Thursday, 25 January 2024

DSploit

DSploit

After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality.

The DSploit APK in the Play Store was not working for me, but the latest nightly on http://dsploit.net worked like a charm.

Most features require that you and your target uses the same WiFi network, and that's it. It can be Open, WEP, WPA/WPA2 Personal. On all of these networks, DSploit will sniff the passwords - because of the active attacks. E.g. a lot of email clients still use IMAP with clear text passwords, or some webmails, etc. 

First, DSploit lists the AP and the known devices on the network. In this case, I chose one victim client.


In the following submenu, there are tons of options, but the best features are in the MITM section. 


Stealthiness warning: in some cases, I received the following popup on the victim Windows:


This is what we have under the MITM submenu:


Password sniffing

For example, let's start with the Password Sniffer. It is the same as EvilAP and DSniff in my previous post. With the same results for the popular Hungarian webmail with the default secure login checkbox turned off. Don't forget, this is not an Open WiFi network, but one with WPA2 protection!


Session hijack

Now let's assume that the victim is very security-aware and he checks the secure login checkbox. Another cause can be that the victim already logged in, long before we started to attack. The session hijacking function is similar to the Firesheep tool, but it works with every website where the session cookies are sent in clear text, and there is no need for any additional support.

In a session hijacking attack (also called "sidejacking"), after the victim browser sends the authentication cookies in clear text, DSploit copies these cookies into its own browser, and opens the website with the same cookies, which results in successful login most of the time. Let's see session hijacking in action!

Here, we can see that the session cookies have been sniffed from the air:


Let's select that session, and be amazed that we logged into the user's webmail session.




Redirect traffic

This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.


Replace images, videos

I think this is just for fun here. Endless Rick Rolling possibilities.


Script injection

This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.

Custom filter

If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).

Additional fun (not in DSploit) - SSLStrip 

From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.

HTML source on the client-side without SSLstrip:


HTML source on the client-side with SSL strip:


With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.

Lessons learned here

If you are a website operator where you allow your users to login, always:
  1. Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
  2. Mark the session cookies with the secure flag
  3. Use HSTS to prevent SSLStrip attacks
If you are a user:
  1. Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
  2. Use HTTPS everywhere plugin
  3. For improved security, use VPN
Because hacking has never been so easy before.
And last but not least, if you like the DSploit project, don't forget to donate them!
Read more
  1. Hacking Tools For Kali Linux
  2. Hacker
  3. Hacker Tools Software
  4. Hacker Tools 2020
  5. Hack Apps
  6. Github Hacking Tools
  7. Pentest Tools Website
  8. Hacker Tools List
  9. Black Hat Hacker Tools
  10. Pentest Tools Android
  11. Hackrf Tools
  12. Hacker Tools Online
  13. Hacker Tools For Ios
  14. Hacking Tools Kit
  15. Hacking Tools Free Download
  16. Hacking Tools
  17. Pentest Tools For Ubuntu
  18. Hacking Tools Kit
  19. Hacking Tools For Windows 7
  20. Android Hack Tools Github
  21. Hacking Tools Free Download
  22. Hacking Tools 2020
  23. Pentest Tools Github
  24. Hack Tools For Windows
  25. Computer Hacker
  26. Pentest Tools Website Vulnerability
  27. Hacker Tools Github
  28. Hacker Tool Kit
  29. Pentest Tools For Android
  30. Pentest Automation Tools
  31. Hacker Tools List
  32. Best Hacking Tools 2020
  33. How To Make Hacking Tools
  34. Hacker Tools For Windows
  35. Hackrf Tools
  36. Hacker Hardware Tools
  37. Hacker Tools Free
  38. Pentest Tools Review
  39. Pentest Tools Free
  40. Tools 4 Hack
  41. Pentest Tools Apk
  42. Hacker Tools Apk Download
  43. Black Hat Hacker Tools
  44. Tools Used For Hacking
  45. Best Hacking Tools 2020
  46. Pentest Tools Url Fuzzer
  47. Hacker Tools Free
  48. Best Hacking Tools 2020
  49. Hack Website Online Tool
  50. Top Pentest Tools
  51. Hacker Tools 2020
  52. Hack Apps
  53. Hacking Tools Online
  54. Pentest Tools Kali Linux
  55. Hack Tools Github
  56. Hack Tool Apk No Root
  57. Pentest Tools Port Scanner
  58. Hacker Tools For Ios
  59. Pentest Tools Bluekeep
  60. Hacker Tools
  61. Pentest Tools For Mac
  62. Pentest Tools Kali Linux
  63. Hacking Tools Hardware
  64. Hacker Tools For Pc
  65. Hacking Tools For Games
  66. Hacks And Tools
  67. Best Hacking Tools 2019
  68. Hacking Tools Usb
  69. Hack Tools For Mac
  70. Game Hacking
  71. Hacking Tools Mac
  72. Hacker Search Tools
  73. Hak5 Tools
  74. Hacking Tools For Pc
  75. Pentest Tools Port Scanner
  76. Hack Tool Apk No Root
  77. Hacker Search Tools
  78. Hacking Tools For Mac
  79. Pentest Tools Open Source
  80. Hacker Tools List
  81. Hack App
  82. Hacking Tools For Mac
  83. World No 1 Hacker Software
  84. Easy Hack Tools
  85. Pentest Tools Review
  86. Pentest Tools Subdomain
  87. Hack Tools For Games
  88. Hacking Tools Hardware
  89. Hacking Tools Kit
  90. Ethical Hacker Tools
  91. Underground Hacker Sites
  92. Free Pentest Tools For Windows
  93. Github Hacking Tools
  94. Pentest Tools Kali Linux
  95. Hacking Tools Online
  96. How To Install Pentest Tools In Ubuntu
  97. Hacking Tools Windows 10
  98. Hacking Tools Kit
  99. Hacking Tools For Windows
  100. Best Pentesting Tools 2018
  101. Top Pentest Tools
  102. Nsa Hack Tools Download
  103. How To Hack
  104. Hacker Tools Software
  105. Tools 4 Hack
  106. Hacking Tools Windows 10
  107. Best Hacking Tools 2019
  108. Hacker Tools Apk
  109. Nsa Hacker Tools
  110. Tools 4 Hack
  111. Hack Website Online Tool
  112. Hack Tools For Pc
  113. Pentest Tools
  114. Termux Hacking Tools 2019
  115. Hacker Tools Github
  116. Pentest Tools Review
  117. Hacker Tools Linux
  118. Pentest Tools Download
  119. Hacking Tools For Mac
  120. Hacking App
  121. Hacker Tools Free
  122. Pentest Tools For Mac
  123. Hack Website Online Tool
  124. Hacking Tools For Games
  125. Hack Rom Tools
  126. Usb Pentest Tools
  127. Pentest Tools List
  128. Hacker Tools Windows
  129. Hack Website Online Tool
  130. Hacking Tools Mac
  131. Hack Website Online Tool
  132. Pentest Tools Website
  133. Pentest Tools List
  134. Growth Hacker Tools
  135. Hacker Search Tools
  136. Hacking Tools
  137. Pentest Tools Alternative
  138. Hacking Tools Hardware
  139. Hack Tools Online
  140. Beginner Hacker Tools
  141. Pentest Tools For Ubuntu
  142. Pentest Tools Nmap
  143. Hacker Tools Software
  144. Install Pentest Tools Ubuntu
  145. World No 1 Hacker Software

No comments:

Post a Comment