Database Info

intercept text messages? or sniff packets sent by phones?

Is there a app that sniff packets sent by cell phones, my whole goal would be to intercept text messages or the data thats sent by cell phones. I came up with this idea when I was messing around with packet sniffer and thought about the idea but on cell phones. Is there something already out like this?

Wireshark at a "router"
While not an on-device solution, I use this setup when I want to watch the traffic between my phone and the network:
"sorry, apparently I can't post a link to this forum, it's at my site droidhacks.com, click on the wireshark tag in the sidebar and you'll find the post"
Having a full Wireshark install running on the desktop is great for poking through the data. I think some folks do the capture on the device and then just move the capture file across. Also helps sometimes to pull the SIM to make sure all the traffic goes through the laptop and not through the network. Sharing on OS X with an handset can be a bit fidgety when first starting up.

Find shark for android and sharkreader. Both of which can be found in this forum.
Sent from my Nexus One using XDA App

can this be countermanded? stoped, disabled somehow? encrypted packets? someone's safety could be at risk.

Are you looking to capture the communications of other phones, rather than your own? If so, good luck, it's encrypted traffic.

Sounds pretty stupid and no, it is not possible. I would rather want a network sniffer for android. Connect to your local coffee shop network and start sniffing.

rTiGd2 said:
Are you looking to capture the communications of other phones, rather than your own? If so, good luck, it's encrypted traffic.
Click to expand...
Click to collapse
no, i'm just curious how this can be done.
if its encrypted how can you read the packets with your program then ?
some kind of id or serial number?

tmpmailone said:
no, i'm just curious how this can be done.
if its encrypted how can you read the packets with your program then ?
some kind of id or serial number?
Click to expand...
Click to collapse
Ok, I think we need a rather large dose of reality here. You'll not manage it, simple as that, certainly not from a consumer device. I suspect you are thinking along the line of WiFi wireless, where you can monitor what other devices are sending. If you really wish to know more then google 'usrp' and you'll soon see you'll need far more hardware and software to start capturing GSM traffic.

ok so you're saying with my router i can't capture my text messages, like those sent and received with the YMesenger app ?
so its possible to sniff datalines?

tmpmailone said:
ok so you're saying with my router i can't capture my text messages, like those sent and received with the YMesenger app ?
so its possible to sniff datalines?
Click to expand...
Click to collapse
Yes, it's possibly to sniff datalines, as well as WiFi.

I think you should break out with you gf

this thread is too funny ( lol )
encryption - lol
cant sniff - lmao!!
link1
I am a network security specialist and you people are just too funny saying "cant" "impossible" "illegal" .. .. ..

morning_wood said:
link1
Click to expand...
Click to collapse
Nice info.
Packet sniffing over public wifi is well known, but I learnt something new today

Chris Paget hapens to be a personal friend of mine

I'm pretty sure intercepting phone calls would still be "illegal", regardless of the fact that you're a network security specialist.
But yes, nothing is impossible, that's pretty much a given. Give someone enough expertise and resources, anything can be hacked. Encryption is actually important, so the general, uninformed riff-raff can't access anything they want. Like my previous statement, it can still be hacked, but it's better that not being encrypted at all.
morning_wood said:
this thread is too funny ( lol )
encryption - lol
cant sniff - lmao!!
link1
I am a network security specialist and you people are just too funny saying "cant" "impossible" "illegal" .. .. ..
Click to expand...
Click to collapse

So, my ex husband is using a packet sniffer to read all of my info that I txt over my phone. He is living with me until he closes on his new house (30 days out). I have installed a VPN on my phone. What else do I need to do? He says he can see all messages that I send, both txt and messenger as well as my calls?? He is a programmer, so I know he knows what he’s doing, how can I get my privacy back? I’m afraid that he will always be spying on me and it’s very frustrating.

Sunshine08 said:
So, my ex husband is using a packet sniffer to read all of my info that I txt over my phone. He is living with me until he closes on his new house (30 days out). I have installed a VPN on my phone. What else do I need to do? He says he can see all messages that I send, both txt and messenger as well as my calls?? He is a programmer, so I know he knows what he’s doing, how can I get my privacy back? I’m afraid that he will always be spying on me and it’s very frustrating.
Click to expand...
Click to collapse
Do you use Google Messages app for text messages? If so check if it is connected to Messages for web. Also if you use Whatsapp check if it is connected to Whatsapp web. I recommend to change password for all the services, Google, Facebook and so on and reset the phone to factory defaults. I don't think this has anything to do with packet sniffing.

[Q] Deployed in Afghanistan please help!

I just purchased the gtab after careful deliberation and i have just one woe.... The only way to get internet access here is to connect to the local provider through the wireless routers they have distributed throughout the installation... Thats the easy part... after that you have to connect using a PPPOE vpn.... i do this with my laptop but i want to use my gtab on the net also.. call me greedy... So my question is; is it possible in anyway to connect to their VPN? Or maybe bridge the connection between my lappy and the gtab?

It might be possible thru Bluetooth? That is if your laptop has Bluetooth. Otherwise I think you will need a small wifi router or something and setup ICS (Internet Connection Sharing).

Bluetooth won't work....
You can use VPN software on your tab but that needs specific settings [ the same from your lap top ] just need to find compatible VPN software for the tab that will work with your network.
Easiest solution is to use your laptop as a wireless router.
depending on your OS [ assuming windows ] there are many guides online on how to set it up.
May be as easy as selecting your network connection and turning on network sharing....
Goodluck homie
EDIT: i don't know what your base's restrictions are but if your "tech" team helped set up your laptop they should help on the tab too.

Goat_For_Sale said:
Easiest solution is to use your laptop as a wireless router.
Click to expand...
Click to collapse
My recommendation as well.

jbro06 said:
I just purchased the gtab after careful deliberation and i have just one woe.... The only way to get internet access here is to connect to the local provider through the wireless routers they have distributed throughout the installation... Thats the easy part... after that you have to connect using a PPPOE vpn.... i do this with my laptop but i want to use my gtab on the net also.. call me greedy... So my question is; is it possible in anyway to connect to their VPN? Or maybe bridge the connection between my lappy and the gtab?
Click to expand...
Click to collapse
well im not sure i understand all you said but theres a progran i use call connectify that let you share you laptop internet by creating a hotspot so try it out and post your result

thanks for your quick replies ill try each of the suggestions out and post the results afterwards... hopefully one of them will help

jbro06 said:
thanks for your quick replies ill try each of the suggestions out and post the results afterwards... hopefully one of them will help
Click to expand...
Click to collapse
What OS is your laptop ? i can probably pull the steps pretty quick

jayune said:
well im not sure i understand all you said but theres a progran i use call connectify that let you share you laptop internet by creating a hotspot so try it out and post your result
Click to expand...
Click to collapse
Wow connectify worked amazingly thanks alot... i am now net capable on my Tab.. thanks again

jbro06 said:
Wow connectify worked amazingly thanks alot... i am now net capable on my Tab.. thanks again
Click to expand...
Click to collapse
Make sure you restrict your hot spot on your laptop to the mac address of your tab and see if you can hide your ssid as well. The base techs lock you down to VPN access for their security so they will not like you opening up their network for everyone to access using your vpn connection.

comfort69 said:
Make sure you restrict your hot spot on your laptop to the mac address of your tab and see if you can hide your ssid as well. The base techs lock you down to VPN access for their security so they will not like you opening up their network for everyone to access using your vpn connection.
Click to expand...
Click to collapse
Thats not necessary as the internet we have is not supplied by the base techs.. we get our personal internet from a local civilian contractor called IO Global.... and the thrid country nationals they have working the branch are no where near enough tech savvy to care what im doing... but thank you for your concern...

Thanks for asking this question. I am in Oki, and having a simular connection problem with my gtab, but the solution provided allowed my to correct my problem as well. Stay safe.

I just left Afghanistan and was having a similar problem. Just curious - what base are you on?

PatrioticAmerican said:
I just left Afghanistan and was having a similar problem. Just curious - what base are you on?
Click to expand...
Click to collapse
No offense but i dont feel comfortable disclosing that information...

jbro06 said:
No offense but i dont feel comfortable disclosing that information...
Click to expand...
Click to collapse
Firstly! Thank you to all for your service to our country!!!! As the people in Egypt are finding out FREEDOM is not FREE.
Second... I do not know which ROM you are using; however Clemsyn's KERNEL does support configuring VPN on your tablet. Please go to this thread for more information:
http://forum.xda-developers.com/showthread.php?t=895825
With the above you should be able to configure your tablet and be able to roam around your area without having to go through your laptop.
This should meet the need you have
I hope the above helps and stay low !!!!

jbro06 said:
comfort69 said:
Make sure you restrict your hot spot on your laptop to the mac address of your tab and see if you can hide your ssid as well. The base techs lock you down to VPN access for their security so they will not like you opening up their network for everyone to access using your vpn connection.
Click to expand...
Click to collapse
Thats not necessary as the internet we have is not supplied by the base techs.. we get our personal internet from a local civilian contractor called IO Global.... and the thrid country nationals they have working the branch are no where near enough tech savvy to care what im doing... but thank you for your concern...
Click to expand...
Click to collapse
You should at least consider doing this anyway, for your own peace of mind: you don't want some random stranger abusing your network connection or potentially accessing your personal data, do you? You wouldn't take chances with your physical security I am sure. Your data security is important too.
Thank you for serving your country, stay safe out there.

999ping said:
Thank you for serving your country, stay safe out there.
Click to expand...
Click to collapse
+100!
Yes, thank you!

thanks everyone for both your support of my mission and of my gtablet... I will most definitely try out the clemsyn kernel and see what comes of it because then i could roam the entire base.. And as far as hiding the ssid, i really dont think thats warranted as the people in my unit or anyone else in the area are not the type of people that would know how to get around what simple security i have in place.... They arent the type of people that you would encounter on this forum, or any tech forum for that matter.... but thanks for your concern ill keep it monitored and if i dont have the warm and fuzzy i will put more security in place, but at this point its just an inconvenience.....

comfort69 said:
...and see if you can hide your ssid as well.
Click to expand...
Click to collapse
This may cause some problems. Android some some well documented issues with non-broadcast SSIDs. It may work, it may not. It may work today, but not connect again tomorrow.
You'll need to test different configurations (if you even can hide the SSID) and see what works. But you may NEED to broadcast for the Tab to connect (again).
Also, from a security stand point, hiding the SSID adds nothing, really. Restrict access to the MAC address and you'll be fine. Use WPA2 if at all possible.
And I'll add to the thanks for serving. You are a true American hero.

lol my first thanks lol you welcome man, i agree hiding your ssid does nothing as far as i know connectify does not work unless password protected and the default method is wpa2, even with the usual method of wpa hacking, macc address filtering should cover you so your good and thanks for tour service man

Jbro,
Thanx so much for starting this thread. I've been "there" and am going back to the same place and forgot that they use pppoe there! And I agree, you don't want to deal with the response from them when you tell them what you're doing.
It sucks bad enough standing in the line in the first place.
Have they improved connection speeds? It used to be steady but nothing to write home about. Also, can you a wifi signal base wide now?
Sent from my T-Mobile G2 using XDA App

WhatsApp Sniffer issue

Hi guys,
I downloaded WhatsApp Sniffer in my HTC Desire, it seems to be working but can't capture any conversation. In short, when I start the app, I can only see the following message:
"There isnn't any conversations yet, wait until one has been captured. Make sure WhatsAppSniffer is listening and if you are on a WPA/WPA2 network, check that the ARP_Spoof is activated."
I've tried the app in both WEP and WPA/WPA2 networks but no luck. My phone is rooted with:
Android version: 2.3.7
Mod Version: CyanogenMod-7-11162011-NIGHTLY-Desire
WhatsApp Messenger: 2.7.8509
Any clues what might be the reason?
Thx,
Sotiris.

I thought Whats App was now fixed so that it did not send plain text.

Hmm, I am not aware of it. But it makes sense... Thx for your reply.

if your network is secured with Wpa or wpa2
the chat will not be captured
to capture chat the network must be protected with wep
or it need to be unsecured

Pl provide link to download

alinawaz said:
Pl provide link to download
Click to expand...
Click to collapse
can someone send me (PM me) a working link to whatsapp sniffer, please?!

https://docs.google.com/open?id=0B_PzeJyBdcp3UW5GOVZlOTZKYVU - google drive link cause i dont use any other servers

pransh said:
https://docs.google.com/open?id=0B_PzeJyBdcp3UW5GOVZlOTZKYVU - google drive link cause i dont use any other servers
Click to expand...
Click to collapse
thank you!

Hello all am new @ this site, awesome site... am using whatsapp sniffer or @ least am trying too...
my issue is that @ times it says that ( my devise seem not to be rooted ), I have rooted phone i do have the superuser icon... samsung GS3
and i restart the app, and it runs ok, but it don't capture anything... am i doing something wrong??? i do see that it will not
capture anything in wap or wap2...
any help will be appreciated

bumping because it seems that this app doesnt work (anymore)
anyone confirming?

Hi.
I'm also wondering the same thing. Just went through the fairly painful process of downgrading my HTC Desire Z Gingerbread to Froyo in order to then gain root, specifically so that I could use WhatsAppSniffer.
The app seems to have installed correctly, it's running fine, the other apps like SuperUser and BusyBox have no problems. I've run the sniffer for several hours on my shared WPA network at home, and for a couple of hours on a shared Open network last night with no results. It could very easily be the case that there were no conversations to capture, but the other possibility is that WhatsApp have fixed the vulnerability. I'm going to keep trying for a couple more days, and on one more network connection. Will confirm if whether or not I get anything here.

Just reading a couple of open-source articles it seems that WhatsApp pushed release 2.8.3 to iPhones on 27th August 2012, and a similar release to Androids around the same time. This release included (relatively poor) encryption. Anyone who has downloaded the update will now be protected from WhatsAppSniffer. Seems that sniffing is still possible if you can fathom this: ezioamodio.it/?p=29. It's beyond me though. #noob

I tried yesterday found on web the versione 1.03 donate root,
also for myself it seems doens't work,
the spoof says that if I'm scanning a WPA/WPA2 network I have to activated the ARP Spoof, otherwise for WEP it doens't need.
But I supposed it worked in one of the two cases, instead the app continue to search but see nothing.
I tried to send a whatsapp message connecting to the same network that sniffer is connecting too, and it see even not my message.
Is it an older version that doesn't work or maybe it needs a rooted phone and mine one is not?
THANKS

pransh said:
https://docs.google.com/open?id=0B_PzeJyBdcp3UW5GOVZlOTZKYVU - google drive link cause i dont use any other servers
Click to expand...
Click to collapse
Google removed it, can you give another link?

FardeenTGO said:
Google removed it, can you give another link?[/QU
same here too
Click to expand...
Click to collapse

[GUIDE] How to bypass T-Mobile's tether block using Firefox

Hello everyone, so I recently finally got blocked from tethering by T-Mobile after a long time of sucking it out of them by being rooted and on a custom ROM like all of us here.
The way they know you are tethering on their network is by the User Agent that is sent to them by your desktop/laptop computer browser. When they see that a regular browser is accessing their network, that's when you get the infamous T-Mobile Hotspot Screen we all hate.
I've recently discovered a Firefox Add-On called User Agent Switcher found here: https://addons.mozilla.org/en-US/firefox/addon/user-agent-switcher/?src=search
Download it and install it to Firefox. Then download this (right click, "Save as") http://techpatterns.com/downloads/firefox/useragentswitcher.xml
Go to Tools>User Agent>Edit User Agents (a window pops up) click on "Import.." and add the .xml file you just downloaded.
Then pick a User Agent that resembles the Sensation webkit and BAM! Free tethering for all of us.
I'm using it right now
NOTE: If you use a Googlebot User Agent, you will be able to tether and always load up full webpages instead of mobile versions. - Thanks to The Archangel and chadwick3nser for discovering this!

You can also do the same with chrome.
Been doing it for since the day they released it.

The Archangel said:
You can also do the same with chrome.
Been doing it for since the day they released it.
Click to expand...
Click to collapse
Hell yeah, go Chrome! I've never used it so I wouldn't know

FiddleGoose said:
Hell yeah, go Chrome! I've never used it so I wouldn't know
Click to expand...
Click to collapse
I actually take it one step further an either completely hide my IP on the computer or switch it so they can't try to block it.

Nice!
Is that how att detects also?
Sent from my SAMSUNG-SGH-I747 using xda premium

They detect by sniffing packets an the extra Mac address

The Archangel said:
They detect by sniffing packets an the extra Mac address
Click to expand...
Click to collapse
Damn, AT&T is on point. Bastards.
I hate T-Mobile for pulling that move as well.

FiddleGoose said:
Damn, AT&T is on point. Bastards.
I hate T-Mobile for pulling that move as well.
Click to expand...
Click to collapse
just about every major cell company does the exact same thing to detect it. Maybe different variants but still the same.

I am doing this right now as well, but all the desktop pages are in mobile. I have found the desktop button on the bottom of the youtube site but cant find it on most sites. any workaround for this?

chadwick3nser said:
I am doing this right now as well, but all the desktop pages are in mobile. I have found the desktop button on the bottom of the youtube site but cant find it on most sites. any workaround for this?
Click to expand...
Click to collapse
Use a Google spider UA. Everything will be as normal

The Archangel said:
Use a Google spider UA. Everything will be as normal
Click to expand...
Click to collapse
do i create a custom UA and edit the string to a spider or how would be the best way? or what would be the best one to use?about going about this? sorry, have no experience with user agents
---------- Post added at 05:54 PM ---------- Previous post was at 05:43 PM ----------
nevermind, i used googlebot 2.1 new version and its working great, thanks for this!!!

Glad you got it working.
Hey op. Heres a suggestion, put in the your first post. Use a Google bot user agent. Using that will load all the web mail pages normally.

The Archangel said:
Glad you got it working.
Hey op. Heres a suggestion, put in the your first post. Use a Google bot user agent. Using that will load all the web mail pages normally.
Click to expand...
Click to collapse
You got it!

The Archangel said:
I actually take it one step further an either completely hide my IP on the computer or switch it so they can't try to block it.
Click to expand...
Click to collapse
What are you using to block the IP address? I was thinking just changing the IP to not be the standard DHCP that the phone would give you still shows it coming from another MAC address on the same connection and would be obvious to the write sniffing rules?
I realize this isn't a requirement I've been using the UA for a while from canary but I easily see them stopping this workaround w/ better sniffing rules.

SurfCityCom said:
What are you using to block the IP address? I was thinking just changing the IP to not be the standard DHCP that the phone would give you still shows it coming from another MAC address on the same connection and would be obvious to the write sniffing rules?
I realize this isn't a requirement I've been using the UA for a while from canary but I easily see them stopping this workaround w/ better sniffing rules.
Click to expand...
Click to collapse
i use platnium hide ip. it switches to another ip when im on windows an sometimes ill use smac to change that also. havent found any programs for linux yet (havent really looked)

The Archangel said:
Use a Google spider UA. Everything will be as normal
Click to expand...
Click to collapse
This is a very bad advice as pretending to be a googlebot may get you either blocked or banned from many websites (especially if they use ZBBlock) as this behavior is rated as a spammer/bot activity.

tobitege said:
This is a very bad advice as pretending to be a googlebot may get you either blocked or banned from many websites (especially if they use ZBBlock) as this behavior is rated as a spammer/bot activity.
Click to expand...
Click to collapse
I've been doing it for a while, never got a ban on my end

Okay I've been tethering fine for a while on FF, but T-Mobile finally blocked me yesterday... I figured out that it was the second I started to watch a YouTube video. Guessing they're able to see activity on my cell account at the same time as my login is accessing YouTube and put 2&2 together...? (That may be obvious to some...)
Anyway... I may try the user agent spoofing but this is really aggravating since I'm traveling right now and the internets in my hotel are $10/day.
Sent from my Galaxy S 4G

Anyone figure out how to use netflix while spoofing in Firefox? I've been settling for Amazon Prime instant video, but I'd love to have Netflix back. With the UA spoof, Netflix won't play movies. At least I haven't figured out how.

This method no longer works for me

[Tool] Network Monitor

Hi All,
Would you like to know what app is using network in your phone? Would you like to know what address is the application connecting?
My friend wrote a tool named Network Monitor. The link is https://play.google.com/store/apps/details?id=com.jmm.networkmonitor Would you like to try?
The tool could help you below:
1. Monitor current data activity and uplink/downlink throughput.
2. Monitor external IP address.
3. List all package which using internet currently.
4. List all socket link including destination IP address and source IP address of per package.
5. Query where is the destination address of the link connection and show it in map.
It is a fun tool if you want to know what application using your internet connection background.
My friend welcome any comments and he could add function if it would helpful.
Thanks.

Would this be helpful in analyzing what kind of intranet traffic is causing high wlan_rx_wakelocks?

Useful tool.
Works good on my N7100.
Thank you.

much needed as many are taking up lots of data without knowingly.
thanks

Nice app. Keep up the good work :good:

I almost installed this as it looks to be very helpful, but.....then I reread the thread and the fact that you say "My friend" made this app and not you makes me very nervous....why isn't your friend posting this up?
The way I see it if this app was found to be stealing data or compromising networks who would we have to turn to? You? All you are going to say is "my friend did it not me".
No insult intended but have him\her post this themselves would be my request.
I mean dude....you have less than 20 posts. Not like you have been on here for years....or even a year.
As an IT professional with 46 companies relying on my judgement....I simply can't risk their security

The tool will let you know which application is using your network, even for intranet.
tylerdurden83 said:
Would this be helpful in analyzing what kind of intranet traffic is causing high wlan_rx_wakelocks?
Click to expand...
Click to collapse

I think your concern was reasonable.
I am the author and using my friend's account. Let me explain what was going on. I wrote the tool part time and shown to my friend. My friend said you should publish in google play. But as you know, it is hard to let more person know there is software named "network monitor". My friend said he has a xda account and could help me to post. I will apply a account or just use this account.
One thing I could guarantee, there isn't back door in the application. Thanks for everybody's reply, it encourages me to add more functions.
One function I am considering to add is WIFI control/diag function.
Thanks
nerdslogic said:
I almost installed this as it looks to be very helpful, but.....then I reread the thread and the fact that you say "My friend" made this app and not you makes me very nervous....why isn't your friend posting this up?
The way I see it if this app was found to be stealing data or compromising networks who would we have to turn to? You? All you are going to say is "my friend did it not me".
No insult intended but have him\her post this themselves would be my request.
I mean dude....you have less than 20 posts. Not like you have been on here for years....or even a year.
As an IT professional with 46 companies relying on my judgement....I simply can't risk their security
Click to expand...
Click to collapse

he_arslan said:
The tool will let you know which application is using your network, even for intranet.
Click to expand...
Click to collapse
So it won't I guess, I need to know analyze the broadcast packets originating from somewhere else on the intranet and waking up my device from deep sleep (wlan_rx_wakelocks).

You are correct. Currently the tool doesn't support packet analyze. It needs root right to capture the packet from network.
tylerdurden83 said:
So it won't I guess, I need to know analyze the broadcast packets originating from somewhere else on the intranet and waking up my device from deep sleep (wlan_rx_wakelocks).
Click to expand...
Click to collapse

One way to alleviate fears is to open source your code.
Sent from my Nexus 4 using Tapatalk

:good::good::good:
ph37rd said:
One way to alleviate fears is to open source your code.
Sent from my Nexus 4 using Tapatalk
Click to expand...
Click to collapse

nice app... would be nice if it also shows wi-fi TX/RX along with the total and mobile... I take it total is the combo of wi-fi and mobile?

Yes. Total TX/RX combines Wifi information.
The reason I didn't list wifi TX/RX is most person only care about mobile data and there is limited space to show information.
Maybe need to provide a way to configure the display items.
BTW, I have upgraded the software and added floating window and process view. Please enjoy it.