EvilZone

Hacking and Security => Mobile Hacking => Android => Topic started by: Stackprotector on June 06, 2011, 12:04:04 PM

Title: Faceniff
Post by: Stackprotector on June 06, 2011, 12:04:04 PM
http://faceniff.ponury.net/ (http://faceniff.ponury.net/)

FaceNiff is an Android app that allows you to sniff and intercept web session profiles over the WiFi that your mobile is connected to.
 It is possible to hijack sessions only when WiFi is not using EAP, but it should work over any private networks (Open/WEP/WPA-PSK/WPA2-PSK)
 It's kind of like Firesheep for android. Maybe a bit easier to use (and it works on WPA2!).
 
 *** ROOTED PHONE *** is required. Please note that if webuser uses SSL this application won't work.
This application due to its nature is very phone-dependant so please let me know if it won't work for You
Title: Re: Faceniff
Post by: Kulverstukas on June 06, 2011, 04:20:05 PM
AWESOME! wish I could try :( don't have a rooted phone.
Title: Re: Faceniff
Post by: Stackprotector on June 06, 2011, 09:40:35 PM
its a bat ass app.
But its good that it exist, so people can take counter measures.
Title: Re: Faceniff
Post by: hacker@sr.gov.yu on June 07, 2011, 12:35:19 AM
its a bat ass app.
But its good that it exist, so people can take counter measures.
turning ssl always on is one of them.
Title: Re: Faceniff
Post by: Stackprotector on June 07, 2011, 03:26:32 AM
turning ssl always on is one of them.
Yes, tough there are some apps on facebook who still lack https support.
But facebook is setting a deadline for facebook app devs, so everything is https.
Title: Re: Faceniff
Post by: starscream on November 21, 2011, 01:13:18 PM
There is doridsheep which is there in andorid market which does the same and support almost all sites but the phone need to rooted and busybox need to be installed
Title: Re: Faceniff
Post by: hacker@sr.gov.yu on November 21, 2011, 05:47:15 PM
There is doridsheep which is there in andorid market which does the same and support almost all sites but the phone need to rooted and busybox need to be installed
It works without busybox on my phone :)
Title: Re: Faceniff
Post by: Stackprotector on November 29, 2011, 10:53:20 AM
There is doridsheep which is there in andorid market which does the same and support almost all sites but the phone need to rooted and busybox need to be installed
Can't find you,   mind sharing the apk?
Title: Re: Faceniff
Post by: FuyuKitsune on November 29, 2011, 01:08:50 PM
Droidsheep can be downloaded here. Apparently it was removed from the market
http://droidsheep.de/?page_id=23
Title: Re: Faceniff
Post by: Stackprotector on November 30, 2011, 01:38:51 PM
That looks very good, better than faceniff :D, thanks for sharing