guardianproject / orbot

The Github home of Orbot: Tor on Android (Also available on gitlab!)
https://gitlab.com/guardianproject/orbot
Other
2.26k stars 337 forks source link

[BUG] ARP attack in the new versions. #1185

Open Mishasama opened 1 month ago

Mishasama commented 1 month ago

Describe the Bug It will perform ARP attacks after upgrading to 17.2.1. My PC has detected the phone keeps broadcasting its MAC with the router's IP. This makes all devices lose connection.

To Reproduce Steps to reproduce the behavior:

  1. Start VPN (Use direct connection to tor)
  2. Wait it connected
  3. Wait about 5~15 min
  4. Check any device or route log, you will see the ARP attacks

Expected Behavior What are you doing?

What Custom Configuration Do You Use? Choose some apps not to use with Orbot, and other settings please check the screenshot below.

Screenshots

Settings

![Screenshot_2024-10-07-02-50-19-93](https://github.com/user-attachments/assets/fe771b3e-51ac-4186-b185-db59acb772b8)

Smartphone (please complete the following information):

Crash Logs (Advanced) I'm sorry I can't offer this.

Additional Context This problem did not occur in previous older versions.

n8fr8 commented 1 month ago

Just to clarify, you are saying that OTHER devices on your local area network are seeing an ARP attack originating from your Android device, only when the Orbot VPN is activated?

n8fr8 commented 1 month ago

Also you mentioned 17.2.1 (old) above but then say you are running 17.3.2 RC1 (latest)

n8fr8 commented 1 month ago

Did you make any changes to Orbot settings? What is the router/IP space of your local area network? Perhaps it is the same as the Orbot VPN virtual LAN?

Mishasama commented 1 month ago

Just to clarify, you are saying that OTHER devices on your local area network are seeing an ARP attack originating from your Android device, only when the Orbot VPN is activated?

Yes.

Also you mentioned 17.2.1 (old) above but then say you are running 17.3.2 RC1 (latest)

I mean I occur this bug after 17.2.1, and still not fix in the latest.

Did you make any changes to Orbot settings?

Yes, please check the screenshot for <details>.

What is the router/IP space of your local area network? Perhaps it is the same as the Orbot VPN virtual LAN?

Router: 192.168.12.1 DHCP: 192.168.12.2 - 192.168.12.254

What is the Orbot VPN virtual LAN IP used?