+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Mobile Smartphones (https://hackforums.net/forumdisplay.php?fid=79)
+----- Forum: Apple iOS (https://hackforums.net/forumdisplay.php?fid=137)
+----- Thread: [TUT] Capturing passwords with your Ipod Touch/Iphone (With pictures) (/showthread.php?tid=203956)
[TUT] Capturing passwords with your Ipod Touch/Iphone (With pictures) - madness303 - Dec 12, 2009
Hey guys.
I'm going to show you how to get passwords on any wireless network you are connected to by using your jailbroken ipod touch or iphone.
First, let me explain how it works:
Almost every wireless network operates from a router, which routes data from the internet to all the computers that are connected to it. It sends packets only to the computer that requests it. With the method i'm going to show you, we can recieve all network packets originally meant for the router. This means we can view sent and received data, including passwords, from anyone in the wireless network. This is called packet sniffing, and can also be done with a computer, but your iphone/ipod touch is portable, so you can do sniff packets anywhere, and not be noticed.
Ok, on to the actual tutorial.
we will need to download a few things first:
1:The latest ipod touch firmware (3.1.2):Firmware 3.1.2
2:Blackra1n: Blackra1n
3:Cain and abel: Cain & Abel (from official site)
4:Winscp: Winscp (official site)
And 3 other program which you need to download directly from your ipod.
first: jailbreaking
I will only show you how to jailbreak your ipod touch for now, if you want to jailbreak your iphone you should read through the posts on http://blog.iphone-dev.org/. The programs we'll be using will work on the iphone as well.
In itunes, go to the ipod touch menu and look for the 'restore' button. Click this button while holding shift and it will open a browser. Navigate to the firmware 3.1.2 you just downloaded and open it. Restoring will take a few minutes. When it's done restoring, exit itunes and open up Blackra1n. Press 'make it rain' to jailbreak and wait until it's completely done.
Second: installing programs on your ipod touch/iphone
On your jailbroken device, open Cydia. This is the program that is installed on any jailbroken device. In the search tab, search and download 3 things:
1: Pirni (the actual sniffing program), 2: Mobileterminal (where you run pirni) and 3: OpenSSH (To transfer the captured packets to you PC)
Once you have those three installed, you are ready to sniff.
Third: sniffing
On the ipod/iphone, connect to a wireless network you want to sniff on.
In the settings menu go to Wi-fi, to your chosen network, and then find the tab that shows your router number and write it down.
[img]http://img268.imageshack.us/img268/2711/img0013j.png[/img]
Now, open mobileterminal.
to start sniffing you have to logon first. in the terminal type: 'login' and return, then 'root' and return, then 'alpine' and return. root-alpine is the standard login for ipods and iphones. Now that you are logged in and have permission to use programs with the mobileterminal, start pirni.
type in this command: pirni -s "router address" -o "filename".pcap. fill in the number you just wrote down for "router adress" and name the file whatever you want for "filename" (don't forget to end with .pcap).
you should start to see the number of packets captured increase. This will be higher if it's a busy network than a network with only a few pc's connected.
[img]http://img130.imageshack.us/img130/5379/img0014d.png[/img]
Once you are done capturing files, swipe your thumb up and right in one movement in the terminal and the sniffing will stop. Now we will open the capture file with cain & abel and find passwords.
Fourth: Collecting passwords.
On your computer, open Winscp. It requires a ip adress and a username to logon. In the IP address bar, fill in the ip adress you see in the settings menu of you ipod (NOT router address, but IP address). The username is root and the password is alpine. leave the other as they are settings and connnect.
The file you captured earlier will be in the directory /private/var/root.
Drag the file to a place on you computer where you can find it, and now open Cain & Abel. In Cain & Abel Click the 'open' button on the top-left side and browse to your .pcap file. Now navigate to the sniffer tab, and then to 'passwords' on the bottom.
[img]http://img188.imageshack.us/img188/9862/capture2pa.jpg[/img]
If you sniffed long enough, you will see alot of http passwords, some ftp, pop3, telnet and some smtp passwords. A lot http passwords are not actual passwords, but just misinterpretations by cain and abel.
On a busy network i got a few passwords in an hour, but maybe you will be more lucky😎.
i hope this tutorial was helpful. If i made any mistakes (it IS my first tutorial), or if you get any errors, tell me and i'll help you. oh yeah +rep as well. Thanks!
* - South Park - Dec 12, 2009
Nice TUT for someone with 7 posts! Im sure many members will find this information helpful! Thanks!
* - Τrauma - Dec 12, 2009
Awesome, I oftenly hack with my touch 😝
Just change the open SSH pwd cause teh regular pwd is alpine and worms attack iphones with openssh and this pwd :D
* - Cyb3rh4xx - Dec 12, 2009
testing as we speak, if this works i will freakin love you! lol
iv been tryn 2 find some way to do this! Really really hope this works!
also id like to know if u could crack wep w/ the touch... gotta look into it! lolz
* - Τrauma - Dec 12, 2009
I'd use blackra1n to be honest, much faster & easier
* - ovidiu31 - Dec 12, 2009
super! i iwll try it soon maybe tomorrow i will give you guys news
* - South Park - Dec 13, 2009
(Dec 12, 2009 07:45 PM)_trauma Wrote: I'd use blackra1n to be honest, much faster & easier
Haha yeah!
Plus its the only jailbreak app that works for my 32GB iTouch 3rd generation!
* - madness303 - Dec 13, 2009
I meant to say Blackra1n, not redsn0w. Sorry if i confused you 😶
It's also impossible to crack wep with the ipod. The wireless card on the ipod would have to be put into monitor mode, wich can't be done yet, and if it could the cracking process would drain the battery of the ipod before you were done.
* - Limboland™ - Dec 13, 2009
it's very nice but old !!!!!!✌✌✌
* - insomaniacal - Dec 13, 2009
Hehe, I do this every time I walk into Barnes and Noble. I did this once when visiting a college campus as well, left my I-pod in my car, and came back a few hours later to reap the rewards.
* - The End Gamer - Dec 13, 2009
Awesome Tutorial madness303
Good Job For A Member That have 9 Posts
* - madness303 - Jan 2, 2010
Does anyone have feedback?
aka bump
* - madness303 - Feb 15, 2010
Question:
My ipod threads got a lot more views when they were in the hacking tutorials section. The only threads on this board are about jailbreaking your ipod touch and how to install ipas, which is in no way hacking. It just feels like the people on this board are not looking for the information in this or my other thread.
Can i or a mod move it to the hacking tutorials?
* - DZEAGLE - Feb 15, 2010
Great post ! It will help a lot of guys ! ;)
* - Pilopew - Feb 16, 2010
Before asking a mod to move your tut, you better remove you"+rep is appreciated" Its against forum rules. Otherwise, good tut. Gonna try it, who knows. Also, I thought wep could be cracked by using iWep?