xebia / mobilehacktools Goto Github PK
View Code? Open in Web Editor NEWA repository for scripting a mobile attack toolchain
License: MIT License
A repository for scripting a mobile attack toolchain
License: MIT License
Currently nathan just works in /Applications, but you have to set the path manually...
Docker for mac is now a pre-requisite. should be part of the installment though
Cycript and other tools for jb devices
Add https://github.com/integrity-sa/droidstatx/ and androbugs
We should have the project linked to the MSTG and other security bulletins. Next, let's see how we can share it!
We need to reassure that executables being downloaden (super for instance), are checked for integrity before moving on
Fix mobsf installation
Need to cleanup ansible:
it would be nice if the android tools can be dockerized as well
We have to document that the ios buildtools are only validated manually as travis cannot easily test the MAS integration
Assume installed (check if it is there, if not install it):
General:
Android:
iOS:
See section 0x08 of MSTG furthermore (let's improve that with more tools!!!)
Examples:
Change DB to Dropbox
TASK [check if DB is installed] ************************************************
TASK [Install Dropbox] *********************************************************
Change SP to SequelPro
TASK [check if SP is installed] ************************************************
TASK [Install SP] **************************************************************
This behavior contradicts the described behaviour of sudo on OSX:
"If you enter the wrong password or a blank password, the command isn't executed and Terminal asks you to try again." (source: https://support.apple.com/en-us/HT202035)
Describe the bug
The first step (the verification of the OS) does not work on a clean moljave installation
To Reproduce
Steps to reproduce the behavior:
Terminal output
Platform check: OK. Proceeding with Mac OS X version check.
./install.sh: line 13: [[ProductName:: command not found
Detected incomaptible version of Mac OS X! Aborting installation. You need....
Desktop (please complete the following information):
It would we great if we have roles and if kali would be supported for the android and general tooling.
Error below is shown in red from the second line onward. As this is default Ansible behaviour, please document in the readme that this is "normal".
TASK [check if FF is installed] ************************************************
fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": "ls /Applications/Firefox.app", "delta": "0:00:00.008017", "end": "2018-09-06 04:04:53.078721", "msg": "non-zero return code", "rc": 1, "start": "2018-09-06 04:04:53.070704", "stderr": "ls: /Applications/Firefox.app: No such file or directory", "stderr_lines": ["ls: /Applications/Firefox.app: No such file or directory"], "stdout": "", "stdout_lines": []}
...ignoring
Java is installed too late in the process, making installers fail...
As Nathan is no longer supported, let's do it ourselves... https://stackoverflow.com/questions/18142924/how-to-use-xposed-framework-on-android-emulator
https://forum.xda-developers.com/showthread.php?t=3034811
Let's make sure we install Adb, Angr, APK axtractor, Apkx, Burp Suite, Drozer, ClassDump(Z/etc), Clutch, Drozer, Frida, Hopper, Ghidra, IDB, Ipa Installer, iFunBox, iOS-deploy, KeychainDumper, Mobile-Security-Framework, Nathan, Needle, Objection, Magisk, PassionFruit, Radare 2, Tableplus, SOcket CAT, Xposed
Describe the bug
"adb" does not work, even after setting up Android Studio
To Reproduce
Steps to reproduce the behavior:
adb
Expected behavior
the adb help page shows in terminal
Terminal output
-bash: adb: command not found
Desktop (please complete the following information):
xebia/ios-pentest-training items toevoegen
Describe the bug
When running install.sh, the script fails early because of wrong permissions of brew.
To Reproduce
Expected behavior
It works
Terminal output
/install.sh
Platform check: OK. Proceeding with Mac OS X version check.
Detected compatible version of Mac OS X! Proceeding with installation.
/usr/local/bin/brew
proceeding: brew installed
Installing Ansible
Error: No such keg: /usr/local/Cellar/ansible
Error: /usr/local/Cellar is not writable. You should change the
ownership and permissions of /usr/local/Cellar back to your
user account:
sudo chown -R $(whoami) /usr/local/Cellar
Error: Cannot write to /usr/local/Cellar
Error: No such keg: /usr/local/Cellar/ansible
installing necessary roles
Desktop (please complete the following information):
Additional context
A fix is to create a group for brew and change the permissions (https://gitlab.com/alyda/dotfiles/snippets/19654). This would be outside of the scope of the install.sh script, but a sensible error message would be nice.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.