yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] evilsocket:
nah i like the way it is right now :) tnx for you suggestion anyway
[Android Apps and Games] evilsocket:
yeah but you are on the dalvik virtual machine, unless you wanna implement some native cracking tool :)
[Android Apps and Games] Ruzzah:
The funniest part is some routers have default WPS pin, you can't change it. And some you can't even turn it off. Quite sad tbh

---------- Post added at 02:18 AM ---------- Previous post was at 02:17 AM ----------

You can! Haha. I wish I could, I would try but you're the expert on this.
[Android Apps and Games] riahc3:
No problem. We beta testers test everything including the site lol

---------- Post added at 05:21 PM ---------- Previous post was at 05:20 PM ----------

I know, the algorthim isnt too complex either.

Problem is that currenty dSploit acts what its connected to; It doesnt do anything when it isnt connected to something (for example, cracking a WPS PIN) It would involve evilsocket doing some changes to his app. Lets see if it wants to :)
[Android Apps and Games] Ruzzah:
The problem is though it takes a while due to the router not allowing it to be spammed with WPS requests. Maybe a Mac spoofer would work in this case, however its probably been thought out by the people that made it and they've made it global rather than based on a Mac request.

---------- Post added at 02:26 AM ---------- Previous post was at 02:24 AM ----------

Would not be too hard, give a few more options when you start the app, either WPS cracker, ssid finder, aka external based or the internal based attacks.
[Android Apps and Games] evilsocket:
As it's already been said, mac spoofing is not an option.

easy

if( isWifiConnected )
{
normal stuff
}
else
{
show confirmation dialog with "Wanna launch the WiFi scanner ?"
if( YES )
{
launch the module
}
else
{
go f**k yourself, i'll just show the "checking for updates ..."
}
}
[Android Apps and Games] Ruzzah:
Options: "enter pin", "brute force", "try defaults". You can find defaults based on ssid, if someone leaves their router called net gear, like me haha. There's default pins all over the web for routers.

It would also be nice to save state and continue another time rather than starting over.

I would love to test the new version, if you can make it so you can enter a pin as an option it would be nice, so I can test it with my router.

I'm surprised someone suggested the same idea a few hours before me, I read an article about how hiding ssid is not safe, doesn't protect you anymore than showing it and they reviewed a program on windows called inssider, so I saw there's an android version and I thought you could implement it into your app, as well as the WPS attacks.
[Android Apps and Games] dorqus:
evilsocket - do you EVER sleep???? I see you posting on here 24/7! I posted a feature request on your github, and you assigned it to yourself in less than one minute! Thank you!!!
[Android Apps and Games] evilsocket:
ahahah 17.41 here :D i'm in the office i work from 10.30 am to 18.00, come back home, arrive around 19.00, go out with my dogs, dinner, girlfriend, then i code until 3/4 am :)
[Android Apps and Games] Ruzzah:
Yes evil does sleep, its just the time zone differences you're seeing. I see evil online at midnight at my time.

---------- Post added at 02:55 AM ---------- Previous post was at 02:42 AM ----------

I'm going sleep, I hope you implement that WPS cracker and ssid unhider in, or at least add the menu just in case :D
[Android Apps and Games] riahc3:
Not allowing to be spammed with WPS request is a vender feature, not part of the standard. Some have a delay, some dont.
[Android Apps and Games] evilsocket:
1.0.27b is out!

Changelog:

Removed loader from hijacker browser.

Fixed issue #61 : Open service with" feature.

Fixed issue #102 : User wordlist for login bruteforce.

Minor ui fix on login cracker layout.

Fixed issue #109 : Improved hijacker browser.

Brand new application icon, big thanks to Mohammed Alokaily ( m0hmd88 ).

Fixed issue #106 : Reimplement connection killer & password sniffer with arpspoof.

Fixed issue #105 : Enable ip forwarding with iptables too.

Switched from nmap host discovery to udp probe host discovery.

Fixed issue #36 : Unexpected application restart.

Fixed issue #91 : Endpoints problem.

Fixed issue #96 : dSploit doesn't list all IP's on the network, different subnets.

Fixed issue #100 : Session hijacking stucks at "loading page".

Fixed issue #99 : When exiting with the back button, icon stays in the notification bar.
[Android Apps and Games] metalwraith:
And I see a cute new icon for it too... lol :silly:
[Android Apps and Games] evilsocket:
yep :)
[Android Apps and Games] dorqus:
I kind of liked the old icon....
[Android Apps and Games] jwds1978:
The latest version now shows me other devices on the network. :thumbup: However, my device restarts itself whenever I start one of the MITM attacks (i.e. password sniffer, session hijacker) now though. :(

--

Sent via Tapatalk 2 from my TELUS HTC Amaze 4G on the Fido network.
[Android Apps and Games] Cominox:
I have some graphic skills, i can help you with stuff ( splash, icons,...), i run a frensh website for photoshop and after effects tutorials, contact me if you want some high quality design to the app. my service is of course free :D
[Android Apps and Games] louforgiveno:
Great progress...I now can see devices connected on network, but still get "no open ports" message with inspector
[Android Apps and Games] ObiWan_C:
The new version crashes as soon as i start the app.

Here is the log.
[Android Apps and Games] dorqus:
Looks like your DNS is broken, or you're in an area with no internet access.

"java.net.UnknownHostException: Unable to resolve host "raw.github.com": No address associated with hostname"
[Android Apps and Games] Fishuu:
Working!

Session Hijack , Replace image ummm .... thats all that i wanna use :laugh:

Alot of improvements tho...

Keep up the good work!
[Android Apps and Games] nikant:
:good: now I can see other clients in my network but port scan, trace etc. still don't work.. (dns on the phone is set at google DNS servers if that has to do with anything.. )
[Android Apps and Games] dorqus:
1st log says you are not connected to an access point.

Did not look at the second log file, sorry
[Android Apps and Games] nikant:
Well I'm posting from my phone so I guess I'm connected to an AP.. :rolleyes: and yes previous post and log uploads where also from my phone..
[Android Apps and Games] ByteSizeSln:
When I do a MITM, Simple Sniff or Password Sniff, Windoze XP gives me an address IP conflict error. I can reload pages successfully, but it would be a red flag :)
[Android Apps and Games] dick8843:
Would love to see the WPS cracker implemented as discussed earlier. I recently used reaver on my router and it took 4 days to crack my Wpa2 PSK. Would love to see this with a resume later feature. . Great work on this app so far. well done!
[Android Apps and Games] riahc3:
I was going to post that the autoupdate was broken but it just took a while.........

Downloading the update on the phone is again slow...........

---------- Post added at 09:00 AM ---------- Previous post was at 08:59 AM ----------

When you download a update, do you stop monitor mode automatically?

---------- Post added at 09:02 AM ---------- Previous post was at 09:00 AM ----------

Another thing, what if I want to cancel downloading the update? The back button doesnt do anything.

Another glitch: If I cut off internet access, it gets stuck. Not sure if there is a timeout or something but now Im stuck with "Downloading update" and really cant do anything except kill the app.

---------- Post added at 09:07 AM ---------- Previous post was at 09:02 AM ----------

Installer sasy DSploit while app says dSploit

---------- Post added at 09:07 AM ---------- Previous post was at 09:07 AM ----------

I agree with some other comments: Not liking the new icon personally.
[Android Apps and Games] nikant:
well.. I can't reproduce my previous error log.. since when I'm running dsploit now it won't write any error log to SD while using port scan, trace, inspector do nothing.. return i.e. no open ports found etc.

MITM - Replace Image: seems to work

- Redirect : works with IP, my client which I test on (linux laptop) can't load if I put an http address in dsploit

the attached error log is from I used MITM redirects and password sniffer
[Android Apps and Games] ObiWan_C:
Well it wasn't the DNS or network problems, it was one router on my network that was set up as a repeater that was causing this. After shutting it down the app stopped crashing. But it doesn't work will, will not discover any open ports on the hosts. I have a samba server running on a debian box and the app doesn't see any open ports. Its the same on all hosts on the nework.

Any idea?

Sensation 4G using xda app-developers app
[Android Apps and Games] UEman:
The notification shows the old icon instead of the new.
[Android Apps and Games] riahc3:
The "Stop Network Monitor" and "Start Network Monitor" bug is still present.

---------- Post added at 09:33 AM ---------- Previous post was at 09:28 AM ----------

Redirect still does not work/is very very very slow (unuseable)
[Android Apps and Games] evilsocket:
Opened new issue.

Thanks, but there's already a guy who's doing the graphics :)

Try with normal port scanner.

Will check

New issue opened.
[Android Apps and Games] evilsocket:
those in the debug file are handled exceptions, i need the logcat, tnx.
[Android Apps and Games] :
Finally working thank you evilsocket
[Android Apps and Games] evilsocket:
wtf you have the old icon ? O.o
[Android Apps and Games] :
Don't worry about that, its not app issue. I compiled it from your git myself to allow portrait mod. Who knows what i did....

Original app has new icon.
[Android Apps and Games] evilsocket:
ahahahahah ok :)
[Android Apps and Games] MegaHz:
nice :) share to us the portrait version please
[Android Apps and Games] evilsocket:
don't ... the app will crash if you rotate the screen during some operation.
[Android Apps and Games] :
nope, sorry, if evilsocket wants it in landscape its his choice. When he is ready to make portrait version he will:), but app is open source you can do whatever the hell you want with it:D

I changed all "landscape" tags to "portrait" in manifest so it sticks to portrait
[Android Apps and Games] jwds1978:
If whether the applications in landscape or portrait is only an issue if it's rotated during certain operations, perhaps (if possible) a configurable within settings to select one or the other; locking it to that mode until restart or something?

--

Sent via Tapatalk 2 from my TELUS HTC Amaze 4G on the Fido network.
[Android Apps and Games] riahc3:
Please, do not post bugs/issue if you have modified the code. These things can turn evilsocket crazy if you find a bug but have complied your own version.

This is directed towards everyone in general :)

evilsocket - Im going to send you a PM about something :) nonrelated.
[Android Apps and Games] evilsocket:
go ahead :)
[Android Apps and Games] themsubtle:
On the I9300 I have fully closed the app but I am still getting "new endpoint found" notifications every minute or so.

Sent from my GT-I9300
[Android Apps and Games] riahc3:
How did you "fully close" the app?

Also, this happened to me once and the next time it autofixed. Has it happened more than once?
[Android Apps and Games] :
Looks like port scanner and inspector doesn't work(original app)

No ports found
[Android Apps and Games] Nucleotide:
This is a really interesting app.

I haven't had a good chance to test all the features but what I did notice is that even when I've exited the app, it remains running in the background using 100Mb memory. I think there might be a slight issue there. :D
[Android Apps and Games] evilsocket:
How do you exit the app? Double back or home?
[Android Apps and Games] rirozizo:
loving the new icon :D and the other stuff.

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] ciao99:
+1; but at least i can finally test the app! :victory:
[Android Apps and Games] Dr.69:
Love the new icon :) although, the old one made me feel kinda evil and dark:cool:
[Android Apps and Games] dorqus:
Your logfile says this:

java.net.NoRouteToHostException: Not connected to any WiFi access point.
at it.evilsocket.dsploit.net.Network.<init>(Network.java:83)
at it.evilsocket.dsploit.core.System.init(System.java:122)
[Android Apps and Games] rodricho:
many thanks for coding and sharing this fine app! however, I was wondering if the password sniffer is working for somebody? Everything is working just fine for me, except the password sniffer (https and http).

cheers
[Android Apps and Games] defconoi:
Finally hosts are finally found on the galaxy nexus, however port scanning finds no open ports
[Android Apps and Games] arion604:
Excellent app. Just a comment. For me everything seems to work on the .25 version. The latest one as previously commented I'm unable to get password sniffing to work either.

Keep up the great work!
[Android Apps and Games] MegaHz:
general suggestion..

Evilsocket, one general suggestion on the whole MITM concept...

since many people want the session hijacking to also capture passwords and the password sniffer to also be integrated with session hijacking i am thinking of this:

to have a screen that will be generically capturing the traffic and distribute/seperate it in sections and applications, similar as the cain and abel for windows is doing.

for example dsploit could start dsplaying sections (on the fly, as traffic is being detected) like:

FTP sessions, this will display passwords and also if you click on it, it will log you into that ftp

MSN sessions, you can see msn conversations

HTTPS/HTTP sessions, facebook, twitter and you can hijack those

IMAP,

VNC,

POP3,

SMB

similar approach etc, etc

like cain and abel screenshot attached.

what do you think?
[Android Apps and Games] anazhd:
i know right? v26-v27 updates broke MITM and others. Emailed evilsocket hours ago, and yet I have another problem after another.
[Android Apps and Games] Nucleotide:
Double back. :good:
[Android Apps and Games] crystal eyes:
I can session hijack but sometimes application hungs when exiting session hickacking. I'm on 27b
[Android Apps and Games] Midaa:
Thank you for this excellent app. I've just discovered that https everywhere was not protecting my accounts :mad: I hope you will add SSL Strip some day
[Android Apps and Games] digi7:
I like this idea! However due to the fact that it would capture a great deal of data it would be bad for speed, battery and functionality to do this all at once (or not?). Suggestion you can include a separate "Super Sniffer Button" to capture all traffic then separate into categories (like Cain above) or event export to .pcap file. :D
[Android Apps and Games] iza:
No killall binary ? :(

Hi Evilsocket, I still can not make dsploit to run.

"Full busybox required, killall binary not found..."

I installed the latest 1.20.2-cm9 from Jrummy Busybox Installer.

Tested with terminal emulator can run command: killall

I've made also link (ln -s) killall to busybox in sbin, system/bin, system/xbin

The killall command seems working fine in terminal.

But I still got killall binary not found... :(

Xperia Mini Pro | RealICS 6 | Mesa Kernel 1.9 | Busybox 1.20.2-cm9 | Dsploit 1.0.27b

Any suggestion ? Thx.
[Android Apps and Games] crystal eyes:
We have the same problem with my galaxy note SHV-E160L running 4.0 stock rom. I cant get it working. Then I bought galaxy note GT-N7000 running 4.04 stock rom

Now its working but on 27b, sometimes my phone hungs but not all the time. So I think there is an incompatibility issues with some phone/rom, but not sure
[Android Apps and Games] SecUpwN:
I don't like that the program doesn't even open without being connected to a WIFI. Would you please change it so that I can fully configure dSploit while using my phones internal internet and when starting the penetration test click "connect to target WIFI now"?
[Android Apps and Games] evilsocket:
First of all, i'm sorry if it's been hours since i don't answer you, but yesterday i've got this job interview ( yep i'm changing my job ) and when i came back home i was really tired.

Gonna fix it, i'm 99% sure of what caused this.

Excellent idea, but password sniffing and session hijacking are handled in very different way, it would be too heavy on you device to accomplish such tasks at the same time.

I'm not a computer, i could be sleepy/tired/whatever once in a while you know ?

sslstrip it's arelady in there :)

http://www.dsploit.net/#faq

I don't know what version you are running, but latest versions DO open without wifi.
[Android Apps and Games] SecUpwN:
My bad, thanks for the upgrade hint! Oh and hey.. I very much like the new button logo. It's so.. evil. :)
[Android Apps and Games] iza:
hi evilsocket,

can you just disable that 'no killall...' error?

because i'm sure that i have killall binary, and my busybox is the latest and not corrupt.

thx.

or maybe you can work that out by some idea?
[Android Apps and Games] Nokijima:
By any chance will you ever include the remote exploits that are found in Anti?
[Android Apps and Games] evilsocket:
http://www.dsploit.net faq sections:

I don't know how you installed busybox, try to use busybox installer
[Android Apps and Games] evilsocket:
maybe, who knows :)
[Android Apps and Games] iza:
yup

I'm using that Jrummy busybox installer.

I'm using busybox version 1.20.2.

anything else?

I tested my killall command in terminal, it runs fine.

I would to test run Dsploit anyway... :)
[Android Apps and Games] metalwraith:
Good luck on the new job prospects. One thing I hate interviewing for jobs.... lol
[Android Apps and Games] evilsocket:
try to run ( from you terminal emulator )

sh
which killall

and give me the output plz :)
[Android Apps and Games] evilsocket:
thanks! the CEO is a friend of mine so it went pretty well and was a pretty friendly interview :)
[Android Apps and Games] devrruti:
Maybe one interesting thing would be to be able to see which pages are being visited, would that be possible or do you plan to have this in the app?

I would love to see some kind of drifnet for android too, there is an app called piik, but it didn't work on my phone.
[Android Apps and Games] evilsocket:
it's possible, but for every new feature i have to consider how much time would it take to be implemented, and how much it would be REALLY useful ...
[Android Apps and Games] devrruti:
Well one could see which pages are being used and then try the right mitm attack, because now you don't know if there's anything interesting in the net to attack and you do it blindly.

You don't know if they are using YouTube, so you don't know if you should do a YouTube video replacement

Maybe they don't have any open account or maybe you are doing a session hijacking but it doesn't work, and you think that they are not using any account and are just surfing the net, but they are stuck with a warning trying to login. In my net with chrome and https everywhere I just got a warning and could not login to gmail.

Of course you have priorities and it would be better that you focus in what is interesting to you, so you don't get bored with the project, I'm just trying to explain the use of this. Thanks
[Android Apps and Games] iza:
Ok, I got it to run on my android! thx.

The problem is not in 'killall', it's I don't have 'which' binary (no 'which' symlink to busybox)

So I just make a 'ln -s /system/xbin/busybox which' in /system/bin.

I think your app should also check whether the gadget has also 'which' binary or not.

By the way, this is an amazing app you build here bro! thx.
[Android Apps and Games] evilsocket:
You see? You hadn't a full backbox installation :D ahahah jking ... glad you solved, enjoy the app! :)

BTW guys, we are almost at 30.000 downloads ... once we reach 30K, i promise i'll post a photo of myself naked :cowboy:
[Android Apps and Games] MegaHz:
nooo NOOO please you don't have to do that.. :D crazy italians
[Android Apps and Games] evilsocket:
you could regret this U.U
[Android Apps and Games] MegaHz:
Super Sniffer button sounds good :)
[Android Apps and Games] kosivi:
It isn't nenecessary to be naked, but I would like to see how do you look (with clothes) :P
[Android Apps and Games] evilsocket:
ahahah ok, on 30K i'm gonna post a picture of mine :D
[Android Apps and Games] CR5N:
You do realise MITM attacks will go nuts with this addition! ;)
[Android Apps and Games] evilsocket:
lol i meant i'll post a picture of mine HERE! XD
[Android Apps and Games] kosivi:
Now when the app's icon is new, don't you think that the baner and the website favicon should be changed too? Maybe some designers are needed :D I am not skilled, but didn't have what to do, so I made an example for a new baner:
[Android Apps and Games] evilsocket:
thanks, there's already m0hmd88 who is working on graphics ;)
[Android Apps and Games] metalwraith:
Of course the file I used to make the original in gimp I lost due to switching to a different OS on my pc.
[Android Apps and Games] SecUpwN:
Exception: You're a girl. Then naked is mandatory! ^^

Good you think about it, but please let it do somebody who has knowledge of fonts and colours. Thanks.
[Android Apps and Games] umpire7777777:
Maybe something for the OP.

Of you are installing busybox for the first time, you need to choose 1.20 only. The minor updates .1 or.2 appear incomplete.

After installing 1.20, you can then update to the latest version.
[Android Apps and Games] ObiWan_C:
Here is the log
[Android Apps and Games] crystal eyes:
I think your phone have issues not dsploit. that is what happen with mine. I did factory reset then instal everything from my buckup
[Android Apps and Games] Kaboosey:
Hello guys,

Is it possible or is there any way to kill more than one connected client on the network?

Thanks.
[Android Apps and Games] crystal eyes:
I tried selecting the subnet but it will all disconnect clients
[Android Apps and Games] fatcobrah:
nice work but i tried MITM and it doesn't work here it only works if i select single ip

password sniffer dosnt work too ,i've tried it for http https (router + single ip )
[Android Apps and Games] kristijan.mkd:
Is there any tool for Windows7/8 you can install to protect yourself from these MITM attacks?
[Android Apps and Games] MegaHz:
Try http://www.irongeek.com/i.php?page=security/arpfreeze-static-arp-poisoning
[Android Apps and Games] waiters:
Kaspersky and symantec has products that protect against arp attacks..
[Android Apps and Games] evilsocket:
Morning guys ( 12.38 here :D ), dSploit is over 30.000 downloads!

As i promised, here i am ( with clothes, if someone really want a pic of me naked, pm XD )
[Android Apps and Games] darkfloo:
I have tested zANTI and nothing work ? Do you think it is my rom ? I used miui
[Android Apps and Games] ilMessia:
Edit: i've just realized it happens even when i go into menu--> settings, and even whit the new version

Inviato dal mio Galaxy Nexus con Tapatalk 2
[Android Apps and Games] evilsocket:
Mh i don't think so ... you probably have ( which is good! ) some kind of arp spoofing protection on your router :)

The best way to find this out is doing some tests on other wifi networks.
[Android Apps and Games] evilsocket:
pretty weird, the settings menu just reads and writes shared preferences from/to a xml file :S
[Android Apps and Games] ilMessia:
SOLVED! My bad, i just needed to uncheck "Non conservare attività" under developers settings, now i have no more problems!

Inviato dal mio Galaxy Nexus con Tapatalk 2
[Android Apps and Games] evilsocket:
Ahahahahah [ita]tutto è bene quel che finisce bene[/ita] great! :D I could go crazy with that XD Are you a developer too ? :)
[Android Apps and Games] ilMessia:
I'm still at my first steps ;)

Inviato dal mio Galaxy Nexus con Tapatalk 2
[Android Apps and Games] evilsocket:
Well me too, dSploit is actually my first "serious" app on Android, so good luck to both of us! :good: :highfive: