Download .apk file from market

1. Search in market for the app you want to decompile and install it on your phone.
2. Install Astro File Manager from market (link). Open Astro > Tools > Application Manager/Backup and select the application to backup on to the SD card .
3. Mount phone as USB drive and access '\backups\apps\' folder to find the apk of target app (lets call it targetapp.apk) . Copy it to your local drive.

Decomiling apk to Dex format

1. Download Dex2Jar (link) (Android runs applications which are in Dalvik Executable (.dex) format).
2. Run the command to convert apk to jar

dex2jar targetapp.apk file(./dex2jar targetapp.apk on terminal)

File ‘targetapp.apk.dex2jar.jar’ is created

Viewing/Decompiling the Jar files to Java

Method 1 : Use JavaDecompiler (JD)

1. Open ‘targetapp.apk.dex2jar.jar’ with jd-gui (link)
2. File > Save All Sources to sava the class files in jar to java files.

Method 2: JAD

1. Extract contents of jar file on to a folder named src. Use and unarchival utility like 7zip
2. Keep ‘src’ folder in the same directory where JAD and targetapp jar is present
3. Open JAD in cmd and execute the following command
4. jad -o -r -sjava -dsrc src/**/*.class (./jad on terminal)

Now src will contain decompiled Java files ready for manual code review.

Tools Used

1. Sample app – RemoteDroid (Opensource – link)
2. Astro File Manager (Android Market – link)
3. Dex2Jar (link)
4. jd-gui (link)
5. JAD (link)

Dex2Jar Info
App Name	Dex2Jar
License	free
Type	portable code
App URL
More Info	link

Features

There are a number of features which CAT has to enable a wide variety of testing to be conducted:

• Request Repeater – Used for repeating a single request
• Proxy – Classic Inline proxy
• Fuzzer – Allows for batch of tests to be sent to a server for brute forcing, parameter fuzzing, forced browsing etc.
• Log – View a list of requests to sort, search repeat etc. Allows for a sequence of requests to be repeated and modified.
• Authentication Checker – Two synchronised proxies which can be used to check authentication and authorisation controls.
• SSL Checker – Request a specific page with various SSL ciphers and versions.
• Notepad – A text/RTF editor which can be used as a scratch pad for conversions etc.
• Web Browser – An integrated web browser with proxy pre-configured based on the Internet Explorer’s rendering engine.

Reasons to use CAT

There are a number of differences between CAT and currently available web proxies. Some key differences are:

• Uses Internet Explorer’s rendering engine for accurate HTML representation
• Supports many different types of text conversions including: URL, Base64, Hex, Unicode, HTML/XML, SQL and JavaScript no Quotes
• Integrated SQL Injection and XSS Detection
• Synchronised Proxies for Authentication and Authorisation checking
• Faster due to HTTP connection caching
• SSL Version and Cipher checker using OpenSSL
• Greater flexibility for importing/exporting logs and saving projects
• Tabbed Interface allowing for multiple tools at once e.g. multiple repeaters and different logs
• The ability to repeat and modify a sequence of requests (particularly useful in SSO testing)
• Free!

Proxy & Authentication Checker

I generally use multiple browsers during web app assessments. This helps me to analyze the difference in the responses received from the server for same requests sent with different login credentials. This can also help me during the tests performed for horizontal/vertical privilege escalations. CAT listens to multiple ports at the same time, which means that you can use 2 browsers (or browser profiles) and direct the traffic to one proxy – CAT. CAT displays the traffic from different sources in different tabs.

Multiple Browsers Via Proxies

CAT Listening Via Multiple Proxies

While doing the authentication testing, we can login with the user having higher privilege in browser 1 and user with lower privilege in browser 2. Access various pages in browser 1 and identical requests are sent using the cookies stored in browser 2. CAT leaves us the response pairs behind for manual analysis.

Auth Checker

SSL Strength Check

Why use SSLDigger/Open SSL if your proxy has built-in SSL strength checking feature.

SSL Strength Checker

Download:   (More Info here )

“The tool works by submitting your HTML forms and substituting the form value with strings that are representative of an XSS attack. If the resulting HTML page sets a specific JavaScript value (document.vulnerable=true) then the tool marks the page as vulnerable to the given XSS string. The tool does not attempting to compromise the security of the given system. It looks for possible entry points for an attack against the system” – Security Compass

XSSMe addon is a sidebar tool where we can see all the details of the forms in the current page and select the fields we want to test for XSS. To make things simpler, we have 2 buttons which can be used to test all the fields for Top/All XSS tests.

Click on the image at the right to view it larger

Once we click on test button, we get a dialog box which displays the progress of the running tests. It takes few minutes to complete the tests and depends on the Internet connection speed. We can easily tweak the options if we need this to run quickly and is explained in the latter part of the post.

Working

XSSMe detects the XSS vulnerabilities by automatically submitting the forms which has its field values tampered with XSS scripts and then analyses the response to check whether the output was encoded or not. Each page is loaded in a new tab and then the values are submitted and the tab are closed automatically before testing for the next script.

XSSMe in Action

XSSMe Options

There are few options available in this addon which can help us tweak the results we are looking for. We can change the character set, which XSSMe uses by default, to speed up the process. We can add/remove custom XSS vectors (XSS scripts). The whole list can be exported so that it can be reused later.

Final Report

Once the assessment is complete, final report is displayed which gives us the information on which fields are vulnerable and which XSS scripts got executed. At a quick glance we can check the characters which came out unencoded from the ‘XSS Heuristic Test Results’ section. From the below screenshot, we can find that all the special characters which are used for constructing malicious scripts were found to be unencoded when passed through field1. This implies that field1 is vulnerable to XSS attacks.

Download XSSMe :

(To be continued…)

You can even do more than starting programs with the built-in file management functions like Copy, Rename, Makedir, Delete, End Process, Kill Process and Text to Clipboard. Batchrun batch files can be launched from Explorer or placed in StartUp folder or on the Desktop.

Check how to enable and disable USB devices with batch programming

Features

• Launch files of any filetype and dialup connections
• Internal commands: Run, Copy, Rename, Makedir, Delete, DelTree, End Process, Kill Process, Text to Clipboard
• Wildcard support for Copy, Delete and DelTree
• Makedir nested folder creation
• Drag and Drop between Explorer and Batchrun
• Support for date and time tags
• Command line parameters can be passed to Batchrun script files
• Save batch files directly to Startup and Desktop

Note: If you are using the portable version of BatchRun make sure that you associate ‘*.brs‘ files with this application.

Download BatchRun :

More Info at BatchRun HomePage

SmartDefrag is one of the best free and award winning defrag tools available in the market.

SmartDefrag Screenshot

We have an options to optimize files after the defrag phase. This will further enhance the whole process and once the defragmentation is complete, a summary report is displayed.

Final Report

Features

• Efficient Defragmentation
• Optimize Disk Performance
• Work Automatically in the background when idle
• Options to schedule the task
• Free

Comparison Chart

I found this chart in their site, where they have compared their features with similar other tools

Comparison Chart

Download SmartDefrag :

[Note : To make this portable, download the exe and extract the files as mentioned in here uniextract]

Operations

• Inserts a linebreak.
• Inserts a tab.
• Move the mouse with the arrow keys.
• Googles selected text, if its a URL then its opened in browser
• Change case of selected text
• Dsiplay AutoHotkey help file.
• Terminate active application
• Disables the Windows keys. For use with fullscreen games.
• Toggle active window “Always On Top”.
• Eject/Retract the CD tray
• Turn Monitor off
• Hide/Unhide the active window.
• Unhide all windows that were hidden this way.
• Toggle Window Transparency
• Pastes clipboard contents as plain text OR path of file/folder
• Toggle text wrapping to a specific width
• Quick shutdown menu
• RegEx replace on selected text.
• Appends BBCode tags for selected text
• Appends HTML tags for selected text
• Comments/Uncomments a block of AutoHotkey code.

Gallery

Have mentioned few features below.

1. Window Transparency

Toogle Window Transparency

2. Always On Top

AlwaysOnTop

3. Custom Shutdown Menu

Custom Shutdown Menu

5. HTML Tag Completion

HTML Tag Completion

6. Paste File Path

Paste File Path

7. Terminate Application

Terminate Application

AppKeys CheatSheet

Appkeys Cheatsheet (Click to Enlarge)

Download Appkeys : (Rename the file to appkeys.ahk)

Note: Check the authors post for the latest ahk file.

1. Manipulate integer values:

Click on Load URL and then Split URL. Now select the Integer under interest and click on the INT +1 or INT -1 as required. This will automatically load the page with the new modified param value. This can help us while checking for ‘forceful browsing’ or ‘revealing hidden pages’ kind of tests.

Change Integer Value

2. Calculate MD5 of selected string

Some of the sites amateur developers might do poor encoding for the sensitive data which is communicated between server and the client. But with Hackbar the values can be easily decoded with a single click.

Hash Selected Value

3. Calculate MySQL Char code of selected string.

MySQL CHAR() button can help us in calculating the charcode of the selected string. This can help in injecting the char code value during some tests which usually are not stripped of while performing server side validation.

Calculate Char Code

Features

• Increment/Decrement the numeric value of the params (e.g. change pageid to reveal hidden page, session ids etc)
• Above operation on HEX values
• SQL and XSS vectors string construction
• Built-In string encryption options (MD5, SHA-1, SHA-256)
• Encode and Decode URL (Base 64, URL Encoding)
• Strings for performing BoF attacks.

Download Hackbar :

PVD Dissected ScreenshotDissected

Pressing the ‘New Movie Master’ Button from the toolbar (Cntrl+M) will invoke a screen as shown below. Just enter the title and click ‘Ok’ to get all the movie info and the posters automatically added to your database.

Tip: Instead of adding the title and the browsing for the movie file, just browse for the movie file first; the movie title will be added automatically by extracting the name of the file.

The service which provides the movie info can be modified from the preferences.

New Movie Master

There are various views in the Statistics window which displays charts and helps us in analyzing all the movies in our repository in a single shot.

Movie Statistics

Features

• Movie details like IMDB rating, cast, plot etc are downloaded automatically.
• Movie posters are also downloaded from Amazon and other popular sites, which can be customized.
• Highly flexible interface and layouts.
• Able to play the movies within PVD.
• Able to categorize movies into ‘seen’ and ‘wish’ categories.
• Variety of statics can be queried from the database.
• Its free and portable
• There are much more which are not listed… Try and discover more…

PVD Download Page :

More Info at PVD Homepage

Note: For portable mode, download the Zip version from the downloads page

In this post I’m listing down 3 types of broken link checkers and its features, a portable one, as a wordpress plugin and an online app. Read this article, choose your link checker and do mention in the comments.

1. Portable Tool – Xenu’s Link Sleuth

Xenu’s Link Sleuth is a free tool which can be used to verify the status of the links in your site. This tool is a must have for any web master/blogger who uses a good amount of external/internal links in their sites.

This tool generates a neat report in html format and gives all the information regarding the link status. It also gives us a quick summary at the end of the report

Report Summary

Features

• Simple user-interface
• Can re-check broken links (useful for temporary network errors)
• Simple report format
• Executable file smaller than 1MB
• Supports SSL websites (“https:// “)
• Partial testing of ftp and gopher sites
• Detects and reports redirected URLs
• Site Map

Check the Wiki article on Link Sleuth here

Download Link Sleuth : (More Info @ Xenu Link Sleuth Homepage)

2. WordPress Plugin – Broken Link Checker

This plugin will monitor your blog looking for broken links and let you know if any are found.

Broken Link Checker WP Plugin

Features

• Monitors links in your posts, pages, the blogroll, and custom fields (optional).
• Detects links that don’t work and missing images.
• Notifies you on the Dashboard if any are found.
• Also detects redirected links.
• Makes broken links display differently in posts (optional).
• Link checking intervals can be configured.
• New/modified posts are checked ASAP.
• You view broken links, redirects, and a complete list of links used on your site, in the Tools -> Broken Links tab.
• Each link can be edited or unlinked directly via the plugin’s page, without manually editing each post.

Install Broken Links Checker :

3. Online Version – iWebTools Broken Link Checker

This is the simplest and online version of the previously mentioned broken link checker. Just submit the URL you want to check for and the broken links are represented by the ‘cross’ mark. The links are checked in the background and displayed through Ajax so we dont have to wait and refresh the page for each check. Go to iWebTools

Broken Link Checker Online

Check iWebTools Broken Link Checker

Many a times we might want to update the files to the newer version for that we possibly search through the our entire workspace then find the instances of the old file, go to each folder and overwrite the old with the new one. This process needs to be repeated as many times as the number of search results displayed. FileReplicator does all these tasks automatically. With this tool we have to specify the search folder path and the path of the new file which replaces the search results.

Features

• Option to specify the folder where the files are to be searched
• Searches and replaces the files with the specified new file in 3 simple steps
• Search results displayed along with the path before requesting for replace operation
• Confirmation option can be set for each file replace so as to exclude certain files
• Can be run as Portable Application

Gallery

Download FileReplicator: (Go to FileReplicator Homepage)