yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] AlkaDragos:
This is truly amazing. I didn't had any opportunity to try it for real on a big network but tested on my laptop virtual router and no FC's or errors. Keep up the good work :) I don't really like only landscape mode but what can i do? xD if you don't have any compatibility requirements for this mode then would be a nice addition to add settings for mode if you don't like auto-rotate.
[Android Apps and Games] evilsocket:
I'll see what i can do :)
[Android Apps and Games] skeletonboy:
awesome job mate.

i tried it on my home network and so far it's all working like a charm. the only problem i had it's with the layout,when i have to input text my keyboard goes over the text field and i can't see what i'm typing. maybe a fast fix would be to allow the app to go also in portrait mode?

bella zì ;)
[Android Apps and Games] evilsocket:
I think this is not an application issue, but the standard behaviour of a text input in landscape mode .... i've already told why i do not support portrait orientation :)

Bella ;)
[Android Apps and Games] skeletonboy:
ohhh yea. i totally missed that in the 1st post.. :angel:
[Android Apps and Games] evilsocket:
The main problem is that dSploit spawns many processes in background ( such as ettercap, nmap, and so on ) ... handling process re-attaching after a screen rotation is not an easy task, so when i started writing dSploit code the choice was between reinitializing everything after every rotation ( which is kinda slow and dangerous when there's some background task ) or lock the orientation to landscape ( which better supports the kind of layout dSploit has ) ... i went for the second one :)
[Android Apps and Games] evilsocket:
First of all thanks for your report ... i googled for this error and it seems a custom rom issue ... what rom your device is running ?
[Android Apps and Games] R00T123:
Coldfusionx 2 cm10 4.1.1 tilal6991
[Android Apps and Games] evilsocket:
Well, as you can see from the google search results, it seems like it's a ColdFusionX issue ... i'll see what i can do to bypass this issue on this ROM, but i can't promise anything since it seems a really internal issue of the rom which doesn't populate correctly device descriptors.
[Android Apps and Games] R00T123:
Ok thank youvery much. I saw that , because any other hacking application didn't work properly maby there is a fix but im sure that there is a connection
[Android Apps and Games] KaitoKito:
I confirm. Your website has been hacked by an asshole.
[Android Apps and Games] tbudke:
Thanks so much. You fix the issues so quickly! Thanks for kicking ass!
[Android Apps and Games] 4ndr0x:
been dlydcat

Nah, nothing is hacked. Just click the "Skip ad" button on the upper right ;)
[Android Apps and Games] waiters:
You're right!! Very hard to see that on chrome for Android :)
[Android Apps and Games] KaitoKito:
Isn't more logical to make a big "donate" button next to the big "download" button ? And the donation page look so cheap next to the dsploit website it's hard to think it's the regular way to get dsploit...
[Android Apps and Games] EdgaBimbam:
cant you understand that when you press download button it firstly redirect to advertise page because he got some money of that. More views of that page= more money? ^^

if you cant pass that advertisement page, then you are totally n.......
[Android Apps and Games] KaitoKito:
I perfectly understand the idea. But the way to realise it is, like I said, cheap. Some add on the main page and a donation button would be more intelligent than a reditection to coinurl...
[Android Apps and Games] EdgaBimbam:
So if u dont like that redirection, donate enough to get it removed but I can be sure that u even didnt donate 1 dollar.... so because of people like you it was needed to implent this ad feature....
[Android Apps and Games] evilsocket:
Not hacked, just ads

RFID would be too out of the application scope.

Not hacked, just ads

There used to be a button like that, almost no one donated ... and i need to buy new hardware to test dSploit, so ... :)

exactly
[Android Apps and Games] KaitoKito:
People like me have some money problems. Therefore people like me send bug reports, ideas of feature, and the day Evilsocket will be ok with, translate apps into others languages (which is not as easy as it's look like). Like he said on his website "closed source is closed source, there's no community contribution and most of all, you have to pay for it.". I prefer give my time than my money, because I have a lot of free time and really few money.

ANow if you read again my last post, I've never said I don't like add. I said the way to put them make people think it's stinky, like all urls protectors. Then I suggested to put an add and a donation button right next to the download button, not on the bottom of page, and it will be better if the bitcoin donation button would work instead of return the "Unknown Error" message.

I'm sorry if tou take my point of view in a bad way, I just want to help dSploit to be a better app. Now I suggest to stop this discussion right now.
[Android Apps and Games] evilsocket:
i totally agree, so let's stop this here.
[Android Apps and Games] .:Crack:.:
Hey,

I installed your app and wanted to test it on my own network, wanted to test the security of it.

But whenever I click in something, e.g. the picture changer (MITM), every device connected to my router loses its internet connection, i.e. it is connected with the router but not with the internet (win7: full bars + yellow triangle). The only way to resolve this is rebooting the router...

whats the problerm?

thanks
[Android Apps and Games] evilsocket:
do a test for me ... use the sniffer ( in mitm modules ) and try to perform some network activity on your devices ( open website, ecc even if they're not connected ) ... if you can't see traffic, than i'm afraid that the ROM/device you are using doesn't support ip forwarding, otherwise there's something happening on those devices such as firewalling.
[Android Apps and Games] .:Crack:.:
Here you go!
[Android Apps and Games] evilsocket:
Dude this is weird, i see a lot of RST packets ( which reset connections ) ... it seems that each endpoint is able to communicate with the outside, but "someone" is resetting connections.

Who is 192.168.178.44 ?
[Android Apps and Games] .:Crack:.:
AFAIK thats my PC.
[Android Apps and Games] evilsocket:
do you have some sort of firewall/antivirus/security suite on your pc ?
[Android Apps and Games] .:Crack:.:
Just Avira AntiVir and Windows Firewall
[Android Apps and Games] evilsocket:
try to completely disable them both and then use dSploit again.
[Android Apps and Games] .:Crack:.:
Still have to reboot my router...
[Android Apps and Games] evilsocket:
really i don't know what to say ... if your device is forwarding packet as it should ( and i don't know if it is ), everything should go fine ... so there are these three options:

Your ROM is not able to do packet forwarding correctly.

Your router/gateway just goes crazy when spoofed.

You are targeting the router itself instead of the subnet.

Please confirm me it's not the case of option #3 ... which target are you selecting in the first screen to perform MITM ?
[Android Apps and Games] .:Crack:.:
option #1: If CM10 is possible to do this, my phone/ROM also is able to do it I guess

option #2: No idea...

option #3: I'm targeting my PC (i.e. 192.178.168.44)
[Android Apps and Games] evilsocket:
What if you target the whole subnet ?
[Android Apps and Games] MegaHz:
i think Avira has like an arp spoof protection.
[Android Apps and Games] wingzero124:
Out of interest, referring back to an earlier feature request, is this how you feel about Bluetooth exploits now? I was interested in being able to find weaknesses here.
[Android Apps and Games] KaitoKito:
Maybe some devloppers have already coded somme app dedicated to RFID and bluetooth hacks. If you find some apps like that please share them ;)
[Android Apps and Games] .:Crack:.:
Will try and report back!

Edit: Still have to reboot the Router...

U sure it's not just the pro version? Is there a way to disable the protection? Didn't find anything on the net.
[Android Apps and Games] MegaHz:
Well try un installing and test. Try to disable the windows firewall as well.
[Android Apps and Games] evilsocket:
It's not a "i will never implement it", but has very low priority at the moment.
[Android Apps and Games] .:Crack:.:
I disabled the "guard" and disabled the firewall and tested, same problem (as stated before).
[Android Apps and Games] :
http://r00tsec.blogspot.com/2011/02/python-jruby-on-android-platform-in-10.html?m=1

jruby + metasploit ± evilsocket = ?
[Android Apps and Games] Viper The Ripper:
Problem redirecting websites

First I want to thank you for this great app!:good:

I've been testing this application (ver; 1.0.31b), and I've a big problem to redirect a website.

I have redirected the site to "rojadirecta.me" and it worked perfectly, then I've turned-off "dsploit" but now when I put "elmundo.es", my browser leads me to "rojadirecta.me" again.I refreshed the browser and have restarted it, but this does not fix.:(:(

What happened? How could I fix this evilsocket?

... I tested with other pages and the same happens to me even with xda forums!!

I need help!:(

Thank's and sorry for my English.
[Android Apps and Games] Keylogger_0:
Most likely your DNS cache needs to be refreshed. In the command prompt window, type in the following commands:

ipconfig /flushdns

ipconfig /registerdns

And then reboot the computer.
[Android Apps and Games] Viper The Ripper:
Don't work:(
[Android Apps and Games] Kerns_JW:
Phone taken off network and PC tested? Killed app, rebooted phone? Rebooted router?
[Android Apps and Games] devrruti:
Do you plan to some kind of functionality like the usb cleaver app? I mean getting things done by usb, it may be much faster when you have physical access and even easier to code this.

Imagine I go to a friend's house, I just plug the phone for a moment to his pc and I can get the WiFi pass (many times people does not even remember it), it could also get cookies or passwords stored in the web browser.
[Android Apps and Games] Viper The Ripper:
I've tried when I've come home today and nothing ... I reboot my phone, my pc, my router but still not working :(

I do not know what else to do!!
[Android Apps and Games] gwiqu:
can i ask, why is it than when i connect this to a wifi where there are many people connected to it, i can't get this to get any session or password, even my own, but droidsheep can? O.o
[Android Apps and Games] StopChewing:
Was waiting ages to get a new phone so I could try this out. Got the phone but now not so sure about trying it out.

The author of this app obviously has a good reputation looking at the forum, yet his twitter account has been sending me and others DM's with links to a page that tries to infect you with a rootkit. It is related to the blackhole toolkit. This has happened a few times over the last week. My initial thought was that he himself had been infected and that he was unaware of this but after more links were sent during the time he was posting on twitter and they all pointed to the same domain name, I am not so sure now.

In any case, could the Dsploit author confirm that this is his twitter account: twitter. com/evilsocket

If so, are you infected or intentionally sending out those rootkit infection links? (I can supply screenshots and proof if required to moderators here and to evilsocket)

If these links were not sent intentionally and due to yourself being infected, do users of dsploit have to be worried about its integrity and possibility of backdoors etc?

Thought other users should be aware of this, as it could possibly affect them and I did try to contact evilsocket direct on twitter first. Hopefully this can get clarified/fixed and this post then deleted.
[Android Apps and Games] evilsocket:
Yes that is my twitter account, and yes it's beed violated ... the weird thing is that even if i change password the account gets violated anyway continuosly ... disabled authorized apps too ... i've sent an email to the twitter staff and still waiting for answers.
[Android Apps and Games] StopChewing:
What confused me is that it has still been tweeting about dSploit as well as sending the infected links.

Could it be that your actual computer is infected and that is why the password changes make no difference? That is what worries me as it means changes could be made to dSploit without you knowing? Or can others be sure it is ok by looking at github?

Thank you for answering so quickly and confirming the twitter problems!
[Android Apps and Games] evilsocket:
well i'm working on a mac so it's unlikely like so, but never say never ... gonna check.
[Android Apps and Games] .:Crack:.:
So Evilsocket, do you have any new ideas to solve my problem (network locking up, having to reboot the router)?

Thanks in advance
[Android Apps and Games] evilsocket:
no, this is something related to your network configuration, not dsploit itself ... actually the app restores the app cache everytime you stop or exit it, therefore there shouldn't be any problems ( like many users can confirm ).
[Android Apps and Games] StopChewing:
The blackhole toolkit had a payload for macs it exploited via java holes. Not much else I know about the mac side of things though.

By the way, I had intended to register to congratulate on such good work on this app anyway. Kudos!
[Android Apps and Games] Xadder:
what router and firewall app are you using ? i normally have the same issue when eset is on or when i forget to disable some features on my pfsense :angel:
[Android Apps and Games] Viper The Ripper:
hi evilsocket! Could you help me with my redirecting problem?
[Android Apps and Games] evilsocket:
could you refresh my memory plz ? :P
[Android Apps and Games] Viper The Ripper:
"Originally Posted by Viper The Ripper

First I want to thank you for this great app!

I've been testing this application (ver; 1.0.31b),

and I've a big problem to redirect a website.

I have redirected the site to "rojadirecta.me"

and it worked perfectly, then I've turned-off

"dsploit" but now when I put "elmundo.es", my

browser leads me to "rojadirecta.me" again.I

refreshed the browser and have restarted it,

but this does not fix.

What happened? How could I fix this

evilsocket?

... I tested with other pages and the same

happens to me even with xda forums!!

I need help!

Thank's and sorry for my English."
[Android Apps and Games] evilsocket:
are you behind a caching proxy/app ? have you tried to delete the browser cache ?
[Android Apps and Games] Xadder:
have you tried to flush arp tables and maybe even dns cache ?

To flush/Delete the ARP cache in windows 7/Vista/XP/2000/Server 2003/2008 follow this procedure

Click on Start—>Run—> CMD

enter

and then

netsh interface ip delete arpcache

Dynamic ARP cache entries update persist for 2-20 minutes depending on the system.

Windows 2003 Server = 10 minutes

Windows 2000 professional/Server = 10 minutes

Windows XP = 2 minutes

Solaris = 5 minutes

to flush dns cache is :

Click on Start—>Run—> CMD

enter

and then

ipconfig /flushdns

this could probably help you.
[Android Apps and Games] evilsocket:
i don't think this would solve his problem, i guess it's something cache related ... if he stops dSploit, then there's no one forwarding his traffic, therefore if he had the arp table still spoofed he wouldn't browse websites at all, no connection ( since dSploit wouldn't forward the traffic for him ).
[Android Apps and Games] Xadder:
yeah true, didnt even realized that until u wrote that :D could someone donate like 2-3hours of sleep to me ? :cyclops: hehe
[Android Apps and Games] Viper The Ripper:
I'm sorry I could' t respond earlier, I was in class and until I got home I could' t connect to answer you.

I've come home and cleaned the cache, it seems that my problem was solved ... but I'm a little confused because before I tried cleaning history, cookies and did not work: S

Thank you very much for your help, evilsocket & Xadder :)
[Android Apps and Games] evilsocket:
cache is something different from cookie & history :) glad you are ok now
[Android Apps and Games] Astu04:
I'm having a problem with the login cracker. Battery. And after fixing that, the time would be the problem.

Would it be able to save the progress not to check the same passwords again? It would help a lot using it.

Pd. I confirm that MITM works with bridged nets without problems.
[Android Apps and Games] evilsocket:
open a feature request on github for that and i'll see what i can do ^_^
[Android Apps and Games] hotboy_ist:
Guys, I do not know it is said or solved but https facebook or Twitter logins can not be hijacked on my device... I only can hijack YouTUBE which doesn use https... DO you know any solution or way to get facebook and twitter hijacked ?

BTW: EVILSOCKET your app is really perfect... Appreciated...
[Android Apps and Games] Ruzzah:
Not possible due to the settings on the website, only poorly protected HTTPS will work
[Android Apps and Games] Viper The Ripper:
hello again!

I have an idea or suggestion for your awesome app!

-To have a choice to use IP addresses or URL links directly (to make this app more fun :) ) when you use the redirect module

Would this be possible?
[Android Apps and Games] evilsocket:
I'm sorry but i didn't understand ... explain plz
[Android Apps and Games] Viper The Ripper:
When I want to redirect a connection, I need to use the console and type "ping www.google.com"(for example) previously to know what is the site's IP address, I mean I just enter the

URL or to choose between one or the other one :)

You know? ;)
[Android Apps and Games] evilsocket:
well you can already use an url instead of an ip address O.o
[Android Apps and Games] Viper The Ripper:
Noo, I can't :S

I tried refreshing the page, but didn't work.

For me, only work using IP address such as "127.xxx.xxx.xxx" for example

...so I thought it only works this way
[Android Apps and Games] EdgaBimbam:
because you have set bad site url? ^^
[Android Apps and Games] Viper The Ripper:
for example I put this url and don't work

http://media.giantbomb.com/uploads/6/63794/1723829-trollface_super.jpg

How is the type of url I have to put then? :S :S
[Android Apps and Games] EdgaBimbam:
try like this http://www.media.giantbomb.com/uploads/6/63794/1723829-trollface_super.jpg with www. after http
[Android Apps and Games] Viper The Ripper:
nothing happened, the page went blank loading and not redirected anywhere ....:confused:

is very strange, only works when I use the site's IP, and it loads instantly
[Android Apps and Games] EdgaBimbam:
i will try to use this site to redirect. Be right back.

EDIT: got this while trying to redirect to that site- Sorry, invalid request
[Android Apps and Games] Viper The Ripper:
I posted something similar before, and I also appeared "sorry, invalid request"

...a bug?
[Android Apps and Games] evilsocket:
Man this is normal! I'm goin to explain ( you need a littlebit of web servers knowledge ).

The original request is something like:

GET /showthread.php?... HTTP/1.1
Host: xdaforums.com
..
..

Then it gets patched to redirect:

GET /shothread.php?... HTTP/1.1
Host: [B]your-redirection-address-or-hostname[/B]
..
..

Therefore if the server you are using as a receiver is not configured for this, it will just send you a 404 because there's no showthread.php page hosted on it.

This host redirection is good for phishing and similar, but probably you are trying to perform an url redirection, in this case you can just use the script injection with something like:

<script type="text/javascript">
var to = "http://the-domain.com/the-page-you-want.html";

if( document.location.href.indexOf( to ) == -1 )
document.location.href = to;
</script>
[Android Apps and Games] Viper The Ripper:
ummm I see this more clear now :) thank you very much for your simple explanation, I'm sorry for my tremendous ignorance :( but I'm learning new things because of people like you;)

This script was just what I meant, it takes a bit to load, but it works perfectly, also I've seen some other examples of javascripts but I have not tried, try checking out some funny as this;

<script language="javascript" type="text⁄javascript">

function earthquake() {
if (document.layers || document.all){
a = 1;

time = 400;
JumpId = setInterval( "Jump()", 1 );
}
}

function Jump() {
if ( time > 0 ) {
a = a + .1;
self.moveBy( (Math.random() * a * 2 - a), (Math.random() * a * 2 - a) );
time--;
} else {
clearInterval( JumpId );
}
}
<⁄script>

I hope it works XD :D
[Android Apps and Games] evilsocket:
ahahaha cool :D
[Android Apps and Games] Dorilife:
Have to say this app is pretty awesome, thanks Dev for this.
[Android Apps and Games] MegaHz:
Hi guys,

evilsocket, there's some tests i wish to run in regards to protection against arp spoofing and i am wondering if you have the answer before running the tests.

If i am on a network where there are is another guy doing arp spoofs, i know that droidsheep guard can protect me from monitoring the arp table of the machine and alerting me.

but is there any way of me running the attack and be protected against other attackers at the same time?

of course if 2 people are running the attack the router will be confused right? Who's the winner? I guess the one who wins in flooding the router? So if i run dspoit and another guy is running dspoit and i have the droidsheep guard running.. what will happen?
[Android Apps and Games] evilsocket:
Running dSploit will not spoof YOUR device, hence you can use droidguard as normal ... if there're two spoofers on the network, the one which spoofs more wins ^_^
[Android Apps and Games] munzirhussein:
This cannot detect sessions if the target uses incognito mode to surf? :confused:

Sent from my MT11i
[Android Apps and Games] evilsocket:
in incognito mode your sessions get cleaned .... then if the target performs a new login then yes, dSploit can absolutely detect his session anyway.
[Android Apps and Games] hotboy_ist:
I wanna ask a question... If i enter a facebook account with session hijacker, Does facebook records my device type and time of entering in security section ? Or it is shown as the device that he or she is signed in?
[Android Apps and Games] evilsocket:
during session hijacking, you log in with the target user agent, which is the only data facebook could use to identify your device.
[Android Apps and Games] hotboy_ist:
So, session hijacking is undedectable ?
[Android Apps and Games] evilsocket:
exception made for you ip address, basically yes
[Android Apps and Games] hotboy_ist:
Evil socket can you make a new video that shows every features of the app like the video on your site but fully one...
[Android Apps and Games] evilsocket:
well i'm really bad in video editing, i'd need someone to help me
[Android Apps and Games] hotboy_ist:
I can edit if you make the video...
[Android Apps and Games] evilsocket:
tnx, i'll make the video for the first stable release ;)
[Android Apps and Games] jwds1978:
This hasn't happened for a few versions now, but it's causing my device to restart again though; as of the latest release.

--

Sent via Tapatalk from my TELUS HTC Amaze 4G on the Fido network.
[Android Apps and Games] drraptor:
Thanks for the efforts. :)Everything is working great except,

Password sniffing. It doesn't log a single kb. :mad:

Hopefully it is resolved in next version. :thumbup:
[Android Apps and Games] TophFR:
Great app !

I just tried it with my Nexus 4 and I really liked it.

I didn't find the SSLStrip feature though. Where is it ?
[Android Apps and Games] evilsocket:
it's builtin in every mitm feature :)
[Android Apps and Games] rchtk:
While the concepts used in this app are known, you've done a really good integration of these in a single application.

Cherry on top, you put this app on github in GPL. Interesting reading by the way.

For this reason, I MISS A DONATE BUTTON !

I guess you'll never enter google play right? :cowboy:

I'll go on playing and report back.

Thanks!
[Android Apps and Games] evilsocket:
nope, no google play for me :(
[Android Apps and Games] joelstitch:
I keep getting the error "Application not installed" on my Samsung Galaxy S3