Hacking

1. H@kin9 & vulnerability
assessment in android
By,
J@$h.
13501A1908

2. contents
 What is hacking
 Who are hackers
 Hacker types
 Practical attacks
 Phishing attacks
 Dos attacks
 Clickjacking attacks
 Mobile hacking

3. What is computer hacking &
who are hackers
 Computer hacking
Hacking is simply gaining
unauthorized access to data
in a system or computer
 Hacker
The person who hacks
 Cracker
System intruder/destroyer

4. Who are hackers
 Someone who bypasses the system’s
access controls by taking advantage of
security weaknesses left in the system
by developers
 Hacker means cracker nowadays

5. Hacker types
 White hat hackers
 Black hat hackers
 Grey hat hackers

6. Phishing attacks
Phishing is the illegal attempt to acquire sensitive
information such as usernames, passwords, and
credit card details (and sometimes, indirectly,
money), often for malicious reasons, by
masquerading as a trustworthy entity in an
electronic communication.
Types
 Deceptive
 malware

11. Clickjacking attacks
 It is a malicious
technique of tricking a web
user into clicking on
something different from
what the user perceives
they are clicking on web
pages

12. Exploit process

13. A Simple example

14. The simple example source code

15. Advanced clickjacking techniques

16. Exploit process for Facebook

17. Likejacking on the wild

18. Mobile hacking
 Bypassing android lockscreen
 Modifying apk data
 WhatsApp hacking
 Modifying apks

19. Bypassing android lockscreen

20. Modifying apk data

21. Modifying apk data

22. WhatsApp cracking

24. Modifying apks
Making of the apk

25. Modifying apks
Reversing the apk

26. Getting our hands dirty
Its Demo time !!!

27. Android malwares

28. Memories of the past
Some famous android malwares …
 Trojan-SMS .Fakeplayer.a
 Geinimi
 Snake
 DreamDroid
 GGtracker

29. Trojan-SMS .Fakeplayer.a
 simplest malware till
date
 Sends SMS to premium
members
 Mainly distrubuted
through porn/media
apps
 Stop watching porn? :0

30. Geinimi
 most sophisticated malware till date
 Botnet like capabilities
 Mainly distrubuted through
porn/media apps
 Suggests infected legimate apps

31. Geinimi(continued)
Botnet command capabilities…
 Call-call a number
 Email-send an email
 Sms record-sends all the sms’ses to the
server
 Install-install an app
 Shell-get a shell
 Suggests infected legimate apps

33. Creating our own android
malware
Expected time < 5 min

34. Exploit process

35. The game is over :’(

36. The game is over :’(
The game isn't over :)
Can create malwares not detected by the
antivirus
Disable the antivirus
Use ur own black hat creativity

37. Stored passwords
 Browser passwords stored in database
called webview.db
 Got r00t ?

38. Insecure data storage