ssh pc to android - Android Software/Hacking General [Developers Only]

is that possible?i tried sshing to my phone and i got a connection refused error.(the phone's rooted).does anybody know a way to sshing to android?thanks

You should be able to initiate a reverse ssh on the phone to the computer, and then get a terminal from the phone, not sure about an app for reverse ssh though.

On Wifi networks you just need to run an SSH daemon on your phone. There are threads here on XDA discussing how to install dropbear manually, or you can get my (paid) app QuickSSHd from the Market.
If you want to do it via cellular, then it depends on your carrier. Many carriers block incoming connections. If they do, then it would be possible to use SSH tunneling (Use an ssh client on your phone to ssh to your PC and do a port map of the PC's port 2222 to your phone's port 22, finally on your PC ssh to localhost:2222 and get to your phone's ssh daemon)

QuickSSHd on Android Market
QuickSSHd is a secure shell daemon and when setup correctly, it will allow you to ssh from your PC to your Android phone (or other Android device).
Sorry for the late and redundant reply, but I recently got an Android phone and stumbled across QuickSSHd. Of course, I already rooted my phone.

Related

VNC (AndroidVNC) secure enough? Or should I SSH (Connectbot)?

Okay so I'm after opinions.. I've installed TightVNC on my PC and ran AndroidVNC, very pleased about remotely controlling my computer
I'm worried about security though. Is it worth setting up a SSH connection? I've never done it before.
If it is recommended I do this, how does that work? Do I connect via ConnectBot to the PC first then do I run AndroidVNC? And is a prog like PuTTy good enough to set up the SSH on the PC?

Join Bluetooth PAN as client? (reverse tether)

How can I join an Android device to a Bluetooth PAN (Personal Area Network) as a client? In some areas, the only internet connection available would be to tether it through another cell phone via bluetooth PAN (other phone has no wifi).
Solutions that require rooting or config file editing are OK.
I've searched alot, but all results are about going the other way - tethering other devices through the Android.
Soundman6 said:
How can I join an Android device to a Bluetooth PAN (Personal Area Network) as a client? In some areas, the only internet connection available would be to tether it through another cell phone via bluetooth PAN (other phone has no wifi).
Solutions that require rooting or config file editing are OK.
I've searched alot, but all results are about going the other way - tethering other devices through the Android.
Click to expand...
Click to collapse
It's Linux, man, all you need is setting network config I was using reverse tethering for some time, this is my script (run on PC):
Code:
sudo pand --listen --role NAP
adb shell pand --connect XX:XX:XX:XX:XX:XX
sudo ifconfig bnep0 192.168.101.1
adb shell ifconfig bnep0 down 192.168.101.2 up
adb shell route add default gw 192.168.101.1 dev bnep0
adb shell setprop net.dns1 192.168.101.1
Of course you should omit 1st and 3rd lines.
Are you sure second phone supports PAN connections, not DUN? PAN is quite complicated for phone, because it requires full NAT.
And you will have problems with Android Market and some other apps. Internet is configured at linux level, Android OS don't know about it, so if application asks: "Do we have internet connection?", Android replies: "No". Android Market will wait for connection even if there is one.
Brut.all said:
And you will have problems with Android Market and some other apps. Internet is configured at linux level, Android OS don't know about it, so if application asks: "Do we have internet connection?", Android replies: "No". Android Market will wait for connection even if there is one.
Click to expand...
Click to collapse
I believe that is a valid concern. Anyone know how to deal with this? Thanks.
Soundman6 said:
I believe that is a valid concern. Anyone know how to deal with this? Thanks.
Click to expand...
Click to collapse
But most of the apps don't check internet status and just use it - they will work. AFAIR I couldn't use Market, GTalk and syncing feature, but Browser, Gmail and many, many more was working.
If you have any WiFi device then you could connect Android to it. Even if it doesn't share internet connection, Android OS will think, that it does (but will use BT connection configured at linux level ) - then any app should work.
At work I got a laptop with windows XP, There's a wireless network but it's EAP secured and I can't connect to it with the phone (Motorola Milestone - Android 2.1).
Did you manage to make internet work through Bluetooth PAN? I just need to use the borwser, so It's not important if market or other apps don't work.
I have android sdk with adb on my laptop and terminal emulator with busybox on my phone. I'm kind of a newbie in this so some hints would be nice. I think many people like me would be gratefull
haxxy said:
Has anybody got it working?
At work I got a laptop with windows XP, There's a wireless network but it's EAP secured and I can't connect to it with the phone (Motorola Milestone - Android 2.1).
Did you manage to make internet work through Bluetooth PAN? I just need to use the borwser, so It's not important if market or other apps don't work.
I have android sdk with adb on my laptop and terminal emulator with busybox on my phone. I'm kind of a newbie in this so some hints would be nice. I think many people like me would be gratefull
Click to expand...
Click to collapse
And my first post was about what, you think? I don't use it now, but I was reverse-tethering through BT for several months, until I bought some data plan.
Above commands should work for you, but... they will let you connect your phone to PC, but I don't know, how to share internet connection on Windows XP. AFAIR I tried to do it, but failed.
There's a bluetooth network icon. I know it's possible to share the internet connection from my ethernet to the other network cards. So this should work also with the bluetooth network.
I will try the commands and see how it goes.
haxxy said:
it's possible to share the internet connection from my ethernet to the other network cards. So this should work also with the bluetooth network.
Click to expand...
Click to collapse
Unfortunately not ;-) It is a cost of easy-clicking-configuration that Windows has - it's very limited, don't work for BT connections. I guess there is some professional software for internet sharing on Windows, but I don't know one.
Brut.all said:
Unfortunately not ;-) It is a cost of easy-clicking-configuration that Windows has - it's very limited, don't work for BT connections. I guess there is some professional software for internet sharing on Windows, but I don't know one.
Click to expand...
Click to collapse
I did this with my symbian phone. I managed to share internet to the bluetooth network, but the phone had a bluetooth PAN profile that connected to my laptop.
No! Already I have a bluetooth network set up on my Ubuntu Laptop - pand is running and there is a dhcp server monitoring the interface. What I need is not the below advice, which are commands to run on the PC, but an application / utility / instructions for enabling BLUETOOTH PAN CLIENT on Android. That is what the original question was too! Anybody?
Paul Beardsell
Brut.all said:
It's Linux, man, all you need is setting network config I was using reverse tethering for some time, this is my script (run on PC):
Code:
sudo pand --listen --role NAP
adb shell pand --connect XX:XX:XX:XX:XX:XX
sudo ifconfig bnep0 192.168.101.1
adb shell ifconfig bnep0 down 192.168.101.2 up
adb shell route add default gw 192.168.101.1 dev bnep0
adb shell setprop net.dns1 192.168.101.1
Of course you should omit 1st and 3rd lines.
Are you sure second phone supports PAN connections, not DUN? PAN is quite complicated for phone, because it requires full NAT.
Click to expand...
Click to collapse
psb777 said:
What I need is not the below advice, which are commands to run on the PC, but an application / utility / instructions for enabling BLUETOOTH PAN CLIENT on Android.
Click to expand...
Click to collapse
4 of 6 lines of my instructions were for setting Android client: connecting, setting IP, routing and DNS. And yes, they are run on Android, not on PC - I thought you will notice "adb shell" prefixes... You can also use dhcpcd instead of last 3 lines, but if you don't understand, what are you doing, you will have problems anyway.
Maybe anyone with Froyo can confirm that there's still no official option for joining a Bluetooth PAN from Android there?
@Brut.all So I guess there's currently no way to kind of telling Android there's a configured connection on Linux level?
By the way, every Mac allows the creation of a Bluetooth PAN with one click so this would be my usage scenario ;-)
This seems like it should work, and indeed I can use a similar technique from an ubuntu laptop to connect to another device, but my HTC Hero doesn't seem to have hcitool or pand installed on it. I downloaded some prebuilt binaries for them but they don't seem to be able to access the bluetooth device:
# /data/tmp/pand --role PANU --connect 00:17:83:0F:0F:C7 -n
pand[5083]: Bluetooth PAN daemon version 3.36
pand[5083]: Connecting to 00:17:83:0F:0F:C7
pand[5083]: Connect to 00:17:83:0F:0F:C7 failed. No route to host(113)
Do all versions of Android come with pand and hcitool? I'm on 1.5 although I'll be reflashing to 2.1 soon.
"find / -name pand" yields no results
trphunk said:
Do all versions of Android come with pand and hcitool? I'm on 1.5 although I'll be reflashing to 2.1 soon.
Click to expand...
Click to collapse
No, it was added by rom cookers and I don't know how they did this. I think there are missing some kernel modules or something like that.
trphunk said:
This seems like it should work, and indeed I can use a similar technique from an ubuntu laptop to connect to another device, but my HTC Hero doesn't seem to have hcitool or pand installed on it. I downloaded some prebuilt binaries for them but they don't seem to be able to access the bluetooth device:
# /data/tmp/pand --role PANU --connect 00:17:83:0F:0F:C7 -n
pand[5083]: Bluetooth PAN daemon version 3.36
pand[5083]: Connecting to 00:17:83:0F:0F:C7
pand[5083]: Connect to 00:17:83:0F:0F:C7 failed. No route to host(113)
Do all versions of Android come with pand and hcitool? I'm on 1.5 although I'll be reflashing to 2.1 soon.
"find / -name pand" yields no results
Click to expand...
Click to collapse
Brut.all said:
No, it was added by rom cookers and I don't know how they did this. I think there are missing some kernel modules or something like that.
Click to expand...
Click to collapse
Thanks, I've got the FroydVillain ROM installed now and can confirm that it comes with pand and hcitool compiled and working.
Reverse tether does seem to work, the method that's worked for me has been to use:
Code:
pand --connect <remote BT device hex address>
ifconfig bnep0 down
dhcpcd bnep0
setprop net.dns1 8.8.8.8
This allows the device to access the internet, and you can ping www . google . com and get a response etc.
However, a lot of android apps (including the built-in google apps for gmail etc) use the ConnectivityService (see source code here) to access the net, and since this method of reverse tethering doesn't change the connectivity state within this service, those apps still believe that there is no internet connection on the device.
I can't see an easy way of "tricking" the ConnectivityService as it appears to have been hard coded to only cater for WIFI and 3G connectivity. So perhaps the only way is to rewrite it.
I've found a few cases of others going through the same issues online, although I think the getMobileDataEnabled return value is a red herring:
(I'm not allowed to post links, so you will need to add http : // www to these
superuser.com/questions/188636/close-connect-android-to-internet-using-usb-tether-through-laptops-newtwork
forceclose.com/questions/2669/connect-android-to-internet-using-usb-tether-through-laptops-newtwork
Looking at the code in ConnectivityService.java it seems that apps must subscribe to this service via getInstance() and then wait for a sendConnectedBroadcast() to occur, triggering them into action (e.g. the gmail app will attempt to sync to the gmail server etc).
Anyone got any ideas for an easier route than rewriting ConnectivityService.java to add an additional connectivity type?
Edit to add:
Found another related discussion at the following site. Seems to suggest modifying the ConnectivityService is the way to go:
comments.gmane.org/gmane.comp.handhelds.android.porting/12028
Based on the posts I've seen in this thread, I'm guessing I can't use BlueTooth PAN tethering from my rooted Dinc to provide internet access to a Samsung Galaxy Tab???
So has anyone tried to Bluetooth tether a Galaxy tab with a phone?
Thanks for this thread! I just successfully Tethered both internet+gps over bluetooth from my G1 to my AdventVega tablet.
For now I am using GScript lite with the following script commands:
Code:
pand --connect {my phones BT hex address}
ifconfig bnep0 down
dhcpcd bnep0
setprop net.dns1 8.8.8.8
dhcpcd bnep0
(for some reason the first dhcpcd command always says permission denied, but the last one always works)
So...
1) Get in to car with Android phone and Vega Tablet.
2) On phone: Enable GPS/Bluetooth, click GPS2Bluetooth widget button, click WiFi Tether (configure for BT), press to start tethering.
3) On tablet: Enable Bluetooth, click Bluetooth GPS Provider, click Start, click Back or Home, click GScript Lite, click "Connect to BT-PAN" (above script)
4) Run GoogleMaps/Navigation on tablet and enjoy using your tablet as the ultimate GPS navigation system (while streaming Pandora in the background)!
I am very happy. I just wish I could make step 2 & 3 be a single click instead of so many.
NOTE: Must have "Allow mock locations" enabled in Settings->Applications->Development
NOTE2: You must pair your phone and tablet in BT settings (it will never say "connected" though, which is fine)
I tried this, but still no connection between my android phone and the other phone. Is there some other method?

Can you SSH on Android Wireless Connection?

Can anyone tell me if you're able to SSH to other devices connected to the wireless connection created by your android phone? I'm in dire need of a password-less connection right now but not sure if it will work. Campus wireless has a stupid terminal where you need to put in your password in the web browser before using it which doesn't work for what I'm trying to do.
Yes. I can ssh (via BTEP or ConnectBot) to other machines in my LAN via WLAN.

[Q] Remote SSH/VNC?

Is there a way to remote into an android device, either ADB, SSH, or VNC? I know there are various daemons for these methods, but none are 'reverse', meaning that no port-forwarding is required.
Say a device sits behind a firewall/NAT and I want to administer it from it's WAN IP. Instead of configuring a port-forward on the router, I'd connect to the WAN IP on a specific port.
Is this possible?
I see that there's Dropbear for SSHd. I'll have to play with it to see if it can do reverse SSH.

Working Options for Unlimited Tetherting, Hotspot, Carrier Check Bypass Methods

Some research into bypassing T-mobile’s tether restrictions reveals there are several things carriers can do to detect hotspot usage and block those packets:
-is hotspot data sent through a second anp?
-does carrier mark the packets coming through the wlan interface?
-do they filter by user agent strings?
-do they view the ttl?
-do they block urls that phones do not use?
-do they have a monitoring app pre-installed? (ex delete com.tmobile.pr via titanium backup)
Getting around these restrictions while using the native hotspot functionality requires work-arounds that I did not go far enough to successfully implement. One cannot by default edit the APNs for instance. I had to set up a duplicate, but theorize T-mobile was still routing to the hotspot APN I could not edit. With root access (which I have) it should be possible to achieve success, but I have found satisfactory non-root ways of achieving unlimited internet with MetroPCs (owned by T-mobile). I have, however, compiled a number of resources and may look back into what hacks must be used on the native app in the future. If anyone has a good guide on how you're getting hotspot with the Nougat LG V10 please post!
It stands to reason that one must use a non-native application to disguise the tether usage, or significantly modify the native one. After stalling with the mods, I pursued the non-native of attack and found (2) independent working ways to get unlimited tethered internet.
Wifi Tethering apps
I tried various wifi tether apps and without additional modifications or configuration I could not get them to work including:
-native hotspot (which works despite not having a hotspot plan, but t-mobile blocks)
-Wifi tether router by Fabio Grasso ($2.90) (requires root access)--(t-mobile was blocking the connection)—in discussion with developer on how to get working, will update. UPDATE: After back and forth with dev, he recommended using a VPN. His app does route the VPN through the hotspot connection if that feature is toggled. I have not tested. Potentially, changing the TTL of the computer may do something.
-Open Garden Wifi Tether—crashed when attempting to start service
Wifi Direct apps:
Wifi apps such as NetShare (red-themed play store entry is completely free, several paid versions) which use the native wifi direct functionality create a proxy server through which you can connect to via wifi. These DO WORK without additional modifications, but most native desktop apps on your computer cannot access the internet. All websites will load however. You have to set up your internet connection as through a proxy server on the client side but do not need to install additional software. A GOOD OPTION TO HAVE. I have found that one sometimes may need to stop and start the service to get it to give you internet access. The way I do it is start then quickly bring up the wifi menu, computer recognizes the network and connects quickly. If there is too much of a delay between starting and connecting via the client Netshare(Pro) doesn’t seem to work without a quick disable/enable afterwards.
USB tethering apps:
Rely on the phone’s native USB debugging feature in the hidden developer tools menu. (Go to about phone, software info, and tap on build repeatedly until enabled.) NO ROOT required. I tested Easy Tether ($9.99) and ClockWorkMod Tether ($4.99). Both worked well. PDAnet+ may also fall into this category but I have not researched. THIS IS MY PREFERRED METHOD so far. It is also possible to USB tether to certain types of wifi routers and thus get wifi for the home.
-There are PC, Mac, or Linux applications and drivers which must be installed on the computer side.
-Must have USB debugging enabled, and USB options set to Photo Transfer (Media Transfer does not work, and why I originally failed with ClockWorkMod…otherwise probably would have not pursued root!)
-These USB tether apps have the benefit of reducing the heat generated by your phone (no wifi signal generation), so runs cooler (think chips last longer) and uses less energy than when you have wifi hotspot enabled. For this reason, and for the phone being so handy when connected to my laptop, I actually prefer this method. Plus you have access to the pictures and DICM folders of internal storage so you can transfer stuff to the phone fairly immediately. To get full access, however, you’ll have to switch to MTTP mode, which on LG phones such as this V10 will break the internet connection. Other phones may not have this particular issue.
Bluetooth Tether apps:
Easy Tether and probably PDAnet+ support Bluetooth tether. With easy tether I wouldn’t suspect any issues at all using this.
Potential other methods WHICH SEEMED PROMISING, I sorted through a lot! For your inspiration:
-One youtuber mentioned using a desktop hospot application + PDAnet+ to get legit wifi hotspot functionality. The desktop PDAnet+ application apparently disguises the tethering operation. Video here: https://youtu.be/D98abWOkkQI
-Exposed framework and tether for rooted devices (did not try): https://highonandroid.com/android-a...n-rooted-android-att-t-mobile-sprint-verizon/
-Claims you’ll be able to tether any rooted android with this rooted wifi app and particular settings (similar to wifi tether router) https://highonandroid.com/android-a...android-smartphone-or-tablet-universal-guide/ (UPDATE: I tried, app is not compatible with the phone)
See comments section of this article for the below quotes: https://www.groovypost.com/howto/hide-data-usage-get-truly-unlimited-tethering-tmobile-one/
----------------------------------------------------------------------------
“The main issue I see people having is the lack of apn editing. This has been my setup for four years now
-Dd-wrt with iptables to edit the ttl value to 65 -Change TTL on windows PC to 65 so that it appears data is coming from the phone. (41 in hex = 65 in dec) https://social.technet.microsoft.co...o-live-ttl-in-windows?forum=w7itpronetworking
-Changed apn of hotspot to match the apn of normal mobile date. Doesn’t matter if you use fast.xxxx.com or alpha/beta BUT YOU CANT USE THE ORIGINAL HOTSPOT APN it’ll say mobile web or some ****. If you do you will be routed through their hotspot server and tracked. I’ve done this on iOS and android.
-FOR THE FOLKS THAT SAY THE VPN DOESNT WORK. Once again you MUST change the apn AND you have to make sure that your traffic is actually being routed through the VPN, in my experience on both android and iOS hotspot traffic bypass your phones VPN, and VPN on the router/computer traveling through the phone can be tracked if the phone isn’t the one using the VPN, to make it force traffic through the VPN I had to use the for data option in the tether me app on iOS. These things all work if you do it properly.”--Wifi tether router does have this VPN routing function but I have not tested.
"My COMBO works for me on T-Mobile unlimited.
Nexus 5x – rooted 6.01 with “settings put global tether_dun_required 0”
PLUS
Asus n31u router (w/ net.ipv4.ip_default_ttl = 65, bridge mod)
Works for Window 7 desktop and laptop, chromebook, and tablets. All about 80 Gigs last month”
“The TTLstands for “time to live” it is a counter on the data you send for its maximum hop count, or the number of devices it can travel through, for ever device it goes down by one, windows has a default TTL of 128, while Android has one of 64, if you change the TTL for windows to 65 when it gets to the phone the TTL will go down by one makeing it equal 64 the same as the phone. There are more adwanced way to do this so you can run a whole network off this by using a router with either DD-wrt, Tomatos or open-wrt or a dedicated pc running either pfsense, linux, or freebsd to act as a router and mangle the TTl on the fly, the benefits of this is it gets ALL of the data(windows seem to miss a small amount arohnd 5%) and its possible to edit the User agent in ways that dont mess up websites with squid and just appending the device.”
Reserved
For USB tether clients, ClockWorkMod seems to be programmed in a lower-level fashion and produce significantly less heat than running Easytether. I will be monitoring and update.
Arr123 said:
Some research into bypassing T-mobile’s tether restrictions reveals there are several things carriers can do to detect hotspot usage and block those packets:
-is hotspot data sent through a second anp?
-does carrier mark the packets coming through the wlan interface?
-do they filter by user agent strings?
-do they view the ttl?
-do they block urls that phones do not use?
-do they have a monitoring app pre-installed? (ex delete com.tmobile.pr via titanium backup)
Getting around these restrictions while using the native hotspot functionality requires work-arounds that I did not go far enough to successfully implement. One cannot by default edit the APNs for instance. I had to set up a duplicate, but theorize T-mobile was still routing to the hotspot APN I could not edit. With root access (which I have) it should be possible to achieve success, but I have found satisfactory non-root ways of achieving unlimited internet with MetroPCs (owned by T-mobile). I have, however, compiled a number of resources and may look back into what hacks must be used on the native app in the future. If anyone has a good guide on how you're getting hotspot with the Nougat LG V10 please post!
It stands to reason that one must use a non-native application to disguise the tether usage, or significantly modify the native one. After stalling with the mods, I pursued the non-native of attack and found (2) independent working ways to get unlimited tethered internet.
Wifi Tethering apps
I tried various wifi tether apps and without additional modifications or configuration I could not get them to work including:
-native hotspot (which works despite not having a hotspot plan, but t-mobile blocks)
-Wifi tether router by Fabio Grasso ($2.90) (requires root access)--(t-mobile was blocking the connection)—in discussion with developer on how to get working, will update. UPDATE: After back and forth with dev, he recommended using a VPN. His app does route the VPN through the hotspot connection if that feature is toggled. I have not tested. Potentially, changing the TTL of the computer may do something.
-Open Garden Wifi Tether—crashed when attempting to start service
Wifi Direct apps:
Wifi apps such as NetShare (red-themed play store entry is completely free, several paid versions) which use the native wifi direct functionality create a proxy server through which you can connect to via wifi. These DO WORK without additional modifications, but most native desktop apps on your computer cannot access the internet. All websites will load however. You have to set up your internet connection as through a proxy server on the client side but do not need to install additional software. A GOOD OPTION TO HAVE. I have found that one sometimes may need to stop and start the service to get it to give you internet access. The way I do it is start then quickly bring up the wifi menu, computer recognizes the network and connects quickly. If there is too much of a delay between starting and connecting via the client Netshare(Pro) doesn’t seem to work without a quick disable/enable afterwards.
USB tethering apps:
Rely on the phone’s native USB debugging feature in the hidden developer tools menu. (Go to about phone, software info, and tap on build repeatedly until enabled.) NO ROOT required. I tested Easy Tether ($9.99) and ClockWorkMod Tether ($4.99). Both worked well. PDAnet+ may also fall into this category but I have not researched. THIS IS MY PREFERRED METHOD so far. It is also possible to USB tether to certain types of wifi routers and thus get wifi for the home.
-There are PC, Mac, or Linux applications and drivers which must be installed on the computer side.
-Must have USB debugging enabled, and USB options set to Photo Transfer (Media Transfer does not work, and why I originally failed with ClockWorkMod…otherwise probably would have not pursued root!)
-These USB tether apps have the benefit of reducing the heat generated by your phone (no wifi signal generation), so runs cooler (think chips last longer) and uses less energy than when you have wifi hotspot enabled. For this reason, and for the phone being so handy when connected to my laptop, I actually prefer this method. Plus you have access to the pictures and DICM folders of internal storage so you can transfer stuff to the phone fairly immediately. To get full access, however, you’ll have to switch to MTTP mode, which on LG phones such as this V10 will break the internet connection. Other phones may not have this particular issue.
Bluetooth Tether apps:
Easy Tether and probably PDAnet+ support Bluetooth tether. With easy tether I wouldn’t suspect any issues at all using this.
Potential other methods WHICH SEEMED PROMISING, I sorted through a lot! For your inspiration:
-One youtuber mentioned using a desktop hospot application + PDAnet+ to get legit wifi hotspot functionality. The desktop PDAnet+ application apparently disguises the tethering operation. Video here: https://youtu.be/D98abWOkkQI
-Exposed framework and tether for rooted devices (did not try): https://highonandroid.com/android-a...n-rooted-android-att-t-mobile-sprint-verizon/
-Claims you’ll be able to tether any rooted android with this rooted wifi app and particular settings (similar to wifi tether router) https://highonandroid.com/android-a...android-smartphone-or-tablet-universal-guide/ (UPDATE: I tried, app is not compatible with the phone)
See comments section of this article for the below quotes: https://www.groovypost.com/howto/hide-data-usage-get-truly-unlimited-tethering-tmobile-one/
----------------------------------------------------------------------------
“The main issue I see people having is the lack of apn editing. This has been my setup for four years now
-Dd-wrt with iptables to edit the ttl value to 65 -Change TTL on windows PC to 65 so that it appears data is coming from the phone. (41 in hex = 65 in dec) https://social.technet.microsoft.co...o-live-ttl-in-windows?forum=w7itpronetworking
-Changed apn of hotspot to match the apn of normal mobile date. Doesn’t matter if you use fast.xxxx.com or alpha/beta BUT YOU CANT USE THE ORIGINAL HOTSPOT APN it’ll say mobile web or some ****. If you do you will be routed through their hotspot server and tracked. I’ve done this on iOS and android.
-FOR THE FOLKS THAT SAY THE VPN DOESNT WORK. Once again you MUST change the apn AND you have to make sure that your traffic is actually being routed through the VPN, in my experience on both android and iOS hotspot traffic bypass your phones VPN, and VPN on the router/computer traveling through the phone can be tracked if the phone isn’t the one using the VPN, to make it force traffic through the VPN I had to use the for data option in the tether me app on iOS. These things all work if you do it properly.”--Wifi tether router does have this VPN routing function but I have not tested.
"My COMBO works for me on T-Mobile unlimited.
Nexus 5x – rooted 6.01 with “settings put global tether_dun_required 0”
PLUS
Asus n31u router (w/ net.ipv4.ip_default_ttl = 65, bridge mod)
Works for Window 7 desktop and laptop, chromebook, and tablets. All about 80 Gigs last month”
“The TTLstands for “time to live” it is a counter on the data you send for its maximum hop count, or the number of devices it can travel through, for ever device it goes down by one, windows has a default TTL of 128, while Android has one of 64, if you change the TTL for windows to 65 when it gets to the phone the TTL will go down by one makeing it equal 64 the same as the phone. There are more adwanced way to do this so you can run a whole network off this by using a router with either DD-wrt, Tomatos or open-wrt or a dedicated pc running either pfsense, linux, or freebsd to act as a router and mangle the TTl on the fly, the benefits of this is it gets ALL of the data(windows seem to miss a small amount arohnd 5%) and its possible to edit the User agent in ways that dont mess up websites with squid and just appending the device.”
Click to expand...
Click to collapse
I recently been looking into this as well. I've currently been using the new pdanet with with wifi direct but it seem to be hit or miss when getting a internet connection when using the proxy method. I have a few devices where i cant install the interface so im looking for reliable method
Few scenarios im looking at. The first one you cover quite a bit, was wondering if your using IPV4 or IPV6 with your different apn settings? 2nd scenario is being able to tether when connected to wifi like from a hotel and being able to pass that to other devices and the 3rd is being able to pass along a vpn connection if connected to free wifi places
Sorry for the necropost, I just wanted to point out that currently the only method you can use to hide tethering from T-mo is PDANet with it's "Hide Tether Usage" feature.
All other methods are detected and if you have tethering, will count against your tethering allotment.
majikfox said:
Sorry for the necropost, I just wanted to point out that currently the only method you can use to hide tethering from T-mo is PDANet with it's "Hide Tether Usage" feature.
All other methods are detected and if you have tethering, will count against your tethering allotment.
Click to expand...
Click to collapse
Thanks for the heads up. Just wanted to make sure since I wanted to try the TTL method, but that is also blocked by T-Mobile correct?
TTL 65 didn't work on my computers, but 85 and 99 did. So don't be afraid to try different things.
However, the phone should be able to modify the TTL before it forwards the packet. How is there not an app that does this, or is there a setting or hack we can do to make it change the TTL as it passes through the phone?
edit: have searched more and learned some apps do, but they don't work on my phone. Not sure why.
I have metro pcs with 15gb of hotspot data.. i run out every month.. once my data runs out i use hotspotvpn. A free app on the google play store and it works for everything.. been doing it for months..never had any issues
CHEEF WALKING-FROG said:
I have metro pcs with 15gb of hotspot data.. i run out every month.. once my data runs out i use hotspotvpn. A free app on the google play store and it works for everything.. been doing it for months..never had any issues
Click to expand...
Click to collapse
Which one do you use? I saw a few that had the same name
Same here metro
13crigby said:
Which one do you use? I saw a few that had the same name
Click to expand...
Click to collapse
Im also wondering which app you're referring to. Theres quite a few with that name
CHEEF WALKING-FROG said:
I have metro pcs with 15gb of hotspot data.. i run out every month.. once my data runs out i use hotspotvpn. A free app on the google play store and it works for everything.. been doing it for months..never had any issues
Click to expand...
Click to collapse
Let me third the request. I just clocked through 8 or 9 different apps with that name. Who is the publisher?
Thanks!
Bypass With Termux
I've done this for ever and it's not going to be restricted to who you have but it will 100 percent get around any data throttling.
Download Termux app and install openssh-server on it. Go ahead and hotspot your phone, then run ifconfig inside Termux to get your current tethering local IP. It will be the only 192. spit out when you run ifconfig. Save this. Run sshd -dD inside Termux which starts an openssh server waiting to be connected to in debug mode to audit traffic. Now pop onto a PC or router you can SSH into, whatever and connect it to your hotspot from your phone. Now SSH tunnel all the traffic from the device back through the openssh server your running on the Termux app. Now that you are on the same local network you can SSH tunnel into that IP address you saved earlier. As long as you make sure all your traffic passes through the tunnel it 100 percent shows that all your internet is being used by Termux app not your hotspot app so you need no other spoofing of hops or anything because to your phone and carrier you are just using a bunch of data in termux, you do it right you will never be throttled I've used 150GB data multiple times.
Step by step > https://github.com/RiFi2k/unlimited-tethering
RiFi2k said:
I've done this for ever and it's not going to be restricted to who you have but it will 100 percent get around any data throttling.
Download Termux app and install openssh-server on it. Go ahead and hotspot your phone, then run ifconfig inside Termux to get your current tethering local IP. It will be the only 192. spit out when you run ifconfig. Save this. Run sshd -dD inside Termux which starts an openssh server waiting to be connected to in debug mode to audit traffic. Now pop onto a PC or router you can SSH into, whatever and connect it to your hotspot from your phone. Now SSH tunnel all the traffic from the device back through the openssh server your running on the Termux app. Now that you are on the same local network you can SSH tunnel into that IP address you saved earlier. As long as you make sure all your traffic passes through the tunnel it 100 percent shows that all your internet is being used by Termux app not your hotspot app so you need no other spoofing of hops or anything because to your phone and carrier you are just using a bunch of data in termux, you do it right you will never be throttled I've used 150GB data multiple times.
Click to expand...
Click to collapse
This is amazing. How do I use my Windows PC to connect to the openSSH server to create the traffic tunnel? Also, how do I force my Windows 10 traffic through the tunnel?
I am guessing with Putty and then setup SSH proxy in a browser to force traffic? Won't that only allow browser based traffic through the tunnel and not all traffic from the Windows computer?
VICosPhi said:
This is amazing. How do I use my Windows PC to connect to the openSSH server to create the traffic tunnel? Also, how do I force my Windows 10 traffic through the tunnel?
I am guessing with Putty and then setup SSH proxy in a browser to force traffic? Won't that only allow browser based traffic through the tunnel and not all traffic from the Windows computer?
Click to expand...
Click to collapse
So I am an everyday linux user and for me personally I use sshuttle to route everything back through the tunnel because it already handles the TCP over TCP problem because the guy that wrote it is a boss. This here explains that.
If I was on windows I would go with their vagrant solution because then you get the benefit of sshuttle and all your responsible for is making sure all traffic goes through the VM. Also you could use something like proxycap and putty works as well although I guess it's slow people have said.
Browser traffic can be handled with SOCKS proxies.
I feel like it's a pretty great solution overall and can benefit some people so I started a repo and I'll fully document how it works, I'm just too tired tonight so keep an eye out https://github.com/RiFi2k/unlimited-tethering and I'll step by step linux and windows for everyone as much as possible, plus if anyone else has scripts and whatnot feel free to contribute.
RiFi2k said:
So I am an everyday linux user and for me personally I use sshuttle to route everything back through the tunnel because it already handles the TCP over TCP problem because the guy that wrote it is a boss. This here explains that.
If I was on windows I would go with their vagrant solution because then you get the benefit of sshuttle and all your responsible for is making sure all traffic goes through the VM. Also you could use something like proxycap and putty works as well although I guess it's slow people have said.
Browser traffic can be handled with SOCKS proxies.
I feel like it's a pretty great solution overall and can benefit some people so I started a repo and I'll fully document how it works, I'm just too tired tonight so keep an eye out https://github.com/RiFi2k/unlimited-tethering and I'll step by step linux and windows for everyone as much as possible, plus if anyone else has scripts and whatnot feel free to contribute.
Click to expand...
Click to collapse
Thanks a lot, will read up on this. Adding your github to my bookmarks as well. :good:
RiFi2k said:
I've done this for ever and it's not going to be restricted to who you have but it will 100 percent get around any data throttling.
Download Termux app and install openssh-server on it. Go ahead and hotspot your phone, then run ifconfig inside Termux to get your current tethering local IP. It will be the only 192. spit out when you run ifconfig. Save this. Run sshd -dD inside Termux which starts an openssh server waiting to be connected to in debug mode to audit traffic. Now pop onto a PC or router you can SSH into, whatever and connect it to your hotspot from your phone. Now SSH tunnel all the traffic from the device back through the openssh server your running on the Termux app. Now that you are on the same local network you can SSH tunnel into that IP address you saved earlier. As long as you make sure all your traffic passes through the tunnel it 100 percent shows that all your internet is being used by Termux app not your hotspot app so you need no other spoofing of hops or anything because to your phone and carrier you are just using a bunch of data in termux, you do it right you will never be throttled I've used 150GB data multiple times.
Step by step > https://github.com/RiFi2k/unlimited-tethering
Click to expand...
Click to collapse
Had any user tried this already and confirm that it works with metropcs?
Pdanet+ documentation details that only usb tether+hide tether usage works with metropcs. It took me a while to go around all of it, but I haven't tested due to I want to switch carriers to metropcs.
RiFi2k said:
I've done this for ever and it's not going to be restricted to who you have but it will 100 percent get around any data throttling.
Download Termux app and install openssh-server on it. Go ahead and hotspot your phone, then run ifconfig inside Termux to get your current tethering local IP. It will be the only 192. spit out when you run ifconfig. Save this. Run sshd -dD inside Termux which starts an openssh server waiting to be connected to in debug mode to audit traffic. Now pop onto a PC or router you can SSH into, whatever and connect it to your hotspot from your phone. Now SSH tunnel all the traffic from the device back through the openssh server your running on the Termux app. Now that you are on the same local network you can SSH tunnel into that IP address you saved earlier. As long as you make sure all your traffic passes through the tunnel it 100 percent shows that all your internet is being used by Termux app not your hotspot app so you need no other spoofing of hops or anything because to your phone and carrier you are just using a bunch of data in termux, you do it right you will never be throttled I've used 150GB data multiple times.
Step by step > https://github.com/RiFi2k/unlimited-tethering
Click to expand...
Click to collapse
Hey bro!! Thank you !!
This is great idea, I would try it on my country to see if this works
myself379 said:
Hey bro!! Thank you !!
This is great idea, I would try it on my country to see if this works
Click to expand...
Click to collapse
For sure! See the nice thing about this method is that your phone doesn't register any of the data used as coming from the tethering app, it 100% all gets attributed to the Termux app because of the SSH tunnel. So basically there is no way for anyone at your carrier to know, or prove that you actually were tethering at all. If you open up the apps section and check out the part where it shows you how much data each app used you will see what I mean. So basically it really doesn't matter what country / carrier / phone you have, as long as you have access to be able to tether and you have a computer you can use for the SSH tunnel it's impossible for them to throttle you because they can't prove you actually used the data tethering. When you read the fine print about them throttling it basically says the same thing, if they can't definitively prove the data came from tethering it doesn't go on your tethering cap.
Hello RiFi2k,
OK, thanks for the information. I'm trying to translate this into a windows environment(Windows 10 phone and PC).
Here is what I have so far, but a few of your points are unclear. A little clarity would be fantastic.
Translation for Windows 10 phone
Since, I'm on a windows phone there is no Termux app. I guess Termux is used to install the SSH server and gain access to a command prompt, correct?
1. Ok since openssh server is built into the windows phone OS and I can access the command prompt via putty, I should be fine, right.
2. Generate key pair and stored public key on phone. Working fine.
3. Hotspot connection to phone.
4. Run ipconfig(windows) on phone or local machine. On local machine, gateway address is the needed ip, same as hotspot address on phone.
5. SSH Server is started on phone once the phone is placed in development mode.
Can't put server in debug mode on phone, but I'm pretty certain that it's hard coded to listen on port 22.
6. Your instructions on github.com have duplicated the step number 5, which should be 6 and I am having a little trouble sorting through it.
7. I guess the only way to tunnel to the phone is to run a putty session from the Windows machine configured per your instructions.
Are these commands executed on the device or phone?:
ssh -D 8123 -fqgN [email protected].1 -p 22 (ssh client)
sshuttle -r [email protected].1:22 0.0.0.0/0 0.0.0.0 (sock proxy)
Either way, I will need to use putty for the SSH Client portion. What are the switches in your example "-fqgN"? Are the switches concatenated?
-f Specifies a per-user configuration file.
-q Quiet mode
-g Allows remote hosts to connect to local forwarded ports.
-N ???
And finally, depending on where the above commands are run, I will need to find a sock proxy solution, if I want all traffic going through the tunnel.
Again, thanks for all your hard work.
davy4620 said:
Hello RiFi2k,
OK, thanks for the information. I'm trying to translate this into a windows environment(Windows 10 phone and PC).
Here is what I have so far, but a few of your points are unclear. A little clarity would be fantastic.
Translation for Windows 10 phone
Since, I'm on a windows phone there is no Termux app. I guess Termux is used to install the SSH server and gain access to a command prompt, correct?
1. Ok since openssh server is built into the windows phone OS and I can access the command prompt via putty, I should be fine, right.
2. Generate key pair and stored public key on phone. Working fine.
3. Hotspot connection to phone.
4. Run ipconfig(windows) on phone or local machine. On local machine, gateway address is the needed ip, same as hotspot address on phone.
5. SSH Server is started on phone once the phone is placed in development mode.
Can't put server in debug mode on phone, but I'm pretty certain that it's hard coded to listen on port 22.
6. Your instructions on github.com have duplicated the step number 5, which should be 6 and I am having a little trouble sorting through it.
7. I guess the only way to tunnel to the phone is to run a putty session from the Windows machine configured per your instructions.
Are these commands executed on the device or phone?:
ssh -D 8123 -fqgN [email protected].1 -p 22 (ssh client)
sshuttle -r [email protected].1:22 0.0.0.0/0 0.0.0.0 (sock proxy)
Either way, I will need to use putty for the SSH Client portion. What are the switches in your example "-fqgN"? Are the switches concatenated?
-f Specifies a per-user configuration file.
-q Quiet mode
-g Allows remote hosts to connect to local forwarded ports.
-N ???
And finally, depending on where the above commands are run, I will need to find a sock proxy solution, if I want all traffic going through the tunnel.
Again, thanks for all your hard work.
Click to expand...
Click to collapse
Ok, so the N is `-N Do not execute a remote command. This is useful for just forwarding ports (protocol version 2 only).` reference https://linux.die.net/man/1/ssh
It's completely fine if you don't have debug mode on when you start the sshd server on your phone, you actually don't technically need any flags. One is debug and one is detached so it runs in the background, which you are generally going to want.
Both those commands are run on your computer, but you only use one or the other. Follow my link to sshuttle they have information for using it on Windows, it will transparently route all your traffic through the tunnel for you already so it's way better than anything else.
So just to recap, you start the sshd (ssh server) on your phone and it will spit out a port. Then you go to your PC and ssh or sshuttle (ssh client) connect to your phone.
I'm around if you need more help!
---------- Post added at 12:44 AM ---------- Previous post was at 12:40 AM ----------
Also once you get it working on Windows with your phone if you don't mind letting me know what version of Windows and what model your phone is, and where the directions hung you up, because I'll mention it all to help the next person.
Thanks for the quick reply. I'm going to have to dig a little deeper. It looks as if Microsoft is doing some kind of filtering on the WiFi interface and blocking this approach. Again, thanks for the great start.

Categories

Resources