intercept text messages? or sniff packets sent by phones? - General Questions and Answers

Is there a app that sniff packets sent by cell phones, my whole goal would be to intercept text messages or the data thats sent by cell phones. I came up with this idea when I was messing around with packet sniffer and thought about the idea but on cell phones. Is there something already out like this?

Wireshark at a "router"
While not an on-device solution, I use this setup when I want to watch the traffic between my phone and the network:
"sorry, apparently I can't post a link to this forum, it's at my site droidhacks.com, click on the wireshark tag in the sidebar and you'll find the post"
Having a full Wireshark install running on the desktop is great for poking through the data. I think some folks do the capture on the device and then just move the capture file across. Also helps sometimes to pull the SIM to make sure all the traffic goes through the laptop and not through the network. Sharing on OS X with an handset can be a bit fidgety when first starting up.

Find shark for android and sharkreader. Both of which can be found in this forum.
Sent from my Nexus One using XDA App

can this be countermanded? stoped, disabled somehow? encrypted packets? someone's safety could be at risk.

Are you looking to capture the communications of other phones, rather than your own? If so, good luck, it's encrypted traffic.

Sounds pretty stupid and no, it is not possible. I would rather want a network sniffer for android. Connect to your local coffee shop network and start sniffing.

rTiGd2 said:
Are you looking to capture the communications of other phones, rather than your own? If so, good luck, it's encrypted traffic.
Click to expand...
Click to collapse
no, i'm just curious how this can be done.
if its encrypted how can you read the packets with your program then ?
some kind of id or serial number?

tmpmailone said:
no, i'm just curious how this can be done.
if its encrypted how can you read the packets with your program then ?
some kind of id or serial number?
Click to expand...
Click to collapse
Ok, I think we need a rather large dose of reality here. You'll not manage it, simple as that, certainly not from a consumer device. I suspect you are thinking along the line of WiFi wireless, where you can monitor what other devices are sending. If you really wish to know more then google 'usrp' and you'll soon see you'll need far more hardware and software to start capturing GSM traffic.

ok so you're saying with my router i can't capture my text messages, like those sent and received with the YMesenger app ?
so its possible to sniff datalines?

tmpmailone said:
ok so you're saying with my router i can't capture my text messages, like those sent and received with the YMesenger app ?
so its possible to sniff datalines?
Click to expand...
Click to collapse
Yes, it's possibly to sniff datalines, as well as WiFi.

I think you should break out with you gf

this thread is too funny ( lol )
encryption - lol
cant sniff - lmao!!
link1
I am a network security specialist and you people are just too funny saying "cant" "impossible" "illegal" .. .. ..

morning_wood said:
link1
Click to expand...
Click to collapse
Nice info.
Packet sniffing over public wifi is well known, but I learnt something new today

Chris Paget hapens to be a personal friend of mine

I'm pretty sure intercepting phone calls would still be "illegal", regardless of the fact that you're a network security specialist.
But yes, nothing is impossible, that's pretty much a given. Give someone enough expertise and resources, anything can be hacked. Encryption is actually important, so the general, uninformed riff-raff can't access anything they want. Like my previous statement, it can still be hacked, but it's better that not being encrypted at all.
morning_wood said:
this thread is too funny ( lol )
encryption - lol
cant sniff - lmao!!
link1
I am a network security specialist and you people are just too funny saying "cant" "impossible" "illegal" .. .. ..
Click to expand...
Click to collapse

So, my ex husband is using a packet sniffer to read all of my info that I txt over my phone. He is living with me until he closes on his new house (30 days out). I have installed a VPN on my phone. What else do I need to do? He says he can see all messages that I send, both txt and messenger as well as my calls?? He is a programmer, so I know he knows what he’s doing, how can I get my privacy back? I’m afraid that he will always be spying on me and it’s very frustrating.

Sunshine08 said:
So, my ex husband is using a packet sniffer to read all of my info that I txt over my phone. He is living with me until he closes on his new house (30 days out). I have installed a VPN on my phone. What else do I need to do? He says he can see all messages that I send, both txt and messenger as well as my calls?? He is a programmer, so I know he knows what he’s doing, how can I get my privacy back? I’m afraid that he will always be spying on me and it’s very frustrating.
Click to expand...
Click to collapse
Do you use Google Messages app for text messages? If so check if it is connected to Messages for web. Also if you use Whatsapp check if it is connected to Whatsapp web. I recommend to change password for all the services, Google, Facebook and so on and reset the phone to factory defaults. I don't think this has anything to do with packet sniffing.

Related

Tethering Via WIFI & Videochat

Guys,
First of all I want to thank all of you for all of your hard work accomplishing TRUE TETHERING on the G1. It works flawlessly. THANKS!!! You guys are geniuses!!!
I have a question to ask with using tether-1.6.tar
Most of my programs I have that require internet access work all for one stinking video chat program I always use to chat with my family while I'm away on work assignment. It's a program called ISPQ. I can log into the program, and it pulls up the directories with all of the users signed in, and I can send quick messages, but when someone sends me a message the picture field is blank and in the directory when you click on a persons name to see their profile the picture area is blank as well. On their website it shows what ports you need opened for the program to run successfully as I'll post them down below. When I used to Tether with my TMO DASH the program always worked so I'm sure there is a way to get it working using the G1 tethered as well.
Thanks again,
Anthony
Port Number Protocol Direction Service
2000 TCP IN & OUT Video chat control
2001 TCP IN & OUT Video/audio data
2002 TCP IN & OUT Peer-to-peer Quick Message
80 TCP OUT Login, account info & profile viewing
2010-2030 TCP OUT Directory and Pal list
2000-2100 UDP IN Audio for hosted video chat sessions(not done automatically on some routers)
9800 TCP OUT Text chat for Interests and directory
aad4321 said:
as far as i know, i dont think their is a firewall on the phone it should already be opened. I have connected to my sling box which is some random port and it worked sucessfully.
Click to expand...
Click to collapse
Thanks for your response. Strange when I run the built in network utility in that program it DOES say it's detecting a firewall when there isn't. Probably a quick uninstall/re-install of the program should get it working properly. Everything else other then that single program works great. Streaming live video and audio works flawlessly as well. Amazing how this is true tethering and it blows the doors off of Tetherbot.
The people who got this all going are like god to me.
Yes! I also tether with this method, and it works flawlessly, I get 135KBpps down. And 85KBps up on edge, and on 3G I get around 900KBps down and 240ish up. It's funny though, after running a speedtest, it said my phone was located in kansas when I'm actually in cali, maybe its a ip address location error. But back to your situation, I haven't had any issues with ports on of the programs that required specific ports to function. =)
The location is correct, T-Mobile sends all their info through a proxy in kansas or some place back east, and that is why our speeds are sometimes slow.
neoobs said:
The location is correct, T-Mobile sends all their info through a proxy in kansas or some place back east, and that is why our speeds are sometimes slow.
Click to expand...
Click to collapse
Neoobs, Would that be the case in the Philadelphia area as well? I'm asking of this because if Tmo sends all of their info through proxy in this area as well, that's the reason why my videochat program isn't working properly (laptop/G1 Tethered).
Strange is that when I hook up my old Tmo Dash and tether it, ispq works fine but it's terribly slow running on Edge.
3G gets sent to a different proxy but both are sent through proxies.
I know there are some ways around it just not able to get the info right now as I am AFH
neoobs said:
3G gets sent to a different proxy but both are sent through proxies.
I know there are some ways around it just not able to get the info right now as I am AFH
Click to expand...
Click to collapse
I searched and searched with no results. There has to be a way around this. If I can video chat with the Dash Tethered to my lappy, there for sure has to be a way on the G1.
Neoobs,
Any word or source of a way around the 3g proxy/videochat with my post?
Thanks again......
Since TMO's 3g/edge connection goes through a proxy at the main how could I find out what Proxy IP and Port it is? In the program there is an option to log in through proxy so I guess I would need to know what's the proxy address they use for 3G in my area. Anyway I could find out?
It isn't like a software proxy, it is a hardware proxy, there is no info you can put in to get around it really. I will test this and see.
I can't find the info on how to get around it but I know I did because I was running programs (torrents) that were saying I was fully connected and even had someone remote into my PC while I was on it (was a friend) so nothing should be blocking it. BTW I was using openDNS servers maybe that is what helped.
neoobs said:
It isn't like a software proxy, it is a hardware proxy, there is no info you can put in to get around it really. I will test this and see.
I can't find the info on how to get around it but I know I did because I was running programs (torrents) that were saying I was fully connected and even had someone remote into my PC while I was on it (was a friend) so nothing should be blocking it. BTW I was using openDNS servers maybe that is what helped.
Click to expand...
Click to collapse
Open DNS Servers? Where would I add the values and what would they be? something like 4.2.2.1, 4.2.2.2?
neoobs said:
It isn't like a software proxy, it is a hardware proxy, there is no info you can put in to get around it really. I will test this and see.
I can't find the info on how to get around it but I know I did because I was running programs (torrents) that were saying I was fully connected and even had someone remote into my PC while I was on it (was a friend) so nothing should be blocking it. BTW I was using openDNS servers maybe that is what helped.
Click to expand...
Click to collapse
I'm about to beg you to download ISPQ and set it up (via Wifi Tether) and see exactly what I'm talking about. lol It's actually a pretty cool program and it's a free 21 day trial.
I will download it and get back to you in 24 hours.
Thank you so much!!!!
It all works fine for me, lets me log in and see others. What is the problem exactly?
Thanks for trying it out. I can log in but I can't see the user profile pictures in the directory and also when I receive a qm from someone the picture area is blank. All I can see is the text they sent in the message, not the picture..
Can you run the network diagnostic test in the programs options? Doesn't work here.
Can you see the users in the directories profile pictures and if someone qmed you, you can see their image along with the text?
I can see the users listed in the directories but no pictures of the users and the qms, I can read the text in the qm, just can't see the users image. Funny part of it all is I can successfully video chat in there and I can see the users video while video chatting. Your help with this is very appreciated. You can private me your response if you may.
Thanks again..

[App request] systemwide data corruption app (security)

Hi guys,
I'm only asking for this app due to a massive security breach of my emails and Facebook account after my phone got stolen at a cinema. The app requested is a security app which the person can set the app to have 3 people's handphone numbers which they would receive a specific code and instruction (e.g. 123456destroy) which would corrupt all data inside the phone and trigger a hard brick. The app should be factory reset proof
Sorry if I sound a bit too demanding but I'm still very worked up.........yep.
there r anti-theft apps with data wipe option, isn't that enough?
Sent from my GT-I9000 using XDA
Look man
They stole my phone
I'm gonna give them sh*t
The system corruption prevents them from selling it.
I'm sorry for your loss.
And what would happen if someone you sent the code to activated it for a really **** joke? Personally, I think it'd be better if you could activate the app when you download/install it then brick the device via a website yourself to save complications.
Sorry to hear you lost your phone though
Sent from my GT-I9100
no the whole point is that you don't tell anyone except yourself the code until you lose your phone
here are programs/ apps (e.g. airdroid) which can access your device as long as it is connected to a cellular or broadband network or internet portal. With airdroid, for instance, you can install apps, screw with files, and do whatever you could from the device remotely. Just a thought.
WEM97 said:
here are programs/ apps
Click to expand...
Click to collapse
Sorry to trouble you, but could you tell me an app that allows remote screwing of root files like /system by SMS remote commands?

[Q] Vpn L2tp Psec google warning

It may be that I am not entering the right keywords, but I can't find the answer on the forums here. It's not a big deal, but I'm curious. When I connect via VPN on 2.3.6 through L2TP ipsec, I get a warning in Gmail saying that someone from a different IP was trying to sign into my account and google prevented it. (Because suddenly a different ip address from hundreds of miles away is attempting to sign in). I don't care that it's not letting it sign in (this isn't my daily driver, I just use it as a media player basically), but the choices I get are to click " No it's not me, change password" or " yes it's me" ( which I don't really want to say either). So is there some simple solution that I am totally missing? Or do I just ignore this everytime I connect to vpn?
Thanks
The simple solution is, if it's you, tell it that it's you. Why wouldn't you want to say it's you if it is?
Theraze said:
The simple solution is, if it's you, tell it that it's you. Why wouldn't you want to say it's you if it is?
Click to expand...
Click to collapse
Point taken. I suppose my first impression is that since Google services pretty much thrives on its users data, I don't necessarily want to admit that I'm encrypting it. I mean it's obviously legal, but I somehow feel that there will be a red check mark next to my account now. Or.... Maybe I should just take off the tin foil hat.
I put this out there to see if I'd get a response from anyone else who came across the same thing in the past.
Sent from my SGH-T889 using xda app-developers app
Well, if you want it to work, tell it that it's okay to work. If you don't want it to work, then you can keep telling it not to work. But if you tell it not to work and it does... that's a bug or security flaw.

[Tool] Network Monitor

Hi All,
Would you like to know what app is using network in your phone? Would you like to know what address is the application connecting?
My friend wrote a tool named Network Monitor. The link is https://play.google.com/store/apps/details?id=com.jmm.networkmonitor Would you like to try?
The tool could help you below:
1. Monitor current data activity and uplink/downlink throughput.
2. Monitor external IP address.
3. List all package which using internet currently.
4. List all socket link including destination IP address and source IP address of per package.
5. Query where is the destination address of the link connection and show it in map.
It is a fun tool if you want to know what application using your internet connection background.
My friend welcome any comments and he could add function if it would helpful.
Thanks.
Would this be helpful in analyzing what kind of intranet traffic is causing high wlan_rx_wakelocks?
Useful tool.
Works good on my N7100.
Thank you.
much needed as many are taking up lots of data without knowingly.
thanks
Nice app. Keep up the good work :good:
I almost installed this as it looks to be very helpful, but.....then I reread the thread and the fact that you say "My friend" made this app and not you makes me very nervous....why isn't your friend posting this up?
The way I see it if this app was found to be stealing data or compromising networks who would we have to turn to? You? All you are going to say is "my friend did it not me".
No insult intended but have him\her post this themselves would be my request.
I mean dude....you have less than 20 posts. Not like you have been on here for years....or even a year.
As an IT professional with 46 companies relying on my judgement....I simply can't risk their security
The tool will let you know which application is using your network, even for intranet.
tylerdurden83 said:
Would this be helpful in analyzing what kind of intranet traffic is causing high wlan_rx_wakelocks?
Click to expand...
Click to collapse
I think your concern was reasonable.
I am the author and using my friend's account. Let me explain what was going on. I wrote the tool part time and shown to my friend. My friend said you should publish in google play. But as you know, it is hard to let more person know there is software named "network monitor". My friend said he has a xda account and could help me to post. I will apply a account or just use this account.
One thing I could guarantee, there isn't back door in the application. Thanks for everybody's reply, it encourages me to add more functions.
One function I am considering to add is WIFI control/diag function.
Thanks
nerdslogic said:
I almost installed this as it looks to be very helpful, but.....then I reread the thread and the fact that you say "My friend" made this app and not you makes me very nervous....why isn't your friend posting this up?
The way I see it if this app was found to be stealing data or compromising networks who would we have to turn to? You? All you are going to say is "my friend did it not me".
No insult intended but have him\her post this themselves would be my request.
I mean dude....you have less than 20 posts. Not like you have been on here for years....or even a year.
As an IT professional with 46 companies relying on my judgement....I simply can't risk their security
Click to expand...
Click to collapse
he_arslan said:
The tool will let you know which application is using your network, even for intranet.
Click to expand...
Click to collapse
So it won't I guess, I need to know analyze the broadcast packets originating from somewhere else on the intranet and waking up my device from deep sleep (wlan_rx_wakelocks).
You are correct. Currently the tool doesn't support packet analyze. It needs root right to capture the packet from network.
tylerdurden83 said:
So it won't I guess, I need to know analyze the broadcast packets originating from somewhere else on the intranet and waking up my device from deep sleep (wlan_rx_wakelocks).
Click to expand...
Click to collapse
One way to alleviate fears is to open source your code.
Sent from my Nexus 4 using Tapatalk
:good::good::good:
ph37rd said:
One way to alleviate fears is to open source your code.
Sent from my Nexus 4 using Tapatalk
Click to expand...
Click to collapse
nice app... would be nice if it also shows wi-fi TX/RX along with the total and mobile... I take it total is the combo of wi-fi and mobile?
Yes. Total TX/RX combines Wifi information.
The reason I didn't list wifi TX/RX is most person only care about mobile data and there is limited space to show information.
Maybe need to provide a way to configure the display items.
BTW, I have upgraded the software and added floating window and process view. Please enjoy it.

Best practice when using Android Messages on work laptop?

How should this be done properly? Proxy or ?
I'm not sure if it even matters, but I hate to have inappropriate messages coming in while I'm on my work's network or their VPN when remote... I'm thinking a proxy may mess with the VPN?
Inb4 don't text at work
Texting with AM is much more productive than stopping everything to unlock my phone and give it attention. Don't judge me
typhoonikan said:
How should this be done properly? Proxy or ?
I'm not sure if it even matters, but I hate to have inappropriate messages coming in while I'm on my work's network or their VPN when remote... I'm thinking a proxy may mess with the VPN?
Inb4 don't text at work
Texting with AM is much more productive than stopping everything to unlock my phone and give it attention. Don't judge me
Click to expand...
Click to collapse
If your worries about such messages at work use a VPN whilst at work so no one can read the data. Only problem is if they have RAT's running you can't bypass them. They will be able to directly view your screen.
Also you're posting on a forum. Every man and his dog will judge you

Categories

Resources