Friday, January 26, 2024

DSploit

After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality.

The DSploit APK in the Play Store was not working for me, but the latest nightly on http://dsploit.net worked like a charm.

Most features require that you and your target uses the same WiFi network, and that's it. It can be Open, WEP, WPA/WPA2 Personal. On all of these networks, DSploit will sniff the passwords - because of the active attacks. E.g. a lot of email clients still use IMAP with clear text passwords, or some webmails, etc. 

First, DSploit lists the AP and the known devices on the network. In this case, I chose one victim client.


In the following submenu, there are tons of options, but the best features are in the MITM section. 


Stealthiness warning: in some cases, I received the following popup on the victim Windows:


This is what we have under the MITM submenu:


Password sniffing

For example, let's start with the Password Sniffer. It is the same as EvilAP and DSniff in my previous post. With the same results for the popular Hungarian webmail with the default secure login checkbox turned off. Don't forget, this is not an Open WiFi network, but one with WPA2 protection!


Session hijack

Now let's assume that the victim is very security-aware and he checks the secure login checkbox. Another cause can be that the victim already logged in, long before we started to attack. The session hijacking function is similar to the Firesheep tool, but it works with every website where the session cookies are sent in clear text, and there is no need for any additional support.

In a session hijacking attack (also called "sidejacking"), after the victim browser sends the authentication cookies in clear text, DSploit copies these cookies into its own browser, and opens the website with the same cookies, which results in successful login most of the time. Let's see session hijacking in action!

Here, we can see that the session cookies have been sniffed from the air:


Let's select that session, and be amazed that we logged into the user's webmail session.




Redirect traffic

This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.


Replace images, videos

I think this is just for fun here. Endless Rick Rolling possibilities.


Script injection

This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.

Custom filter

If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).

Additional fun (not in DSploit) - SSLStrip 

From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.

HTML source on the client-side without SSLstrip:


HTML source on the client-side with SSL strip:


With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.

Lessons learned here

If you are a website operator where you allow your users to login, always:
  1. Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
  2. Mark the session cookies with the secure flag
  3. Use HSTS to prevent SSLStrip attacks
If you are a user:
  1. Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
  2. Use HTTPS everywhere plugin
  3. For improved security, use VPN
Because hacking has never been so easy before.
And last but not least, if you like the DSploit project, don't forget to donate them!
Read more

  1. Hacking Tools Kit
  2. How To Hack
  3. Hack Rom Tools
  4. Hackrf Tools
  5. Hacking Tools For Games
  6. Pentest Tools Url Fuzzer
  7. Pentest Tools Linux
  8. Hacker Tools For Pc
  9. Hacker Tools Github
  10. Pentest Tools
  11. Free Pentest Tools For Windows
  12. Hack Tools For Pc
  13. New Hacker Tools
  14. Hackers Toolbox
  15. Computer Hacker
  16. Hack Tools Online
  17. Hacker Tools Linux
  18. Hak5 Tools
  19. How To Hack
  20. Pentest Tools For Mac
  21. Hacker Tools
  22. How To Hack
  23. Hack Tools For Ubuntu
  24. Pentest Tools Bluekeep
  25. Hacker Tools Github
  26. Black Hat Hacker Tools
  27. Pentest Tools Alternative
  28. Hack Tools For Windows
  29. Nsa Hacker Tools
  30. Hacker Security Tools
  31. Hacking Tools Download
  32. Hack Tools
  33. How To Hack
  34. Hack And Tools
  35. Bluetooth Hacking Tools Kali
  36. Hacking Tools For Pc
  37. Hack Tools For Mac
  38. Pentest Reporting Tools
  39. Hack Tool Apk
  40. Pentest Tools Website
  41. Nsa Hacker Tools
  42. Pentest Tools Subdomain
  43. Pentest Tools Free
  44. Tools For Hacker
  45. Hacker
  46. Hack Tools Online
  47. Best Hacking Tools 2019
  48. Beginner Hacker Tools
  49. Free Pentest Tools For Windows
  50. Pentest Tools Android
  51. Hackrf Tools
  52. Hacker Techniques Tools And Incident Handling
  53. Hak5 Tools
  54. Pentest Tools Linux
  55. Hacker Tools 2020
  56. Hacking Apps
  57. Pentest Tools Github
  58. Growth Hacker Tools
  59. Pentest Tools Port Scanner
  60. Hacker
  61. Hacking Tools Mac
  62. Hack Tools Github
  63. Tools 4 Hack
  64. Hack Tools Pc
  65. Pentest Tools Nmap
  66. Pentest Tools For Ubuntu
  67. Pentest Tools For Mac
  68. Hacker Tools For Mac
  69. Github Hacking Tools
  70. Hacking Tools Download
  71. Pentest Tools Linux
  72. Hacker Tools
  73. Hacker Hardware Tools
  74. Ethical Hacker Tools
  75. Hack Tools For Pc
  76. Wifi Hacker Tools For Windows
  77. Hacking Tools Windows 10
  78. Pentest Tools Linux
  79. Hack Tool Apk No Root
  80. Best Hacking Tools 2020
  81. Best Pentesting Tools 2018
  82. Hack Tools For Windows
  83. Hacking Tools And Software
  84. Pentest Tools Find Subdomains
  85. Hacker Tools Apk Download
  86. Nsa Hacker Tools
  87. How To Install Pentest Tools In Ubuntu
  88. Install Pentest Tools Ubuntu
  89. Pentest Tools Free
  90. New Hack Tools
  91. Pentest Tools Website
  92. Hacking Tools For Mac
  93. Pentest Tools Online
  94. Hacking Tools Mac
  95. Hacker Tools Apk
  96. Hak5 Tools
  97. Usb Pentest Tools
  98. Hacker Tools For Mac
  99. Hacking Tools Hardware
  100. Hack Tool Apk
  101. Hacking Tools Mac
  102. Hack Tools Download
  103. Hacker Tools 2020
  104. Pentest Tools Tcp Port Scanner
  105. Hacker Tools Free
  106. What Is Hacking Tools
  107. Nsa Hacker Tools
  108. New Hack Tools
  109. Bluetooth Hacking Tools Kali
  110. Hacker Tools Linux
  111. Hack Tools For Windows
  112. Pentest Automation Tools
  113. Hacking Tools Windows 10
  114. Tools Used For Hacking
  115. Hacking Tools For Windows Free Download
  116. Hacker Tools List
  117. Nsa Hack Tools
  118. Pentest Tools Linux
  119. Pentest Tools List
  120. Hack Tools Online
  121. What Are Hacking Tools
  122. Hacking Tools 2019
  123. Hack Website Online Tool
  124. Nsa Hacker Tools
  125. Bluetooth Hacking Tools Kali
  126. Termux Hacking Tools 2019
  127. Hack Tool Apk
  128. Hack Tools
  129. Hacker Security Tools
  130. Hack Website Online Tool
  131. Hack And Tools
  132. Hacking Tools Pc
  133. Termux Hacking Tools 2019
  134. Underground Hacker Sites
  135. Tools For Hacker
  136. Hacking Tools For Windows
  137. Blackhat Hacker Tools
  138. Hacker Tools For Pc
  139. Pentest Recon Tools
  140. Hacker Tools For Ios
  141. What Is Hacking Tools
  142. Hacker Tool Kit
  143. Hacker Tools List
  144. Computer Hacker
  145. Hacker Tools Linux
  146. Pentest Tools Website Vulnerability
  147. How To Hack
  148. Hacker Security Tools
  149. Hack App
  150. New Hack Tools
  151. Hacker Search Tools
  152. Pentest Tools Free
  153. Hackrf Tools
  154. Pentest Tools
  155. Hack Tools
  156. What Are Hacking Tools
  157. Pentest Tools For Ubuntu
  158. Hacking Tools For Windows
  159. Best Hacking Tools 2019
  160. Pentest Tools Open Source
  161. Hackrf Tools
  162. Nsa Hack Tools Download
  163. Hack Tools For Pc
  164. Hacking Tools Hardware
  165. Ethical Hacker Tools
  166. Hacker Tool Kit
  167. Pentest Tools Download
  168. Tools Used For Hacking
  169. Hack Tool Apk No Root
  170. Pentest Tools List
  171. Pentest Tools Open Source
  172. How To Install Pentest Tools In Ubuntu

0 comments:

Post a Comment