yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] evilsocket:
wtf i don't see first log messages from dSploit :S

I think your system has pretty weird behaviour ... anyway, it seems something is blocking dSploit from running properly considering that even first log lines aren't shown ... do you have something like that or particular debug/dev settings enabled ?
[Android Apps and Games] stkfigure:
It's probably because I used the logcat app. I'll give you a proper logcat. :p

But it's past 1am,and I'm sleepy. So later tomorrow.

_________________________________

Hit thanks if I helped.

@the_stkfigure on twitter.

Running the Blade with CM10 KonstaKANG.
[Android Apps and Games] evilsocket:
later ;)
[Android Apps and Games] cabagekiller:
Would I be able to get in on this beta?
[Android Apps and Games] evilsocket:
You just have to download the latest version from here :)
[Android Apps and Games] darkfloo:
Ok thank i am going to test it on other wifi network
[Android Apps and Games] speedracerbubba:
Thank you, sir.

I was talking to a friend who works in IT and has been learning coding since high school and told me how easy it is to create an app with a tunnel and all sorts of stuff that I thought was only real in movies.

Now if you don't mind I'm going to go hide under a rock. :p
[Android Apps and Games] evilsocket:
:D
[Android Apps and Games] evilsocket:
1.0.12b is out !

FIXES:

Fixed issue #11 : Make login cracker work with wordlists too. ( Now you can select a wordlist file if you do not want to use a bruteforce attack )

Fixed issue #25: Chunked text in About dialog on lower resolutions.

OTHER CHANGES:

Better error handling/logging, now a debug error log can be enabled in the settings panel ( disabled by default ), if enabled you will get the file dsploit-debug-error.log in sd card storage.

Better system initialization error reporting.

Some warnings removed.

NOTE:

From now on, if you have some strange behaviour, please enable debug error logging and post here the log file you find in your sdcard ( dsploit-debug-error.log )
[Android Apps and Games] pspunderground:
I have a suggestion. Can you make a two panel interface for tablets?
[Android Apps and Games] evilsocket:
That would mean make whole new interfaces and probably merge multiple activities logic in one activity/fragment activity ... that's almost another application XD

Do you think a two panel interface is really needed ? If so, where ? I'm no designer so my tastes could not be the best :)
[Android Apps and Games] rirozizo:
that is.... disturbing..

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] MegaHz:
pass that joint :)
[Android Apps and Games] evilsocket:
what is disturbing ? ( that is not weed, it's just an home made cigarette with tobacco if you mean that )
[Android Apps and Games] evilsocket:
As you can see, Pueblo tobacco, small papers and filters ... no weed at all :)
[Android Apps and Games] EdgaBimbam:
pfff lies :D everyone can put weed in that pueblo tobacco package :D
[Android Apps and Games] evilsocket:
lol c'mon dude! i just woke up, weed now means i'm gonna be a zombie the whole day ... no way :)
[Android Apps and Games] julle131:
So you have tried??? :p. Maybe we should get back to the topic...
[Android Apps and Games] evilsocket:
i've tried everything i could ;) yep, let's get back to the topic ... i'm implementing a wifi scanner for the new release :D
[Android Apps and Games] MegaHz:
wifi scanner ? please elaborate dude. (don't forget the fix of mitm :) )
[Android Apps and Games] evilsocket:
is this elaborated enough ? ( btw i think i've already fixed the mitm )
[Android Apps and Games] rirozizo:
make it require tables as an optional feature

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] evilsocket:
tables ? what do you mean ?
[Android Apps and Games] :
Anything about port scanner? I think that the problem is the same as with "no alive endpoints problem before"(kernel) cause it works on my tablet(kernel is 3.0.8) but not on my phone(kernel 3.0.48)

Any chance you can check this out?
[Android Apps and Games] metalwraith:
LOL I know that feeling... Though I miss the special brownies my friend had about a month ago... good lord those packed a punch.

But yeah, keep up the nice work with the app... back to job surfing for me now that the runt woke me up.
[Android Apps and Games] MegaHz:
awesome! .. so you are getting there.. em .. on .. you really have to implement a thomson reversable cracking (penetrate pro)..
[Android Apps and Games] metalwraith:
I haven't had much luck with thomson's, rarely do I ever run across any in my area... though one of my neighbor's I think shows up on the list. It's a Verizon unit they have... lol
[Android Apps and Games] rirozizo:
for crackiing default SSIDs

———————————————————

i didn't mean to mock you or to offend you in any kind of way
[Android Apps and Games] MegaHz:
In Cyprus and italy (rome i've been recently) they have a lot of thomson speedtouches.. and people here are using penetrate pro a lot.
[Android Apps and Games] metalwraith:
Guess they're not too popular here in Massachusetts
[Android Apps and Games] EdgaBimbam:
here in Lithuania, i was travelling a lot and there was like 2% thomsons speedtouch of all discovered routers. Mostly here tp-link.
[Android Apps and Games] nikant:
a suggestion for future development the ability to be moved to SD card.. :cowboy:
[Android Apps and Games] devrruti:
I hope that WiFi scanner shows many details and possible weaknesses like wps. There are many good WiFi scanners already so it's not very important, but it's great to have a gpl app that does it all

You are root so you can do it, like with Link2sd, problem solved. The app is small (except for data or cache) and sd are usually slower
[Android Apps and Games] evilsocket:
I'm not gonna implement thomson vulnerability attack, it's way too specific for this application.
[Android Apps and Games] evilsocket:
Guys i need help.

I need someone who has MITM not working on the latest version to send him a new apk ... i have to know if the issue is really solved ( can't reproduce it ) before releasing a new version.

Who's the winner ? :D
[Android Apps and Games] MegaHz:
send it to me bro

megahz@megahz.org
[Android Apps and Games] EdgaBimbam:
I had problems with mitm https://github.com/evilsocket/dsploit/issues/126
[Android Apps and Games] evilsocket:
sent
[Android Apps and Games] EdgaBimbam:
Edgabimbam@gmail.com thx :)
[Android Apps and Games] evilsocket:
sent to you too
[Android Apps and Games] MegaHz:
got it so here it is the outcome:

i had 1.0.24b, run mitm \ password sniff , telnet on my dreambox and dsploit captured the credentials

i update to 1.0.27b, run mitm \ password sniff , telnet on my dreambox and dsploit captured nothing

i install the new test apk that you sent me, run mitm \ password sniff , telnet on my dreambox and dsploit captured nothing :(
[Android Apps and Games] evilsocket:
could you please try the other mitm modules ? the hijacker for instance.
[Android Apps and Games] EdgaBimbam:
still this problems persists https://github.com/evilsocket/dsploit/issues/126 at your sent version :/
[Android Apps and Games] evilsocket:
this is really weird ... the only thing i've changed, is that on latest versions arp spoofing is performed with arpspoof and not anymore with ettercap ... after many tests i've made, arpspoof *should* be more reliable than ettercap O.o
[Android Apps and Games] EdgaBimbam:
yeh a bit strange, with v24 i can use all features of MITM on any victim (subnet mask, router, laptop and etc.) Starting from v25 to the latest, i can only use MITM features on laptop and other single victims, except router and subnet mask o.O
[Android Apps and Games] evilsocket:
BTW from your log ( https://www.dropbox.com/s/l2dwy27rsf3g4qd/dsploit-debug-error.log ) i see that you ARE receiving connections:

javax.net.ssl.SSLHandshakeException: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0x5b0e1040: Failure in SSL library, usually a protocol error
error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher (external/openssl/ssl/s3_srvr.c:1365 0x5144370a:0x00000000)
at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:412)
at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl$SSLInputStream.<init>(OpenSSLSocketImpl.java:623)
at org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl.getInputStream(OpenSSLSocketImpl.java:594)
at it.evilsocket.dsploit.net.http.proxy.HTTPSRedirector$1.run(HTTPSRedirector.java:129)
at java.lang.Thread.run(Thread.java:856)

This is the HTTPS to HTTP redirection module which is waiting for the client to accept fake certificate ... therefore, spoofing IS working ( otherwise the client wouldn't be redirected to you ), but it seems ip forwarding ( kernel level ) is not ... really freaking strange.
[Android Apps and Games] MegaHz:
wait, when i choose the exact host to run the mitm then it does session hijacking.

if i choose the whole subnet it recognises nothing.
[Android Apps and Games] EdgaBimbam:
and if you choose router as victim? does it recognise anything? if no then you have same problem as I
[Android Apps and Games] evilsocket:
what router you guys have ?
[Android Apps and Games] MegaHz:
same here.
[Android Apps and Games] EdgaBimbam:
i have tp-link wr 841n, but as i have mentioned before, with v24 it is working. The problems faced up with 25v and up
[Android Apps and Games] MegaHz:
i've got this one: http://www.tp-link.com/en/products/details/?model=TL-WR1043ND but as i have mentioned before, with v24 it is working. The problems faced up with 25v and up (quoting) :)
[Android Apps and Games] EdgaBimbam:
hmmmm maybe you have changed something from v25 and tp link modems are safe of your app o.O just wondering
[Android Apps and Games] evilsocket:
i don't know ...
[Android Apps and Games] MegaHz:
i am thinking of installing dd-wrt and retrying but anyway, if you believe that the app should be working fine in other networks i will check it out the next days. Although it's very strange to me, why mitm is working on specific hosts and not on the subnet.
[Android Apps and Games] evilsocket:
could you try droidsheep ? the latest version performs a mitm attack identical to dSploit's one .... if droidsheep doesn't work too, then simply your subnet can't be entirely spoofed ( which is good anyway XD ).
[Android Apps and Games] :
Problems on MITM here. Password Sniffer, Session not working.

You can send it to me too.

Mod edit: Content removed at members request
[Android Apps and Games] evilsocket:
i already have some testers ... and i think i know what is the problem ... gonna rewrite the native arp spoofer in C :)
[Android Apps and Games] :
Nice friend. I was going to ask you for a solution, I finished my tests and discovered that password sniffer won't work for me in any versions of dsploit.

Busy box is OK, just reinstalled the latest version.

So... I'll wait for new version them.

Thanks for your time.
[Android Apps and Games] evilsocket:
1.0.28b is out!

Changelog :

Arp spoofer improvements with arp cache hash map.

Reimplemented arpspoof subnet mode with arp spoofs sent to every possible address in the subnet ( this should fix a lot of problems with MITM modules ).

Fixed #79 : Non UTF-8 encoding issues, now supporting many encodings .

Fixed #113 : Global Save Path in settings menu.

Fixed #117 : Improve system update ( now the download is stoppable with a back key pressure and network outages are handled ).

Implemented basic WiFi scanner ( no WPS functionality yet ).

Fixed #124 : MITM Session Hijacking Browser.

Fixed #128 : Improved port checking when settings are changed.

SSL Stripping is now configurable in settings.

Fixed #101 : Cookie Sniffer DNS Error.

Fixed #104 : Inspector OS data not scrolling.

Reverted from iptables forwarding to plain kernel forwarding.

Fixed #119 : llegalThreadStateException: Thread already started.

Fixed #120 : java.util.ConcurrentModificationException on stream gobbler.

Fixed #118 : NetworkMonitorService notifications icon.

Fixed #121 : java.lang.NullPointerException on HijackerWebView.

Fixed #122 : Menu options don't get enabled after connecting to wifi.
[Android Apps and Games] whitelightercarl:
Force log out

Suggestion: force a logout on users and redirect them to a fake login page of facebook so we can sniff their password
[Android Apps and Games] evilsocket:
this is phishing, and it's waaaay too lamerish for me to be implemented into dSploit ... tnx for the suggestion ;)
[Android Apps and Games] abissel22:
Works great! Whatever the current update/beta is: It works on my device. It seems all the bugs I used to have are gone.

Sent from my SCH-I535 running Jellybean 4.1.2 (CM10 m2)
[Android Apps and Games] EdgaBimbam:
just wondering is it possible to use bruteforce on wifi router to get it password? o.O like you have done with login cracker?
[Android Apps and Games] fatcobrah:
1-can i kill connection for all ip's ?i'v tried to chose router then kill connection and that didn't work

2-sniffing the password doesn't work too

r u using sslstip ?
[Android Apps and Games] :
Port scanner still doesn't work for me on 1.028b
[Android Apps and Games] anazhd:
can be done. but many works to do from hosts redirect to ripping and recode website design.

this would be a great feature thou.
[Android Apps and Games] evilsocket:
great! :D

would be too slow, trust me :P anyway, do the MITM modules work for you now ?

Try on the subnet.

I'm using ssl stripping, but not the tool sslstrip ... i've done it myself.
[Android Apps and Games] jwds1978:
While I've not had a chance to fully test it out as of yet, I can verify that it's no longer causing my device to restart when initiating a MITM attack. I was able to use the session hijacker without issue to see both Facebook and XDA sessions during my brief test. I'll test it out some more tomorrow, but given that I can now see others on the network and am not triggering a device restart with an attack, it's definitely looking good. :good:
[Android Apps and Games] evilsocket:
very happy to hear that! :D i've been coding until 5AM, my dogs woke me up at 9AM, but at least it's worth it! :D
[Android Apps and Games] EdgaBimbam:
nop :/ still same problem. I'm using v24 to avoid this problem :)
[Android Apps and Games] evilsocket:
i give up on you man ... i think your router has something against arp spoofing.
[Android Apps and Games] evilsocket:
wanna try something for me ?
[Android Apps and Games] EdgaBimbam:
yeh ofcourse :) Btw now MITM features on subnet mask works perfectly. Just left problem with router as victim.
[Android Apps and Games] evilsocket:
oh yeah! that's normal XD you can't spoof the router as the victim ... the router would think that YOU are the router, but it hasn't to comunicate with himself, so the spoof is useless.

If you're telling me that on the subnet now works, then we don't have anything to try :D
[Android Apps and Games] EdgaBimbam:
but what about killing connection,script injection, image replace? :) these isnt working while router is victim or is it normal? :)

cause with v24 i was able to use these features on router

p.s. im out of thanks limit ;D
[Android Apps and Games] evilsocket:
it is, with previous versions if you had the router selected dSploit just went for a subnet spoof ...
[Android Apps and Games] EdgaBimbam:
oh okay then :) now i can migrate from v24 to v28 without any problems :)

thx for your support
[Android Apps and Games] evilsocket:
thanks to YOU for beta testing :D
[Android Apps and Games] EdgaBimbam:
here is my little donation for weed :D 3K372932AR731340J
[Android Apps and Games] evilsocket:
tnx! :D
[Android Apps and Games] fatcobrah:
doesn't work too :(
[Android Apps and Games] evilsocket:
probably it's working and you aren't noticing that .... if mitm works for you, then ssl stripping works too.
[Android Apps and Games] fatcobrah:
Sslstrip and kill connection works only for single ip

I want it to work on all ip's

and i am sure that it's not working.
[Android Apps and Games] evilsocket:
are you targeting the router or the subnet ?
[Android Apps and Games] nikant:
MITM works:good::good: great!

still port scanner, trace, vuln scan nothing.. can anyone understand from error log if it's something in my device?
[Android Apps and Games] evilsocket:
Could you please open a specific issue on github for the port scanning and trance ( all nmap related ) ? tnx <3
[Android Apps and Games] rhazxor:
feat

can you add some feat. like Shutdown,,Eject CD,,Printscreen like the ones in Zimperium
[Android Apps and Games] evilsocket:
those are not features but exploits ... i still don't know if i will implement such kind of modules, due to the fact dSploit should be used to FIND vulnerabilities, not to hack systems.
[Android Apps and Games] nikant:
done thank you..
[Android Apps and Games] evilsocket:
tnx, i've wrote you there, need you to test something for me :)
[Android Apps and Games] Ruzzah:
DSpolit is a network penetrating app, this means it should have the ability to use exploits against the network, to test... this is why you have the password sniffer and session hijacker. I hope you understand
[Android Apps and Games] evilsocket:
I do, but i think this.

Implementing 2 or 3 exploits like zAnti does, is silly ... within 1 or 2 years ( if not less ) those exploits would be useless, hence the feature itself.

One smart way to implement this would be to wrap metasploit somehow and handle the updates ... so, don't ask me to implement this or that exploit ... ask me to merge metasploit inside dSploit :D
[Android Apps and Games] Ruzzah:
Even if it will be useful for the majority of people, these would still be good for now. Just how people still use WPS, WEP, etc.
[Android Apps and Games] fatcobrah:
Both =(

My router is tp-link wr740n
[Android Apps and Games] evilsocket:
which version of dSploit are you using ?
[Android Apps and Games] EdgaBimbam:
And with v24 is it ok? Because from v25 to v27 subnetmask wasnt working for me+router but with v28 subnet mask mitm is working just sucks that im not able to kill connection of all subnet.

P.s. router as victim, mitm features doesnt work
[Android Apps and Games] evilsocket:
yep try 1.0.28b
[Android Apps and Games] rhazxor:
Ok thanks for the response though... I also experience problems and a few bugs in the MITM...hope you can improve it Im looking forward to your app :)
[Android Apps and Games] fatcobrah:
1.0.28b

And i tried 1.0.27 before
[Android Apps and Games] evilsocket:
really strange, seems like there're issues with tp-link routers ...
[Android Apps and Games] EdgaBimbam:
Try with v24 if is it working, maybe there is something wrong with your phone or smt like that but not with the app

---------- Post added at 03:58 PM ---------- Previous post was at 03:54 PM ----------

Hmmm maybe I need to turn on debugging error in your app and try same stages with v24 and v28? Maybe it will help to reproduce problem
[Android Apps and Games] fatcobrah:
i dunno :S i can redirect websites ,replace images using subnet mask but i cant kill connections or capture password

---------- Post added at 04:22 PM ---------- Previous post was at 04:02 PM ----------

btw bro can this help u to get wps working ?

http://bcmon.blogspot.fi/
[Android Apps and Games] Ruzzah:
Is there a way you can implement arpspoof and the eth something? So you can choose between the too, as the other used to work with other routers, and arpspoof doesn't.
[Android Apps and Games] frenzyboi:
Sorry if this has been asked before.

Does this works on WPA2 network, the one that requires username and password to login?

In school, our network requires the user to login with username and password before establishing a connection. Nothing seemed to be working. Sniffer etc. However when I am at home, it works on my computer [direct connection]. Session hijack, sniffer etc.

Thanks!
[Android Apps and Games] JoseRebelo:
I think it works on WPA2, but on your school they probably isolate each client, so I think that's why nothing works.
[Android Apps and Games] Ruzzah:
Works on WPA2 but not on EAP.
[Android Apps and Games] evilsocket:
well it depends on the network implementation ... here in Italy for instance, on some networks with client login dSploit works perfectly, on other networks it doesn't.
[Android Apps and Games] DnaPolymerase:
[OT]

evilspot, I think there is something wrong with your twitter account as you've sent me two PMs with just two shortened url which seem to point towards google.com. Am I missing something?

[/OT]
[Android Apps and Games] evilsocket:
yeah some app i've authorized ages ago was sending pm to my contacts ... disallowed them all and changed password to be sure, sorry :P
[Android Apps and Games] :
:( just tested the new version. Everything working fine, except password sniffer.

Tested it against a simple http site, no results.

Tried to get a log, it came out empty. Any idea evil?
[Android Apps and Games] evilsocket:
try other protocols, imap for instance.
[Android Apps and Games] s0undless:
hey evilsocket your work is greatly appreciated over here :D i'm using a samsung sgs3 i9300 rooted jellybean stock firmware and everything works fine so far. will packet injection/monitor mode be supported in the versions to come?
[Android Apps and Games] Dr.69:
It's has been discussed earlier, it won't.
[Android Apps and Games] xopito_cc:
First, congratz to ur app!! I am still testing it, but of what I have seen now looks really great!

I would like to help, so I propose u sth. I am a student of networking, and since I know some of it, plus some java programming, I was thinking that a great plus would be to enable name resolution for the pcs in the network, and since u can forge packets with the app, would u like me to have it a look? Would u like a hand for that?

Just want to help,

And again, nice project :)
[Android Apps and Games] Ruzzah:
Name resolution, all useful details would be good. You should help evil fix the bug of not being able to see all subnets on the network.
[Android Apps and Games] anazhd:
a cup of coffee from me :D 23C47523VL034922E
[Android Apps and Games] riahc3:
Took a 3 day vacation and the thread has grown :P

Will update tommorow and test :)
[Android Apps and Games] Nokijima:
Anyone else having the app crash on them upon starting the password sniffer?
[Android Apps and Games] anazhd:
what device and version?
[Android Apps and Games] Nokijima:
Running on a Xperia Play, and the problem seems to have persisted since .27b, .25 did it fine. (Haven't tested it on .26b).

Also crashes upon using starting Session Hijacker.
[Android Apps and Games] mobile-freak:
Did someone tested at a EAP Network? :D

Gesendet von meinem GT-N8000 mit Tapatalk 2
[Android Apps and Games] :
seems to work on EAP at my school, however I don't want to use it too much since I log into the network with my student ID
[Android Apps and Games] Ruzzah:
EAP TLS doesn't at mine, my school uses certificates not login and they have Cisco routers
[Android Apps and Games] evilsocket:
It would be nice, go ahead a write down some code if you want :D

Tnx :D
[Android Apps and Games] riahc3:
The download speed is killing me; Im not sure how much load you can take but put the latest version on your VPS because Githug completely blows on download speeds....

---------- Post added at 11:20 AM ---------- Previous post was at 11:06 AM ----------

Its trying to load the changelog and gets stuck.

Actually it shows "Webpage not avaliable". Maybe it should give a prettier message.
[Android Apps and Games] evilsocket:
Man i think your connection is broken, i can browse the changelog without any problems.
[Android Apps and Games] evilsocket:
BTW the changelog is on dsploit.net
[Android Apps and Games] riahc3:
(Could not read changelog)

I see you added search for wifi.....but even if I search and there isn't any (and I'm on mobile data connection) and I can start/stop monitor. It should be greyed out as well until I connect to a wifi....
[Android Apps and Games] evilsocket:
the wifi scanner automatically enables wifi ... so if you can't see any wifi network, it's just because there aren't any.