[Q] where can i read the iptables log? - Android Software/Hacking General [Developers Only]

HI, i'm new to android, i did use linux/iptables on pc before.
i did setup iptables as my android phone's firewall, it works just fine.
but i do not know where can i read the log. (iptables -A INPUT -j LOG)
i know on some linux/pc default is /var/log/messages,
but where is android default?
please help and thank you.

Related

Ettercap for Android ARM

Hi guys, just to let you know, i successfully compiled ettercap for android!
This is a command-line tool only(for now) so if you never used ettercap, try it first on your PC.
What is working now (that i've tested):
- Text only support
- ARP spoofing
- ...
Not Working:
- Plugin Loading (should be easy to fix)
- Curses (is it really necessary?)
Sample usage on my galaxy S:
Code:
./ettercap -i eth0 // // -qT -M ARP
Now, use with care
I'd appreciate if someone write a how-to for "non-geeks", and a better mirror.
Download 0.11
Mirror (courtesy of a1Pha)
Cheers
How did You do that?
Hi,
How did you cross compile it, and did you upload the diff back to ettercap project ? They would benefit from the changes.
I did the following to get it to work so I could execute the file from the sdcard.
# mount -o remount,rw,dirsync,nosuid,nodev,exec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro -t vfat /dev/block/vold/179:1 /mnt/sdcard
# ./ettercap -i eth0 // // -qT -M ARP
Can you reupload the file. Thanks.
Link updated.
There is only one line of code modified from the original project, which sets the uid and gid to another than root, and prevents ettercap from working correctly, so i commented it and now it works well. Later ill make a tutorial on how to build it.
Cheers
Great work onaips. But how to install it? Do you have any guide ready?
I can not find out a way to install it.
Great job here, I use Ettercap on my laptop pretty frequently, and have been waiting for an Android port. The only problem is that I keep on getting a permission error using my personal terminal emulator.
After getting su permissions, I type:
# ./ettercap -i eth0 // // -qT -M AR
Then, it just spits out:
./ettercap: permission denied
Any thoughts?
Try to give it executable permissions,
chmod 777 ettercap
onaips said:
Try to give it executable permissions,
chmod 777 ettercap
Click to expand...
Click to collapse
No luck, but thanks for the suggestion. It still gives the same permission denied error. None of the other files in the folder have permission as well, not even with the chmod command.
Still no luck with the plugins? Can someone help?
@skafan2 you probably are trying to run it from your sdcard, on a fat partition. Try to move it to the /system directory, or any other place formatted as ext-*
dazdaz said:
Hi,
How did you cross compile it, and did you upload the diff back to ettercap project ? They would benefit from the changes.
I did the following to get it to work so I could execute the file from the sdcard.
# mount -o remount,rw,dirsync,nosuid,nodev,exec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro -t vfat /dev/block/vold/179:1 /mnt/sdcard
# ./ettercap -i eth0 // // -qT -M ARP
Click to expand...
Click to collapse
Hey.... Many many many thanks, but i have a question..
i run debian-ubuntu-bt5 on my HTC DesireZ and i can not run ettercap because of some Fatal error with the Layer 3 (wich is the internet layer). Then, i was suspicious with the interface (eth0). Eth0 refers to ethernet connection and i am connected wireless (is this the problem)????? i tried to change my eth0 interface with the wlan0 but without luck.... please help me how to make it work....
Thank u again
thank you!
ettercap layer 2 error
come on guys please someone answer me, i really need this to work
dude on most mobiles wifi= eth0 or tiwlan0 so quit trying to change it to wlan0. Also, are you talking about the android ettercap binary or the debian chroot version? also post exactly what it says if you can
working but not package received, cant put in promicious mode...
Hi, the binary is working but is telling me 0 plugins, any one knows how to deal with the plugins
links dead
Both links are dead. Can you fix it?
You can mail me the app, i can mirror it for you if you'd like.
Reup please ....
Jah. reup please
I'm also interested in testing this on an android phone, but the links are dead.

OpenVPN on Defy

hello..
i've been trying to get openvpn to work on my Defy but no luck so far.
what i've done is:
-install busybox
-install openvpn settings and installer
-found my tun.ko
-copied my openvpn config to sdcard
-changed openvpn settings
-the vpn tunnel is created and connection is made but traffic doesnt seem to be routed to the tunnel
did anyone manage to get openvpn to work on Defy?
it was working fine for me for different android devices.
i used this tutorial:
hxxp://www.android-hilfe.de/root-hacking-modding-fuer-motorola-defy/58423-openvpn-auf-dem-defy-2.html
I use the phone's own VPN settings under Wireless & Networks and manage to get things working without any problems.
tim440 said:
I use the phone's own VPN settings under Wireless & Networks and manage to get things working without any problems.
Click to expand...
Click to collapse
this is for PPTP or IPSEC but not OpenVPN.
Ohhh.... Good i found this thread, maybe you guys will be able to help me...
I have a working VPN connection from for ex. my laptop > home (PPTP)
But i am unable to connect to it using Defy's original VPN connection...
I get:
"Unable to connect to the network. Do you want to try again?"
Also - what does mean this "DNS Search Domains " setting?
Darmach said:
Ohhh.... Good i found this thread, maybe you guys will be able to help me...
I have a working VPN connection from for ex. my laptop > home (PPTP)
But i am unable to connect to it using Defy's original VPN connection...
I get:
"Unable to connect to the network. Do you want to try again?"
Also - what does mean this "DNS Search Domains " setting?
Click to expand...
Click to collapse
what ROM are you using? on 2.2.1 L2TP works fine but not PPTP.
your options:
1. try L2TP or L2TP/IPSEC if your provider supports it
2. if your on a 2.1 ROM, try a 2.2.1 ROM
as for DNS search domains, you can put google's for example 8.8.8.8
or leave it blank if after connection is successful you can browse without problems.
Im on 2.1 - so its just that that on 2.1 PPTP is not working?
So DNS search domain are just specifying the DNS'es you will be using on this connection?
Darmach said:
Im on 2.1 - so its just that that on 2.1 PPTP is not working?
So DNS search domain are just specifying the DNS'es you will be using on this connection?
Click to expand...
Click to collapse
1. Yes, at least for me.
2. correct
does anyone here still need help with openvpn?
i managed to run openvpn through a dns tunnel over a public hotspot at the airport.
this works on most of the newer (hotspot)systems but is extremely slow.
i got it working, i will post the steps later on.
nolimitzz said:
i got it working, i will post the steps later on.
Click to expand...
Click to collapse
Hi,
Having the same issue as you.. My OpenVPN Connects but no unable to ping even the IP address.. Same Config ovpn file is working on previous phones. Please kind share you workaround . Thanks in advance
voided said:
Hi,
Having the same issue as you.. My OpenVPN Connects but no unable to ping even the IP address.. Same Config ovpn file is working on previous phones. Please kind share you workaround . Thanks in advance
Click to expand...
Click to collapse
Found the solution! here u go!
1. install openvpn-installer
2. Run openvpn-installer and during installation point to busybox (ifconfig/route) at at /system/xbin/bb
3. create the directory at /system/xbin/bb
Code:
mkdir /system/xbin/bb
4. Make symbolic links to ifconfig and route
Code:
ln -s /system/xbin/ifconfig /system/xbin/bb/ifconfig
ln -s /system/xbin/route /system/xbin/bb/route
enjoy~!
1) Install busybox using busybox installer from market, choose to install busybox in:
/system/bin
(dont install in /system/xbin , if already installed, please delete route and ifconfig in /system/xbin first very importanttttt)
Install Openvpn from Openvpn Installer in /system/xbin
using root explorer or whatever you use, replace openvpn binary with this:
http://github.com/downloads/fries/android-external-openvpn/openvpn-static-2.1.1.bz2
dont forget to change the permissions
using adb or terminal emulator:
Code:
su
mount -o rw,remount /dev/block/mmcblk1p21 /system
ln -s /system/bin/route /system/xbin/route
ln -s /system/bin/ifconfig /system/xbin/ifconfig
mkdir /system/xbin/bb
ln -s /system/xbin /system/xbin/bb
use openvpn settings to set your options (insmod for tun.ko, tun.ko location, openvpn location)
my main problem, which i dont know why, was because busybox is installed in system/xbin, while it should be installed in system/bin and then using symlink to system/xbin
anyway it works for me now, let me know if it does for you.
did you install busybox to /system/xbin/?
did you create /system/xbin/bb? and symlink route and ifconfig to that folder?
i hope you guys can post step by step tutorial here .. this is my first android phone ...
thanks !

[Q] Local port forwarding

Hi all,
iam trying to forward all requests to a specific port on my phone to another port on it. So i installed droidwall and added a custom rule
iptables -A PREROUTING -t nat -p tcp --dport 5567 -j REDIRECT --to-port 5580
The above works perfectly for lets say 10 minutes from booting the device and after that it doesnt like the rule is lost, even if i re-apply it.
Im using latest jaggyROM.
What should i do?
Thank you very much.
ZD
P.S: new here

[ROOT] SpeedUp My YT (for a faster Youtube)

There are quite a lot of users (especially in germany) who get very low download speeds at Youtube.
One solution might be to block several youtube IPs:
see here
So I created this app, which uses the iptables command to block those IP ranges.
It requires root to add blocked ips.
It may not work on your device. (Works on my Nexus 4 with latest ParanoidAndroid)
Just hit "Speed Up" once to add the IPs to the blocklist.
To undo hit "Undo" .
Let me know if you see a difference.
This is not permanent! A reboot will undo the changes.
For a permanent solution, check out this post by 5pace:
http://forum.xda-developers.com/showpost.php?p=40918388&postcount=4
-Cheers dak
You can do this in a terminal without the app aswell (this is what the app does):
switch to root, then:
"Speed Up" commands:
iptables -A INPUT -s 173.194.55.0/24 -j DROP
iptables -A INPUT -s 206.111.0.0/16 -j DROP
Undo commands:
iptables -D INPUT -s 173.194.55.0/24 -j DROP
iptables -D INPUT -s 206.111.0.0/16 -j DROP
List:
iptables -L INPUT -v -n | less
DOWNLOAD V1.01:
http://goo.gl/kXzFO
USE THIS AT YOUR OWN RISK ! The app has ZERO error handling and was coded in about 10 minutes.
Check out my other apps:
https://play.google.com/store/apps/developer?id=Stefan+Pledl
Awesome!
Tried it right now, works perfectly.
Had to restart to see the effect. Now Youtube seems to load a lot faster. Will report again after watching some videos.
Thank you a lot!
Some infos:
- Sony Xperia Z (Stock rooted)
- Tested with 3G and WiFi.
- Switzerland (Cablecom / Orange)
Thanks, but rebooting seems to undo the blocking.
Sometimes you just get lucky and get a faster download.
The init.d way
Well I already posted a 'init.d' method on Reddit, so I thought it would be just as good to share it here!
For all those rooted people out there, I created a init.d script to execute these commands at phone startup. The only pre-requisites are:
• A kernel with init.d support. (Not sure what it is? [Look for a folder called "init.d" inside "/system/etc/", if it is there you are good to go!]).
• Root Explorer
- Steps to follow:
• Download S99youtube from here: http://db.tt/hktE9rlr
• Copy over this file to "/system/etc/init.d/".
• Using any root explorer give it permissions like this: http://www.imgur.com/2GD5EGE.png
• Lastly again using Root Explorer change owner to to: http://www.imgur.com/VTGeaA3.png
• Reboot.
VOILA! No need to execute these commands after startup everytime or use any third-party app!
Click to expand...
Click to collapse
Added a link to your post in the OP.
Thanks for pointing it out!
Thanks
Used the init.d method works great. Thanks to both of you
Uploaded a minor update, which properly updates the displayed ips after adding them.
(new link in OP)

SManager - script executing fine manually, but not at boot

Greetings! I know there have been many topics on how to run scripts at boot time, most suggesting the safe way using Script Manager. But I'm encountering an odd issue:
I installed dropbear via opkg as described here and I wrote a script that would execute as root and start it. The script executes fine when I run it manually (either from SManager or from my terminal emulator using sh) and I am able to connect to my phone via ssh. However, when I set SManager to run the script at boot, the script executes fine, the processes are running (I can see them in the output of ps), the output from the processes (saved to log files) is the same as when I run them manually (and the connection can be established), but there is no TCP port associated with dropbear. I check using netstat - when I run the script manually, I can see the listening port, but not when the script is run automatically. Consequently, I cannot connect to my phone even though dropbear is running and reports it's listening on the port I specified. I tried adding a 2 minute delay in the script before dropbear is started (to allow the device to fully boot up) and I can confirm dropbear is started well after every other process, but the result is the same. I'm not sure if this is a problem with dropbear, SManager or something else.
I tried putting the script in /etc/init.d and making it executable, but it is not being run at all, I don't think scripts there are being read (there is no such entry in /init.rc that checks scripts in /etc/init.d).
I'm running SlimBean 4.2.2 on Samsung Galaxy S with 3.0.71-Semaphore_JB_2.9.18s kernel. Here follows the script:
Code:
#!/system/bin/sh
# dropbear and ssh are installed in /data/local/bin
export PATH=$PATH:/data/local/bin
sleep 1s
dropbear -p 42549 -v &>/sdcard/droplog
sleep 1s
# set up remote port forwarding (reverse ssh) to my PC so I can connect to my phone through its network's firewall
ssh -TfN -o "GlobalKnownHostsFile /data/.ssh/known_hosts" -p 4713 -R 4714:localhost:42549 [email protected]<my-PC's public IP address> &>/sdcard/sshlog &
anyone?
bump, anyone? Sorry if this is not in the right section of the forums
(delete)

Categories

Resources