Database Info

[APP]DroidSheep : ARP-Spoofing App for Android

DroidSheep is an Android app for Security analysis in wireless networks and capturing facebook, twitter, linkedin and other accounts.
DroidSheep requires ROOT!​
Please note:
DroidSheep was developed as a tool for testing the security of your accounts.
This software is neither made for using it in public networks, nor for hijacking any other persons account.
It should only demonstrate the poor security properties network connections without encryption have.
So do not get DroidSheep to harm anybody or use it in order to gain unauthorized access to any account you do not own! Use this software only for analyzing your own security!​
Here are videos of what it does:
www.youtube.com/watch?v=B4ROlCgTr80
www.youtube.com/watch?v=mIWkee7RjbU
www.youtube.com/watch?v=z7NUluxUORs
Here is a video Tutorial on how to use it:
http://www.youtube.com/watch?v=4N-SBx5EF3g​
How does this work?
As already announced DroidsSheep supports almost every website – also “big” webservices like facebook and Yahoo.​
How does that work this simple?
There are many users that do not known that air is the transmission medium when using WiFi.
Therefore information is not only transfered to its receiver but also to any other party in the network within the range of the radio waves.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Usually nothing special happens because the WiFi users discard packets that are not destined to themselves.
DroidSheep does not do this. It reads all the packets looking at their contents.
Is a website sending a clear recognition feature within a message’s content, which can identify a user (“SessionID”), then DroidSheep is able to read it although it is not intended to external users.
Moreover DroidSheep can use this token to use it as its own.
The server can’t decide whether the authorized user or DroidSheep has sent the request.
​
How can I protect myself?
The only satisfying answer is: SSL respectively HTTPS.
Many providers already offer HTTPS, even facebook, however it must often be enabled in the settings first.
When using HTTPS the data are still sent to alle participants in the WiFi-network, too, but because the data has been encrypted it is impossible for DroidSheep to decrypt the contect of a message - remaining only a complete mess of letters, with which an attacker can’t do anything.
The real problem is that not every website provides SSL. What to do when you are in a public network (hotel, airport, etc.), you also want to use this and the site does not offer HTTPS though?
You can use a VPN-connection
For this the computer sets up an encrypted channel to a confidential computer which again transfers the data to the website.​
Please note this is NOT my work I am simply sharing this and giving a direct link to the APK (it was removed from droidsheep.de because of German rules).
Source: http://droidsheep.de
Build 14: http://www.iuptech.com/public/SD/download/droidsheep-current.apk <-- Thanks mbirth for build 14 link.
Build 15: Attached to this post - compiled by mbirth <-- Thanks
All credit goes to Andreas Koch for this amazing app! - Thanks a million!
​

build 13 is the latest? not 15

If there is a newer version, please post a link of the apk here and I will add it to the OP.

There's build 14: http://www.iuptech.com/public/SD/download/droidsheep-current.apk
Build 15 is nowhere to be found for now…

OP updated with build 14

Im having no luck with this app on my nexus s 4g. Which is a shame. I can post debugging info if somebody could help me out.

The v15 is in the official SVN: https://code.google.com/p/droidshee...idsheep/DroidSheep_public/AndroidManifest.xml
And since there's no official APK, you have to compile it yourself. Thus the different signature.
Attached is v15 compiled by myself.

Does it work on ICS?
I want to be sure if it works befor im rooting my Note

Yes

not working xperia neo cant search for anything i leave it for about 10min still nothing i also done what youtube tells me to do still nothing im using my home router with password....

mbirth said:
The v15 is in the official SVN: https://code.google.com/p/droidshee...idsheep/DroidSheep_public/AndroidManifest.xml
And since there's no official APK, you have to compile it yourself. Thus the different signature.
Attached is v15 compiled by myself.
Click to expand...
Click to collapse
Is that working on ics?

Updated OP with v15 apk, thank mbirth.
Also I don't know of ICS support as I am still running Good'ol Gingerbread.

Ive just come accross this app and have downloaded, but Nobody tested this with ICS? thats surprising! lol
Will test it this eve and report tomorrow.

safeelhd2 said:
Ive just come accross this app and have downloaded, but Nobody tested this with ICS? thats surprising! lol
Will test it this eve and report tomorrow.
Click to expand...
Click to collapse
It doesnt work.lol
I connected to wifi and did some browsing on other devices. I.e tablets.
didnt find anything.

It works for me, but there's a mess with sessions. Probably you should consider mapping each session to each Wifi network and not showing old ones with new networks... Just a suggestion

It is working on ICS, perhaps you have IP client isolation on WiFi router...

Not working for me on Galaxy Note ICS... Do you think it's related to my conection? How should I change it?
EDIT i installed the v15 version and know it's perfect!

It shows up under my kapersky as potential virus, any reason for this??

nm

crxforya said:
It shows up under my kapersky as potential virus, any reason for this??
Click to expand...
Click to collapse
Thats normal for Droidsheep.
+ working on my SGS2 (ICS)

[APP] [2.0-2.3.7, 4.0-4.4] Hotspot Shield VPN for Android

Hotspot Shield for Android
Free VPN client/service. No limitations.
* Free version is ads-supported.
Root is not needed!
Supported: Android 2.x, Android 4.x
Hotspot Shield in Google Play
Feel free to send your reports/questions/suggestions to [email protected].
Hotspot Shield for Android provides security, privacy, access to blocked sites.
Please join our g+ community for beta users:
https://plus.google.com/communities/112846702466793665780
Very simple instructions*
- Install
- Use...
* Android4.x: Because firmware on some devices (and some custom ROMs) have problems with the tun - HSS may request for su. If you found problems with VPN - please allow su and app will try to solve the problem.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Sincerely,
AnchorFree
---------------------------------
Keyword: Hotspot Shield, privacy, security, free, VPN for Android, no root

Thanks but it says "This item cannot be installed in your device's country"

Please try again
whisky_x said:
Thanks but it says "This item cannot be installed in your device's country"
Click to expand...
Click to collapse
Sorry, some countries were disabled.
Please try again. Now it should be available.
Note: google market applies changes not instant, it could take some time.

HotspotShield said:
Unfortunately, because of:
To prevent spam to the forums, ALL new users are not permitted to post outside links in their messages. After approximately eight posts, you will be able to post outside links. Thanks for understanding!
We can't post correct URLs.
Please replace _ with h.
We started beta testing worldwide and here is our beta version:
Link to Google Play:
_ttps://play.google.com/store/apps/details?id=hotspotshield.android.vpn
Please help us to test this beta.
No root required!
Hotspot Shield provides security, privacy, malware protection, access to blocked sites and bandwidth savings.
Hundred of beta codes you can find here:
_ttps://docs.google.com/spreadsheet/ccc?key=0AtXTYbVPF6B7dDlMMldvd255X2U3dUliSWVHUWNRaGc#gid=0
Note: File is editable, so please mark used code! This is for your convenience! And if you need more - we will post more.
Instructions
- Install
- Start trial (enter beta code at this moment).
- Browse...
Screenshots
Sincerely,
AnchorFree
---------------------------------
Keyword: VPN for Android, no root!
Click to expand...
Click to collapse
it askes for credential storagr password

That's correct
dr-PHP
Yes, that's correct. We need to put some our secrets to the credentials storage.
Note: actually our application do not asks for your passwords or any of your credentials. It is Android's default dialog. We do not store any of your credential! BTW, we can't get it because of permissions.

Not compatible with the Galaxy Nexus or Asus Transformer? Is this only for old devices?
Sent from my Galaxy Nexus using Tapatalk 2

Only Android 2.x supported
EP2008, only Android 2.x supported for now.
We are working on Android 3.x/Android 4.x support.

Beta codes
Hi
Most beta codes are invalid.
Could you send valid codes?

great, waiting so long for, sofar its not compatible with ICS (Galaxy Note), i am sure you working on that

Beta codes
Last time when I checked the codes list - lot of them were marked as "used". Someone removed all these marks. So let's say "thanks" to this anonymous user.
Please send requests for the beta codes to [email protected].
Subj = beta for xda-dev
Body=your nick name

Cool, I'll be waiting for Samsung i9000& sgs t959 compatibility on gingerbread.
Sent from my GT-I9000 using Tapatalk 2

What's wrong with people, why someone should do that?
HotspotShield said:
Last time when I checked the codes list - lot of them were marked as "used". Someone removed all these marks. So let's say "thanks" to this anonymous user.
Please send requests for the beta codes to [email protected].
Subj = beta for xda-dev
Body=your nick name
Click to expand...
Click to collapse
Sent from N7000 ICS

When I installed on my G2 it instructed me to enter proxy settings. It would then only let me use it on a mobile network and not wifi. It didn't connect most of the time. When I uninstalled, it apparently did not remove the proxy information. I could not browse the internet for 2 days on mobile, only wifi. I finally downloaded Proxy Settings app so I could remove the information and browse again.

Sorry for inconvenience
fied1k, we are working on our service. Sometimes our servers can be unreachable, but not all the time.
We know that some firmwares contain "broken" VPN implementation (main reason: carrier/vendor changes). We are providing secured IPSEC connection. Most part of VPN clients for Android provide unsecured PPTP connection with disabled encryption.
We are working on this issue.
Proxy is the fallback for you if we can't use VPN on your device. But unfortunately now it can work only in 3G/4G. Or you can use Opera Mobile/Firefox where you can configure proxy settings.
In latest version, if you are using proxy, you can uninstall application from itself. You will see "Uninstall" button on the app main screen.
BTW if you re-install app and if it detects that you have changed proxy settings - it will asks you to erase it.

Not Working
Youve sent me a beta code on [email protected] coz i do apply to be a beta tester before but now that i installed the app from the playstore the beta code you sent me is noty working... now ive sent another beta code request... is openvpn supported on this app? if yes, does this need a tun.ko for my device?

Beta code
Jbazt_katuforzs, another beta code was sent.
No, this is not openvpn. This is ipsec. You don't need root privileges on your device. You don't need tun.ko.

Strange forum behavior
HumanoidTalking,
strange forum behavior. Can't answer your PM. I answered but there are no msgs in "sent" folder.
Please send me email to [email protected] with subj "xda-dev".

HotspotShield said:
Jbazt_katuforzs, another beta code was sent.
No, this is not openvpn. This is ipsec. You don't need root privileges on your device. You don't need tun.ko.
Click to expand...
Click to collapse
cool ill try it later sir!!!... im wondrin if this app will soon support openvpn in the near future? thanks a lot more power sir!

Jbazt_katuforzs said:
cool ill try it later sir!!!... im wondrin if this app will soon support openvpn in the near future? thanks a lot more power sir!
Click to expand...
Click to collapse
OpenVPN will be supported for Android3.x/4.x.
For Android 2.x there is no way to use openvpn without rooting.

When are you going to support android 4 " ICS " ??
thank you

Andy The Android Emulator (Win/Mac)

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Andy breaks down the barrier between desktop and mobile computing, while keeping a user up to date with the latest Android OS feature upgrades. It also provides users with unlimited storage capacity, Windows and Mac compatibility, and the freedom to play the most popular mobile games on a desktop. With phone as a joystick, you will never have to sacrifice the multi-touch or gyro elements of gaming, and thanks to seamless connection between desktop and mobile, you can receive a SnapChat phone picture on the street and see it on your desktop at home or just download Whatsapp for pc.
Configuration: thanks to @NexusGTS
Screenshot:
Download Andy Emulator

Downloading

I'm game. Been looking for a good alternative to BlueStacks.

OP has 6 posts, just one reply since yesterday (and only cause XDA just tweeted it), the big image is embedded from a piracy site that hosts cracked android apps... so, is this legit?
Edit: Link to official site - http://andyroid.net/

I think site should provide the full package for slow internet connection.

Sorry, why to put this on XDA Forums after almost a year of its availability?

It might not make much of a difference with desktop PC's but, something limited in CPU performance Andy OS doesn't seem to run well, tested on my T100TA (x86 baytrail tablet) was choppy and laggy. DuOS runs extremely well on the same tablet, worth noting and trying if you have the same or similar device.

SirBindy said:
I'm game. Been looking for a good alternative to BlueStacks.
Click to expand...
Click to collapse
Me too... I always get trouble with BS

Has anyone tried this?
The online installer seems kinda limited for some people with slow internet connections like me.

To run android apps on PC I use Genymotion, it's smoother and customizable

Cute, I went to the download link and got a message about it being in closed alpha.

Downloading

dfkt_ said:
OP has 6 posts, just one reply since yesterday (and only cause XDA just tweeted it), the big image is embedded from a piracy site that hosts cracked android apps... so, is this legit?
Edit: Link to official site - http://andyroid.net/
Click to expand...
Click to collapse
chrisdlc119 said:
Sorry, why to put this on XDA Forums after almost a year of its availability?
Click to expand...
Click to collapse
I think ill wait a little while for others to confirm their exp- not very positive according to the above.

Genymotion is conveniently left out on the comparison table. Hmm...wonder why?

This is great and all, but youve stopped downloads. What the hell.
Cute way to drive traffic to your site, I guess.

touche112 said:
This is great and all, but youve stopped downloads. What the hell.
Cute way to drive traffic to your site, I guess.
Click to expand...
Click to collapse
Who's "stopped downloads" for what?

gabryoryn said:
Mod Edit: Quote of the OP removed.
Click to expand...
Click to collapse
Excellent , phenomenal, mind blowing.....
Downloading Now...
Bless you Dev...

I get these following errors,
Had a similar problem when i tried installing ubuntu a while back.
would be awesome if someone could look at the screenshots I took and help me out would Really appreciate it

minimal requirement? is there any standalone setup? i hate to say this but indonesia doesn't had a good connection for their internet. i dont want to get failed when downloading 580mb setup.

leo31 said:
minimal requirement? is there any standalone setup? i hate to say this but indonesia doesn't had a good connection for their internet. i dont want to get failed when downloading 580mb setup.
Click to expand...
Click to collapse
I believe there is, check their Facebook page. It's still going to be the same size whether the installer downloads the required files or you download a large setup package.

To root or to app-root?

Dear all: This is my first post. I spent two days reading posts concerning the highly anticipated unlocking of the S7 G930T bootloader. It sounds as though the developers at XDA and anot entity known as Chainfire are chomping at the bit in expectation -- TWRP is written and waiting at the border. That is awesome and I wish you all the best of luck. There are several apps that I wish to install on my phone. Most of them address device security (firewalls, etc...) and secure communications. Thank you in advance for your many hours of work.
My question is one of methodology and the ultimate goals of device rooting using the Android 6+ OS. Why not use a virtual root as a cheap and tawdry temporary work around? A similar method appears to have worked well for a Corbin Champion who create Gnuroot. His app creates rooted Linux environments on Android devices and requires no Android root.
Will this work for applications that require a rooted Android? Is my question rooted in reality? What are the limitations of a rooted app or virtual root system?
Why would anyone want to use a cheap trick? Is it possible that using an app or a virtual root may avoid potential crashes and instabilities? Samsung may have locked the bootloader to prevent or slow the use of the S7 G930T in illegal activity. Wouldn't the development of an app for non-developers all us to benefit from many wonderful apps while preventing non-developers from engaging in less than ethical hacking with root as a lockpick?
I also read an XDA post concerning chain-loading an OS from a USB device. This also seems like a clever work around. It may also be an effective security tool that may allow a cellular device to be driven by a portable OS. It may allow one to protect device data and USB-OS data while enjoying network communications. What are your thoughts?
If I could pull this off on my own, I would do it and release it for free since that seems to be the thing to do -- to contribute in an academic manner to the karma/knowledge pool. I hope that capable hands consider a project like this to be worth while. If is already done, please point me in the right direction.
Thanks.
Cheers!

Dear all:
After I posted and asked questions that I though were interesting, I continued to read and look for helpful apps.
I lot of new apps appeared in the Google play store. Or maybe I just had not paid attention well enough before.
However the coincidence occurred, the most useful apps were the IP tools such as trace and location search.
Before that day I never once obtained an IP trace result and location that was at all useful or even remotely interesting. This time I was able to summon the leviathan.
The corresponding IP address to a machine that was and may still be in constant communication with my Samsung Galaxy S7:
172.217.3.238
The corresponding GPS coordinates:
37.4192000, -122.0574000
In the links below you will see that this corresponds to an office building on the property of the Moffett Federal Air Field near Mountain View and Stevens Creek California. How did that happen. My attorney doesn't know either. He says that no one is looking for me or is in great want of a chat with me. I am a medical student. ????
Ok. So I sent a complaint to the California State Attorney General Kamala Harris... several time by fax, online portal, and email. I called her office to confirm. Her staff confirm, don't confirm, and say that they have no way of tracing documents received by their server. So my attorney called and emailed.
Anyway... this smells of phone spoofing and phone trapping again so I will have to fight just to submit a complaint.
Links to the IPtrce and IP location searches.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
The link to my complaint to California Attorney General Kamal Harris.

Why wond the images post?
I am not sure what went wrong, But the image files are not visible.. How do I correct this?

Ahzreal2 said:
I am not sure what went wrong, But the image files are not visible.. How do I correct this?
Click to expand...
Click to collapse
I'm not sure about this whole thread... That IP is Google, which has nothing to do with your post about a 'virtual root', OS on USB, or whatever.
See this: http://172.217.3.238.ipaddress.com/

[App] [4.0.3+]RouterConfig - Configure your wifi router from phone

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Welcome
In past we had to use laptop to know more information about Wifi routers and configure them but that was in past
Today l present RouterConfig
RouterConfig is an application that help you to know more information about your WiFi Router and Let you configure it from phone
There are two Methods in the application
-First Method that work with almost routers
-Second Method that work with some routers
if the first doesn't work try the second
Dowload Section :
v1.1 : https://www.file-upload.com/hw8k3mobnqo9
Credits :
Google
Stackoverflow for his help
Info : the app could be bugged since it is the first version so if it work or doesn't don't hesitate to post the problem and your Router Brand and Thanks
info2 : this app is not a hack it just for who want to know infos about their routers and configure it that all
source code : https://github.com/Shadowofleaf/RouterConfig/tree/master/RouterConfig​
XDA:DevDB Information
Routerconfig, App for all devices (see above for details)
Contributors
Shadow Of Leaf
Version Information
Status: Testing
Created 2017-08-09
Last Updated 2017-08-08

Screenies and Changelog
Changelog
-v1.0 : First test version
-v1.1 : fix force close

This app crashes when I open it on my Nexus 5X, I'm running Paranoid Android 7.1.2

FriedPuppy said:
This app crashes when I open it on my Nexus 5X, I'm running Paranoid Android 7.1.2
Click to expand...
Click to collapse
Can you logcat ??

Hmmm. I uninstalled it immediately. There's no status of what it's doing and all I see are ads.
I'm sure there is some power under the covers, but it would help to provide a settings screen first where the user can disable ads and maybe a description of what will happen while it communicates with the router.

I don't get it why someone needs such an app especially because you can a) Open your Router GUi via Browser or b) use the apps which are provided directly from your Router manufracture.
Thanks for the effort and app and everything but I have many doubts especially when it comes to security, because you're only a single developer, there is no source code and not really an explanation about everything what the app exactly does.

CHEF-KOCH said:
I don't get it why someone needs such an app especially because you can a) Open your Router GUi via Browser or b) use the apps which are provided directly from your Router manufracture.
Thanks for the effort and app and everything but I have many doubts especially when it comes to security, because you're only a single developer, there is no source code and not really an explanation about everything what the app exactly does.
Click to expand...
Click to collapse
And here i thought i was the only one thinking the same thing ? If only xda could be how it was in the past... No offence to OP or the apk he promotes but these days theres more apsks popping up faster than cockroaches dissapearing in the light ?.... Good luck

At this stage you should change name of this app to "full screen advertisement player".
Could not even check what this app is about as full screen apps have been popping out all the time.

charlie95113 said:
And here i thought i was the only one thinking the same thing If only xda could be how it was in the past... No offence to OP or the apk he promotes but these days theres more apsks popping up faster than cockroaches dissapearing in the light .... Good luck
Click to expand...
Click to collapse
im sorry there is no hack in this app it it just a webview of router config page
i will upload the source code of the app soon to be sure that is safe

Shadow Of Leaf said:
im sorry there is no hack in this app it it just a webview of router config page
i will upload the source code of the app soon to be sure that is safe
Click to expand...
Click to collapse
I don't believe that people are necessarily saying that your app is a "hack" but it's more of an issue of can others access your app, or can other apps access your app, and ads inside of an application that does things like accessing your routers GUI isn't acceptable because ads already track and report back as much information as they possibly can, and it's not secure at all to see ads that are all over the gateway to and from the internet. If an app on our device can gain access to your app, or if someone from outside of the network is able to gain access to our router, then they could potentially have access to the entire network, including every device connected via wireless or wired, doing massive amounts of damage, or simply compromise the network to use it as a part of a botnet.