Skip to content

Commit c4a116c

Browse files
committed
Merge branch 'develop' into msf_restyling
2 parents d77d7d5 + d394853 commit c4a116c

File tree

470 files changed

+5005
-4135
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

470 files changed

+5005
-4135
lines changed

README.md

Lines changed: 58 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -1,39 +1,73 @@
1-
cSploit - An Android network penetration suite.
2-
==============================
1+
# cSploit: Android network pentesting suite
32

4-
Copyleft Margaritelli of Simone aka evilsocket and then fused with zANTI2 continued by tux-mind.
3+
<img src="http://i.imgur.com/cFll5P9.jpg" width="250">
54

6-
- <http://www.csploit.org/>
5+
[cSploit](http://www.csploit.org) is an open source (GPLed) Android network analysis and penetration suite which aims to be
6+
**the most complete and advanced professional toolkit** for IT security experts/geeks to perform network security assessments on a mobile device.
7+
8+
See more at [www.cSploit.org](http://www.csploit.org).
9+
10+
## Features:
11+
12+
* Map your local network
13+
* Fingerprint hosts' operating systems and open ports
14+
* Add your own hosts outside the local network
15+
* Integrated traceroute
16+
* **Integrated [Metasploit](https://www.metasploit.com/) framework RPCd**
17+
* Search hosts for **known vulnerabilities** via integrated Metasploit daemon
18+
* Adjust exploit settings, launch, and create shell consoles on exploited systems
19+
* More coming
20+
* Forge tcp/udp packets
21+
* Perform man in the middle attacks (MITM) including:
22+
* Image, text, and video replacement-- replace your own content on unencrypted web pages
23+
* javascript injection-- add your own javascript to unencrypted web pages.
24+
* **password sniffing** ( with common protocols dissection )
25+
* Capture pcap network traffic files
26+
* Real time **traffic manipulation** to replace images/text/inject into web pages
27+
* DNS spoofing to redirect traffic to different domain
28+
* Break existing connections
29+
* Redirect traffic to another address
30+
* Session Hijacking-- listen for unencrypted cookies and clone them to take Web session
31+
32+
## Tutorials:
33+
34+
<img src="http://i.imgur.com/c0dxvXv.jpg" width=250>
35+
36+
* [Use cSploit to get root shell on Metasploitable2](https://github.com/cSploit/android/wiki/%5BTutorial%5D-Use-cSploit-to-get-root-shell-on-Metasploitable2)
37+
* [Use cSploit for simple Man-in-the-Middle (MITM security demos](https://github.com/cSploit/android/wiki/%5BTutorial%5D-Use-cSploit-for-simple-Man-In-The-Middle-(MITM)-security-demos)
738

8-
[![Click here to lend your support to: cSploit and make a donation at www.paypal.com](https://www.paypalobjects.com/en_GB/i/btn/btn_donate_LG.gif?skin_name=chrome)](https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=FTKXDCBEDMW9G&lc=GB&item_name=cSploit&currency_code=EUR&bn=PP%2dDonationsBF%3abtn_donate_LG%2egif%3aNonHosted)
939

10-
-------------
40+
Also see the [wiki](https://github.com/cSploit/android/wiki) for instructions on building, [reporting issues](https://github.com/cSploit/android/wiki/How-to-open-an-issue), and more.
1141

12-
cSploit is an Android network analysis and penetration suite which aims to offer to IT security experts/geeks
13-
**the most complete and advanced professional toolkit** to perform network security assesments on a mobile device.
42+
## Requirements
1443

15-
Once cSploit is started, you will be able to easily map your network, fingerprint alive hosts operating systems
16-
and running services, search for **known vulnerabilities**, crack logon procedures of many tcp protocols, perform
17-
man in the middle attacks such as **password sniffing** ( with common protocols dissection ), real time **traffic
18-
manipulation**, etc, etc .
44+
* A **ROOTED** device running Android 2.3 (Gingerbread) or newer
45+
* The device must have a BusyBox **full install**, this means with **every** utility installed ( not the partial installation ). If you do not have busybox already, you can get it [here](https://play.google.com/store/apps/details?id=stericson.busybox) or [here](https://play.google.com/store/apps/details?id=com.jrummy.busybox.installer) (note cSploit does not endorse any busybox installer. These are just two we found).
1946

20-
This application is still in **beta stage**, a stable release will be available as soon as possible, but expect
21-
some crash or strange behaviour until then, in any case, feel free to submit an issue here on GitHub.
47+
## Downloads
2248

23-
Requirements
24-
-------------
49+
The latest release and pre-release versions are available on github:
2550

26-
- An Android device with at least the 2.3 ( Gingerbread ) version of the OS.
27-
- The device **must be rooted**.
28-
- The device must have a BusyBox **full install**, this means with **every** utility installed ( not the partial installation ).
51+
https://github.com/cSploit/android/releases
2952

53+
Or to save a click, [this link](https://github.com/cSploit/android/releases/latest) should always point to the most recent release.
3054

31-
Disclaimer
32-
-------------
55+
Additionally, you can get a fresh-from-the-source nightly at [www.cSploit.org/downloads](http://www.csploit.org/downloads). These nightly builds are generated more frequently than the releases. And while they may have the very latest features, they may also have the latest bugs, so be careful running them!
3356

34-
This application is not to be used for any purposes other than to demonstrate its functions, and must only be used on networks for which you have permission to do so. Any other use is not the responsibility of the developer.In other words, don't be stupid, and don't direct angry people towards me.
57+
## How to contribute
3558

36-
License
37-
-------------
59+
All contributions are welcome, from code to documentation to graphics to design suggestions to bug reports. Please use github to its fullest-- contribute Pull Requests, contribute tutorials or other wiki content-- whatever you have to offer, we can use it!
60+
61+
## License
3862

3963
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
64+
65+
## Copyright
66+
67+
Copyleft Margaritelli of Simone aka evilsocket and then fused with zANTI2 continued by @tux-mind and additional contributors.
68+
69+
[![Click here to lend your support to: cSploit and make a donation at www.paypal.com](https://www.paypalobjects.com/en_GB/i/btn/btn_donate_LG.gif?skin_name=chrome)](https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=FTKXDCBEDMW9G&lc=GB&item_name=cSploit&currency_code=EUR&bn=PP%2dDonationsBF%3abtn_donate_LG%2egif%3aNonHosted)
70+
71+
## Disclaimer
72+
73+
***Note: cSploit is intended to be used for legal security purposes only, and you should only use it to protect networks/hosts you own or have permission to test. Any other use is not the responsibility of the developer(s). Be sure that you understand and are complying with the cSploit licenses and laws in your area. In other words, don't be stupid, don't be an asshole, and use this tool responsibly and legally.***

build.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ buildscript {
55
mavenCentral()
66
}
77
dependencies {
8-
classpath 'com.android.tools.build:gradle:1.3.1'
8+
classpath 'com.android.tools.build:gradle:1.4.0-beta6'
99
}
1010
}
1111

cSploit/.gitignore

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
obj
22
libs
33
dist
4-
src/main/jniLibs
54
*.so
65
*.jks
76
*.tar.*

cSploit/build.gradle

Lines changed: 7 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ buildscript {
44
mavenCentral()
55
}
66
dependencies {
7-
classpath 'com.android.tools.build:gradle:1.4.0-beta3'
7+
classpath 'com.android.tools.build:gradle:1.4.0-beta6'
88
}
99
}
1010

@@ -24,6 +24,7 @@ dependencies {
2424
compile 'com.android.support:support-v4:23.0.1'
2525
compile 'com.android.support:appcompat-v7:23.0.1'
2626
compile 'com.android.support:design:23.0.1'
27+
compile 'com.android.support:preference-v7:23.0.1'
2728
compile 'org.apache.commons:commons-compress:1.10'
2829
compile 'commons-net:commons-net:3.3'
2930
compile 'com.github.zafarkhaja:java-semver:0.9.0'
@@ -32,6 +33,7 @@ dependencies {
3233
compile 'com.googlecode.juniversalchardet:juniversalchardet:1.0.3'
3334
compile 'org.tukaani:xz:1.5'
3435
compile 'ch.acra:acra:4.6.2'
36+
testCompile 'junit:junit:4.12'
3537
}
3638

3739
android {
@@ -51,8 +53,8 @@ android {
5153
defaultConfig {
5254
minSdkVersion 9
5355
targetSdkVersion 22
54-
versionCode 1
55-
versionName "1.6.0-rc.2"
56+
versionCode 4
57+
versionName "1.7.0-unstable"
5658
if(System.getenv("NIGHTLY_BUILD")) {
5759
versionName += "+" + System.getenv("NIGHTLY_BUILD_COMMIT").substring(0, 7)
5860
}
@@ -86,29 +88,16 @@ android {
8688
debuggable true
8789
jniDebuggable true
8890
zipAlignEnabled true
91+
multiDexEnabled true
8992
}
9093
release {
9194
buildConfigField "java.util.Date", "BUILD_TIME", "new java.util.Date(" + getDate() + "L)"
9295
buildConfigField "String", "BUILD_NAME", "\"" + System.getenv("USER") + "\"";
9396
if (System.getenv("KEYSTORE_FILE") != null) {
9497
signingConfig signingConfigs.release
9598
}
99+
multiDexEnabled true
96100
return true
97101
}
98102
}
99-
100-
sourceSets {
101-
main {
102-
manifest.srcFile 'AndroidManifest.xml'
103-
java.srcDirs = ['src']
104-
resources.srcDirs = ['src']
105-
aidl.srcDirs = ['src']
106-
renderscript.srcDirs = ['src']
107-
res.srcDirs = ['res']
108-
assets.srcDirs = ['assets']
109-
jniLibs.srcDir 'src/org/csploit/android/jniLibs'
110-
}
111-
112-
instrumentTest.setRoot('tests')
113-
}
114103
}

cSploit/res/layout/dirpicker_chooser_list.xml

Lines changed: 0 additions & 22 deletions
This file was deleted.

cSploit/res/layout/plugin_exploit_finder.xml

Lines changed: 0 additions & 45 deletions
This file was deleted.

cSploit/res/layout/plugin_mitm_dns_spoofing.xml

Lines changed: 0 additions & 63 deletions
This file was deleted.

cSploit/res/layout/plugin_mitm_hijacker.xml

Lines changed: 0 additions & 61 deletions
This file was deleted.

0 commit comments

Comments
 (0)