Ideas

[ETeissonniere]

Hello guys, I opened that issue so you will be able to share some ideas concerning cSploit.
Here is mine (working on it if @tux-mind thinks it clan be good):

• bluetooth hacking
• geo traceroute
• social engineering menu
  ... And a lot more

[Rubenoo]

Dayum if that could be in csploit. ... dayum

[tajnymag]

• wifi cracking using USB card (workaround for any driver issue)
• on-device compiling of the newest cSploit code
• Router Keygen integration (the same range of supported routers)
• quick test for default credentials used in selected router's administration page
• automatic reporting of crashes and errors (combined with some simple on-server averiging)
• slightly more material design, colored navbar and staturbar, maybe use of a side-panel
• tabbed interface -> multiple attacks/scans at once

[ETeissonniere]

I can enable wifi cracking but it will need a patched android kernel..
To compile you can use the AIDE app.
I do not know what dayum is
Le 4 sept. 2015 17:26, "Tajnymag" notifications@github.com a écrit :

• wifi cracking using USB card (workaround for any driver issue)
• on-device compiling of the newest cSploit code
• Router Keygen integration (the same range of supported routers)
• quick test for default credentials used in selected router's
  administration page
• automatic reporting of crashes and errors (combined with some simple
  on-server averiging)

—
Reply to this email directly or view it on GitHub
#229 (comment).

[DomenlDruga]

By patching the android kernel you mean the mac80211 injection patch? Because Kali NetHunter has a guide on doing just that, so that everyone can patch and configure their own kernels.
Integration wit Router Keygen seems kind of pointless, as modern devices have enough resources to switch between two apps. Some automation could be implemented, but will only cause issues in the long run.
The default credentials and tabbed interface would be very usefull.
"Dayum" is the over-pronounciation of "Damn".

[ETeissonniere]

@DomenlDruga, yeah, I was speaking about that patch, then thanks for the
translation 😄
Le 5 sept. 2015 10:13, "DomenlDruga" notifications@github.com a écrit :

By patching the android kernel you mean the mac80211 injection patch?
Because Kali NetHunter has a guide
https://github.com/offensive-security/kali-nethunter/wiki/Modifying-the-Kernel
on doing just that, so that everyone can patch and configure their own
kernels.
Integration wit Router Keygen seems kind of pointless, as modern devices
have enough resources to switch between two apps. Some automation could be
implemented, but will only cause issues in the long run.
The default credentials and tabbed interface would be very usefull.
"Dayum" is the over-pronounciation of "Damn".

—
Reply to this email directly or view it on GitHub
#229 (comment).

[MuradMathematics]

Metasploit Extra Console for Testing MSF Features, that arent currently included in the app. This could help to use exploits before they are even implented, and would help in research to make csploit features bigger.

But this is just optional. The main thing I want to get with this is: More features

Of course.

[gustavo-iniguez-goya]

Hi,

• I´d like to have a complete suite for domain/subdomain analysis/discovery. Using dnsmap, dnsenum, fierce, whois, google (well, search.disconnect.me), etc... I think it would be easy to implement.
• dns spoofing using ettercap: I have it already implemented and working.

Anyway, I´m not sure if it happens only on my mobile (htc bravo 4.4.4), but there are a lot of problems with the latest apk/sources.

For name a few:

• login cracker not working (hydra segfault). This binary works fine: http://forum.xda-developers.com/showthread.php?t=2064605 but someone should compile the binary from the sources.
• passwordSniffer not intercepting SSL traffic (disabled by code: I´ve enabled it but the HTTPSredirector throws several SSLException when intercepting connections). Does anyone know why is it disabled? We could just use the ettercap plugin sslstrip, but it throws and error complaining about a cookie regex.
• network subnet does not always appear on the network list
• if when stopping the sniffer it exits with signal 11, cSploit displays an error and exits. I think it should not exit from cSploit, since the sniffer has already died and you can launch it again.

Has anyone seen these problems? I think I could fix some of them.

[ETeissonniere]

@ga, I think we could try something like an OSINT tool.
Now some news: I found android pcap, an app which allow you to have a
kismet like tool with an external wifi card (without root), I will try to
use the sources for wifi cracking functionnality
Le 8 sept. 2015 12:04, "ga" notifications@github.com a écrit :

Hi,

• I´d like to have a complete suite for domain/subdomain
  analysis/discovery. Using dnsmap, dnsenum, fierce, whois, google (well,
  search.disconnect.me), etc... I think it would be easy to implement.
• dns spoofing using ettercap: I have it already implemented and
  working.

Anyway, I´m not sure if it happens only on my mobile (htc bravo 4.4.4),
but there are a lot of problems with the latest apk/sources.

For name a few:

• login cracker not working (hydra segfault). This binary works fine:
  http://forum.xda-developers.com/showthread.php?t=2064605 but someone
  should compile the binary from the sources.
• passwordSniffer not intercepting SSL traffic (disabled by code: I´ve
  enabled it but the HTTPSredirector throws several SSLException when
  intercepting connections). Does anyone know why is it disabled? We could
  just use the ettercap plugin sslstrip, but it throws and error complaining
  about a cookie regex.
• network subnet does not always appear on the network list
• if when stopping the sniffer it exits with signal 11, cSploit
  displays an error and exits. I think it should not exit from cSploit, since
  the sniffer has already died and you can launch it again.

Has anyone seen these problems? I think I could fix some of them.

—
Reply to this email directly or view it on GitHub
#229 (comment).

[fat-tire]

Funny you should mention android-pcap. I was just playing with it yesterday, got it building w/gradle + the new tools in Android Studio. FWIW, the play store listing says that it's GPL, but I didn't see a notice about what version in the actual source code.

Anyway, right now it only supports a few usb network adapters specifically the rtl8187 card. More specifically:

• Alfa AWUS036H, LevelOne WNC-0301USB v5, LevelOne WNC-0305USB (0x0bda:0x8187)
• AirLive WL-1600USB (0x1b75:0x8187)
• NETGEAR WG111v2 (0x0846:0x6a00)
• NETGEAR WG111v3 (0x0846:0x4260)

Unfortunately I don't have one of these :/ But anyway, to build with android studio and the newest SDK, you just need to change a few things:

1. in src/net/kismetwireless/android/pcapcapture/PcapService.java use a NotificationCompat.Builder instead of the deprecated notification.setLatestEventInfo().
2. use this build.gradle. I cleaned it up (took out signingConfigs section just because I didn't have a key to point to) slightly from what I was using to build, but it should work w/o much effort.
3. remove libs/android-support-v4.jar
4. remove the versionCode/versionName and uses-sdk lines in AndroidManifest.xml

It would be nice to see support for other chipsets in there, but would have to create more UsbSource.java-type classes for each one, and they're not small. But I haven't looked into it or more than 3 minutes.

If anyone can get Kismet Wireless to post which version of the GPL this uses, that would be great. Their other tools, particularly the cloudshark uploader, look interesting too.

ft

[ETeissonniere]

@Fattire thanks, will have a look.
@tux-mind I will start working on all of that if you agree.
Le 8 sept. 2015 17:47, "Fattire" notifications@github.com a écrit :

Funny you should mention android-pcap
https://kismetwireless.net/gitweb/?p=android-pcap.git;a=summary. I was
just playing with it yesterday, got it building w/gradle + the new tools in
Android Studio. FWIW, the play store listing
https://play.google.com/store/apps/details?id=net.kismetwireless.android.pcapcapture
says that it's GPL, but I didn't see a notice about what version in the
actual source code.

Anyway, right now it only supports a few usb network adapters
https://kismetwireless.net/gitweb/?p=android-pcap.git;a=blob;f=src/net/kismetwireless/android/pcapcapture/Rtl8187Card.java;h=b8e1a44bb3a32376876ae1ff169634d1355ad568;hb=HEAD
specifically the rtl8187 card. More specifically:

• Alfa AWUS036H, LevelOne WNC-0301USB v5, LevelOne WNC-0305USB
  (0x0bda:0x8187)
• AirLive WL-1600USB (0x1b75:0x8187)
• NETGEAR WG111v2 (0x0846:0x6a00)
• NETGEAR WG111v3 (0x0846:0x4260)

Unfortunately I don't have one of these :/ But anyway, to build with
android studio and the newest SDK, you just need to change a few things:

in src/net/kismetwireless/android/pcapcapture/PcapService.java
https://kismetwireless.net/gitweb/?p=android-pcap.git;a=blob;f=src/net/kismetwireless/android/pcapcapture/PcapService.java;h=9416200b7a087c4422587e1e21489152ca8a6ce8;hb=HEAD
use a NotificationCompat.Builder instead of the deprecated
notification.setLatestEventInfo().
2.

use this build.gradle
https://gist.github.com/fat-tire/8f2546e623e019c7513d. I cleaned it
up (took out signingConfigs section just because I didn't have a key to
point to) slightly from what I was using to build, but it should work w/o
much effort.
3.

remove libs/android-support-v4.jar
4.

remove the versionCode/versionName and uses-sdk lines in
AndroidManifest.xml

It would be nice to see support for other chipsets in there, but would
have to create more UsbSource.java-type classes for each one, and they're
not small. But I haven't looked into it or more than 3 minutes.

If anyone can get Kismet Wireless to post which version of the GPL this
uses, that would be great. Their other tools
https://play.google.com/store/apps/developer?id=Kismet+Wireless,
particularly the cloudshark uploader, look interesting too.

ft

—
Reply to this email directly or view it on GitHub
#229 (comment).

[sorano]

My idea is to have cSploit able to run also on a LAN interface.
For example on my nethunter pad I have USB OTG cable connected to an USB LAN interface. Currently I can only use csploit with WLAN.

[onelouder6]

Is it possible to implement a WPA2-PSK hash sniffer?
The script would forcefully disconnect clients and then monitor the traffic for the handshake (which can later be cracked using PC). Thoughts ?

[ETeissonniere]

I might try...
For the moment, I am trying to add wifi external cards functionnality, and
optimize the app.
Le 10 sept. 2015 18:49, "NoBody112" notifications@github.com a écrit :

Is it possible to implement a WPA2-PSK hash sniffer?
The script would forcefully disconnect clients and then monitor the
traffic for the handshake (which can later be cracked using PC). Thoughts ?

—
Reply to this email directly or view it on GitHub
#229 (comment).

[gustavo-iniguez-goya]

@sorano, would you mind to add a new issue with your suggestion? I've got a patch which allows you to select a configured network interface, in case of no wireless interface available. I've tested it with just the mobile gms interface, and works fine.

Right now cSploit relies a lot on the wireless dhcp information to work properly, so for example, if you configure the mobile to work as hostspot, the dhcp information is not available and we can not use cSploit. From the command line ettercap works perfectly on this case.

[sorano]

@gainan Done. #240

I love the idea of running cSploit on the GSM interface.