Android APK – Bs&Derek

Exploit Activity Component in InsecureBankv2 Application

Hi guys, today we will be exploiting an <activity> tag that has “android:exported” declared in the tag. What is an <activity> tag? Quote from Google Search, “Use with the <activity> tag to supply a default banner for a specific activity, …“ That specific activity we are exploiting is “android:exported”, why? Because it is an elementContinue reading “Exploit Activity Component in InsecureBankv2 Application”

Tools for Static/Dynamic Analyze in Moblie Hacking

Hi guys, today we will install more tools that are used for testing mobile application. Credit to tsug0d for this lesson on Mobile Application Pentesting, I have learned quite a bit of Mobile hacking from his slides, will link it in the reference below. Installation part: Tools used is mainly for Linux distribution. apktool dex2jarContinue reading “Tools for Static/Dynamic Analyze in Moblie Hacking”

Installation of Essential tools for Mobile Hacking

Hello everybody, this will be continuation of setting up a mobile pentesting lab. The required tools need are: apktools adb shell Drozer We will be using Kali Linux OS. Let’s first start with the installation of apktools, Followed by installing adb (Android Debug Bridge), Lastly, we will install Drozer (current version is drozer-2.4.4 as ofContinue reading “Installation of Essential tools for Mobile Hacking”

Hacker101 – H1 Thermostat

Hi guys hope you are having a nice day. This CTF we will be doing is an android apk, thus we have to decompile it to analyze the source code. Overview: H1 Thermostat Level: Easy Total Flags: 2 After de-compiling the apk, first look at the AndroidManifest.xml, this xml file will tell you what packagesContinue reading “Hacker101 – H1 Thermostat”

Hacker101 – Intentional Exercise

Hi guys, a brand new day means a brand new CTF for us to do 🙂 For today, we will looking through the Android APK. Same as ‘Hello World!’ CTF, in order to know how the application worked, we have to decompile it and look through the source code. I decompile the android apk, unzipContinue reading “Hacker101 – Intentional Exercise”