Hi guys, today we will be exploiting an <activity> tag that has “android:exported” declared in the tag. What is an <activity> tag? Quote from Google Search, “Use with the <activity> tag to supply a default banner for a specific activity, …“ That specific activity we are exploiting is “android:exported”, why? Because it is an elementContinue reading “Exploit Activity Component in InsecureBankv2 Application”
Tag Archives: Android
Tools for Static/Dynamic Analyze in Moblie Hacking
Hi guys, today we will install more tools that are used for testing mobile application. Credit to tsug0d for this lesson on Mobile Application Pentesting, I have learned quite a bit of Mobile hacking from his slides, will link it in the reference below. Installation part: Tools used is mainly for Linux distribution. apktool dex2jarContinue reading “Tools for Static/Dynamic Analyze in Moblie Hacking”
Installation of Essential tools for Mobile Hacking
Hello everybody, this will be continuation of setting up a mobile pentesting lab. The required tools need are: apktools adb shell Drozer We will be using Kali Linux OS. Let’s first start with the installation of apktools, Followed by installing adb (Android Debug Bridge), Lastly, we will install Drozer (current version is drozer-2.4.4 as ofContinue reading “Installation of Essential tools for Mobile Hacking”
Steps to set-up Android Simulator for Pen-test
Hello everyone, today we will be learning how to setup an android simulator on your own computer. We will be constantly update this post if we have change anything or have modify our installation process. Software we will be using is (for now): Genymotion Desktop Virtualization we are using is Virtual Box in Windows OSContinue reading “Steps to set-up Android Simulator for Pen-test”
Hacker101 – H1 Thermostat
Hi guys hope you are having a nice day. This CTF we will be doing is an android apk, thus we have to decompile it to analyze the source code. Overview: H1 Thermostat Level: Easy Total Flags: 2 After de-compiling the apk, first look at the AndroidManifest.xml, this xml file will tell you what packagesContinue reading “Hacker101 – H1 Thermostat”
Hacker101 – Intentional Exercise
Hi guys, a brand new day means a brand new CTF for us to do 🙂 For today, we will looking through the Android APK. Same as ‘Hello World!’ CTF, in order to know how the application worked, we have to decompile it and look through the source code. I decompile the android apk, unzipContinue reading “Hacker101 – Intentional Exercise”
Bs&Derek 