Microsoft PowerPoint Schreibschutz Passwort entfernen

Linux – information gathering (part 4)

Kategorie: IT-Security Schlagwörter: Linux

Hack-IT: Reverse Engineering einer Android App

2017-09-28 von Mario

Bei diesem Hack-IT geht es um eine Android App, welche im Google Play Store erhältlich ist. Die Aufgabe besteht darin, dass einzugebende Passwort in der App herauszufinden.

Link zur App: https://play.google.com

Schritt 1

Für eine Analyse der App muss diese heruntergeladen werden. Dafür gibt es zahlreiche Tools, ich habe die Website apkpure.com verwendet. Im Suchfeld auf der Seite die Adresse der App eingeben und danach den “Download” Button betätigen. Daraufhin steht die APK Datei zur Verfügung.

Schritt 2

Mit der Software dex2jar können DEX Dateien in JAR Dateien umgewandelt werden. Nach dem Download der Software sourceforge.net/projects/dex2jar/ wird das Archiv noch entpackt

unzip dex2jar-2.0.zip

und Rechte vergeben.

chmod -R +x dex2jar-2.0/

Schritt 3

Jetzt kann die APK Datei umgewandelt werden.

./dex2jar-2.0/d2j-dex2jar.sh CanYouHack.apk

Danach steht die Datei “CanYouHack-dex2jar.jar” zur Verfügung.

Schritt 4

Als nächstes das Programm JD-GUI (jd.benow.ca) herunterladen, mit welchem der Inhalt der JAR Datei ganz einfach angeschaut werden kann.

Daraufhin heißt es suchen, in der Klasse “Mobile1” wird der hilfreiche Text “… right password!” aufgeführt.

Die IF-Anweisung darüber verrät uns das gesuchte Passwort:

if (paramAnonymousView.getText().toString().equals("1337"))

Das gesuchte Passwort lautet: 1337 und das Hack-IT ist gelöst.

Kategorie: IT-Security Schlagwörter: Android, APP, hack-it, hackit, RE, Reverse Engineering

Linux – information gathering (part 3)

2017-08-23 von Mario

This is the third part of Linux – information gathering.

Log files

In log files you can found useful information, just take a short look at the files in the following directory:

ls -alh /var/log

A detailed explanation can be found here:

File System

The command “df” reports file system disk space usage.

df -h

With the “mount” command, you can check if there are any attached drives.

mount

Check if there are unused file systems.

cat /etc/fstab

Exploiting

The command „find“ will help to find installed development tools. With these tools, it is possible to exploit the current maschine.

find / -name python*

You can also search for “perl*” or “gcc*”.

The following programms “wget”, “nc”, “ftp” and “curl” can help to transfer software to a maschine. You can find the software in the following way:

find / -name wget

Previous parts

Kategorie: IT-Security Schlagwörter: Linux

Linux – information gathering (part 2)

2017-07-27 von Mario

This is the secound part of Linux – information gathering.

Peripheral Devices

With the following commands, you get information about peripheral devices. The command “lsusb” lists all USB devices.

lsusb -l

The command “lspci” lists all PCI devices.

lspci -l

The command “lpstat” lists all printer devices.

lpstat -a

Users Information

To find out who you are, you can use „id“. That command prints real and effective user and group IDs.

id

The „who“ command shows who is logged on.

who

Indicates who is logged on the system and what he is doing.

With „last“ you can get a list of the last logged-in users.

last

Take a look in the home directories, if you have access to them.

ls -al /root/
ls -al /home/

In this home folders can more user information be found.

cat ~/.bashrc
cat ~/.profile

Some interesting mail information can be found in the following folders:

cat /var/mail/root
cat /var/spool/mail/root

Information about user rights can be found in the following configuration files.

cat /etc/passwd
cat /etc/sudoers
cat /etc/group
cat /etc/shadow

Private Key Information

The private keys can be found in the following folders:

ls ~/.ssh/*
ls /etc/ssh/*

Previous parts

Thx @Programming Wolf

Kategorie: IT-Security Schlagwörter: Linux

Linux – information gathering (part 1)

2017-04-03 von Mario

Sometimes you need a very fast overview over a current Linux system. In this case, the next commands can be very helpful.

System

With the following commands, you get information about the kernel.

uname -A
cat /proc/version
dmesg | grep Linux

Under Redhat you can use this command.

rpm -q kernel

Distribution

Find release information on Debian systems

cat /etc/lsb-release

and under Redhat systems use

cat /etc/redhat-release

Environmental Variables

In the following config files, you can read system wide environmental variables about the user’s shells.

sudo cat /etc/profile
sudo cat /etc/bash.bashrc

In your home directory, environmental variables are set as well.

cat ~/.bash_profile

In the file “bashrc” contains commands, aliases and functions from user’s bash.

cat ~/.bashrc

This file is read and executed every time a login shell exits.

cat ~/.bash_logout

env is a shell command for Unix and Unix-like operating systems. The command “env” is used to print a list of environment variables.

env

The command “set” shows the system variables with the corresponding contents.

set

Services

Print all processes with the owner’s user name.

ps aux

The command “top” display Linux processes.

top

Applications

The following commands list all installed applications.

ls -alh /usr/bin/
ls -alh /sbin/
dpkg -l
rpm -qa

Job Scheduler

Lists all jobs form the current user’s scheduler.

crontab -l

This command gives a detailed view for all defined jobs.

ls -al /etc/cron*

Previous parts