xebia / mobilehacktools Goto Github PK

Describe the bug
When running install.sh, the script fails early because of wrong permissions of brew.

To Reproduce

1. Create new OS X user
2. Install brew through user1
3. Run install.sh from user2

Expected behavior
It works

Terminal output

/install.sh
Platform check: OK. Proceeding with Mac OS X version check.
Detected compatible version of Mac OS X! Proceeding with installation.
/usr/local/bin/brew
proceeding: brew installed
Installing Ansible
Error: No such keg: /usr/local/Cellar/ansible
Error: /usr/local/Cellar is not writable. You should change the
ownership and permissions of /usr/local/Cellar back to your
user account:
 sudo chown -R $(whoami) /usr/local/Cellar
Error: Cannot write to /usr/local/Cellar
Error: No such keg: /usr/local/Cellar/ansible
installing necessary roles

Desktop (please complete the following information):

• OS: MacOS 10.13.6 (17G65)
• Latest

Additional context
A fix is to create a group for brew and change the permissions (https://gitlab.com/alyda/dotfiles/snippets/19654). This would be outside of the scope of the install.sh script, but a sensible error message would be nice.

Add https://github.com/integrity-sa/droidstatx/ and androbugs

Cycript and other tools for jb devices

• - create contribution guide (issue template + pr template)
• - create better readme (intro, howto, contributing, thanks to @sushi2k , Xebians and @clviper)
• - reassure proper thanks to Geerlingguy for awesome plugins
• - reassure other licenses (and tell which items are currently installed)
• - create automated build with checks
• - note that this is still a Poc and can use a lot of help!
• - have slack integration (done)
• - Finish #2

Describe the bug
The first step (the verification of the OS) does not work on a clean moljave installation

To Reproduce
Steps to reproduce the behavior:

1. start clean moljave
2. install docker for mac
3. run install.sh
   Expected behavior
   A clear and concise description of what you expected to happen.

Terminal output
Platform check: OK. Proceeding with Mac OS X version check.
./install.sh: line 13: [[ProductName:: command not found
Detected incomaptible version of Mac OS X! Aborting installation. You need....

Desktop (please complete the following information):

• Mac OS X 10.14.1

xebia/ios-pentest-training items toevoegen

Examples:

Change DB to Dropbox

TASK [check if DB is installed] ************************************************
TASK [Install Dropbox] *********************************************************

Change SP to SequelPro

TASK [check if SP is installed] ************************************************
TASK [Install SP] **************************************************************

Describe the bug
"adb" does not work, even after setting up Android Studio

To Reproduce
Steps to reproduce the behavior:

1. Run the mobilehacktools installer (at least for android)
2. open a terminal
3. type adb

Expected behavior
the adb help page shows in terminal

Terminal output
-bash: adb: command not found

Desktop (please complete the following information):

• OS: macOS

Additional context

As Nathan is no longer supported, let's do it ourselves... https://stackoverflow.com/questions/18142924/how-to-use-xposed-framework-on-android-emulator
https://forum.xda-developers.com/showthread.php?t=3034811

Assume installed (check if it is there, if not install it):

• Virtualbox
• Docker
• python 2.7 & python 3
• pip/pip3
• Xcode
• Android studio with an AVD

General:

• MobSF (both docker container & local install)
• ZAProxy
• Burp
• owasp dependency checker

Android:

• dex2jar
• apktool
• jdgui & jadx
• Drozer
• Frida
• Nathan

iOS:

• Needle
• Frida
• Cycript
• Objection
• Needle
• Appmon
• class dump
• Ida
• idb

See section 0x08 of MSTG furthermore (let's improve that with more tools!!!)

• separate ios from android
  there is even an ansible for macOS App Store https://github.com/geerlingguy/ansible-role-mas
  So we could actually install Xcode also via Ansible :-)

it would be nice if the android tools can be dockerized as well

This behavior contradicts the described behaviour of sudo on OSX:

"If you enter the wrong password or a blank password, the command isn't executed and Terminal asks you to try again." (source: https://support.apple.com/en-us/HT202035)

Docker for mac is now a pre-requisite. should be part of the installment though

Fix mobsf installation

Java is installed too late in the process, making installers fail...

It would we great if we have roles and if kali would be supported for the android and general tooling.

Currently nathan just works in /Applications, but you have to set the path manually...

https://tools.androidtamer.com/General/tools_mindmap/

Let's make sure we install Adb, Angr, APK axtractor, Apkx, Burp Suite, Drozer, ClassDump(Z/etc), Clutch, Drozer, Frida, Hopper, Ghidra, IDB, Ipa Installer, iFunBox, iOS-deploy, KeychainDumper, Mobile-Security-Framework, Nathan, Needle, Objection, Magisk, PassionFruit, Radare 2, Tableplus, SOcket CAT, Xposed

We have to document that the ios buildtools are only validated manually as travis cannot easily test the MAS integration

https://rada.re/r/down.html

We need to reassure that executables being downloaden (super for instance), are checked for integrity before moving on

Error below is shown in red from the second line onward. As this is default Ansible behaviour, please document in the readme that this is "normal".

TASK [check if FF is installed] ************************************************
fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": "ls /Applications/Firefox.app", "delta": "0:00:00.008017", "end": "2018-09-06 04:04:53.078721", "msg": "non-zero return code", "rc": 1, "start": "2018-09-06 04:04:53.070704", "stderr": "ls: /Applications/Firefox.app: No such file or directory", "stderr_lines": ["ls: /Applications/Firefox.app: No such file or directory"], "stdout": "", "stdout_lines": []}
...ignoring

We should have the project linked to the MSTG and other security bulletins. Next, let's see how we can share it!

Need to cleanup ansible:

• Make sure all is done with file, pip, homebrew and homebrew_cask module
• Make sure that we use the binary_install_path on all custom installations (similar to classdump)
• Make sure all that all is tested for idempotency in Travis