games] evilsocket:
whoops my error, fixing asap
[Android Apps and Games] evilsocket:
fixed :)
[Android Apps and Games] murkom:
Hi. I'm using nightly build, but can't change language. Is it possible to make an option for that?

My phone is in portuguese, but i like to use apps in english.

Great app, great work ;)

If you need help with portuguese translation i can help.
[Android Apps and Games] antonhau:
Hi Evilsocket, been using your app for a while now and updated to the nightly since i couldn't get Session hijacking to work. But the new update won't install on my Galaxy SIII Android version 4.3. I get the error "Can't open file".

I'm also writing a university report on Android as a pen-testing tool. Would love to have a chat with you. Both about dsploit and perhaps the future of the app/subject. I have sent you an private message with my email-address if you got time to discuss.
[Android Apps and Games] midhato:
Where we can download image with metasploit

edit

i found it

http://www.androtransfer.com/?developer=tux_mind
[Android Apps and Games] mental01:
dSploit metasploit image problem?

I've downloaded the image, extracted everything using zArchiver to gentoo_msf folder and moved it to /data. The app says "Start MetaSploit RCPD" even when I press that button, it always says that, it doesn't matter if I'm using a nightly build or if I compile it myself. Is there a msf username and password that I need to enter or something or is it started but app doesn't report it as started? I'm not experienced in using metasploit and I'd appreciate a little help. The phone is Galaxy S3 using XXUFME7 4.2.2.
[Android Apps and Games] evilsocket:
I guess tux-mind should answer this :)
[Android Apps and Games] midhato:
In settings there is path to the msf image,
[Android Apps and Games] evilsocket:
11.000 currently active sessions and 5000 unique users worldwide … wow those are great numbers!
[Android Apps and Games] AgEnT x19:
Hi

I have a question/feature request and also I found a typo

Question first

Is it at all possible to perform password sniffing on multiple targets at once using dSploit?

if no, Can it be implemented?

and here is the typo

thanks in advance :D
[Android Apps and Games] evilsocket:
yes if you select the whole subnet
[Android Apps and Games] Spunjah413:
Fantastic work, keep it up!
[Android Apps and Games] mental01:
Unfortunately, no. I've been googling but no dice... It's probably because it's a nightly build.
[Android Apps and Games] SecUpwN:
[MENTION=4875730]evilsocket[/MENTION]: Missing a DARK, HOLO or HACKER style theme in the latest nightly! ;) If it already exists, how to set it?
[Android Apps and Games] evilsocket:
the app was redesigned, therefore there's no more dark theme.
[Android Apps and Games] maxl96:
Gentoo Image

How to use the Gentoo image?

Shall i extract it to data/gentoo_msf or only copy without extraction? :)
[Android Apps and Games] FoulDroid:
Typo? on my Nexus 7 2013
[Android Apps and Games] fabinhojcr:
dsploit in english

I translate it to I did that the translation into Portuguese but for lack of time translation is incomplete but gives to use, rsrsrsrsrs.

Unfortunately at the moment only gives you change the language of the app changing the system language.
[Android Apps and Games] julle131:
I am actually interested in this too. I cant seem to get it to work.

Sorry, no easy setting for it. But you can try http://xdaforums.com/showthread.php?t=1174443

I actually wrote a small guide how to translate to "How To Contribute" section of dsploit.net, so that you can help if you want.

[MENTION=320897]People[/MENTION] reporting typos:

There is now a small guide about translating dsploit in "How To Contribute" section of http://dsploit.net.

That way you can fix the typos yourselves ;)
[Android Apps and Games] FoulDroid:
not a typo but find the file : https://github.com/evilsocket/dsplo.../evilsocket/dsploit/plugins/mitm/Sniffer.java

Don't know how to correct this ...

would be :

{
private static final String[] SORT = {
"Bandwidth ↓",
"Bandwidth ↑",
"Total ↓",
"Total ↑",
"Activity ↓",
"Activity ↑",
};

arrow are not shown correctly...
[Android Apps and Games] Accountban:
This app just doesn't work for me
[Android Apps and Games] Pons:
Excellent post with tons of information. I know just how to fix the problem. By reading the OP (original post/first post) of this thread and following instructions. Namely this part:
[Android Apps and Games] devrruti:
I would like to use this app on a x86 cpu rooted Android 4.1 tablet.

I keep getting this error with all the released dsploit versions, nightly too:

Full busybox installation required, killall binary not found (maybe you have an old busybox version)

Please any clue on how to fix it? On my arm cpu phones works fine.

I have installed latest busybox 1.21.1 with this app

https://play.google.com/store/apps/details?id=stericson.busybox

I also tried this one, but it gave me an error saying busybox could not be installed

https://play.google.com/store/apps/details?id=com.jrummy.busybox.installer
[Android Apps and Games] dj1970uk:
Extract gentoo_msf.tar from bz2 to sdcard.

adb shell

cd data

mkdir gentoo_msf

cd gentoo_msf

tar -xf /sdcard/gentoo_msf.tar

This preserves file permissions.

Mine works fine.
[Android Apps and Games] julle131:
I'm sorry, but dsploit works only on arm devices.
[Android Apps and Games] mental01:
Thank you!

Thank you, it works now! If it asks to start it, it says already started so it works! Have my like.

Edit: not working... again... thanks anyway.
[Android Apps and Games] derride8:
I have trouble seeing, is it possible you can make one or add black theme to help me see it better.
[Android Apps and Games] jayjay3333:
http://xdaforums.com/showthread.php?p=46220057
[Android Apps and Games] murkom:
You translated it to Brasilian, not Portuguese from Portugal. It's different.

Found it, thanks ;)

But i don't want to mess with fabinhojcr work. There should be pt-pt and pt-br. If both edit the same file, we will be changing what the other is doing.
[Android Apps and Games] android_smiley:
Is there a German translation/translator? If not I'd love to do this work! :)
[Android Apps and Games] devrruti:
Really? Can anyone confirm this only works on arm?

The app starts you can see that it recognizes the network devices, and then the error appears
[Android Apps and Games] fabinhojcr:
Yes, only arm

---------- Post added at 12:43 PM ---------- Previous post was at 12:34 PM ----------

Upon addition of the translation, I do not have the option to choose between Portuguese from Brazil and Portuguese in Portugal.:(
[Android Apps and Games] Androguide.fr:
This is coming soon, I'll be working on adding an option to change between a dark & a light theme this weekend.
[Android Apps and Games] SecUpwN:
YOU ARE AWESOME! God bless you. :)
[Android Apps and Games] murkom:
True... I won't mess with your translation.

Hope this will be fixed. It's annoying to have software in pt-br instead of pt-pt. You probably say the opposite and it's also true ;)
[Android Apps and Games] fabinhojcr:
yes, because even though our language is easily understood each other we still have many words that are completely different...:good:
[Android Apps and Games] hyperkick:
mitm autoupdate target list

As a suggestion. Could an autoupdate function be implemented that updates the arp poison to include targets that came online on the selected network AFTER the arp spoofing was initiated? This, in my opinion, is a pretty crucial functionality...

Cant stress how much I'm looking forward to the next version:)

Keep up the good work
[Android Apps and Games] pan.droid:
Okay, so what can we use to guard our devices from dSploit and other known vulnerabilities?

I know of:

DroidSheep Guard (on hiatus)

WIFI Protector (on hiatus? mysteriously missing from Play)

SecDroid (on hiatus)

That's a pretty sad picture, no?
[Android Apps and Games] SecUpwN:
What does that mean?
[Android Apps and Games] Brandroid28:
Not being developed currently.
[Android Apps and Games] devrruti:
Good question, that's what I'm most interested in, and dsploit is a great tool to demonstrate privacy and security flaws, I'm not an expert so please correct me, my guess would be:

If you are using your own router,

- use a strong complicated long random password for your Wi-Fi (no dictionary words, lots of symbols numbers, uppercase, lowercase, combined)

- while entering your account details for the first time, or in the Android settings, don't allow google to get a backup, they will get your Wi-Fi passwords too

- use WPA2 aes encryption

- disable the vulnerable WPS

- Some routers even have an option to use independent Wi-Fi connections for each client, if enabled, on dsploit I can only see the devices connected by cable to the router, I assume that's something good too

- Try to use a router with openwrt, as they can be updated when new vulnerabilities are found

If you are not using your own secured router,

- use a paid trustworthy vpn service

- or make your own vpn (with your home router) so that you can make encrypted connections to your home router and from there it goes to the internet, you can even secure your connections in a stronger way using ssh tunneling over vpn

- You could also use your own paid mobile connection for like email, IM, fb... but if you decide to use an untrustworthy Wi-Fi, disable all account syncing and use apps or web browsers that don't have logged in or saved accounts.

Encrypt all the things! So it doesn't matter if they are intercepted (your gov has better tools than dsploit that listen and record your communications all the time) There are great opensource apps like, Keepass for your passwords, cryptonite for your files, k9 and apg for email, redphone or jitsi for voip, surespot gibberbot xabber jitsi for IM...

On your computers enable firewall, keep an updated system, and use Linux if possible.

Sadly most Android devices can not be updated unless the manufacturer decides to release a new version (lots of privative drivers make it impossible for custom roms) so there are always new bugs being discovered that could be exploited
[Android Apps and Games] pan.droid:
Thanx for the thoughtfull and through reply. I'm proud to say that I'd probably score an A+ by your standards. FYI (for those not following the latest whistle blower news): router manufacturers selling/manufacturing/headquartered in the US are required by law to backdoor their products for ease of interception by the three letter agencies. It's likely newer models are backdoored at the hardware level, in which case, no alternative firmware can inoculate users from potential abuse. Of course, late gen 4G devices are said to be back doored in just such a way, so go ahead and weep for the future of humanity. The seed is sewn, the game has been fixed and no amount of tinfoil, let alone commonsense, will spare the dissenter. And to think, nano tech is quietly following in the same footsteps, right now, as we speak. On the bright side, it makes one glad for his own, eventual mortality=/

As a novice, myself, I just can't help but wonder why AOSP patches can't be applied in real time for rooted and/or rooted+Xposed users (referring to Xposed Framework).

Then there's the pricy Zimperium zISP http://www.zimperium.com/ips.html which is probably also backdoored but would seem to suggest we're suckers for waiting around for this or that patch to trickle down to our devices in the form of an AOSP ROM. It boasts sandboxing capability, which I found nifty.

I agree, it seems so much of the art of pen testing tools is there ability to bring to light the implications of unpatched vulnerabilities. Unfortunately, we're in an unfortunate era where there's little reward in the privacy/security side of things considering the literal billions of dollars in vested corporate & government interests insuring the futility of such efforts, one way or another... it seems all anybody is capable of is throwing stones. That includes the three letter organizations=/ To hell with the fact that we're all in glass houses!

Absolute power corrupts, absolutely.

---------- Post added at 06:29 AM ---------- Previous post was at 06:23 AM ----------

BTW: Thank you to all those investing their time/skill into dSploit! I look forward to future innovation=)
[Android Apps and Games] devrruti:
Just an idea instead of that evil pledgie/paypal thing:

A simple webpage with feature requests and bounties to be claimed, with bitcoin addresses to make the payments.

People could donate to fund things they want, and devs could claim the bounties once done. Not very complicated and I guess it would boost developers' motivation.
[Android Apps and Games] mental01:
Problem compiling

Lately I've been having problem compiling dSploit, it says

and

I've been able to compile dSploit before, I'd appreciate if someone would tell me if something's wrong with my Android Studio settings or something as I didn't find a solution googling.

On the upside, MetaSploit framework starts fine now, by typing

su
cd data
mkdir gentoo_msf
cd gentoo_msf
tar -xf /sdcard/gentoo_msf.tar

into terminal and waiting for 1-3 minutes for dSploit to say MetaSploit started, and if you press menu it will say "Stop MetaSploit RCPD" instead of "Start MetaSploit RCPD" no matter how many times you press menu, or if it says start, pressing it again changes it to stop and doesn't say start again until I press it again. I also installed bash following these instructions, so if it doesn't start install bash using CWM and press menu to see if it says stop RCPD, and if it says start, press it and it should say stop instead of start.