The complete hacking guidebook to zANTI2 is here!

zANTI2 is one of the most powerful tools for penetration testing on Android devices. Sadly, there are not many ways to learn about its mighty functions, thus many useful things are left undiscovered. Well, not anymore. A brand new guidebook to Android penetration testing is here!

Learning zANTI2 for Android Pentesting shows how to dive into the world of advanced network penetration tests to survey and attack wireless networks using your Android device and zANTI2, understand the basics of wireless penetration testing, learn advanced scanning techniques, discover remotely exploitable vulnerabilities, attack and hijack passwords/accounts using the MITM attack and many, many more!

The book is intended for those who want to know more about network penetration tests and have no prior experience, as well as for those who are experienced in network systems and are curious to discover more about this topic. Since zANTI2 features an extremely intuitive and easy to control interface, it doesn't require any special skills.

Interested?

Download  The complete hacking guidebook to zANTI2 is here!! - LINK

Read More

Android WiFi Hacking - How an MITM attack works?

zANTI, Dsploit, Csploit, Faceniff and many, many more similar hacking apps are using a specific kind of attack called MITM - the Man In The Middle attack. What exactly does this attack do and is there any way to protect yourself from it? Read on!

Man In The Middle aims to control a victim by becoming the "man in the middle". Let's make an example.

We got person A and person B. Let's name them Rami and Jovie. They're friends and just chatting through an unencrypted connection (http). Alice wants to hang out, says:

 - Sup Jov, gimme your public key, I want to chat!

Rami is requesting a Public key (known as asymmetric cryptography - used to encrypt data and verify them as a digital signature)

Rami and Jovie don't know one thing. There's an evil person Miro intercepting everything they say.
What happens here is that the sent message goes first to Miro and then gets sent to Jovie. He doesn't spot anything, the message is the same, nothing's really suspicious at the moment.
Jovie responds:

- Yo Ramy, let's chat. Here's my key: materialFTW123

Miro now knows the Jovie's public key but instead of sending this key directly to Rami, he sends his own public key. Miro slightly edits the message:

- Yo Ramy, let's chat. Here's my key: motiondesignFTW123

Now they can encrypt the whole conversation with their private encrypt alghoritm. However, they don't know there's someone who's edited it so he can view and control the whole conversation between these two guys.

- [encrypted with Miro's key] Let's hang out, bring some booze lol

Miro then encrypts it to Jovie's original key (materialFTW123) so he doesn't spot a thing. Then he resends it to Jovie and the conversation goes on.


..

This way the attacker can take control over a conversation and not only he can intercept it but also change it. Boom, we have redirect, script injection, replace images and many more features.

Here's a screen from MITM section in cSploit app. There are several MITM features starting from innocent "simple sniff" that sniffs through the traffic and monitors up/down, and password sniffer, that inputs passwords from the victims.

Now, is there any way to protect from these attacks? Yup, and it's not difficult at all.

Firstly, be sure to be on HTTPS. You can always check it in he URL bar. There's a feature SSLStrip that prevents from connecting to HTTPS but it cannot redirect you to HTTP while on HTTPS. So if you're on HTTPS, you're good to go.

Use WiFi Protector. WiFi protector is a handy app for your Android device that monitors the net and alarms you if there's an intruder (also shows his MAC/IP adress and can even protect you from the atttack if you're rooted). Download

Try not to connect to public networks - they're the biggest threat. But fortunately these attacks are not that often and you shouldn't really catch a hacker if you're mostly on private WiFis.

Read More

Tutorial - How To Use zANTI2 for hacking?

zANTI2 is a new app that came from the Zimperium and Simone Margaritelli, the dSploit author. zANTI comes with a bunch of amazing features, including metasploit exploits, packets sniffing, session and password hijacking and many more. But how do you use them? See this tutorial!

Ready to hack? Let's go.


First off, (if you haven't already), download the zANTI app from dsploit.net
You can register if you want and you're good to go.

Alright, now connect to the WiFi and start scanning.



Wait for the scan to be finished. You will see connected devices with open ports. As you can see on the image above, there are a few devices including one HTC device running Linux (Android) and two printers.

You can now choose which of the devices you want to attack. I will go ahead and select the HTC. If you want to attack all of them, you can select the entire network.

If you open up the device, you'll see a few options popping up.

• Scan
• Connect to remote port
• Password complexity audit
• MITM
• Vunlerabilities check (shellshock, SSL poodle)

Let's explain them. The scan option will perform another, more advanced scan on the target. You can specify the typea of scan and it will be more accurate on the target.

Connect to remote port is a very interesting option that lets the attacker connect to the open port and estabilish the connection to the victim. If you open up this option, you will see the available ports. In most cases, it would be 80, that is HTTP port. However, there can be more ports available. For example, I attempted to connect to my laptop - I have a password on it, if I didn't have any password set on my laptop, I could easily view everything available in the C:/ drive - pictures, folders, files and many more. Really cool, really spooky; conclusion - secure your laptop with a password, even if there's nobody you know that could possibly break into your device.

We're not done with this option, it brings much more stuff when there is a vunlerability that can be exploited on the victim's PC.

I've found this nice video by Adam Alio demonstrating the power of Zetasploit. He exploits a vulnerability in the victim's PC that allows to connect to remote host via VNC - the virtual network computing, a graphical desktop sharing system that allows to connect to monitor and control your PC using your Android phone, just like as you were running Windows XP.

Then he ran a Cloud exploit and connected to the console. He then took power over the computer and shut it down using shutdown command. Pretty nice and pretty easy. Also pretty scary, isn't it?

Let's skip the password complexity audit and jump right into the MITM section, which will be the most interesting one. MITM stands for man in the middle and what this basically means, is that by triggering an MITM attack, all the traffic goes through your device (you are becoming the man in the middle), thus you can easily view and modify the traffic requests.

To perform this MITM attack, simply select the target and then tap on "Man in the middle" button. A new tab will pop up.

Firstly, choose which functions do you want to enable during the MITM attack. There is a SSL Strip option, which is very important because it removes the HTTPS protocol by redirecting it to a HTTP. You will not be able to hijack a session when there is a HTTPS protocol so SSL Strip is essential for hacking accounts.

SSL Strip cannot redirect a direct HTTPS, only when victim goes from HTTP to HTTPS. Means that if a victim opens up Facebook (which is HTTPS), SSL Strip will not work as there is a direct request to a HTTPS protocol. I suggest you keeping this enabled the entire time hacking.

Redirect HTTP - 
This option redirects a website to another one. Simply choose the URL and enable the function.¨

Replace images -
Choose an image which will be replaced with all the images your victim browses through.

Capture download - 
Choose which types you want to capture and enable the function to save all the files your victim downloads. You can also Intercept download by pushing another file to the victim.


Enable the MITM and wait a few whiles. If your victim doesn't use the net (web traffic), you'll have to wait till he/she opens up a browser, downloads a file or just use the network. If everything goes right, a little window saying "IP is vulnerable to MITM attack [or something like that]" should pop up. This means your victim is vunlerable to sniffing, session and password hijacking and many more functions zANTI has to offer.

To see what your victim browses through, see the "logged requests" option. You can also see logged images.



Image above shows logged requests, you can hijack the session by tapping on one of the requests.


To allow each HTTP request individually, use the zPacketEditor. By swyping to the left, you can easily modify the request and send it to the victim.


Alright, now you should know the basics of MITM spoofing attacks, have fun playing!
Just one more thing, always be responsible for what you're doing, don't share private stuff of your victims, After all, it is not that difficult to find out the spoofer across the network.

Read More

Advanced computer hacking using Android phone with zANTI2

Recently I've mentioned the new zANTI2 app from Zimperium and the developer or well-known hacking app called dSploit, and I took a closer look at it. It does pretty crazy stuff indeed!
I was really curious of how remote connection to a host/victim works, so I managed to connect to my PC and I was able to view all my directories and files in it. Pretty cool.

Actually, I don't even know why is the article called "advanced computer hacking", this is pretty easy.



You can see available ports, and finally the directory that I was able to view from my Android phone.


Unfortunately, I was not able to use the Zetasploit which exploits a vulnerability and lets the hacker access Windows UI using VNC but I found a quick video:

This is a pretty neat exploit, that's for sure.

As you can see in the second half of the video, he estabilished a shell connection using ConnectBot and shut down the victim's PC afterwards.

That all, With one app. ZANTI2.
See the original article plus download:
http://androidhackz.blogspot.com/2014/12/dsploit-merges-with-zanti-and-create.html

Read More

How secure are public networks?

Have you ever wondered? I bet you've connected to a public network already but have you realized what danger are you facing by that? Let's find out. Read on to see what a hacker can do with your phone while you're "safely" connected to a public network.

First off, let's say you connect to a public network with unsecured ports, no firewall, VPN, browsing through HTTP websites. Let's see what I can do.

1.  I can easily hack your accounts using my phone and MITM-ARP spoofing attacks, steal your cookies, passwords, see what pictures are you viewing. I can redirect you to other website, change images or inject any javascript to website you're currently on. All of this can be done with apps like dSploit, zANTI and others. Pretty crazy, uh?

2. There's more. If I have a laptop or a PC, I can use the msf metasploit and play with your device a little. I can push a malicious APK onto your device with a preinstalled keylogger or any virus that will attack your device. Using Kali Linux, we can create an APK with remote shell. Then it can be pushed over to your device where you'll install it.

3. While the hacker is inside of a victim's phone, he can basically do whatever he wants with it. Using meterpreter command webcam_list and webcam_snap, he'll retrieve the photos of you from the front camera.

Here's a quick list of what can hacker do while you're connected to a public unsecured network:

• Steal your passwords, personal informations
• View your IP&MAC Adress
• Inject a script to your website
• Redirect you to another website
• Change images on the website
• Intercept download
• Push a harmful APK to your phone
• Access the shell
• Take your photos, intercept webcameras
• Many more!

Now you're probably shocked and asking "how can I secure myself enough when connected to public networks?" The answer is pretty easy.

1. Use the SSL and HTTPS protocol. Most websites like Facebook or Twitter have it already but be sure you have it all the time while you're ON because the hacker can redirect you using SSLStrip.
2. Use VPN or Proxy servers. For complete security, install Orbot from Tor project. If you're rooted and have transparent proxying enabled, you're good to go. Download Orbot 
3. Turn off file sharing and enable Firewall.
4. On Android, use WiFi Protector, this will notice you everytime there's an attacker on your network. If you're rooted, you can protect yourself from the attack.
5. The MITM (Man-in-the-middle) attacks works by redirecting all the traffic through a "man in the middle", making all the traffic slower. If your net speed suddenly gets slower or even stops, there might be a hacker.

Hope these tips help, always remember the security is number one priority!

Read More

Dsploit merges with zANTI and create the most powerful hacking tool for Android

Good news, my dearest fellow hackers. You might already know this but I've just found out that one of the best hacking softwares for mobile phones and tablets running Android, DSploit, has now merged with another huge company ZImperium which makes a powerful, top-class design hacking/security tool for Android called ZANTI. What's more, there's a new app!
Really awesome news. The new app's called ZANTI2 and has really some awesome features. Let's check them out:





As you can see on the images above, there's been a complete redesign to the app. It looks like the ZImperium took care of the design, whereas evilsocket implemented some really sick stuff into the app.

Firstly, there's a Password complexity audit tab which when clicked, attempts to crack weak passwords in the web. You select the dictionary (small, huge, numbers..) and protocol.

The MITM (Man in the middle) section also underwent some improvements. You can now modify each HTTP request as it passes through your device with zPacketEditor.

There's also a new MITM method, you can use either ICMP or the ARP method. SLLStrip works fine, so does the redirect, image replacement and HTML code insertion to the sites.

Another awesome function is called Capture Download and Intercept Download. With these two fucntions you can capture the victim's downloaded file and store it on your device, or you can even replace the downloaded file with a specific one. This takes it to a whole new level.




You can download ZANTI2 for free direclty on dsploit.net

Read More

[TUTORIAL] Cracking WiFi - How To Hack WEP Router Easily on Android? (Using aircrack-ng)

 There have been plenty of WiFi hacking tutorial so I've finally decided to make one. In this one we'll be hacking a WEP secured WiFi using aircrack-ng and bcmon for Android. Let's do it!

We obviously need a rooted device for this action. Unfortunately, we also need a monitor mode for Android, which isn't currently supported for all devices. Some known are Nexus7, Nexus One, Galaxy S2 and some more. You can check your luck HERE.
On the brighter side, to install Bcmon, you don't need to flash or compile anything anymore, just install this APK:

• DOWNLOAD BCMON 

After downloading, open it and enable the monitor mode. If it continuously crashes on your device, it's mostly likely due to non-compatibility. Bummer.

If everything went as expected, you're free to run bcmon terminal. This will launch the command prompt where we'll be finding the key for our WiFi.

1. Type airodump-ng to the terminal. Wait till it loads.
2. Type airodump-ng wlan0 
3. Write down the MAC adress of the router.
4. Now we need to collect some packages so we can crack the key. Type:
   airodump-ng -c channel# --bssid MAC address -w output ath0
5. Wait till you got about 30 000 packets.
6. Now you're ready to crack. Type
   aircrack-ng output*.cap
7. This will create an output file. While KEY FOUND! message appears, check the output. Make sure the probability of the key is the highest possible.
8. Now you got the key! Enter it without ":" (e.g: ab:cd:ef, you enter abcdef).

It doesn't have to be that difficult!

Hacks are getting more and more easier to use and more available even for non-professional users. An XDA member deviato has published an awesome app that can do all of this cool stuff on its own.

Basically, the only thing you do, is to push some buttons and than wait till the key is found.

It has three section: fake autoh, deauth/capturing, and crack section.

Tutorial,download and more info can be found in the older article:
http://androidhackz.blogspot.com/2013/10/functional-aircrack-ng-on-android-for.html


Happy hacking!

Read More

[GUIDE] Kali for Android - Hacking Made With Style | Rebirth of Backtrack

I'm pretty sure you all have already heard about one of the most complete and one of the best hacking tool called BackTrack. It contains almost every hacking tool you may need including the Aircrack-ng, which cracks secured WiFi (pretty fast, I can say). Unfortunately, Backtrack has been stopped maintained and it's not supported anymore. The new generation has come: Kali.

Now as you might expect, Kali is developed either for PC's but also for Android CPU architecture.

It's not that hard to install Kali on your Android device and if you have enough space on your phone, you're good to go.

Installing Kali

First of all, download Linux Deploy app. This app lets you to easily install any Linux OS that's supported for your phone.

Open it, setup the distribution (Kali) and setup your screen VNC width and height to resolution of your phone (e.g 1920x1080 if you have Nexus 5, Htc One and other FullHD phones).

After setting, click on install. Make sure you have enough space on your phone (about 7GB is required). After isntalling, click on reconfigure. After reconfiguring, click the START button and mount the system.

Download Android VNC Viewer.

Setup it like this:

Nick: Linux

Pass: changeme

Port: 5900

Color format set to 24-bit

Hit connect.

Open terminal, type sudo apt-get install software-center to install Linux software center.

Now you're running Kali!

To stop it, just go back to your Linux Deploy app and stop the service. That's pretty much all.

Read More

[APK] dSploit - The All-in-one hacking tool!

There are many hacking apps and tools providing many useful and less useful features such like WiFiKill, Faceniff, DroidSheep and others. Up till now nobody's ever created a toolbox that would actually provide all the hacking features in one application! However, now there's such an application. Meet dSploit.

So, what does this app has to offer?
The answer is - just everything. Password recovery, kill conections, session hijack (FB/Twitter/Many more account hack), site redirect, image replace and many, many more.

dSploit mostly offers the MITM (Man In The Middle) attacks, which is redirection of sites, connection killer, session hijacker or script injector - you can inject a script to any website if you want - it can be message or whatever you want.

dSploit is available in two versions - stable and nightly. As you might know, the nightly is experimental and might cause problems but brings out new features and stuff. Both of the versions are free.

The official site of dSploit can be found on dsploit.net - there you also find the nightlies.

• DOWNLOAD v1.0.31b (Stable) 

Attention: Good news, dsploit merges with Zimperium company and create the most powerful hacking tool for Android, free download!
Please check the newer article:
http://androidhackz.blogspot.com/2014/12/dsploit-merges-with-zanti-and-create.html 

Might interest you:

• Big Pack - The Best Hacking Apps Of All Time (DOWNLOAD)

Note the application and its features are for educational purposes only. The abuse may be illegal in your country.

Read More