Black hat android?

[4starsoftware]

Just wondering,partly because im learning to program apps,are there currently any bh android apps? Ive looked and havent found any. Any that you'd like to see available?

 

[Dally]

What would you mean by a black hat android app? Do you mean like a bots and stuff or apps created by people on BlackHatWorld?

 

[smash-wear.nl]

 

[4starsoftware]

What would you mean by a black hat android app? Do you mean like a bots and stuff or apps created by people on BlackHatWorld?

Both,actually. I use my droid a lot and would like to see if i could do some of my bookmarking,pinging and keyword research on it. Havent seen those kind of apps.

 

[Chris22]

Haven't been developing, but I've been doing a good deal of reverse engineering work with android lately.

 

[4starsoftware]

Interesting, can you elaborate at all about what you've been reverse engineering?

Haven't been developing, but I've been doing a good deal of reverse engineering work with android lately.

 

[Chris22]

Interesting, can you elaborate at all about what you've been reverse engineering?

Been digging around the internals of some popular apps looking for ways to bank from them, particularly instant messaging clients such as dating/flirting apps. The goal is to be able to connect to these networks via a desktop connection for now.

 

[markhenry121]

From Google app market, i download and checking, it's working, it's paid version you can check this

play.google.com/store/apps/details?id=com.wMYBLACKHATWORLDFORUMAPP

 

[Dally]

Been digging around the internals of some popular apps looking for ways to bank from them, particularly instant messaging clients such as dating/flirting apps. The goal is to be able to connect to these networks via a desktop connection for now.

That is actually genius... I'm pretty sure you can do the same thing by spoofing traffic on ios

 

[Chris22]

That is actually genius... I'm pretty sure you can do the same thing by spoofing traffic on ios

I started my research with iOS, mainly because I have an iPhone. The biggest problem I ran into though was that iOS apps are harder to reverse engineer because all function calls are routed through msgSend(), and you end up with a really annoying/worthless call graph.

I'll probably release a few tools on here once I'm done :d

 

[Dally]

I started my research with iOS, mainly because I have an iPhone. The biggest problem I ran into though was that iOS apps are harder to reverse engineer because all function calls are routed through msgSend(), and you end up with a really annoying/worthless call graph.

I'll probably release a few tools on here once I'm done :d

Can you not just record the traffic going to and from the iPhone and then seeing whether it is possible to exploit it? Ah, I thought they might be, Apple are pretty strict usually.

Would be awesome if you could, always something that I've looked at getting into

 

[Chris22]

Can you not just record the traffic going to and from the iPhone and then seeing whether it is possible to exploit it? Ah, I thought they might be, Apple are pretty strict usually.

Would be awesome if you could, always something that I've looked at getting into

You can, but sometimes you hit a security roadblock, so you need to dig deeper

Instagram for example encodes their postdata (for account creation) like this:
(Hmacsha256 hash of the postdata).{postdata as json}

So in this case, replicating a http request is not enough. (you need to also install your own security certificate on the iphone so that you can decrypt https traffic)

The key they use for the hash was returned from a function written in native code. Once you reach this point and find the key you can sign your own requests making them look authentic.

It's not a case of Apple being strict either, it's just poor language design (in my view)

 

[Dally]

You can, but sometimes you hit a security roadblock, so you need to dig deeper

Instagram for example encodes their postdata (for account creation) like this:
(Hmacsha256 hash of the postdata).{postdata as json}

So in this case, replicating a http request is not enough. (you need to also install your own security certificate on the iphone so that you can decrypt https traffic)

The key they use for the hash was returned from a function written in native code. Once you reach this point and find the key you can sign your own requests making them look authentic.

It's not a case of Apple being strict either, it's just poor language design (in my view)

Oh right, I bet that hash is pretty hard to decrypt, isn't it? Have you found the key for any applications? I'm thinking about whether or not I want to embark on what sounds like a pretty big project myself

Is android the same or are they more relaxed about security compared with Apple?

 

[Chris22]

Oh right, I bet that hash is pretty hard to decrypt, isn't it? Have you found the key for any applications? I'm thinking about whether or not I want to embark on what sounds like a pretty big project myself

Is android the same or are they more relaxed about security compared with Apple?

It's not about breaking the hash, it was about finding the key so i could sign the data myself.

This is app specific, different apps have different security measures in place, some have none at all.

I was just giving that as an example