DSploit

DSploit

After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality.

The DSploit APK in the Play Store was not working for me, but the latest nightly on http://dsploit.net worked like a charm.

Most features require that you and your target uses the same WiFi network, and that's it. It can be Open, WEP, WPA/WPA2 Personal. On all of these networks, DSploit will sniff the passwords - because of the active attacks. E.g. a lot of email clients still use IMAP with clear text passwords, or some webmails, etc. 

First, DSploit lists the AP and the known devices on the network. In this case, I chose one victim client.

In the following submenu, there are tons of options, but the best features are in the MITM section. 

Stealthiness warning: in some cases, I received the following popup on the victim Windows:

This is what we have under the MITM submenu:

Password sniffing

For example, let's start with the Password Sniffer. It is the same as EvilAP and DSniff in my previous post. With the same results for the popular Hungarian webmail with the default secure login checkbox turned off. Don't forget, this is not an Open WiFi network, but one with WPA2 protection!

Session hijack

Now let's assume that the victim is very security-aware and he checks the secure login checkbox. Another cause can be that the victim already logged in, long before we started to attack. The session hijacking function is similar to the Firesheep tool, but it works with every website where the session cookies are sent in clear text, and there is no need for any additional support.

In a session hijacking attack (also called "sidejacking"), after the victim browser sends the authentication cookies in clear text, DSploit copies these cookies into its own browser, and opens the website with the same cookies, which results in successful login most of the time. Let's see session hijacking in action!

Here, we can see that the session cookies have been sniffed from the air:

Let's select that session, and be amazed that we logged into the user's webmail session.

Redirect traffic

This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.

Replace images, videos

I think this is just for fun here. Endless Rick Rolling possibilities.

Script injection

This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.

Custom filter

If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).

Additional fun (not in DSploit) - SSLStrip 

From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.

HTML source on the client-side without SSLstrip:

HTML source on the client-side with SSL strip:

With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.

Lessons learned here

If you are a website operator where you allow your users to login, always:

1. Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
2. Mark the session cookies with the secure flag
3. Use HSTS to prevent SSLStrip attacks

If you are a user:

1. Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
2. Use HTTPS everywhere plugin
3. For improved security, use VPN

Because hacking has never been so easy before.
And last but not least, if you like the DSploit project, don't forget to donate them!

Related word

1. Hacker
2. Pentest Tools For Mac
3. Hack App
4. Pentest Tools Android
5. Install Pentest Tools Ubuntu
6. Pentest Tools Kali Linux
7. Pentest Box Tools Download
8. How To Make Hacking Tools
9. Hacking Tools Software
10. Easy Hack Tools
11. Nsa Hack Tools Download
12. Hacker Search Tools
13. Pentest Tools Apk
14. Hacker Security Tools
15. Pentest Tools Bluekeep
16. Pentest Tools Windows
17. Hack Tools For Mac
18. Hack Tool Apk No Root
19. Best Pentesting Tools 2018
20. Hack Tools For Mac
21. Hacking Tools For Games
22. Hack Rom Tools
23. Hacker Tools Linux
24. Hacking Tools Hardware
25. Pentest Tools Open Source
26. Pentest Tools Apk
27. Hacker Tools Apk Download
28. Hack Tools 2019
29. Pentest Automation Tools
30. Pentest Tools Url Fuzzer
31. Hack Tool Apk No Root
32. Pentest Tools Port Scanner
33. Hacker Techniques Tools And Incident Handling
34. Hackrf Tools
35. Hack Tools For Ubuntu
36. Hack Tools Download
37. Pentest Tools Port Scanner
38. Hacker Tools Free
39. Hacks And Tools
40. Hack Tools Mac
41. Pentest Tools For Mac
42. Hacking Tools Windows
43. Pentest Tools Open Source
44. Hack Tools 2019
45. Tools For Hacker
46. Nsa Hack Tools
47. Pentest Tools Nmap
48. Pentest Tools Open Source
49. Hack Tools For Mac
50. Hacking Tools For Pc
51. Hack Tools For Windows
52. Hack Tools
53. Hacking Tools For Windows
54. Hacker Tools Mac
55. Tools 4 Hack
56. Pentest Tools For Windows
57. Hacker Tools For Ios
58. Hack Tools Mac
59. Pentest Tools Download
60. Nsa Hack Tools Download
61. Hacking Tools For Mac
62. Hacking Tools And Software
63. Hacker Search Tools
64. Hacking Tools Usb
65. Free Pentest Tools For Windows
66. Usb Pentest Tools
67. Ethical Hacker Tools
68. Hack Tools Download
69. Hacking Tools 2020
70. Pentest Tools Online
71. Tools 4 Hack