nvssks / android-responder

Scripts for running Responder.py in an Android (rooted) device.

Intro

Scripts for running Responder.py in an Android (rooted) device.

Prerequisites

• Rooted android phone
• Installed NetHunter or qPython

Usage

git clone [email protected]:nvssks/Android-Responder.git
cd Android-Responder
git submodule update --init --recursive

Copy everything in Android - Responder needs to be in the same $DIR as the scripts

• Android with qPython:

~$ su -c sh $DIR/startTether.sh
~$ su -c sh $DIR/stopTether.sh

• Kali NetHunter:

~$ su -c bootkali
root@kali:/# bash $DIR/startTether.sh
root@kali:/# bash $DIR/stopTether.sh

Note: Due to some limitations on older Android environments, startTether.sh needs to be stoped with Ctrl+C before running stopTether.sh

Results

Video shows a Windows 10 lock screen (fresh install) connected to an Android device running Responder.py. Host laptop is not connected to any other network (wifi or ethernet)

Considerations

• For Android v4.X use /storage/emulated/0/[*] instead of /sdcard/[*] for $DIR

Credits

• @PythonResponder, https://github.com/lgandx/Responder
• @mubix, https://room362.com/post/2016/snagging-creds-from-locked-machines/
• @whitslack, http://forum.xda-developers.com/showthread.php?t=2127850
• Special thanks: @ikoz, @xtsop

android-responder's Issues

Hash Questions

Use Android-Responder way get target hash.

how to exploit ? this hash is not NTLM

RNDIS up procedure?

Hi, i am having some issues with my nethunter device.

For the attack to work do you follow some procedure to enable the rndis0 interface? For example do you enable the rndis option in the android developer menu?

Or rndis is enabled automatically when you execute startTether.sh?

When i execute startTether.sh the interface remains on usb0 on my device....

Thanks in advance...

Android 5.0 "error: only position independent executables (PIE) are supported."

PIE is a useful security feature, as randomizing the address space makes it significantly more difficult for an attacker to exploit bugs in a program.

I get this error after:

Starting Responder.py, Ctrl-C to exit