Hey guys.
I'm going to show you how to get passwords on any wireless network you are connected to by using your jailbroken ipod touch or iphone.
First, let me explain how it works:
Almost every wireless network operates from a router, which routes data from the internet to all the computers that are connected to it. It sends packets only to the computer that requests it. With the method i'm going to show you, we can recieve all network packets originally meant for the router. This means we can view sent and received data, including passwords, from anyone in the wireless network. This is called packet sniffing, and can also be done with a computer, but your iphone/ipod touch is portable, so you can do sniff packets anywhere, and not be noticed.
Ok, on to the actual tutorial.
we will need to download a few things first:
1:The latest ipod touch firmware (3.1.2):Firmware 3.1.2
2:Blackra1n: Blackra1n
3:Cain and abel: Cain & Abel (from official site)
4:Winscp: Winscp (official site)
And 3 other program which you need to download directly from your ipod.
first: jailbreaking
I will only show you how to jailbreak your ipod touch for now, if you want to jailbreak your iphone you should read through the posts on http://blog.iphone-dev.org/. The programs we'll be using will work on the iphone as well.
In itunes, go to the ipod touch menu and look for the 'restore' button. Click this button while holding shift and it will open a browser. Navigate to the firmware 3.1.2 you just downloaded and open it. Restoring will take a few minutes. When it's done restoring, exit itunes and open up Blackra1n. Press 'make it rain' to jailbreak and wait until it's completely done.
Second: installing programs on your ipod touch/iphone
On your jailbroken device, open Cydia. This is the program that is installed on any jailbroken device. In the search tab, search and download 3 things:
1: Pirni (the actual sniffing program), 2: Mobileterminal (where you run pirni) and 3: OpenSSH (To transfer the captured packets to you PC)
Once you have those three installed, you are ready to sniff.
Third: sniffing
On the ipod/iphone, connect to a wireless network you want to sniff on.
In the settings menu go to Wi-fi, to your chosen network, and then find the tab that shows your router number and write it down.
[img]http://img268.imageshack.us/img268/2711/img0013j.png[/img]
Now, open mobileterminal.
to start sniffing you have to logon first. in the terminal type: 'login' and return, then 'root' and return, then 'alpine' and return. root-alpine is the standard login for ipods and iphones. Now that you are logged in and have permission to use programs with the mobileterminal, start pirni.
type in this command: pirni -s "router address" -o "filename".pcap. fill in the number you just wrote down for "router adress" and name the file whatever you want for "filename" (don't forget to end with .pcap).
you should start to see the number of packets captured increase. This will be higher if it's a busy network than a network with only a few pc's connected.
[img]http://img130.imageshack.us/img130/5379/img0014d.png[/img]
Once you are done capturing files, swipe your thumb up and right in one movement in the terminal and the sniffing will stop. Now we will open the capture file with cain & abel and find passwords.
Fourth: Collecting passwords.
On your computer, open Winscp. It requires a ip adress and a username to logon. In the IP address bar, fill in the ip adress you see in the settings menu of you ipod (NOT router address, but IP address). The username is root and the password is alpine. leave the other as they are settings and connnect.
The file you captured earlier will be in the directory /private/var/root.
Drag the file to a place on you computer where you can find it, and now open Cain & Abel. In Cain & Abel Click the 'open' button on the top-left side and browse to your .pcap file. Now navigate to the sniffer tab, and then to 'passwords' on the bottom.
[img]http://img188.imageshack.us/img188/9862/capture2pa.jpg[/img]
If you sniffed long enough, you will see alot of http passwords, some ftp, pop3, telnet and some smtp passwords. A lot http passwords are not actual passwords, but just misinterpretations by cain and abel.
On a busy network i got a few passwords in an hour, but maybe you will be more lucky😎.
i hope this tutorial was helpful. If i made any mistakes (it IS my first tutorial), or if you get any errors, tell me and i'll help you. oh yeah +rep as well. Thanks!
I'm going to show you how to get passwords on any wireless network you are connected to by using your jailbroken ipod touch or iphone.
First, let me explain how it works:
Almost every wireless network operates from a router, which routes data from the internet to all the computers that are connected to it. It sends packets only to the computer that requests it. With the method i'm going to show you, we can recieve all network packets originally meant for the router. This means we can view sent and received data, including passwords, from anyone in the wireless network. This is called packet sniffing, and can also be done with a computer, but your iphone/ipod touch is portable, so you can do sniff packets anywhere, and not be noticed.
Ok, on to the actual tutorial.
we will need to download a few things first:
1:The latest ipod touch firmware (3.1.2):Firmware 3.1.2
2:Blackra1n: Blackra1n
3:Cain and abel: Cain & Abel (from official site)
4:Winscp: Winscp (official site)
And 3 other program which you need to download directly from your ipod.
first: jailbreaking
I will only show you how to jailbreak your ipod touch for now, if you want to jailbreak your iphone you should read through the posts on http://blog.iphone-dev.org/. The programs we'll be using will work on the iphone as well.
In itunes, go to the ipod touch menu and look for the 'restore' button. Click this button while holding shift and it will open a browser. Navigate to the firmware 3.1.2 you just downloaded and open it. Restoring will take a few minutes. When it's done restoring, exit itunes and open up Blackra1n. Press 'make it rain' to jailbreak and wait until it's completely done.
Second: installing programs on your ipod touch/iphone
On your jailbroken device, open Cydia. This is the program that is installed on any jailbroken device. In the search tab, search and download 3 things:
1: Pirni (the actual sniffing program), 2: Mobileterminal (where you run pirni) and 3: OpenSSH (To transfer the captured packets to you PC)
Once you have those three installed, you are ready to sniff.
Third: sniffing
On the ipod/iphone, connect to a wireless network you want to sniff on.
In the settings menu go to Wi-fi, to your chosen network, and then find the tab that shows your router number and write it down.
[img]http://img268.imageshack.us/img268/2711/img0013j.png[/img]
Now, open mobileterminal.
to start sniffing you have to logon first. in the terminal type: 'login' and return, then 'root' and return, then 'alpine' and return. root-alpine is the standard login for ipods and iphones. Now that you are logged in and have permission to use programs with the mobileterminal, start pirni.
type in this command: pirni -s "router address" -o "filename".pcap. fill in the number you just wrote down for "router adress" and name the file whatever you want for "filename" (don't forget to end with .pcap).
you should start to see the number of packets captured increase. This will be higher if it's a busy network than a network with only a few pc's connected.
[img]http://img130.imageshack.us/img130/5379/img0014d.png[/img]
Once you are done capturing files, swipe your thumb up and right in one movement in the terminal and the sniffing will stop. Now we will open the capture file with cain & abel and find passwords.
Fourth: Collecting passwords.
On your computer, open Winscp. It requires a ip adress and a username to logon. In the IP address bar, fill in the ip adress you see in the settings menu of you ipod (NOT router address, but IP address). The username is root and the password is alpine. leave the other as they are settings and connnect.
The file you captured earlier will be in the directory /private/var/root.
Drag the file to a place on you computer where you can find it, and now open Cain & Abel. In Cain & Abel Click the 'open' button on the top-left side and browse to your .pcap file. Now navigate to the sniffer tab, and then to 'passwords' on the bottom.
[img]http://img188.imageshack.us/img188/9862/capture2pa.jpg[/img]
If you sniffed long enough, you will see alot of http passwords, some ftp, pop3, telnet and some smtp passwords. A lot http passwords are not actual passwords, but just misinterpretations by cain and abel.
On a busy network i got a few passwords in an hour, but maybe you will be more lucky😎.
i hope this tutorial was helpful. If i made any mistakes (it IS my first tutorial), or if you get any errors, tell me and i'll help you. oh yeah +rep as well. Thanks!
