DSploit
After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality.
The DSploit APK in the Play Store was not working for me, but the latest nightly on http://dsploit.net worked like a charm.
Most features require that you and your target uses the same WiFi network, and that's it. It can be Open, WEP, WPA/WPA2 Personal. On all of these networks, DSploit will sniff the passwords - because of the active attacks. E.g. a lot of email clients still use IMAP with clear text passwords, or some webmails, etc.
First, DSploit lists the AP and the known devices on the network. In this case, I chose one victim client.
In the following submenu, there are tons of options, but the best features are in the MITM section.
Stealthiness warning: in some cases, I received the following popup on the victim Windows:
This is what we have under the MITM submenu:
Password sniffing
For example, let's start with the Password Sniffer. It is the same as EvilAP and DSniff in my previous post. With the same results for the popular Hungarian webmail with the default secure login checkbox turned off. Don't forget, this is not an Open WiFi network, but one with WPA2 protection!
Session hijack
Now let's assume that the victim is very security-aware and he checks the secure login checkbox. Another cause can be that the victim already logged in, long before we started to attack. The session hijacking function is similar to the Firesheep tool, but it works with every website where the session cookies are sent in clear text, and there is no need for any additional support.
In a session hijacking attack (also called "sidejacking"), after the victim browser sends the authentication cookies in clear text, DSploit copies these cookies into its own browser, and opens the website with the same cookies, which results in successful login most of the time. Let's see session hijacking in action!
Here, we can see that the session cookies have been sniffed from the air:
Let's select that session, and be amazed that we logged into the user's webmail session.
Redirect traffic
This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.Replace images, videos
I think this is just for fun here. Endless Rick Rolling possibilities.Script injection
This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.Custom filter
If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).Additional fun (not in DSploit) - SSLStrip
From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.HTML source on the client-side without SSLstrip:
HTML source on the client-side with SSL strip:
With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.
Lessons learned here
If you are a website operator where you allow your users to login, always:- Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
- Mark the session cookies with the secure flag
- Use HSTS to prevent SSLStrip attacks
If you are a user:
- Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
- Use HTTPS everywhere plugin
- For improved security, use VPN
Because hacking has never been so easy before.
And last but not least, if you like the DSploit project, don't forget to donate them!
And last but not least, if you like the DSploit project, don't forget to donate them!
Related links
- Hackers Toolbox
- Hacker Tools For Ios
- Hacker Tools Apk Download
- Hacking Tools For Mac
- Hack Tools Download
- Pentest Tools Windows
- Hack Tools
- Hacking Tools For Windows Free Download
- Hacking Tools 2019
- Bluetooth Hacking Tools Kali
- Hacker Tools Online
- Hacking Tools For Windows
- How To Install Pentest Tools In Ubuntu
- Hacking Tools Pc
- Hack And Tools
- Pentest Tools Android
- Hacking Tools For Mac
- Pentest Tools Url Fuzzer
- Hacker Tools Free Download
- Pentest Tools Windows
- Pentest Tools Tcp Port Scanner
- Pentest Reporting Tools
- Hacking Tools Pc
- Hacker Tools For Windows
- New Hacker Tools
- Hack Tools For Pc
- Pentest Tools Nmap
- Game Hacking
- Hack Website Online Tool
- Pentest Tools Open Source
- Hacker Tools Free Download
- Hacking Tools Github
- Hack Tool Apk No Root
- Hacker Tools Free Download
- Pentest Tools List
- Pentest Tools Tcp Port Scanner
- Pentest Reporting Tools
- Hack Tools Online
- Hacker Tools Apk
- Pentest Reporting Tools
- Hacking Tools And Software
- Termux Hacking Tools 2019
- Hacking Tools For Windows
- Blackhat Hacker Tools
- Blackhat Hacker Tools
- Nsa Hack Tools Download
- Best Hacking Tools 2019
- Pentest Tools Website
- Hack Tools Mac
- Computer Hacker
- Hacking Tools
- Pentest Tools For Mac
- Hacker Tools List
- Pentest Tools List
- Tools For Hacker
- Hacking Tools Online
- Computer Hacker
- Termux Hacking Tools 2019
- Nsa Hacker Tools
- Hak5 Tools
- Physical Pentest Tools
- Hacker Tools Windows
- Hacking Tools 2019
- Nsa Hack Tools
- Hacker Tools For Windows
- Underground Hacker Sites
- World No 1 Hacker Software
- Top Pentest Tools
- Hacker Security Tools
- Pentest Tools Online
- Hacker Tools Apk
- Hack App
- Pentest Tools Download
- Nsa Hack Tools
- Hacker Tools Apk Download
- Hacking Tools For Mac
- New Hacker Tools
- What Is Hacking Tools
- Hacking Tools For Windows Free Download
- Hacker Tools 2020
- Hacking Tools 2020
- Hack And Tools
- Hacker Tools For Windows
- Hacking Tools Windows 10
- Hack Tools Pc
- Pentest Tools Linux
- Hacker Tools
- Hacker Search Tools
- Hacker Tools For Windows
- Hack Tools Pc
- Pentest Tools Free
- Pentest Tools Online
- Pentest Tools Find Subdomains
- Hacker Tools Linux
- Nsa Hack Tools
- Tools For Hacker
- Hack Tools For Mac
- Hacker Tools List
- Hacker Tools For Ios
- Hacking Tools 2020
- Wifi Hacker Tools For Windows
- Hacking Apps
- Hack Tools Online
- Hacker Tools Windows
- Hacker Tools 2020
- Pentest Tools For Mac
- Hacker Techniques Tools And Incident Handling
- Hacking Tools For Kali Linux
- Hacking Tools For Windows
- Best Pentesting Tools 2018
- Wifi Hacker Tools For Windows
- Usb Pentest Tools
- Pentest Tools Port Scanner
- Hacking Tools Windows
- Easy Hack Tools
- Hacker Tools Free
- Hacker Tools Apk Download
- Hacker Search Tools
- Blackhat Hacker Tools
- Hacker Tools For Mac
- Best Pentesting Tools 2018
- Hacking Tools Online
- Hacker Tool Kit
- Hacker Tools For Windows
- Hacker Tools For Ios
- Best Pentesting Tools 2018
- Hacking Tools For Pc
- Termux Hacking Tools 2019
- Hacker Tools For Windows
- Hack Tools Online
- Hacking Tools Kit
- Game Hacking
- Hacker Tools For Pc
- How To Hack
- Hacker Tools For Ios
- Hack Tools Mac
- Tools For Hacker
- Github Hacking Tools
- Hacker Search Tools
- How To Install Pentest Tools In Ubuntu
- Hacker Tools
- Hack Tools Pc
- Hacker Tools For Windows
- Hacker Tools Software
- Pentest Tools
- Usb Pentest Tools
- World No 1 Hacker Software
- Hack Tools For Pc
- Pentest Tools Open Source
- Hacking Tools Windows
- Hacker Tools Apk
- Hacker Tools Free
- Nsa Hack Tools
- Hacking Tools Windows
- Hacking Tools Online
- Hak5 Tools
- Tools 4 Hack
- What Is Hacking Tools
- Hacking Tools Free Download
- Hack Apps
- Pentest Tools Framework
- Hack Tools For Mac
- Usb Pentest Tools
- Pentest Tools For Mac
- Hacker Search Tools
- Pentest Tools Find Subdomains
- Hacker Tools For Windows
- Hack Tools Github
No hay comentarios:
Publicar un comentario