Secret Hacking for Android Mobile......

SSHDroid- Android Secure Shell:
Secure shell or SSH is the best protocol that provides an extra layer of security while you are connecting with your remote machine.SSHDroid is a SSH server implementation for Android.
This application will let you to connect to your device from a PC and execute commands (like "terminal" and "adb shell").

AnDOSid- DOS Tool for Android:
DOS or denial of service attack is very dangerous attack because it takes down the server
(computer).AnDOSid allows security professionals to simulate a DOS attack (A http post flood attack to be exact) and of course a dDOS on a web server, from mobile phones.AnDOSid is designed for security professionals only!

FaceNiff 2.4 final- Session Hijacker for Android:
Your Facebook account is at risk, just like a Firesheep (for firefox hacking) there is a FaceNiff for hijacking the session of famous social networking websites includes facebook and twitter. FaceNiff is developed by Bartosz Ponurkiewicz who created Firesheep before but faceniff is for android OS.

Nmap for Android:
Nmap (network mapper) is one the best among different network scanner (port finder) tool, Nmap mainly developed for Unix OS but now it is available on Windows and Android as well. Nmap for android is a Nmap apps for your phone! Once your scan finishes you can e-mail the results. This application is not a official apps but it looks good.

The Android Network Toolkit:
In the last Defcon conference a new tool has been released by a security researcher and the tool is called “The Android network toolkit”. The has been developed for penetration tester and ethical hackers to test any network and vulnerabilities by using their mobile phones. This toolkit contain different apps that will help any hacker to find vulnerabilities and possibly exploit it. The company behind the app is an Israeli security firm called Zimperium.

Wi-Fi Key Recovery

 ->You need root to use this application.
 ->You need to have connected to the network in the past.
 -> This app cannot "hack" into an unknown/new network.
Have you ever forgotten the password of your home WiFi network, or the one you setup for your parents a few months back?
This application will help you recover the password of a wireless network you have connected to with your device in the past.
You can then either tap on an entry to copy it, or export the list to SD, or share it using the standard Android sharing facilities.
  It does not crack the network, or use the MAC/SSID address to deduce the password. It    simply reads it from the device itself. 

ANONdroid v. 00.00.008 : JonDonym proxy client for Android

ANONdroid is a client application for the AN.ON anonymisation service. This service allows a user to browse the Web anonymously.
ANONdroid acts as a proxy for your internet applications and will forward the traffic
of your internet applications encrypted to the mix cascades.
ANONdroid uses the core libraries of JonDo with a smartphone compatible GUI.

 

Android Hacking & Security

Android is one of the favorite mobile operating system, owned by Google Inc. As Android have took over the mobile market and its users are increasing in a great ratio. Main thing is that Android have revealed many of the features that are waiting by all users.  Its interface good and is user handy.

Apart from the normal mobile user, techie guys also like its flexible features that allows them to do various new task. As with this its security concerns also headed up. Recently we have noted that many of the cyber hackers are targeting Android users. There are many techie guys have also unrestricted the  features that are restricted by its owners, Google.

So I thing the below words are familiar to them but many of them have not been aware. Here I am discussing some of the tools that are meant for the Security tester, Ethical hacker and for those guys who really explore the tech world.

Lets see 10 Android tools that are meant for hacking and hackers.

1.Hackode :- Hackode : The hacker's Toolbox is an application for penetration tester, Ethical hackers, IT administrator and Cyber security professional to perform different tasks like reconnaissance, scanning performing exploits etc.

2.Androrat:- Remote Administration Tool for Android. Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server.

3.APKInspector:- APKinspector is a powerful GUI tool for analysts to analyse the Android applications. The goal of this project is to aide analysts and reverse engineers to visualize compiled Android packages and their corresponding DEX code.

4.DroidBox:- DroidBox is developed to offer dynamic analysis of Android applications.

5.Burp Suite:- Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security vulnerabilities.

6.zANTI:- zANTI is a comprehensive network diagnostics toolkit that enables complex audits and penetration tests at the push of a button. It provides cloud-based reporting that walks you through simple guidelines to ensure network safety.

7.Droid Sheep:- DroidSheep can be easily used by anybody who has an Android device and only the provider of the web service can protect the users. So Anybody can test the security of his account by himself and can decide whether to keep on using the web service.

8.dSploit:- dSploit is an Android network analysis and penetration suite which aims to offer to IT security experts/geeks the most complete and advanced professional toolkit to perform network security assessments on a mobile device.

9.AppUse – Android Pentest Platform Unified Standalone Environment:- AppSec Labs recently developed the AppUse Virtual Machine. This system is a unique, free, platform for mobile application security testing in the android environment, and it includes unique custom-made tools created by AppSec Labs.

10.Shark for Root:- Traffic sniffer, works on 3G and WiFi (works on FroYo tethered mode too). To open dump use WireShark or similar software, for preview dump on phone use Shark Reader. Based on tcpdump.

Sorry If I have missed, and request to all the guys If I had missed, please write its name and purpose on the comment box below, and help us to complete the topic.

Kkinny Sharma

Hacking Facebook Account Password

Hacking Facebook Account Password using Free Emissary Keylogger

In case if you missed my last post about ‘Gmail Hacker Software‘, do read it once. So that you have a rough idea about how hacking softwares work. In this Post i am not using any facebook hacker software or any thing like that because hardly anyone is going to enter their login details on such crap softwares. People have become Smart, who knows they might be the readers of hacker9. Also i would strongly recommended you not to try any hacking softwares from any other websites.

In this Post i have discussed about how you can use keylogger to hack into anyone’s facebook account. In this tutorial i have used free keylogger called Emissary Keylogger, That does more than hacking facebook account password. This keylogger will mail you all the saved passwords on your victims PC to your Gmail account. As Most facebook addicts do save their password in their web-browser, there is high possibility that you will get facebook login details. Alon with this the keylogger will also mail you all the information about your Victim. This information includes Screenshots, opened window details, visited websites and much more.

Also See: HowFacebook hacking

As i had said in my last post, Not all hacking softwares and keyloggers are Anti-Spywares Shielded. Most Antivirus Softwares are familiar with these free keyloggers and they might flag this keylogger as a Virus. So to experience this keylogger you might need to temporarily turn off your antivirus or uninstall it. But Don’t worry, if your victims antivirus is not up to date or freeone, there are high chances that you may end up getting his keylogs. So give it a Try.

Recommended: Buy Antivirus shielded SniperSpy key-logger that operates in stealth mode!

-Features of Emissary Keylogger:

• Can mail all the Keystrokes including login details
• Can send screenshots of the victim’s Screen
• Can Block VirusScanning Websites on victim’s computer
• Can Disable TaskManager on victim’s PC
• Can Disable Regedit on victim’s PC

-How to Use this Keylogger to hack Facebook Password?

First make sure you have ‘Microsoft’s .net Framework‘ installed on your PC, if you dont have please download and install it. [*] The victim need not have .net framework. Follow the Steps below:

Step 1: Download ‘Emissary Keylogger‘ Software and extract the files to desktop. If your Antivirus deletes the file, then please turnoff your Antivirus or uninstall it and try downloading again.

Step 2: Run ‘Emissary.exe’ file and enter your gmail account details,  so that the password and other info of your victim can be mailed to you. If you are afraid of entering your gmail details, then do create one temporary fake account and enter those details.

Step 3: After you enter your ‘Gmail account’ details Click on ‘Test’ to test the connection to your Gmail account.  In the Server name Field you can change the name if you want. enter any Time Interval in the interval field. This timer controls the time interval between two keylogs emails. You can also show fake error message to your Victim when he clicks your server.exe file. to do so enter the error title and description in the ‘Fake error message’ field.

Step4: Now after filling the required fields, Click ‘Build’ button. This will create another file called server.exe in the same directory.

Step5: Now send this server.exe file to victim and make him install it on his computer. You can use Binder or Crypter to bind this server.exe file with say any .mp3 file so that whenever victim runs mp3 file, server is automatically installed on his computer without his knowledge. also read: How to change ICON of .exe file?






[ * ] Now because this is a free keylogger, you can’t send server.exe file via email. Almost all email domains have security policy which does not allow sending .exe files. So to do this you need to compress the file with WinRar or upload it to Free File Storage Domains, like Mediafire, rapidshare, filethief etc.

Step6: Once the victim runs your sent keylogger file on his computer, it searches for all the stored usernames and passwords and it will send you email containing all keylogs and screenshots regularly after the specified ‘Time interval’.








Kkinny Sharma