Android Tamer BH USA 2016 : Arsenal Presentation
A presentation at BlackHat USA 2016 in in Las Vegas, NV, USA by Anant Shrivastava
ANDROID TAMER
WHAT IS ANDROID TAMER Single Point of Reference / Resources for Android Contains 1. Virtual machine for Android (Security) Professionals 2. Debian 8 Compatible Tools Repository 3. Custom Emulator for arm devices (Work In Progress) 4. f-droid repository of tools (Work in Progress) 5. Documentation (tools.androidtamer.com) (ever evolving) 6. KnowledgeBase (kb.androidtamer.com) (Work in Progress)
WHO USES ANDROID TAMER 1. Trainers 2. Security professionals 3. Developers 4. iOT Hackers Friendly Plug Catch Sneha Rajguru using AndroidTamer at BSidesLV (whole day 3 Aug 2016) Defcon Workshop (5 Aug 2016 : 10 AM - 2 PM) Catch Anto Joseph using AndroidTamer with Droid-FF at Arsenal Booth (4 Aug 2016 - 2 PM - 3:50 PM) Defcon Workshop (6 Aug 2016 : 2 PM - 6 PM)
OPENSOURCE ALL THE WAY 1. Automated VM Building Process : Vagrant Ansible script (https://github.com/AndroidTamer/VagrantBuild) 2. Automated Debian Package Building Scripts (https://github.com/AndroidTamer/Packaging_Tools) 3. Documentation source markdown (https://github.com/AndroidTamer/Tools) 4. Open to all https://github.com/AndroidTamer 5. To be added 1. APK repository 2. apk building process 3. emulator building process 4. Live ISO Creation 5. and more
VIRTUAL MACHINE Swiss Army knife for Android Security Professionals. Supports VirtualBox VMWare Vagrant / Ansible
WHY Saves time while Finding and installing tools Configuring them Ensuring all other tools are still working Multiple language versions (java, python, perl, ruby more) Managing updates of each tool
TOOLS INCLUDE 1. adb / fastboot / android-sdk 2. dex2jar / enjarify 3. apktool 4. jad / jd-gui / jadx / jadx-gui 5. drozer / MobSF / jaadas 6. DFF / ddrescueview 7. SQLiteManager / SQLiteMan 8. Burp Free / OWASP-ZAP 9. pidcat 10. Droid-FF (Fuzzing Framework) 11. dextra, simplify, imgtool 12. and more….
CUSTOM FEATURES 1. Easy Management of multiple devices 2. One liner commands (apk2java, drozer_start etc) 3. Scripts for automated analysis 4. So ware update managed over apt-get repository (alpha phase) (http://repo.androidtamer.com/) 5. All Tools pre-configured in PATH (no need to switch directories) 6. ZSH with autosuggestion
TOOLS REPOSITORY
REPOSITORY IN USE
THAT’S NOT IT
@ TWITTER Follow Us @AndroidTamer to get Latest Android News
FB/ANDROIDTAMER
SECURITY ENHANCEMENTS https://kb.androidtamer.com/android_security_enhancement/
LEARN ANDROID https://androidtamer.com/learn_android_security
DEMO TIME 1. Application decompiling 2. Automated assessment (drozer_checks) 3. Multi devices management (adb list) 4. MobSF 5. Droid Fuzzing Framework 6. Build / Enhance your own Distro (Debian compatible Repository)
DEMO: APK2JAVA
DEMO: DROZER_CHECK
DEMO: ADB LIST
- Add entries in ~/.adb_list 2. format of entries “ABC;SERIALNO” 3. echo “abc;1234567890” >> ~/.adb_list
DEMO: MOBSF
DEMO: DROID-FF
BUILD YOUR OWN
PACKAGE REPOSITORY
HOW TO CONTRIBUTE 1. Test the tools, suggest changes or improvements / enhancements 2. Use / Promote / Write about the tool 3. Add tools : https://github.com/AndroidTamer/Packaging_Tools/Build 4. Report / track / suggest / fix Issues 5. Test Repo on (https://repo.androidtamer.com) other distributions (Kali / Ubuntu / other pentest distro and more ) Report all issues(https://github.com/AndroidTamer/Tools_Repository/issues) How to setup : (https://tools.androidtamer.com/General/repo_configure/)
THANKS Follow @AndroidTamer for all Updates
AndroidTamer started out as a VirtualMachine for Android (security) Professional, we are slowly making Android Tamer a single point of Reference for Android Professionals. We will be demoing multiple projects that we have created under AndroidTamer umbrella,
-
AndroidTamer Debian based VM Customized to the core debian 8 based virtual machine environment with preloaded tools for usage in Android Pentesting
-
Android-emulator customised for pentesting (both x86 and arm version) Customized emulator to be used in place of a device in both x86 and arm version which can be coupled with Tamer VM.
-
Most extensive Tools Documentation https://tools.androidTamer.com: hosts the most extensive single location documentation for largest array of tools needed for android security.
-
DEB / YUM Repository for tools / software distribution. https://repo.androidtamer.com: Only repository which is actively maintained and support both debian and Redhat distributions.
-
Knowledge Base https://kb.Androidtamer.com: contains various documentation around android which is useful to many people around the world. includes our very famous “Android Security Enhancement” sheet.
All this will be part of the jam packed demo’s that will be presented at Black Hat USA Arsenal.
Resources
The following resources were mentioned during the presentation or are useful additional information.
Buzz and feedback
Here’s what was said about this presentation on social media.
