Pages

Thursday, January 25, 2024

DSploit

DSploit

After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality.

The DSploit APK in the Play Store was not working for me, but the latest nightly on http://dsploit.net worked like a charm.

Most features require that you and your target uses the same WiFi network, and that's it. It can be Open, WEP, WPA/WPA2 Personal. On all of these networks, DSploit will sniff the passwords - because of the active attacks. E.g. a lot of email clients still use IMAP with clear text passwords, or some webmails, etc. 

First, DSploit lists the AP and the known devices on the network. In this case, I chose one victim client.


In the following submenu, there are tons of options, but the best features are in the MITM section. 


Stealthiness warning: in some cases, I received the following popup on the victim Windows:


This is what we have under the MITM submenu:


Password sniffing

For example, let's start with the Password Sniffer. It is the same as EvilAP and DSniff in my previous post. With the same results for the popular Hungarian webmail with the default secure login checkbox turned off. Don't forget, this is not an Open WiFi network, but one with WPA2 protection!


Session hijack

Now let's assume that the victim is very security-aware and he checks the secure login checkbox. Another cause can be that the victim already logged in, long before we started to attack. The session hijacking function is similar to the Firesheep tool, but it works with every website where the session cookies are sent in clear text, and there is no need for any additional support.

In a session hijacking attack (also called "sidejacking"), after the victim browser sends the authentication cookies in clear text, DSploit copies these cookies into its own browser, and opens the website with the same cookies, which results in successful login most of the time. Let's see session hijacking in action!

Here, we can see that the session cookies have been sniffed from the air:


Let's select that session, and be amazed that we logged into the user's webmail session.




Redirect traffic

This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.


Replace images, videos

I think this is just for fun here. Endless Rick Rolling possibilities.


Script injection

This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.

Custom filter

If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).

Additional fun (not in DSploit) - SSLStrip 

From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.

HTML source on the client-side without SSLstrip:


HTML source on the client-side with SSL strip:


With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.

Lessons learned here

If you are a website operator where you allow your users to login, always:
  1. Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
  2. Mark the session cookies with the secure flag
  3. Use HSTS to prevent SSLStrip attacks
If you are a user:
  1. Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
  2. Use HTTPS everywhere plugin
  3. For improved security, use VPN
Because hacking has never been so easy before.
And last but not least, if you like the DSploit project, don't forget to donate them!

More articles


  1. Hacking Apps
  2. Hacker Tools Github
  3. Pentest Tools Alternative
  4. Hacking Tools Windows
  5. How To Make Hacking Tools
  6. Hack App
  7. Tools Used For Hacking
  8. Tools For Hacker
  9. Hacker Tools Free
  10. How To Install Pentest Tools In Ubuntu
  11. Hacker Security Tools
  12. Hack Tools For Windows
  13. Hacker
  14. Tools For Hacker
  15. What Is Hacking Tools
  16. Pentest Tools Kali Linux
  17. Pentest Tools Open Source
  18. Hackrf Tools
  19. Hack Tools
  20. Pentest Automation Tools
  21. Hacking App
  22. Hacking Tools Hardware
  23. Pentest Box Tools Download
  24. Nsa Hacker Tools
  25. Hack Rom Tools
  26. Hacking Tools For Mac
  27. Physical Pentest Tools
  28. World No 1 Hacker Software
  29. Hack Tools For Ubuntu
  30. Hacker Tools 2019
  31. Pentest Tools For Ubuntu
  32. Pentest Tools Find Subdomains
  33. Nsa Hack Tools Download
  34. Hackrf Tools
  35. Underground Hacker Sites
  36. Hack App
  37. Tools For Hacker
  38. Hacker Tools List
  39. Hacker Tools Software
  40. Pentest Box Tools Download
  41. Kik Hack Tools
  42. Hacking Tools Pc
  43. Hak5 Tools
  44. Pentest Tools Open Source
  45. Hacker Tools Online
  46. Hacking Tools Hardware
  47. Install Pentest Tools Ubuntu
  48. Hackers Toolbox
  49. How To Install Pentest Tools In Ubuntu
  50. Pentest Tools Github
  51. Hacking Tools Name
  52. Hacker Tool Kit
  53. Termux Hacking Tools 2019
  54. Hacking Tools For Windows 7
  55. Hacking Tools Free Download
  56. Tools For Hacker
  57. Hack Tools Github
  58. How To Hack
  59. Hacker Tools Apk Download
  60. Hack Tools For Pc
  61. What Are Hacking Tools
  62. Hacking Tools Online
  63. Hacking Tools For Windows 7
  64. Hacking Tools Download
  65. Hacking Tools
  66. Growth Hacker Tools
  67. Hacking Tools Mac
  68. Nsa Hacker Tools
  69. Hacking Tools Online
  70. Hacker Tools Windows
  71. Hacking Tools
  72. Termux Hacking Tools 2019
  73. Usb Pentest Tools
  74. Hacker Tools Mac
  75. Hacker Tools Software
  76. Hacking Tools Hardware
  77. Hacker Tools Linux
  78. New Hack Tools
  79. Pentest Tools Website
  80. Hack Tools For Ubuntu
  81. Hacking Tools For Games
  82. Hacking Tools Free Download
  83. Hacker Tools Apk
  84. Hacker Tools Apk Download
  85. Pentest Tools Linux
  86. Pentest Tools For Windows
  87. Hacker Tools 2020
  88. Hacking Tools Windows
  89. How To Make Hacking Tools
  90. Hack Tools For Windows
  91. Hacker Tools Hardware
  92. Hacker Tools Free Download
  93. Pentest Tools Website Vulnerability
  94. Wifi Hacker Tools For Windows
  95. Hacker Tools Apk Download
  96. Pentest Box Tools Download
  97. Hacker Hardware Tools
  98. Pentest Tools Subdomain
  99. Pentest Tools Subdomain
  100. Hacking Tools Kit
  101. Hacking Tools Hardware
  102. Ethical Hacker Tools
  103. Tools 4 Hack
  104. Hacker
  105. Hacking Tools Pc
  106. Hacker Tools

No comments:

Post a Comment