Packet Capture - Security Discussion

Hi,
I have installed Packet Capture, an app developped by Grey Shirts. No need for a rooted device.
BTW, it's based on Android VPN to capture packets.
1) I don't know what thinking about it. And you ?
2) Do you know a similar open-source no-based root app ?
Thanks in advance for your help.

iwanttoknow said:
Hi,
I have installed Packet Capture, an app developped by Grey Shirts. No need for a rooted device.
BTW, it's based on Android VPN to capture packets.
1) I don't know what thinking about it. And you ?
2) Do you know a similar open-source no-based root app ?
Thanks in advance for your help.
Click to expand...
Click to collapse
This is a feature of NetGuard, which also uses the VPN API. It's open source (https://github.com/m66b/NetGuard) under the PCAP functionality. As a bonus, the dev is active on XDA - http://forum.xda-developers.com/android/apps-games/app-netguard-root-firewall-t3233012

pulser_g2 said:
This is a feature of NetGuard, which also uses the VPN API. It's open source (https://github.com/m66b/NetGuard) under the PCAP functionality. As a bonus, the dev is active on XDA - http://forum.xda-developers.com/android/apps-games/app-netguard-root-firewall-t3233012
Click to expand...
Click to collapse
Thanks.
But it's only for output packets, if I have understood, and only in the PRO version of NetGuard.

iwanttoknow said:
Thanks.
But it's only for output packets, if I have understood, and only in the PRO version of NetGuard.
Click to expand...
Click to collapse
Hi,
What is your goal with the app you mentioned? Are you looking for just packet capture, or adblocking globally on your phone.? And I looked at Netguard and they do indeed have several paid features. Lots of people give very positive reports. Look for threads here at xda.

iwanttoknow said:
Thanks.
But it's only for output packets, if I have understood, and only in the PRO version of NetGuard.
Click to expand...
Click to collapse
It should work for packets both inbound and outbound. I'll test this shortly.
It is indeed a paid feature, but the application is still fully open source on Github.

DGL2033 said:
Hi,
What is your goal with the app you mentioned? Are you looking for just packet capture, or adblocking globally on your phone.? And I looked at Netguard and they do indeed have several paid features. Lots of people give very positive reports. Look for threads here at xda.
Click to expand...
Click to collapse
Just for packet capture.

iwanttoknow said:
Just for packet capture.
Click to expand...
Click to collapse
Cloudshark.com has a free account for a trail period of a year I think. For analysis of files uploaded. But I would be interested in how the packet capture app worked for you, and or, if you find another that works on Android only.

DGL2033 said:
Cloudshark.com has a free account for a trail period of a year I think. For analysis of files uploaded. But I would be interested in how the packet capture app worked for you, and or, if you find another that works on Android only.
Click to expand...
Click to collapse
As I said in my OP, I don't know what thinking about Packet Capture. It's the main reason I sent this Post.
BTW, this app ask you to install a certificat, I think useful to decrypt SSL packets. Am I right ? If anyone could answer.
It captures network traffic by app, in hexadecimal or text format.
I'm sorry to have no much to share with you about my experience. I've just installed it to see globally its behaviour.
Other similar Android apps I've heard about : Wireshark, Shark for Root, but never installed them.

pulser_g2 said:
It should work for packets both inbound and outbound. I'll test this shortly.
It is indeed a paid feature, but the application is still fully open source on Github.
Click to expand...
Click to collapse
But netguard doesn't tell you the host. Only shows IP and reverse DNS. Correct me if i'm wrong.
Greyshirt's Packet Capture does this. It informs you the host. I use this app to make personal hosts file.

Related

[APP] MySQL Manager

I'm trying to get a feel for what kind of demand there is out there for a MySQL manager for Android.
Obviously there's only going to be a small niche of people who would want/use one, myself included, so I guess I wanted to get the feedback of the people on these forums to see what demand is like.
I'm currently building one that I plan to stick on the Android Market in the next week or so, and I'll let everyone who expresses interest know when that happens. The first version I put out will be a "lite" version. Features will include:
Create/Edit/Delete server/db credentials
View a list of all Tables, Views, and Stored Procedures in a db
View first 100 records of any Table or View
Drop Tables, Views, and Stored Procedures
Add/Edit Views
Add/Edit Stored Procedures
Run custom queries
If the demand and responses are good, I will completely re-do the UI, add some nice graphics, and put out a much more feature-rich version. Not going to waste my time to do that, though, if I don't feel there is enough need.
Thanks in advance to everyone who responds!
-teleknEsis
Any plan for SSL authentication like desktop client?
Sent from my Nexus One using XDA App
jameztcc said:
Any plan for SSL authentication like desktop client?
Sent from my Nexus One using XDA App
Click to expand...
Click to collapse
Probably will be in the full version
teleknEsis said:
Create/Edit/Delete server/db credentials
Run custom queries
Click to expand...
Click to collapse
I would definitely use this. Personally, running custom queries would be the only thing I would use it for tho (i'm a sql/command line ninja haha). Hard saying how often I would use it. Currently I just ssh into a nix box and use mysql client from there when I'm remote/without a laptop and need to fix something.
teleknEsis said:
Probably will be in the full version
Click to expand...
Click to collapse
Look forward to it. Thanks.
Sent from my Nexus One using XDA App
jameztcc said:
Look forward to it. Thanks.
Sent from my Nexus One using XDA App
Click to expand...
Click to collapse
I have released the initial version of my app on the market. Search for AndSQL.
Keep in mind, this is a very rough first version and is not intended to be complete with features. If response/feedback is good I will re-do UI, add graphics, and style it. Any feedback is greatly welcomed. Thanks!!
-teleknEsis
Can't find on the market, is there a download link?
Also, about "Run custom queries" is there the option to save/load the queries too?
I will appreciate that because i often run the same queries, so i save and load them when i need
__max__ said:
Can't find on the market, is there a download link?
Also, about "Run custom queries" is there the option to save/load the queries too?
I will appreciate that because i often run the same queries, so i save and load them when i need
Click to expand...
Click to collapse
As of right now there is not. This would be a feature I would definitely add if I decide to make a 'full' version. This was really more or less just a quick tool I made for myself to do quick db edits/checks on the fly when problems are reported. It has a ton of potential, I'm just not sure how large the demand is for a 'full' version of this.
My app targets 2.1 and up so not sure why you don't see it in the Market, but I'll go ahead and post it in the OP. Look for it there.
Ok, thanks for reply, it's quite useful already to do quick and emergency checks.
I'm on froyo now, so i should be able to find it in the market...
__max__ said:
Ok, thanks for reply, it's quite useful already to do quick and emergency checks.
I'm on froyo now, so i should be able to find it in the market...
Click to expand...
Click to collapse
Did you ever find it? I posted it in the first post in case you never did find it in the market.
got it from market , thanks!
Sent from my Nexus One using XDA App
Downloaded from here.
It seems to connect, at least i don't receive any error, but i don't see the tables/views/sproc, and if i try to run a query the result is empty..
Tried with 2 different db on 2 different servers.
Sent from my Nexus One using XDA App
__max__ said:
Downloaded from here.
It seems to connect, at least i don't receive any error, but i don't see the tables/views/sproc, and if i try to run a query the result is empty..
Tried with 2 different db on 2 different servers.
Sent from my Nexus One using XDA App
Click to expand...
Click to collapse
There's likely a bug in my connection error reporting. If you're not seeing any tables or views then there's probably something wrong w/ your connection settings.
Make sure your MySQL db is set to allow remote connections, and also verify that the port you specified is correct. Hope that helps
Im' pretty sure everything it's ok, from my home pc i can connect without any problem...
__max__ said:
Im' pretty sure everything it's ok, from my home pc i can connect without any problem...
Click to expand...
Click to collapse
Hmmm well works fine for me with several different MySQL db's on different servers, different hosting solutions. I'll make sure connection error reporting is working tonight and submit an updated app for you.
Thanks, i appreciate the effort
Sent from my Nexus One using XDA App
Great APP! Thanks for sharing and developing this app!
hi... anyone knows an app like MySQL Manager for windows mobile 6.5? thanks...

"spy"-app without encryption

Hi guys,
i'm currently preparing a presentation for university (about mobile device security).
I would like to demonstrate how an app sends collected data (contacts, browser history, ...) to an remote server.
Like the Barcode Scanner.
Seeing the transmitted data (man in the middle) just works.
But my main problem is to find an app which sends the data not encrypted.
Do you know any?
I am not able to and do not want to spend a lot of time on decrypting the encryption.
Hope you can help.
thx! :good:
edit:
i am not talking about apps like mspy.
the app should seem to be usefull.
the mobile os should be android.
leAndroid91 said:
Hi guys,
i'm currently preparing a presentation for university (about mobile device security).
I would like to demonstrate how an app sends collected data (contacts, browser history, ...) to an remote server.
Like the Barcode Scanner.
Seeing the transmitted data (man in the middle) just works.
But my main problem is to find an app which sends the data not encrypted.
Do you know any?
I am not able to and do not want to spend a lot of time on decrypting the encryption.
Hope you can help.
thx! :good:
Click to expand...
Click to collapse
Good luck. No real Developer would send any info un-encrypted.
zelendel said:
Good luck. No real Developer would send any info un-encrypted.
Click to expand...
Click to collapse
yeah. i know that.
but i also guess that there are "crap-apps" in the market, probably with no or very weak enrcryption
leAndroid91 said:
yeah. i know that.
but i also guess that there are "crap-apps" in the market, probably with no or very weak enrcryption
Click to expand...
Click to collapse
Maybe but you will be hard pressed to find one that passes Googles requirments. If I remember right when I looked into building an app for sending data the SDK sets up the encryption for you so it is done for you to prevent info hi-jacking.
yep. looks like i have to write my own one

[Tool] Network Monitor

Hi All,
Would you like to know what app is using network in your phone? Would you like to know what address is the application connecting?
My friend wrote a tool named Network Monitor. The link is https://play.google.com/store/apps/details?id=com.jmm.networkmonitor Would you like to try?
The tool could help you below:
1. Monitor current data activity and uplink/downlink throughput.
2. Monitor external IP address.
3. List all package which using internet currently.
4. List all socket link including destination IP address and source IP address of per package.
5. Query where is the destination address of the link connection and show it in map.
It is a fun tool if you want to know what application using your internet connection background.
My friend welcome any comments and he could add function if it would helpful.
Thanks.
Would this be helpful in analyzing what kind of intranet traffic is causing high wlan_rx_wakelocks?
Useful tool.
Works good on my N7100.
Thank you.
much needed as many are taking up lots of data without knowingly.
thanks
Nice app. Keep up the good work :good:
I almost installed this as it looks to be very helpful, but.....then I reread the thread and the fact that you say "My friend" made this app and not you makes me very nervous....why isn't your friend posting this up?
The way I see it if this app was found to be stealing data or compromising networks who would we have to turn to? You? All you are going to say is "my friend did it not me".
No insult intended but have him\her post this themselves would be my request.
I mean dude....you have less than 20 posts. Not like you have been on here for years....or even a year.
As an IT professional with 46 companies relying on my judgement....I simply can't risk their security
The tool will let you know which application is using your network, even for intranet.
tylerdurden83 said:
Would this be helpful in analyzing what kind of intranet traffic is causing high wlan_rx_wakelocks?
Click to expand...
Click to collapse
I think your concern was reasonable.
I am the author and using my friend's account. Let me explain what was going on. I wrote the tool part time and shown to my friend. My friend said you should publish in google play. But as you know, it is hard to let more person know there is software named "network monitor". My friend said he has a xda account and could help me to post. I will apply a account or just use this account.
One thing I could guarantee, there isn't back door in the application. Thanks for everybody's reply, it encourages me to add more functions.
One function I am considering to add is WIFI control/diag function.
Thanks
nerdslogic said:
I almost installed this as it looks to be very helpful, but.....then I reread the thread and the fact that you say "My friend" made this app and not you makes me very nervous....why isn't your friend posting this up?
The way I see it if this app was found to be stealing data or compromising networks who would we have to turn to? You? All you are going to say is "my friend did it not me".
No insult intended but have him\her post this themselves would be my request.
I mean dude....you have less than 20 posts. Not like you have been on here for years....or even a year.
As an IT professional with 46 companies relying on my judgement....I simply can't risk their security
Click to expand...
Click to collapse
he_arslan said:
The tool will let you know which application is using your network, even for intranet.
Click to expand...
Click to collapse
So it won't I guess, I need to know analyze the broadcast packets originating from somewhere else on the intranet and waking up my device from deep sleep (wlan_rx_wakelocks).
You are correct. Currently the tool doesn't support packet analyze. It needs root right to capture the packet from network.
tylerdurden83 said:
So it won't I guess, I need to know analyze the broadcast packets originating from somewhere else on the intranet and waking up my device from deep sleep (wlan_rx_wakelocks).
Click to expand...
Click to collapse
One way to alleviate fears is to open source your code.
Sent from my Nexus 4 using Tapatalk
:good::good::good:
ph37rd said:
One way to alleviate fears is to open source your code.
Sent from my Nexus 4 using Tapatalk
Click to expand...
Click to collapse
nice app... would be nice if it also shows wi-fi TX/RX along with the total and mobile... I take it total is the combo of wi-fi and mobile?
Yes. Total TX/RX combines Wifi information.
The reason I didn't list wifi TX/RX is most person only care about mobile data and there is limited space to show information.
Maybe need to provide a way to configure the display items.
BTW, I have upgraded the software and added floating window and process view. Please enjoy it.

[App][5.0+] Blok -- A Simple Fast Firewall

A simple fast firewall. No root required.
Prevent apps from accessing the internet, save your data, and improve battery life.
Does that flashlight app really need internet access? No, Blok it.
Promo for XDA readers: Code released every hour for full version unlock
Didn't get a code? Submit a review on the play store, post here, and I'll send you one.
Available on Google Play
Thank you. I'll give it a try for sure, always looking for new firewall apps.
bond32 said:
Thank you. I'll give it a try for sure, always looking for new firewall apps.
Click to expand...
Click to collapse
Thanks, any feedback is appreciated.
Does it have a password for settings protection?
Jasmin74 said:
Does it have a password for settings protection?
Click to expand...
Click to collapse
It does not. Is this something people are interested in? What's the intended use case?
anonify said:
It does not. Is this something people are interested in? What's the intended use case?
Click to expand...
Click to collapse
Of course it's important if a tablet is being used by a parent & his kids! or other scenarios.
Looks simplistic, needs evaluation but I find it easy to configure as compared to much cluttered interface ofnetguard app which I use. Plz provide promo code. thanks in advance.
Jasmin74 said:
Of course it's important if a tablet is being used by a parent & his kids! or other scenarios.
Click to expand...
Click to collapse
I see. However, there's nothing stopping them from uninstalling the app, or clearing its data, or disabling the VPN permission, or many other ways to bypass such a password if they really wanted.
drshreenivaas said:
Plz provide promo code. thanks in advance.
Click to expand...
Click to collapse
Code sent via pm.

Adhell 3

So... Ads, ads and ads. Finally Adguard Premium has let me down on the "Ads Front." So I decided to download Android Studio, took forever to find sdk 23 (complete) but did, cloned Adhell 3 source into build and "POOF" out came a "app-debug.apk." (Adhell 3) Grabed knox license and all is well on my s5. Crazy cause MinMinGuard apparently is up to no good. Here is screen shot. No ads or redirects. just thought I would share my new ad-free experience with you.
Sent from my SM-G900V using Tapatalk 2
Another cool new feature of Adhell 3 is that you can disable specific apps from using mobile data. (a feature that I believe should be built-in stock android; LineageOS has it)
could you share the .apk sir? so we can edit package name via editor pro.
Could you link the host file?
Here's a guy who hosted it and the thread it was in here if it's not working let me know, I have it saved too
If anyone was wondering, the updated README.md on https://github.com/fusionjack/adhell3 says:
-# adhell3
+## Move to gitlab.com
+You know where to find and you need to be registered there.
Click to expand...
Click to collapse
Yanchev said:
Could you link the host file?
Click to expand...
Click to collapse
If i were you, i would register at gitlab to get latest source. for example, the block url address was changed so basically if the old url is in there, well, don't exhist anymore, no more block list, like empty host file. its not hard to build, he provides clear steps on his gitlab page.
Sent from my SM-G900V using Tapatalk 2
dhopack said:
could you share the .apk sir? so we can edit package name via editor pro.
Click to expand...
Click to collapse
even better, new SABS
https://github.com/GoldenKappa/notSABS
Sent from my SM-G900V using Tapatalk 2
Any way to get pre made apk? I would then change its name with APK Editor Pro and add my knox, or I need to do that when making the app with android studio?
mankvl said:
Any way to get pre made apk? I would then change its name with APK Editor Pro and add my knox, or I need to do that when making the app with android studio?
Click to expand...
Click to collapse
yes, obviously you did not try the link I provided.
go to the link that I posted. You have a choice to download either or as in compiled or not.
oh yeah, make sure to view the page in desktop version.
Sent from my SM-G900V using Tapatalk 2
1droidmod said:
yes, obviously you did not try the link I provided.
go to the link that I posted. You have a choice to download either or as in compiled or not.
oh yeah, make sure to view the page in desktop version.
Sent from my SM-G900V using Tapatalk 2
Click to expand...
Click to collapse
I'am using notSABS, all good, thanks. Just wanted to try Adhell 3
mankvl said:
I'am using notSABS, all good, thanks. Just wanted to try Adhell 3
Click to expand...
Click to collapse
SORRY!!
was assuming u were asking about notSABS, not adhell3.
2 b honest with you, notSABS is working better for me as adhell 3 force closes here and there, was pretty annoying.
Sent from my SM-G900V using Tapatalk 2
Any changes in 1.0.0 other than the rebirth?
Hello, could I ask if you know who is the official dev of Adhell3?
I would LOVE to see sub-service control for Google Play Services. The idea of hiding it is apparently to protect the users, but system services is exactly what needs to be controlled the most.
Could you please, pretty please, somehow release a version that also lists system apps when viewing service control? I am sick and tired of GPS drain and the way I could control that in Android 7 was by disabling a significant number of them (mostly analytic/datamining-related services, and some location services).
Alternatively, I might try to re-build the app with this modification myself, but I am nowhere near as good in java to do that yet. If the dev can see this - please give us more control. And THANK YOU for giving us any kind of sub-service and permission control at all. Nobody else did this for us since Oreo. THANKS!!
Bobzee said:
Hello, could I ask if you know who is the official dev of Adhell3?
I would LOVE to see sub-service control for Google Play Services. The idea of hiding it is apparently to protect the users, but system services is exactly what needs to be controlled the most.
Could you please, pretty please, somehow release a version that also lists system apps when viewing service control? I am sick and tired of GPS drain and the way I could control that in Android 7 was by disabling a significant number of them (mostly analytic/datamining-related services, and some location services).
Alternatively, I might try to re-build the app with this modification myself, but I am nowhere near as good in java to do that yet. If the dev can see this - please give us more control. And THANK YOU for giving us any kind of sub-service and permission control at all. Nobody else did this for us since Oreo. THANKS!!
Click to expand...
Click to collapse
Same name here as in Gitlab.
It's a simple change in Android Studio for what you're looking for if you build the app itself. It's just changing 1 line.
Too bad that adhell 3 doesn't have a Dark or Black mode - Was really easy to install & get it verified ?
I'm still using notSABS on of my devices & BK Manager on another - Not really sure if there's much (if any) difference between notSABS & adhell 3....? ?
Sent from my Galaxy S9+ using XDA Labs
I see quite a bit of misinformation in this and similar threads. Please keep in mind that AdHell3 is NOT supported on XDA. For official and up-to-date information about the AdHell3 project, please visit:
Main repo: https://gitlab.com/fusionjack/adhell3
Scripts for compiling: https://gitlab.com/fusionjack/adhell3-scripts
Get your EDU ELM key from: https://seap.samsung.com/license-keys/generate/edu
Official Support Discord Channel: https://discord.gg/hfreZum
Dependable(?) precompiled APKs: https://www.mediafire.com/folder/sb37c6gmhqgbn
Mike B. said:
I see quite a bit of misinformation in this and similar threads. Please keep in mind that AdHell3 is NOT supported on XDA. For official and up-to-date information about the AdHell3 project, please visit:
Main repo: https://gitlab.com/fusionjack/adhell3
Scripts for compiling: https://gitlab.com/fusionjack/adhell3-scripts
Get your EDU ELM key from: https://seap.samsung.com/license-keys/generate/edu
Official Support Discord Channel: https://discord.gg/hfreZum
Dependable(?) precompiled APKs: https://www.mediafire.com/folder/sb37c6gmhqgbn
Click to expand...
Click to collapse
Adhell3=Old News
I have been using adguard premium for months now and I would have to say it how much better application for blocking ads and unwanted spyware being tracked, etc.
EDIT:I'm only speaking on my personal experience I'm not trying to down talk adhell3 in anyway
Sent from my SM-G900V using Tapatalk 2
How can I remove blocks which I had before the key has expired?
1droidmod said:
Adhell3=Old News
I have been using adguard premium for months now and I would have to say it how much better application for blocking ads and unwanted spyware being tracked, etc.
EDIT:I'm only speaking on my personal experience I'm not trying to down talk adhell3 in anyway
Click to expand...
Click to collapse
Since Adhell3 is no longer under active development, it matters little, but they are two different animals. Adhell is/was merely a tool to configure the underlying Knox firewall and YOU decided what it should and should not block. While Adguard's DNS server is one of the suggested alternatives, the full Adguard app gives you only very limited choices and uses additional resources.
---------- Post added at 10:05 PM ---------- Previous post was at 10:04 PM ----------
Dragon31337 said:
How can I remove blocks which I had before the key has expired?
Click to expand...
Click to collapse
Simply uninstall Adhell and your Knox settings will revert to default.

Categories

Resources