[CorppD]

someone had connected my phones hotspot, is there anything i can do to get information about what they did while connected to me? if so, how?

[SiStemiC]

Well its actually a bit tricky and requires some knowledge and definitely a rooted phone

[pasnger57]

... i don't know why a Phone woud be the chose for network sniffing and tacking login and so forth but ARM hardware is tidal for this sort of thing
a lot of tools out there for this mind you you can see what happen logs but you can only catch what is HAPPENING live

[Prox]

If you had a separate laptop you can execute a MITM attack, which is very effective for devices connected to your network. You're be able to see any information on the sites that the person accesses, as well as login information.

This doesn't have to be malicious, it's a good way to see what kind of information is passing through your legitimate network.

[love4aba]

mitm is best way. even with rooted phone some app can do your job

[AgentSmithers]

Check your Hotspot settings. If you can set the DNS ip, point it to a server you control and have that server point every address to another server you control to take SMB, FTP and WEB request and log them.

[CorppD]

If you had a separate laptop you can execute a MITM attack, which is very effective for devices connected to your network. You're be able to see any information on the sites that the person accesses, as well as login information.

This doesn't have to be malicious, it's a good way to see what kind of information is passing through your legitimate network.

Can you tell me how to do a MITM attack?

[AgentSmithers]

It depends on your device, If you want to learn how to do one if your Windows use Cain and Abel and Wireshark to see how it does it.
If your linux, Use the Metasploit framework and Ettercap with Wireshark. The packets are the same for ARP.

[CorppD]

It depends on your device, If you want to learn how to do one if your Windows use Cain and Abel and Wireshark to see how it does it.
If your linux, Use the Metasploit framework and Ettercap with Wireshark. The packets are the same for ARP.

i have both linux and windows but can you give detail a little bit cuz im a beginner.