DSploit

DSploit

After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality.

The DSploit APK in the Play Store was not working for me, but the latest nightly on http://dsploit.net worked like a charm.

Most features require that you and your target uses the same WiFi network, and that's it. It can be Open, WEP, WPA/WPA2 Personal. On all of these networks, DSploit will sniff the passwords - because of the active attacks. E.g. a lot of email clients still use IMAP with clear text passwords, or some webmails, etc. 

First, DSploit lists the AP and the known devices on the network. In this case, I chose one victim client.

In the following submenu, there are tons of options, but the best features are in the MITM section. 

Stealthiness warning: in some cases, I received the following popup on the victim Windows:

This is what we have under the MITM submenu:

Password sniffing

For example, let's start with the Password Sniffer. It is the same as EvilAP and DSniff in my previous post. With the same results for the popular Hungarian webmail with the default secure login checkbox turned off. Don't forget, this is not an Open WiFi network, but one with WPA2 protection!

Session hijack

Now let's assume that the victim is very security-aware and he checks the secure login checkbox. Another cause can be that the victim already logged in, long before we started to attack. The session hijacking function is similar to the Firesheep tool, but it works with every website where the session cookies are sent in clear text, and there is no need for any additional support.

In a session hijacking attack (also called "sidejacking"), after the victim browser sends the authentication cookies in clear text, DSploit copies these cookies into its own browser, and opens the website with the same cookies, which results in successful login most of the time. Let's see session hijacking in action!

Here, we can see that the session cookies have been sniffed from the air:

Let's select that session, and be amazed that we logged into the user's webmail session.

Redirect traffic

This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.

Replace images, videos

I think this is just for fun here. Endless Rick Rolling possibilities.

Script injection

This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.

Custom filter

If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).

Additional fun (not in DSploit) - SSLStrip 

From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.

HTML source on the client-side without SSLstrip:

HTML source on the client-side with SSL strip:

With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.

Lessons learned here

If you are a website operator where you allow your users to login, always:

1. Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
2. Mark the session cookies with the secure flag
3. Use HSTS to prevent SSLStrip attacks

If you are a user:

1. Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
2. Use HTTPS everywhere plugin
3. For improved security, use VPN

Because hacking has never been so easy before.
And last but not least, if you like the DSploit project, don't forget to donate them!

More articles

1. Hacker Tools Github
2. Pentest Tools Free
3. New Hacker Tools
4. How To Hack
5. Growth Hacker Tools
6. Pentest Tools Alternative
7. Nsa Hacker Tools
8. Pentest Tools For Mac
9. Pentest Reporting Tools
10. Hacking Tools Download
11. Pentest Tools For Mac
12. Growth Hacker Tools
13. Hacker Tools For Windows
14. Pentest Tools For Ubuntu
15. Hackers Toolbox
16. Black Hat Hacker Tools
17. Hak5 Tools
18. How To Hack
19. Pentest Tools For Ubuntu
20. Hak5 Tools
21. Hacking Tools Usb
22. Hacker Tools Github
23. Underground Hacker Sites
24. Hacking Tools For Kali Linux
25. World No 1 Hacker Software
26. Hackers Toolbox
27. Hacking Tools Software
28. Hacks And Tools
29. Hacking Tools Windows 10
30. Hacker Security Tools
31. Bluetooth Hacking Tools Kali
32. How To Make Hacking Tools
33. Pentest Tools Android
34. Hacker Tools 2020
35. Install Pentest Tools Ubuntu
36. Hacking Tools And Software
37. Hacking Apps
38. Wifi Hacker Tools For Windows
39. Easy Hack Tools
40. Pentest Tools For Mac
41. Hack Tool Apk No Root
42. Hacking Tools For Pc
43. Hack Tools For Windows
44. Hacking Tools Free Download
45. Hacker Tools For Mac
46. Hack Tools Github
47. Hacking Tools Kit
48. Hacker Tools For Mac
49. Growth Hacker Tools
50. Hacks And Tools
51. Hack Rom Tools
52. What Are Hacking Tools
53. Hack Tools
54. Tools 4 Hack
55. Blackhat Hacker Tools
56. Hacker Techniques Tools And Incident Handling
57. Hacking Tools For Kali Linux
58. Hack Tools For Pc
59. Hacking Tools For Windows Free Download
60. Top Pentest Tools
61. Hack Tool Apk
62. Hacker Hardware Tools
63. Tools For Hacker
64. Pentest Tools Port Scanner
65. Hacker Tool Kit
66. Growth Hacker Tools
67. Pentest Tools Url Fuzzer
68. Pentest Tools Tcp Port Scanner
69. Hack Rom Tools
70. Install Pentest Tools Ubuntu
71. Beginner Hacker Tools
72. Hacking Tools 2019
73. Pentest Automation Tools
74. Hacker Tools For Ios
75. Pentest Tools Github
76. Hacker Techniques Tools And Incident Handling
77. Hack Tool Apk No Root
78. Hacker Tools Apk Download
79. Hack Tools Pc
80. Hacking Tools For Kali Linux
81. Hacking Apps
82. Hacking Apps
83. Pentest Automation Tools
84. Computer Hacker
85. Hacker Tools Linux
86. Hacking Tools For Pc
87. Pentest Tools Github
88. Hack Tools Online
89. Android Hack Tools Github
90. Hack Website Online Tool
91. Hack Tool Apk No Root
92. Termux Hacking Tools 2019
93. What Is Hacking Tools
94. Hack Tools For Games
95. Hack Tools 2019
96. Pentest Tools Github
97. Growth Hacker Tools
98. Hacker Tools Apk Download
99. Hack Tools Mac
100. Ethical Hacker Tools
101. Underground Hacker Sites
102. Hacking Tools For Pc
103. Hacker Tools Free
104. Hacker Tools For Mac
105. Hack Tools For Windows
106. Hacking Tools Kit
107. Hacking Tools Windows
108. Hacker Techniques Tools And Incident Handling
109. Hacking Tools For Pc
110. Pentest Tools Website Vulnerability
111. Hacking Tools Pc
112. Ethical Hacker Tools
113. Pentest Tools For Android
114. Hacker Tools List
115. What Are Hacking Tools
116. Pentest Tools Download
117. Hacking Tools And Software
118. New Hacker Tools
119. Hack Tool Apk
120. Hack Tools For Windows
121. Black Hat Hacker Tools
122. What Are Hacking Tools
123. Hack Website Online Tool
124. Pentest Tools Linux
125. Game Hacking
126. What Are Hacking Tools
127. Pentest Recon Tools
128. Pentest Box Tools Download
129. Pentest Tools Port Scanner
130. Hacker Tools For Pc