Nexus: Android Hack

EVABS

Read

Kang Asu

EVABS - Extremely Vulnerable Android Labs

An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners. The effort is to introduce beginners with very limited or zero knowledge to some of the major and commonly found real-world based Android application vulnerabilities in a story-based, interactive model. EVABS follows a level-wise difficulty approach and in each level, the player learns a new concept. This project is still under progress and aims at incorporating as many levels as possible.
For complete details and solutions, head to the wiki.

INSTALLATION

Download the application file (apk).
Install it in an Android device (rooted recommended) or emulator.

SCREENSHOTS:

REQUIREMENTS

Android Emulator (Default/Genymotion) or a rooted Android device.
FRIDA
ADB
apktool
dex2jar

or use ADHRIT (all-in-one tool)
Confused? Read the documentation on setting up the environment.

CHANGE LOG

Flag checking module added within EVABS.
Alternatively, you can use this link to submit flags from your browser.
UI improvements

BUILDING LOCALLY

Clone the repository git clone https://github.com/abhi-r3v0/EVABS.git or download the zip.
Create a new folder EVABS in your ``AndroidStudioProjects``` directory and move the contents to the new directory.
Fire up Android Studio, File -> open and select the project.
Go to Build -> Generate Signed APK.
Create a new signature, if it doesn't exist. Sign the APK.
Install the APK using adb install EVABS.apk

THE SQUAD

PROJECT LEAD:

Abhishek J M (jmabhishek4@gmail.com, @abhi_r3v0)

LOGO

Loyd Jayme (loydjayme1996@gmail.com, @loydjayme25)

Download EVABS

Regards

Kang Asu

Andrax - Hack pakai android ? bisa dong!

By 0x000216

Read

0 Comments

Kang Asu

Andrax - Hack pakai android ? bisa dong!

ANDRAX The first and unique Penetration Testing platform for Android smartphones

What is ANDRAX

ANDRAX is a penetration testing platform developed specifically for Android smartphones, ANDRAX has the ability to run natively on Android so it behaves like a common Linux distribution, But more powerful than a common distribution!

Why is Android so powerful?

Simple, everyone has a smartphone and spends all the time with it! We have the possibility to camouflage easily in the middle of everyone, the processor architecture of most Android smartphones is ARM a modern and robust architecture extremely superior to the rest, With touch screens we can run the tools with great agility and take advantage of the graphical interface of Android, we can get in almost anywhere with our smartphones...

In technical terms, ANDRAX and NetHunter should never be compared, ANDRAX is a penetration testing platform for Android smartphones and NetHunter is just a Debian emulator running with chroot.

Termux is not our enemy, Termux is an application that allows installation of many Linux packages using a Debian environment running natively on Android.

ANDRAX and Termux have a similar development, ANDRAX and Termux share many libs and GNU/Linux resources.

But Termux is not a penetration testing platform, it's software to bring basic tools found in a Debian environment. Penetration tests are not something basic! But advanced techniques that involve advanced tools and a advanced environment to conduct good tests!

So you can install many tools manually in Termux but it would be extremely difficult to optimize and configure them to take 100% of the required potential for penetration testing.

Termux runs without root privileges and this makes it very difficult to use advanced tools.

Features and Tools

Tool list

Information Gathering