Court of Analysis and Testing

Recently... i'm just join android security & malware telegram group, it is a very cool channel that talk about security, privacy, malware on Google Play, bugs, vulnerabilities, data leaks, bug bounty hunting, security tips & tutorials, tools, hacks, ethical hacking, penetration testing, forensic..etc when i was scrolling around contents, i stumble upon a post from andmp about vulnerability in URL address bar of UC browser that allow hacker to launch a phising website. Cause: "browsers are trying to enhance the User Experience by just displaying the search term for certain URL patterns" & "bad regex check" and POC: www.google.com.attacker.domain/?q=www.facebook.com I try to deliver the POC BUT i think it's not quite what i expect. LET ME EXPLAIN  i try to test the poc using adb for saving my time rather than have to type that long URL address. Download ~# adb shell input text www.google.com.blogspot.com/?q=facebook.com...

HEY GUYS ! so in this post, I want to introduce you with the tool that I built, it called "apk mapper" and aim to mapped android components (permission, activities, services, content provider and broadcast receiver)  from multiple apk file into one single report. Download from my github:  https://github.com/acaciaworld80/100dayofpentesting/tree/master/apk_mapper Prerequisite: Python version 2.x Library: https://pypi.org/project/AxmlParserPY/ Command: pip install AxmlParserPY https://pypi.org/project/python-magic/ Command: pip install python-magic To use it, it's pretty simple, just put it into one directory filled with bunch of apk run it like picture below and it will create a report file Preview:

From the previous posts i have showed all of you three different approach to solve owasp crackme level 1 problem. Now it's time to level up the challenge! lets try to solve the owasp crackme LEVEL 2 ! To solve this level the first few steps is same with the level 1, you need to get the java source code using reverse engineer tool  (procyon, fernflower or enjarify) in order to know the flow of the application in deeper manner. Once you got the code go to the Mainactivity.java (located in /sg/vantagepoint/ folder) file to see the main execution of the program like the figure below. if you take a look there are two function inside the Mainactivity.java. Inside the onCreate function it is same with the 1st challenge it has a debugging and root checking to prevent user for tamper with program execution and second function is the verify function that check with user input with the secret string. The second function using the "a" method from the "m" class to...

This is again "another" way to crack the owasp crack me challenge, but this time i used xposed framework to bypass the function authentication. Before using the xposed framework, you guys remember that the application has a root detection method inside the main function that will prevent us to hook into the method using xposed framework, to circumvent the check of the root detection i tamper the smali code of the application like the figure below. as you can see i tamper three function of the root checker inside the main function. This 3 function is equivalent to this source code:  if (c.a() || c.b() || c.c()) {             this.a("Root detected!");         } repackage the application and install it to the rooted vm or rooted device. Because we already taking care of the root detection now its time to move on to the xposed framework. This is the code i write to bypass the au...

  So this is another alternative way to solve owasp crackme challenge level 1. In this post i will use adb jdwp to bypass the anti-debugging feature of the application and retrieve the clear text secret string of the application i already told you from my previous post of debugging jdwp ( https://court-of-testing-analysing.blogspot.com/2018/11/going-old-fashion-debugging-android.html ) that in order to debug an application you need to add android:debuggable="true" option inside the application tag but this application is not stupid, as soon as we want to launch the app, the app is force to close because it has an anti debugging feature on them. Thus, we cannot tap into our jdwp :( so how do we do circumvent the anti-debugging feature inside the application ? According to OWASP documentation "Android's 'Developer options' contain the useful "Wait for Debugger" feature, which allows you to automatically suspend an app doing startup unti...

Hi guys ! sorry if have to gone for a while, i have to postponed the 100dayspentesing challenge to finished my bachelor thesis report and it took a lot of time to finish it. So because i have spare time before the final thesis test, i decide to do some stretching again with CTF challenge. This time i take the the owasp crackme challenge level 01 (you can download it in the following link: https://github.com/OWASP/owasp-mstg/tree/master/Crackmes/Android/Level_01 ) LET THE GAME BEGIN ! First of all, you need to setup a machine to install the owasp level 01 apk you can use your own devide or vm (just choose the most comfortable one) and after you decide which one to use, install it with adb utility: ~# adb install UnCrackable-Level1.apk The above figure is the interface when you opened the installed apk. From first glance you can tell that we only need to find a secret string (so no fancy function that we need to explore). At this point i just straightly reverse engi...

I think that most of the android developer forgot about danger of the open source nature of android application. Because the fact that once their application is posted in any play store in the world. There are no guarantee that anyone could tweak your application. In this post i will show you how to attacking android application component(activity) by repackaging the application. I hope it will open developer eye about how easy for anyone to change your application structure. To start the post, You guys may be familiar with Androidmanifest.xml file in APK file right?!(if you not ? do your research m8) Long story short the file is the one that responsible for any permission and components use in android application and it pretty much show like this. as you can see from the following image there are 3 activities contain in the application and all of them cannot be query outside of the application. So what are we going to do? lets try to modify the file as shown below ...