yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] riahc3:
Yes, I don't have any doubt that it is probably my connection :) I just comment that a prettier message should be shown, istead of the default web page not found browser message.
[Android Apps and Games] evilsocket:
Sure, could you please an issue on github ? For me it's easier to keep track of TODOs ...
[Android Apps and Games] riahc3:
But I can still start and stop monitor mode....

---------- Post added at 11:44 AM ---------- Previous post was at 11:41 AM ----------

Yeah ill add these. Currently on mobile but in a few ill be back in the office

---------- Post added at 11:56 AM ---------- Previous post was at 11:44 AM ----------

I dont if you ment to fix it or not (as there is nothing in the change log) but you fixed the Stop/Start Monitor Mode text :)

---------- Post added at 12:04 PM ---------- Previous post was at 11:56 AM ----------

Redirect is completly broken/disabled: I enable it and it simply loads the page like normal. Doesnt do the regular slowdown.

---------- Post added at 12:06 PM ---------- Previous post was at 12:04 PM ----------

Hang on because it looks like EVERYTHING is broken :S Going to restart my device just in case.

---------- Post added at 12:13 PM ---------- Previous post was at 12:06 PM ----------

Yup, everything seems to be broken. Attacking only one target. Strange.

How is everyone else doing?

---------- Post added at 12:18 PM ---------- Previous post was at 12:13 PM ----------

?
[Android Apps and Games] evilsocket:
It's not removed, it's closed https://github.com/evilsocket/dsploit/issues/133
[Android Apps and Games] riahc3:
Yeah, nm, saw it now....

---------- Post added at 12:29 PM ---------- Previous post was at 12:24 PM ----------

Damn catlog....Hang on.
[Android Apps and Games] riahc3:
Couldnt upload it from my Android phone.

A email you catlog feature would be nice :P :laugh:
[Android Apps and Games] evilsocket:
Nothing useful in that logcat ....
[Android Apps and Games] riahc3:
Same as always with the Redirect: Stays loading the page and does nothing except try to load it without actually redirecting it
[Android Apps and Games] evilsocket:
Ok but i need the full logcat, without it i can't help you.
[Android Apps and Games] darksherko:
Hi

How can i make all devices get like the script injected?

Sent from LT26i
[Android Apps and Games] evilsocket:
target the subnet
[Android Apps and Games] riahc3:
I dont have anything else :S
[Android Apps and Games] evilsocket:
either you are not getting the real logcat, or there's something really broken in your system ... there's NO debug message from dSploit ( and it has a lot of them ).
[Android Apps and Games] darksherko:
You mean the router?

Sent from LT26i
[Android Apps and Games] evilsocket:
i mean the subnet ... the <address>/<number> thingy ... should be the first entry ...
[Android Apps and Games] darksherko:
All i see is this?

Sent from LT26i
[Android Apps and Games] evilsocket:
First entry

This is your network subnet mask

What's wrong with you ?
[Android Apps and Games] darksherko:
Problem is the subnet can not be targeted

Nothing wrong with me mate

Sent from LT26i
[Android Apps and Games] evilsocket:
why not ? it's clickable like everything else.
[Android Apps and Games] riahc3:
Here you go.

Are you having a bad day or something evilsocket?
[Android Apps and Games] evilsocket:
I don't see dSploit messages ... my day is okay, but you're spawning my inbox :D

Like someone else said:
[Android Apps and Games] darksherko:
Sorry for the mis understanding it is if i click it it would show MITM and if i proceed to click insert script it would say it is something with single ended

Sent from LT26i
[Android Apps and Games] evilsocket:
No man, the script injector works on subnets too, what you are talking about is the connection killer. which is usable only on single targets.
[Android Apps and Games] darksherko:
Oh i see now :thumbup:

Thanks for the support tho

Sent from LT26i
[Android Apps and Games] evilsocket:
you are welcome :)
[Android Apps and Games] darksherko:
Why is the app only in landscape mode?

Sent from LT26i
[Android Apps and Games] evilsocket:
http://www.dsploit.net/#faq
[Android Apps and Games] riahc3:
OK, Ill just let other people report further issues from now on....

BTW, its "spamming"
[Android Apps and Games] evilsocket:
Guys, guess what ? Since a lot of users requested it ... a little preview of the next release.

Can you foresee what this image means ? :)
[Android Apps and Games] EdgaBimbam:
green color vulnerable routers? :D
[Android Apps and Games] evilsocket:
bingoooooooo :D
[Android Apps and Games] EdgaBimbam:
excellent :) btw only for thomson routers? o.O

damn at least i'm not your neighbour because you would steal my porn sites accounts >:3
[Android Apps and Games] evilsocket:
I'm merging this project into dSploit, therefore:

Thomson based routers ( this includes Thomson, SpeedTouch, Orange, Infinitum, BBox, DMax, BigPond, O2Wireless, Otenet, Cyta , TN_private, Blink )

DLink ( only some models )

Pirelli Discus

Eircom

Verizon FiOS ( only some routers supported)

Alice AGPF

FASTWEB Pirelli and Telsey

Huawei (some Infinitum)

Wlan_XXXX or Jazztel_XXXX

Wlan_XX ( only some are supported)

Ono ( P1XXXXXX0000X )

WlanXXXXXX, YacomXXXXXX and WifiXXXXXX

Sky V1 routers

Clubinternet.box v1 and v2

InfostradaWifi
[Android Apps and Games] metalwraith:
Nice. Looking forward to the update.
[Android Apps and Games] :
over here in the states we have almost none of those :) yeah lack of choice....
[Android Apps and Games] evilsocket:
i know ... if you know other algorithms and want to contribute with some code, you are very welcome :D
[Android Apps and Games] omgomg:
2/3 of all routers round here are either thomson or d-link.

Great job doing that, means I can now uninstall Router Keygen from my phone.

Keep up mate !
[Android Apps and Games] MegaHz:
awesome, i've been telling you this many days now :D

i guess you were looking for an open project, nice one, and i guess that now i can uninstall Penetrate pro :)
[Android Apps and Games] digi7:
Oh this is like going to the candy store! :D

Will make some tests to known neighbors :p
[Android Apps and Games] dick8843:
Hows the Progress on WPS cracking is that being added soon. Great Work!
[Android Apps and Games] evilsocket:
is that a question ?
[Android Apps and Games] dick8843:
Yeah. When will WPS cracking be implemented.
[Android Apps and Games] julle131:
This is not helpful, but we should use tha same rule CM does: rule nr.1 "No ETAs!" It is also the only rule. :D
[Android Apps and Games] evilsocket:
Once i find the way to compile native tools ( reaver ) under Android NDK :)
[Android Apps and Games] mushtafa:
Excited for the next release :)
[Android Apps and Games] SpuTniC_23:
hi there and greetz from austria everything is working fine here (mitm etc.) with the new version found until yet only one firwall that prevent dsploit from capture anything : eset smart security (it prevents redirection)

for reaver compiling is not the biggest problem the bigger one is u need a working monitor mode driver for ur device and for now only bcm4329 and bcm 4330 chipsets are supported but not 4 every device out there im on my way to compile the new drivers for my i9000 sgs (bcm4329 only chipset with injection working) and hopefully they work on cm10 maybe it needs a bit of tweaking but it should run the next days the other problem is u have to compile the drivers 4 each device and thats much work

the next step would be to get airoscript/fakeap or something else on our devices when the ack response is fixed else it would take to much time to get enough traffic to get the wep/wps key

just to say im using slimbean 2.8 with semaphore 2.4.4 and installed also latest version of libpcap and tcpdump by my own (didnt found an installer or precompiled source)

evil keep up that amazing project when i have time i make a german tramslation 4 u

greetz

urs

SpuTniC

Gesendet von meinem GT-I9000
[Android Apps and Games] anazhd:
imagine the hours of excitement waiting for reaver to complete all 100,000,000 combinations.
[Android Apps and Games] evilsocket:
yeah ... in fact i don't know if i'm gonna really implement this.
[Android Apps and Games] dick8843:
But WPS pin cracking is a big request from me. 10,000 Pin combination takes 2-3 days. and would need ability to save progress so you could restart later if needed. :)
[Android Apps and Games] waiters:
Take some 15 hours on a computer(super slow computer..Do it all the time on a super old hp mini) I can imagine it would take 2x that on a cell.

But would still be cool. If you are able to compile it.. Reaver by default saves progress..
[Android Apps and Games] Kaptinkrunk:
Downloading now I'll let ya know what I find out

Fascinating AOKP Jelly Bean Milestone 1...
[Android Apps and Games] anazhd:
reaver can continue previous session by saving only one file. but.. by using a cell, without a fully optimize wireless receiver, this can take more than 96 hours.
[Android Apps and Games] dick8843:
Not sure why im testing with an ipad on same network with session hijacker and when i log in to facebook it doesnt pick up the session.
[Android Apps and Games] frenzyboi:
Using the app or web browser? I doubt sniffing will work on app.
[Android Apps and Games] mushtafa:
I'm pretty certain the facebook app would use secure connection?

Is there any way to 'hack' a secure connection like https?
[Android Apps and Games] evilsocket:
It can be one only if the connection is HTTPS and the builin http client ( if we are talking about the app ) handles 302 redirections.
[Android Apps and Games] Ruzzah:
Please implement wps cracking.
[Android Apps and Games] :
This +1
[Android Apps and Games] dorqus:
evilsocket - would it be possible for you to change the subject of this thread to include the version number of the most current dSploit? that way I can tell at a glance if a new version has been released? thank you, and thank you for all your hard work on this awesome pentesting project for Android!
[Android Apps and Games] evilsocket:
Sure no problem :)
[Android Apps and Games] Indirect:
Found an exploit vector in the latest version, disclosed it to ES and he fixed it in a timely manner. Great dev, hopefully this app stays around for a long time so I can use it in pentesting audits :)
[Android Apps and Games] evilsocket:
Thanks for your help!

Hint:
[Android Apps and Games] Indirect:
Just remember that I do like credit for what I find in the change logs. :P Anyway, just let me know if you need anything in the future <3
[Android Apps and Games] evilsocket:
Sure you will have the credits, that was obvious
[Android Apps and Games] admiralspark:
*cough* Good thing his best friend convinced him to check out the app :)

Also, serious good job. I've been looking for a good tool to assist with pentests, and this adds a whole new aspect to social engineering.
[Android Apps and Games] evilsocket:
1.0.29b is out!

Changelog:

Fixed #112 : request: ability to add custom ports to port scan.

Fixed #143 : Javascript Inject Load File Feature request.

Fixed #144 : Image Replace - Allow URI to an image on the web somewhere.

Fixed #142 : Javascript Inject Ok/Cancel offscreen.

Fixed #140 : Duplicate MAC addresses with Fastweb provider.

Fixed #141 : Permissions can lead to code execution ( big tnx to Nick Wells ! ).

Fixed menu items when connection is not available.

General UI state fixes.

Implemented a managed message receiver which helps registering and unregistering broadcast receivers when needed.

Fixed an issue in subnet computation ( tnx to shurizzle ).

Implemented WiFi router default key cracker with support for : Thomson, DLink, Pirelli Discus, Eircom, Verizon FiOS, Alice AGPF, FASTWEB Pirelli and Telsey, Huawei, Wlan_XXXX, Jazztel_XXXX, Wlan_XX, Ono ( P1XXXXXX0000X ), WlanXXXXXX, YacomXXXXXX, WifiXXXXXX, Sky V1, Clubinternet.box v1 and v2, InfostradaWifi ( thanks to the Android Thomson Key Solver project ! ).

Moved jUniversal Chardet jar to libs folder.

Clicking on a network monitor notification now put dSploit to foreground.

Improved MITM redirector with hostname extraction from user input.

Progress bar in Hijacker browser module.

Implemented NetBIOS name resolution with DNS resolution fallback.

Fixed #42 : Dump sniffed packets to pcap file with a modified version of tcpdump ( with normal tcpdump, you can't print the packet and save it to a pcap file on the same time, so i had to patch and recompile it ).

Ports checking when MITM activity is open.

Some fixes to the native arp spoofer.
[Android Apps and Games] EdgaBimbam:
Found glitch, when i press on wifi icon at your app, it kills my wifi connection and it is scanning non stop without any results+ cant get to main app window
[Android Apps and Games] evilsocket:
yeah sorry there was a typo in the code, uninstall, download again and install :P
[Android Apps and Games] EdgaBimbam:
Hmm still it kills wifi connection, but shows that wifi is turned on. Btw when i choose wifi icon and i see wifi routers list i cant back to main app window with back button it only gives me option to close app :)
[Android Apps and Games] evilsocket:
tried with the app icon in the upper left corner ?

BTW guys for today i'm done ( really tired ), gonna spent the rest of the night playing assassin's creed 3 :)

If you find a bug, please use the github issue tracker ^^ tnx
[Android Apps and Games] EdgaBimbam:
Yes, after pressing it, wifi routers scanning stops and it stays on same window, that app icon disapears ;) hf with assasin creed lol ;)
[Android Apps and Games] metalwraith:
Cool.. Let me know how the game is... :good:
[Android Apps and Games] dorqus:
Thanks for adding my feature request!
[Android Apps and Games] hawkn:
Hey guys :)

This is a really awsome app, however, when I start it it crashes and give: Initialization Error java.lang.NullPointerException.

Yes I've searched the thread, but I sometimes suck at searching, sorry for that, but does anyone have a tip on this ?

I've removed the app and reinstalled 1.0.29, still the same.

Edit: btw I'm on JB omegarom v.31 and siyahkernel 1.7rc1, it worked earlier with the same rom/kernel.

Edit: figured it out so far and got the app working again :D

I reinstalled supersu and rebooted the phone, then I got the permission request and granted rights..it works :D
[Android Apps and Games] Gabenoid:
The new version gives me an Error during files installation message when i start the app and then closes but the icon stays in the statusbar. I did a clean install and rebooted the phone but nothing changed.

Motorola Defy with custom ROM: WIUI Android 2.3.7
[Android Apps and Games] evilsocket:
what error ?
[Android Apps and Games] jwds1978:
I can now see the (host)names of devices on the network which I didn't previously. :good:

The application prompted for download/upgrade of the new version and the installation/upgrade was successful, without issue, for me.
[Android Apps and Games] evilsocket:
Ok i'll write here what i've answered you on github, you never know maybe someone else needs this :)
[Android Apps and Games] Gabenoid:
This message: Error during files installation.

Then it closes and can't open again.
[Android Apps and Games] MegaHz:
Sorry for the late reply, i''ve been away too, glad to see a new release, spotting some features that wanted..

ok, after testing the wifi scanner:

if i am connected to wifiA, and dsploit is running, if i choose the wifi-scanner and scan for wifi, if i choose to connect to wifiA (the same again) it asks for password. I believe that this is happening because dsploit is not handling the wifi connection with the native wifi client of android?

i mean it should connect me directly to the wifiA since android knows about it.

Also about the wifi cracker, if i choose a wifi that penetrate pro is able to crack, then wifi cracker says that cannot find a key online?

how does the wifi cracker works?

anyway, the new release looks sweet, dsploit is definitely the most complete pen-test suite on Android (and genericaly speaking, on mobile phones worldwide :) )
[Android Apps and Games] nikant:
ES don't know if you had time to check the code of the other nmap I sent in git.. if you had no time or you checked it and decided not to implement it np. Just a reminder since in git is closed.. :)
[Android Apps and Games] pspunderground:
Like this.

It would make navigation easier on tablets.
[Android Apps and Games] evilsocket:
Yep but that would make sense with a multi state/activity application, in dSploit every interface can be used only after performing some sort of selection on the previous one, so a left menu wouldn't have much sense, don't you think ?

I mean, you can't go directly to the modules interface before selecting a target from the main interface, and you can''t go directly to the mitm filters interface without selecting the mitm module first, so practically speaking, what would you put in a left menu ?

Consider that a menu like:

Target Selection

Module Selection

...

...

would have almost everything disabled most of the times for the reasons i've just talked about.

Anyway, if in future implementations there will be some valid reason to create a tablet layout, i'll obviously make it :)
[Android Apps and Games] pspunderground:
Ah, I got you. You do have a valid point, seeing scans need to be done in order to do this or that.
[Android Apps and Games] evilsocket:
Exactly :) I'm happy you understood me considering my poor english, sometimes i get really frustrated trying to explain myself :D
[Android Apps and Games] foboi1122:
Has anyone tried getting it to work on a samsung galaxy s3? I didn't have much time to play around with it but it seemed like it wasn't working. Maybe because I can't place the wifi into promisc mode?
[Android Apps and Games] evilsocket:
Are you getting any particular error ?
[Android Apps and Games] foboi1122:
No particular error, just no activity. I tried replacing images and loaded a http site from my computer. This didn't do anything to the images on the site. My computer is on the same network as the phone although the phone is wirelessly connected while the computer is on ethernet. I did a nmap scan on my phone and was able to see my computer up. Hope that's useful...
[Android Apps and Games] evilsocket:
Do you have some sort of arp spoofing protection on your router and devices ? The sites you are using for testing are HTTP or HTTPS ( which is not yet supported ) ?

Could you please try to put both your devices on wifi ?
[Android Apps and Games] foboi1122:
I don't believe that the router I'm on has arp spoofing, although I could be wrong. I will go home and test on my home router which for sure does not have arp spoofing protection. The sites I tried were reddit.com and imgur.com, which I'm pretty positive were not HTTPS. I've always thought that in order to sniff traffic, you have to put your wifi card into promisc or monitor mode. Am I correct about this?
[Android Apps and Games] evilsocket:
Yes you are correct.
[Android Apps and Games] waiters:
Can't wait to try this out!
[Android Apps and Games] evilsocket:
Let me know if you need support :)
[Android Apps and Games] Robertof_:
Works great. Nice job evilsocket! :D

However I've a question (sorry if it was already asked before) - in the sniffing mode, I noticed that it's only possible to see the size of the packets and the target of them but not the content. I mean, if I go to example.com, the sniffing mode says me "example.com 300KB[..]" but I cannot see the headers/content of the HTTP request. Is this impossible or just not implemented yet (or maybe am I blind? :D).

Have a good day,

- Robertof
[Android Apps and Games] evilsocket:
First of all, download the latest version from here, you are probably using an old one.

Anyway, you have to use another app ( such as Shark for Android ) to see packet contents ( just as the sniffer module description reports ).
[Android Apps and Games] Robertof_:
Yeah, gotcha. Thank you! :)
[Android Apps and Games] darkfloo:
Hey i have try your app on cm10 and it working so i think it is miui . Very good app but you should have to add an advertising message like : dont be evil with this app or something like this
[Android Apps and Games] evilsocket:
There is a disclaimer in the about section, i really hate invasive ( and pointless ) dialogs ....
[Android Apps and Games] :
Works well with CM10 nightly. Great job.
[Android Apps and Games] evilsocket:
Great :D
[Android Apps and Games] foboi1122:
Hey there, I tried the app again on my SG3 on my home network, which does not have arp spoof protection. Looks like it's still not working. I tried to scan my computer by adding a new target and doing a SYN scan, which returned no open ports. Then tried 192.168.1.0/24 simple sniff and repace images which both came up with nothing. If I have time later, I'll try to do a packet capture to see if I'm seeing anything in the air. So far though, it's not working. Oh and btw, yes my local network addresses are in the default 192.168.1.0/24 range.
[Android Apps and Games] onurboi:
when I go to the MITM mode of a selected network client for the first time, it hangs and goes to the blank screen for about 10 seconds.

is this normal?

Also sometimes statusbar notification shows repeatedly for the same network client.
[Android Apps and Games] evilsocket:
How much free space have you on your device ?

I think you are a little bit confused, the wifi cracker implements algorithm of known wifi key generation, so it has no need to search them onlin.

That nmap version was crap, traceroute not working, a lot of issue with network routing ... i'm working on replacing every tool with a static version ( to solve the LD_LIBRARY_PATH issue ) but this will take some time.

logcat plz
[Android Apps and Games] Ruzzah:
Notification never goes away and now its not listing all IPS on my network, multiple subnets work. The notification never updates, when it finds a new IP it spams the same notification, you can see it jitter. Please allow download of dictionary for WiFi crack and continue to implement wps cracker.

Thanks
[Android Apps and Games] rirozizo:
confirming "glued" notification

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] mushtafa:
I also has a notification stick yesterday, even clearing dsploit from task manager didn't help. Had to restart device.
[Android Apps and Games] louforgiveno:
Nice to hear, as of now most of the crucial tools in your app don't do me any good :( I suffer from the good ol' LD_LIB path problem...:crying:

Thanks for putting so much time into this for us ! I can't wait to show this app off; it really is handy.
[Android Apps and Games] Kaptinkrunk:
Mehh it doesn't work on 4.1.2?

Fascinating AOKP Jelly Bean Milestone 1 Devil 1.7.5...
[Android Apps and Games] Gabenoid:
internal: 748MB free

sd-card:2,2GB free
[Android Apps and Games] evilsocket:
i have 4.1.2 on both my devices and it works.

Well that's weird, i need a logcat plz
[Android Apps and Games] Gabenoid:
what more weird is that the problem is gone...:confused:

I installed the app to generate the log but after a slow start it's working very well. I don't know what happened because yesterday i tried everything, uninstall-reinstall, reboot phone and nothing helped but now it's just working.
[Android Apps and Games] arion604:
With this build dspoit doesn't seem to want to exit. Stays resident in memory even when I exit out properly. When I do exit out I still gt notifications of discovered devices.
[Android Apps and Games] nikant:
Just got it now too.. strange.. it didn't happen this morning..
[Android Apps and Games] evilsocket:
Ok guys this notification bug is now a known issue and i'm gonna fix this for the next release ... actually i'm thinking about not using those notifications anymore, since the network monitor gets stopped when you leave the first interface, they are useless.
[Android Apps and Games] :
personally I'm all for it since I disable those notifications anyway \m/

I will be demoing this app soon in my network forensics class, keep up the excellent work it's always great to have a dev work so closely with the user-base