Android App Intercept images from a network (Public wifi, Intranet, etc)

[I2rys Reborn]

Huhu

You do not have permission to view the full content of this post. Log in or register now.

 

[AIronpol25]

paano mangyayari kung san ka nagconnect?

 

[ceejayramos]

MitM attack?

 

[-Stellar]

new account mo 'to?

 

[ceejayramos]

If it is indeed an MitM attack, then it is only possible if the public WiFi is not "isolated" or not on a separate VLAN, otherwise, you may not be successful with an MitM attack since the network you're connected to do not have communication with the other devices connected to the same network.

 

[I2rys Reborn]

new account mo 'to?

Yes beh miss muna ba ako? Haahaha

 

[Yuki Yoshikawa]

welcome back ts

 

[-Stellar]

Yes beh miss muna ba ako? Haahaha

yes. sobrang na miss ko mga tutorials mo.

 

[xzbit_21]

Thank you

 

[DataDynamo]

Kaya ba to sa hotspot? Hahahaha just asking mga boss

 

[chocobanna08]

Pa tryy

 

[iSpark]

look like im getting a laptop sooner or later.hahaha..Thanks ts. Keep sharing

 

[BISUCIT837377373]

For rooted device ba to? Or pwede rin sya sa non-rooted as long as my kali linux nethunter yung phone

 

[the1121789]

di po advisable arp poisoning (these days), for education purpose only!

bad opsec po yan sa mga amateur.
mapupunta sa badness enumeration ang inyong device, yung apple devices may mitigations dito (protection frames, and automatic static arp entry/immunity) pero makikita nila (apple company) at matatandaan nila mga device na ginamit pang häçk, tapos kung may paymet apps ka pwedeng maalala or matugma nila ito (metadata, credit profiling).

kung pc naman kahit palitan/spoof mo pa ang mac naanounce padin ang ating original mac, tapos lilitaw yan sa ipv6 mac leakage which leads to detection again. bukod pa doon identified nadin ang inyong device at user location as per Exposure Notification. kung harmless naman or learning purpose on your own network goods pero sa mga nagbabalak outside, keep that in mind. ang mitigation dito is static arp entry pero need ito ng root sa ibang phone or set by manufacturer (sa ibang android) pero default mitigated by iphones/macs. Apple devs are aware of this issue kaya ginawaan nila ng auto static arp, randomized/auto-change mac upon detection, atbp. kasi flaw na LAN protocol ang arp attacks.

just like port scanning, ingat lang po kayo sa paggamit ng mga tools sa panahon ngayon. dahil minsan pag nag port scan (kahit di naman mahigpit dati) may chance na iblock ka na ng cloudflare pag napunta sa dnsbl/abuseipdb lalo sa mga naka static IP, same din yan sa wifi/local networks, may list din ng mga abusong mac address/devices pero di ganon kahigpit (kasi they assume your device may be tunneling the attacker).

so far. goods naman yung info ni TS, sharing is caring. sometimes we learn from mistakes and experiences, that's the häçker way.

 

[crinto15]

salamat dito bossing

di po advisable arp poisoning (these days), for education purpose only!

bad opsec po yan sa mga amateur.
mapupunta sa badness enumeration ang inyong device, yung apple devices may mitigations dito (protection frames, and automatic static arp entry/immunity) pero makikita nila (apple company) at matatandaan nila mga device na ginamit pang häçk, tapos kung may paymet apps ka pwedeng maalala or matugma nila ito (metadata, credit profiling).

kung pc naman kahit palitan/spoof mo pa ang mac naanounce padin ang ating original mac, tapos lilitaw yan sa ipv6 mac leakage which leads to detection again. bukod pa doon identified nadin ang inyong device at user location as per Exposure Notification. kung harmless naman or learning purpose on your own network goods pero sa mga nagbabalak outside, keep that in mind. ang mitigation dito is static arp entry pero need ito ng root sa ibang phone or set by manufacturer (sa ibang android) pero default mitigated by iphones/macs. Apple devs are aware of this issue kaya ginawaan nila ng auto static arp, randomized/auto-change mac upon detection, atbp. kasi flaw na LAN protocol ang arp attacks.

just like port scanning, ingat lang po kayo sa paggamit ng mga tools sa panahon ngayon. dahil minsan pag nag port scan (kahit di naman mahigpit dati) may chance na iblock ka na ng cloudflare pag napunta sa dnsbl/abuseipdb lalo sa mga naka static IP, same din yan sa wifi/local networks, may list din ng mga abusong mac address/devices pero di ganon kahigpit (kasi they assume your device may be tunneling the attacker).

so far. goods naman yung info ni TS, sharing is caring. sometimes we learn from mistakes and experiences, that's the häçker

 

[wendski]

Panu paganahin to sa phone?

 

[BaBy AnDrEA]

di po advisable arp poisoning (these days), for education purpose only!

bad opsec po yan sa mga amateur.
mapupunta sa badness enumeration ang inyong device, yung apple devices may mitigations dito (protection frames, and automatic static arp entry/immunity) pero makikita nila (apple company) at matatandaan nila mga device na ginamit pang häçk, tapos kung may paymet apps ka pwedeng maalala or matugma nila ito (metadata, credit profiling).

kung pc naman kahit palitan/spoof mo pa ang mac naanounce padin ang ating original mac, tapos lilitaw yan sa ipv6 mac leakage which leads to detection again. bukod pa doon identified nadin ang inyong device at user location as per Exposure Notification. kung harmless naman or learning purpose on your own network goods pero sa mga nagbabalak outside, keep that in mind. ang mitigation dito is static arp entry pero need ito ng root sa ibang phone or set by manufacturer (sa ibang android) pero default mitigated by iphones/macs. Apple devs are aware of this issue kaya ginawaan nila ng auto static arp, randomized/auto-change mac upon detection, atbp. kasi flaw na LAN protocol ang arp attacks.

just like port scanning, ingat lang po kayo sa paggamit ng mga tools sa panahon ngayon. dahil minsan pag nag port scan (kahit di naman mahigpit dati) may chance na iblock ka na ng cloudflare pag napunta sa dnsbl/abuseipdb lalo sa mga naka static IP, same din yan sa wifi/local networks, may list din ng mga abusong mac address/devices pero di ganon kahigpit (kasi they assume your device may be tunneling the attacker).

so far. goods naman yung info ni TS, sharing is caring. sometimes we learn from mistakes and experiences, that's the häçker way.

yown oh more knowledge thanks

 

[3PaBuLong2]

Thanks paps keep sharing

di po advisable arp poisoning (these days), for education purpose only!

bad opsec po yan sa mga amateur.
mapupunta sa badness enumeration ang inyong device, yung apple devices may mitigations dito (protection frames, and automatic static arp entry/immunity) pero makikita nila (apple company) at matatandaan nila mga device na ginamit pang häçk, tapos kung may paymet apps ka pwedeng maalala or matugma nila ito (metadata, credit profiling).

kung pc naman kahit palitan/spoof mo pa ang mac naanounce padin ang ating original mac, tapos lilitaw yan sa ipv6 mac leakage which leads to detection again. bukod pa doon identified nadin ang inyong device at user location as per Exposure Notification. kung harmless naman or learning purpose on your own network goods pero sa mga nagbabalak outside, keep that in mind. ang mitigation dito is static arp entry pero need ito ng root sa ibang phone or set by manufacturer (sa ibang android) pero default mitigated by iphones/macs. Apple devs are aware of this issue kaya ginawaan nila ng auto static arp, randomized/auto-change mac upon detection, atbp. kasi flaw na LAN protocol ang arp attacks.

just like port scanning, ingat lang po kayo sa paggamit ng mga tools sa panahon ngayon. dahil minsan pag nag port scan (kahit di naman mahigpit dati) may chance na iblock ka na ng cloudflare pag napunta sa dnsbl/abuseipdb lalo sa mga naka static IP, same din yan sa wifi/local networks, may list din ng mga abusong mac address/devices pero di ganon kahigpit (kasi they assume your device may be tunneling the attacker).

so far. goods naman yung info ni TS, sharing is caring. sometimes we learn from mistakes and experiences, that's the häçker way.

 

[phforce32]

Thanks po

Sana ma estab na ako

 

[PLDT Company]

welcome back!