[APP][2.1+] Wifi Protector v1.4.5 Wireless Security | Anti WifiKill | Anti DroidSheep

gurkedev · Nov 26, 2011

ell3 said:
I understand that making apps "call home" is bad, but maybe disable it by default and make it possible to users to volunteerly check it and autosend crash dumps (at least when the app is in development... then remove it in final version?). Or maybe just save them to a .txt file somewhere and ask manually to send it to you... uh... just ideas

This is already included in the market version when using froyo (2.2+). ~~I haven't had time yet to implement it in the free version~~. Edit: Implemented in v1.1.2.

ingenious247 said:
Correction, it only force closes when NOT connected to wifi

I'm still waiting the report you mentioned in your mail.

avgjoemomma said:
K, quick suggestion. I now get false alarms every time I switch from Wifi to Data or vice versa. I think the app is already registered to be alerted upon a connection change so maybe you have a sanity check before sending the alert and arp -d'ing?

What type of detection are you using? MAC or BSSID?

killerjc · Nov 26, 2011

Nice protector. here is too many virus for android now?

ell3 · Nov 26, 2011

Hi ! I got to test your 3rd revision, and I ran thru some problems... but they are hard to reproduce as sometimes it behaves one way, sometimes doesnt....
Anyway, I sent you the logcat via PM.

1) when I start/stop/start during an attack, sometimes it fails to detect the attack is still running.
2) I disconnected the phone, started the attack, connected the phone, attack got detected, went to expert and it crashed. (that's the last you could see in my logcat attached) Then app respawned but I think not as service (there is no more shield in upper left corner of screen) and the app keeps crashing when I go expert.

As for the detection rate, it's still not 100%, sometimes it fails when starting/stopping the attack. I think I got the best results with the first version (but that could be just an impression, as I told you, it's hard to recreate the exact actions that reproduce the bug or no-detection)

@killerjc - This is not against viruses that target your device, it's against arp-based attacks (they might happen only inside your LAN) that might target phones and other devices as well.

@OP - Thanks for updates and bugfixes !!

avgjoemomma · Nov 26, 2011

gurkedev said:
What type of detection are you using? MAC or BSSID?

BSSID, Deep

gurkedev · Dec 1, 2011

v1.1.2 released today.

It comes with a couple of small bugfixes and performance improvements.

One word on BSSID analysis: If you get alerts with BSSID analysis enabled, go to Expert Perspective and compare the gateway MAC with the BSSID. You will probalby notice that the gateway MAC is completely different to the BSSID. This could be a network already under attack but it's more likely that you are connected to a virtualized wireless LAN. The concept of virtualization in wireless LANs is similar to wired networks. Relevant for you, as a Wifi Protector user, is that each participant in the network is assigned a dedicated virtual port and unique BSSID. Maybe you're lucky because the Access Point keeps the vendor ID (first 3 octets of the MAC) and changes only the last 3 octets, so you could keep BSSID analysis enabled and set the detection level to Light. But I'm afraid in most cases you will find yourself with 6 different octets. In such case you cannot use BSSID analysis.

Michal102 · Dec 2, 2011

Hi, I tried this app and it works perfectly. But i discovered few problems...

1. detection works perfectly, but countermeasures without busybox "arp" command doesn't work... I have installed busybox v1.19.3 (latest), but this version don't contain arp command (I do not know why).
This is a problem with my phone and not with app itself, some other people may have a similar problem, so here is a solution...
Solutoin: reinstalled busybox to version 1.18.4 (last version which contain arp command) and problem was solved

2. in version 1.1.2 when the network is under attack and countermeasures are active status is displayed as "Normal". In version 1.1.1 in this case there was information about the active countermeasures. I prefer to see the information that the network is under attack and countermeasure is active...
(Perhaps this is again a problem with my phone, but in the version 1.1.1 it was shown correctly)

Good work, very useful app

avgjoemomma · Dec 3, 2011

gurkedev said:
v1.1.2 released today.

It comes with a couple of small bugfixes and performance improvements.

One word on BSSID analysis: If you get alerts with BSSID analysis enabled, go to Expert Perspective and compare the gateway MAC with the BSSID. You will probalby notice that the gateway MAC is completely different to the BSSID. This could be a network already under attack but it's more likely that you are connected to a virtualized wireless LAN. The concept of virtualization in wireless LANs is similar to wired networks. Relevant for you, as a Wifi Protector user, is that each participant in the network is assigned a dedicated virtual port and unique BSSID. Maybe you're lucky because the Access Point keeps the vendor ID (first 3 octets of the MAC) and changes only the last 3 octets, so you could keep BSSID analysis enabled and set the detection level to Light. But I'm afraid in most cases you will find yourself with 6 different octets. In such case you cannot use BSSID analysis.

I did some testing today at a Peet's and Starbucks as they were setting of WiFi Protector when I switched from 3G Data to WiFi (I use JuiceDefender to automatically switch based on location). gurkedev's analysis seems to be correct in that the APs used by these places use vLANs so we might get false alerts when using deeper levels of BSSID analysis. I'm keeping mine set to BSSID Deep as I don't mind the false alarms

I did some testing using two Nexus One's running CM7.x at Starbucks. I had one N1 running WiFI Protector and used my own to run WiFi Kill and the countermeasures worked like a charm. This is one app that will be installed by default for me

Combined with sysctl hardening and the right iptables config, your phone should be pretty damned protected

gurkedev · Dec 4, 2011

Michal102 said:
Hi, I tried this app and it works perfectly. But i discovered few problems...

1. detection works perfectly, but countermeasures without busybox "arp" command doesn't work... I have installed busybox v1.19.3 (latest), but this version don't contain arp command (I do not know why).
This is a problem with my phone and not with app itself, some other people may have a similar problem, so here is a solution...
Solutoin: reinstalled busybox to version 1.18.4 (last version which contain arp command) and problem was solved

Thank you very much for sharing your insights and posting a solution! Next version will be smarter and won't rely on arp link to busybox exist.

Michal102 said:
2. in version 1.1.2 when the network is under attack and countermeasures are active status is displayed as "Normal". In version 1.1.1 in this case there was information about the active countermeasures. I prefer to see the information that the network is under attack and countermeasure is active...
(Perhaps this is again a problem with my phone, but in the version 1.1.1 it was shown correctly)

Good work, very useful app

v1.1.2 doesn't change shield color if attack starts while app main view is already open. Upcoming release will fix this. Attack prevention (countermeasures) should be shown correctly in v1.1.2.

WiredPirate · Dec 5, 2011

I like this app! Great concept, well done. My one question is can you please add the option in settings to hide the icon in the notification bar unless I am under attack? This would be very useful to me. Thanks again for the app!

kwazi · Dec 5, 2011

haven't had a chance to try it yet, but will do soon.

Very happy someone took the time to write this up, and even more happy that you're willing to share it with XDA members for free.

Thanks

avgjoemomma · Dec 5, 2011

WiredPirate said:
I like this app! Great concept, well done. My one question is can you please add the option in settings to hide the icon in the notification bar unless I am under attack? This would be very useful to me. Thanks again for the app!

I think it might need to be in the notification bar to keep the OS from killing it.

Carnelain · Dec 6, 2011

Awesome app. One request though could you add an option only show a notification when under attack?

aloy99 · Dec 6, 2011

Is it possible to uninstall the app after making the phone immune to wifi attacks as I have a limited amount of ram on my phone and cannot have services constantly running.

Sent from my x10 mini running the latest version of minicm 7.

avgjoemomma · Dec 6, 2011

aloy99 said:
Is it possible to uninstall the app after making the phone immune to wifi attacks as I have a limited amount of ram on my phone and cannot have services constantly running.

Sent from my x10 mini running the latest version of minicm 7.

I'm not the developer so he'll have to correct me if I'm wrong, but this app needs to remain active and running as it continuously is checking for attacks. You can't really flip a few settings on and be immune. There are some configurations that will help but nothing like how this app works. It monitors then takes countermeasures.

If I were you, I'd make room

casemandan · Dec 6, 2011

Lazy bumms

avgjoemomma said:
I'm not the developer so he'll have to correct me if I'm wrong, but this app needs to remain active and running as it continuously is checking for attacks. You can't really flip a few settings on and be immune. There are some configurations that will help but nothing like how this app works. It monitors then takes countermeasures.

If I were you, I'd make room

Unbelievable....
almost 1700 downloads and not even 50 thanks button hits for the awesome dev....
People are lazy ass **** ****s that dont deserve anything for free.

edit: maxed out my 5 daily thanks button hits so now its over 50

avgjoemomma · Dec 6, 2011

casemandan said:
Unbelievable....
almost 1700 downloads and not even 50 thanks button hits for the awesome dev....
People are lazy ass **** ****s that dont deserve anything for free.

edit: maxed out my 5 daily thanks button hits so now its over 50

Yeah, that's how it goes. So lame. Well you can always WiFi Kill em

jdstrydom · Dec 6, 2011

So true. The added my 5

Sent from my HTC Desire

shockem · Dec 6, 2011

casemandan said:
Unbelievable....
almost 1700 downloads and not even 50 thanks button hits for the awesome dev....
People are lazy ass **** ****s that dont deserve anything for free.

edit: maxed out my 5 daily thanks button hits so now its over 50

You are right, many people don't 'use' the thanks button. II hope more will make better use of it. I mean common its just a button that requires a single click!

cracksmurf · Dec 6, 2011

avgjoemomma said:
I think it might need to be in the notification bar to keep the OS from killing it.

Well i agree that it can get a little crowded in the notification bar. One nice fix i saw on a notifcation bar shortcut app is to give the option to make the notification icon either the same color as the notifacation bar or fully transparent. However, since this can result in a weird blank spot between icons, the ability to set the icon as either the first or last one was added. ie left or rightmost icon.

forceu · Dec 6, 2011

Does not work if you have two routers sharing the same BSSID.

For example I have a FritzBox 7270 and a TP Router, but after connecting to one of them, I get an BSSID alarm.

This is often used in hotels as well (one router for each floor), so I had to disable it.

[APP][2.1+] Wifi Protector v1.4.5 Wireless Security | Anti WifiKill | Anti DroidSheep

Senior Member

Member

Senior Member

Senior Member

Senior Member

New member

Senior Member

Senior Member

WiredPirate

Guest

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Inactive Recognized Developer

Senior Member

Senior Member

Similar threads

Top Liked Posts