Wednesday, 31 May 2023

DSploit

DSploit

After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality.

The DSploit APK in the Play Store was not working for me, but the latest nightly on http://dsploit.net worked like a charm.

Most features require that you and your target uses the same WiFi network, and that's it. It can be Open, WEP, WPA/WPA2 Personal. On all of these networks, DSploit will sniff the passwords - because of the active attacks. E.g. a lot of email clients still use IMAP with clear text passwords, or some webmails, etc. 

First, DSploit lists the AP and the known devices on the network. In this case, I chose one victim client.


In the following submenu, there are tons of options, but the best features are in the MITM section. 


Stealthiness warning: in some cases, I received the following popup on the victim Windows:


This is what we have under the MITM submenu:


Password sniffing

For example, let's start with the Password Sniffer. It is the same as EvilAP and DSniff in my previous post. With the same results for the popular Hungarian webmail with the default secure login checkbox turned off. Don't forget, this is not an Open WiFi network, but one with WPA2 protection!


Session hijack

Now let's assume that the victim is very security-aware and he checks the secure login checkbox. Another cause can be that the victim already logged in, long before we started to attack. The session hijacking function is similar to the Firesheep tool, but it works with every website where the session cookies are sent in clear text, and there is no need for any additional support.

In a session hijacking attack (also called "sidejacking"), after the victim browser sends the authentication cookies in clear text, DSploit copies these cookies into its own browser, and opens the website with the same cookies, which results in successful login most of the time. Let's see session hijacking in action!

Here, we can see that the session cookies have been sniffed from the air:


Let's select that session, and be amazed that we logged into the user's webmail session.




Redirect traffic

This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.


Replace images, videos

I think this is just for fun here. Endless Rick Rolling possibilities.


Script injection

This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.

Custom filter

If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).

Additional fun (not in DSploit) - SSLStrip 

From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.

HTML source on the client-side without SSLstrip:


HTML source on the client-side with SSL strip:


With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.

Lessons learned here

If you are a website operator where you allow your users to login, always:
  1. Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
  2. Mark the session cookies with the secure flag
  3. Use HSTS to prevent SSLStrip attacks
If you are a user:
  1. Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
  2. Use HTTPS everywhere plugin
  3. For improved security, use VPN
Because hacking has never been so easy before.
And last but not least, if you like the DSploit project, don't forget to donate them!

Read more


  1. Hack Tools For Games
  2. Pentest Tools Windows
  3. Hack Website Online Tool
  4. Kik Hack Tools
  5. Best Pentesting Tools 2018
  6. Best Pentesting Tools 2018
  7. Pentest Tools Subdomain
  8. Hacking App
  9. Pentest Tools Alternative
  10. Hacking Tools For Windows
  11. Hacking Tools Usb
  12. How To Make Hacking Tools
  13. Hacker Tools Free Download
  14. Hacker Tools Apk
  15. Hacking Tools Pc
  16. Best Hacking Tools 2019
  17. Hacking Tools 2020
  18. Best Pentesting Tools 2018
  19. Hacking Tools Download
  20. Pentest Tools For Android
  21. Top Pentest Tools
  22. Hack App
  23. Hacker Tools Apk
  24. Hacking Tools For Windows
  25. Bluetooth Hacking Tools Kali
  26. Pentest Tools Open Source
  27. Hack Tools
  28. Pentest Tools Find Subdomains
  29. Hack Tools For Mac
  30. Pentest Tools For Android
  31. Hacker Techniques Tools And Incident Handling
  32. Hacking Tools 2020
  33. Install Pentest Tools Ubuntu
  34. Hackrf Tools
  35. Hacking Tools Free Download
  36. Hacker Tools Mac
  37. Hacking Tools 2019
  38. Hacking Tools Windows 10
  39. Pentest Tools For Windows
  40. Pentest Tools Url Fuzzer
  41. Hackers Toolbox
  42. Pentest Tools Port Scanner
  43. Hacker Techniques Tools And Incident Handling
  44. Pentest Tools For Mac
  45. Hacking Tools For Windows 7
  46. Android Hack Tools Github
  47. Hacker Tools Windows
  48. Hacking Tools For Pc
  49. Pentest Tools Free
  50. Hacker Tools 2019
  51. Easy Hack Tools
  52. Pentest Tools Alternative
  53. Hacker Tools Linux
  54. Hacker Tools For Pc
  55. Kik Hack Tools
  56. New Hacker Tools
  57. Hacking Tools And Software
  58. Pentest Tools Kali Linux
  59. Physical Pentest Tools
  60. Pentest Tools Framework
  61. Hacking Tools
  62. Hack Rom Tools
  63. Hacking Tools For Beginners
  64. Termux Hacking Tools 2019
  65. Hack Tools For Mac
  66. Pentest Tools Url Fuzzer
  67. Pentest Tools Online
  68. Computer Hacker
  69. Pentest Recon Tools
  70. Pentest Tools Tcp Port Scanner
  71. Beginner Hacker Tools
  72. Pentest Tools For Windows
  73. Hacker Tools 2020
  74. Hacking Tools Pc
  75. Hacking Tools 2020
  76. Hacker Tools Hardware
  77. Hacking Tools Mac
  78. Android Hack Tools Github
  79. Hack Website Online Tool
  80. Hack Apps
  81. Hacking Tools Windows 10
  82. Hacking Tools For Pc
  83. Hacking App
  84. Pentest Tools Nmap
  85. Black Hat Hacker Tools
  86. Pentest Tools Online
  87. Hacking Tools Hardware
  88. Pentest Tools For Windows
  89. Hackrf Tools
  90. Hacking Tools For Kali Linux
  91. Hacking Apps
  92. Bluetooth Hacking Tools Kali
  93. Hacker Tools Hardware
  94. Hacker Tools Online
  95. Hacker Tools
  96. Pentest Tools Download
  97. Hacking Tools Usb
  98. Android Hack Tools Github
  99. Hacker Search Tools
  100. Hacker Tools Software
  101. Pentest Tools For Android
  102. Pentest Tools Bluekeep
  103. Best Pentesting Tools 2018
  104. Hacking Tools Github
  105. Pentest Tools Bluekeep
  106. Hacking Tools Name
  107. Bluetooth Hacking Tools Kali
  108. Pentest Tools
  109. Pentest Tools Open Source
  110. Pentest Tools Linux
  111. Hacker Tools Software
  112. Hacker Tools Free
  113. Wifi Hacker Tools For Windows
  114. Pentest Tools Kali Linux
  115. Hack Tools Pc
  116. Game Hacking
  117. Hacking Tools Windows
  118. Pentest Tools
  119. Hack Tools For Games
  120. Pentest Tools Subdomain
  121. Hack And Tools
  122. Pentest Tools For Mac
  123. Hacker Tools Github
  124. Hacker Tools For Ios
  125. Hacker Tools 2019
  126. Hack Tools For Mac
  127. Pentest Tools Linux
  128. Pentest Tools For Mac
  129. Hacker Tools Github
  130. Hack Rom Tools

No comments:

Post a Comment