Black Hat Ethical Hacking
Offensive Security Tool: Pegasus Spyware – Decompiled

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: Pegasus Spyware – DecompiledPost Views: 26 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes

Offensive Security Tool: Pegasus Spyware – Decompiled GitHub Link Pegasus Spyware – DecompiledPegasus is a spyware developed by the Israeli cyberarms firm NSO Group that can be covertly installed on mobile phones (and other devices) running most versions of iOS and Android.
The 2021 Project Pegasus revelations suggest that the current Pegasus software can exploit all recent iOS versions up to iOS 14.6. As of 2016, Pegasus was capable of reading text messages, tracking calls, collecting passwords, location tracking, accessing the target device’s microphone and camera, and harvesting information from apps.
See Also: Bluetooth Bugs Open Billions of Devices to DoS, Code Execution
The spyware is named after Pegasus, the winged horse of Greek mythology. It is a Trojan horse computer virus that can be sent “flying through the air” to infect cell phones.
See Also: Hacking stories – The first botnet hijacker aka the Zombie King
This is the decompiled version by jonathandata1 which will help security researchers, even the defensive team understand how this spyware works, in order to look for mitigating it from being exploited, growing the awareness and importance of Offensive Security.
See Also: Offensive Security Tool: Starkiller Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/FIbbZME-90x90.png Offensive Security Tool: Starkiller1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/0URVvVK54SOsx1MEq-90x90.png Offensive Security Tool: FFUF2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/687474703a2f2f633666632e696f2f77617263616e6e6f6e2d636c692e706e67-90x90.png Offensive Security Tool: Warcannon3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/2-7-90x90.png Offensive Security Tool: Mimikatz4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Screenshot_20210729_145513-90x90.png Offensive Security Tool: Ruler1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/VoIPsniffer-90x90.png Offensive Security Tool: VoIPmonitor Sniffer1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/57177630ce750eb1ad40649424d04b9c-90x90.jpeg Offensive Security Tool: Veil2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Untitled-design-90x90.png Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE)2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/unknown-e1625210118591-90x90.png Offensive Security Tool: GoSpider2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/3Gn0bEI-e1624621931936-90x90.png Offensive Security Tool: Pixload2 months ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Offensive Security Tool: Pegasus Spyware – Decompiled first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

adalanche - now with machine collector
https://www.reddit.com/r/redteamsec/comments/ph4s1t/adalanche_now_with_machine_collector/

Just a quick before-the-weekend-update on adalanche (https://github.com/lkarlslund/adalanche), which was very well recieved here when I posted about it a month ago. It's an Active Directory visualizer which gives you instant results as long as you have a domain user account. I've just added a collector which can be run on member machines (this is probably more a blue team thing rather than a red team?). It grabs lots of information about computers, and this can be loaded into adalanche to show you who are local admins, can RDP onto systems or do DCOM to a system. It also uses a novel way to figure out who logged on and when, without requiring auditing to be set up or access to the security event log. So it can be run without admin privs - but ofcourse you need some sort of way to get it to run on lots of computers, thus it's probably more for the blue side. If you wan't to play around with it, you can grab binaries from here: https://github.com/lkarlslund/adalanche/actions/runs/1198052978 Basically you will run the adalanche-collector.exe on a system and provide the "-outputpath" parameter with a centralized path to dump the information. The run adalanche analyze like normally with the -collectorpath pointing to the JSON files you just produced. In the JSON files are also information about shares, software inventory etc. so I'll add more analysis to this when I have the time. It can then be used to find interesting shares without having to network scan for them and find high value targets from the software inventory (SCCM for example). I'd love feedback if you try this in the real world :-) Have a nice weekend! submitted by /u/lkarlslund (https://www.reddit.com/user/lkarlslund)
[link] (https://www.reddit.com/r/redteamsec/comments/ph4s1t/adalanche_now_with_machine_collector/) [comments] (https://www.reddit.com/r/redteamsec/comments/ph4s1t/adalanche_now_with_machine_collector/)

___________________________
@hacking_Attack
@Hacking_Video

MobileAudit - SAST and Malware Analysis for Android Mobile APKs
http://www.kitploit.com/2021/09/mobileaudit-sast-and-malware-analysis.html

___________________________
@hacking_Attack
@Hacking_Video

Django Web application for performing Static Analysis (https://www.kitploit.com/search/label/Static%20Analysis) and detecting malware in Android APKs

___________________________
@hacking_Attack
@Hacking_Video

In each of the scans, it would have the following information:Application InfoSecurity InfoComponentsSAST FindingsBest Practices ImplementedVirus Total InfoCertificate InfoStringsDatabasesFiles

___________________________
@hacking_Attack
@Hacking_Video

For easy access there is a sidebar on the left page of the scan:

___________________________
@hacking_Attack
@Hacking_Video

Components

___________________________
@hacking_Attack
@Hacking_Video

db: PostgreSQL 13.2nginx: Nginx 1.19.10rabbitmq: RabbitMQ 3.8.14worker: Celery 5.0.5web: Mobile Audit App
Docker Base images
Image is based on python buster. Link to Docker Hub image (https://hub.docker.com/repository/docker/mpast/mobile_audit)ImageTagsBasempast/mobile_audit1.3.8python:3.9.4-bustermpast/mobile_audit1.3.6python:3.9.2-bustermpast/mobile_audit1.3.0python:3.9.1-bustermpast/mobile_audit1.0.0python:3.9.0-buster
Main features
Uses Docker for easy deployment in multiplatform (https://www.kitploit.com/search/label/Multiplatform) environment Extract all information of the APK Analyze all the source code searching for weaknesses All findings are categorized and follows CWE standards All findings are categorized and include Mobile Top 10 Risk Also highlight the Best Practices in Secure Android Implementation in the APK The findings can be edited and the false positives can be triaged and deleted All scan results can be exported to PDF User authentication (https://www.kitploit.com/search/label/Authentication) and user management API v1 with Swagger and ReDoc TLS Dynamic page reload (WIP) LDAP integration Export to Markdown Export to CSV
Patterns
The application has an engine with different rules and patterns that are used though the findings scanning phase to detect vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) and/or malicious code into the apk.These can be activated and deactivated in /patterns

___________________________
@hacking_Attack
@Hacking_Video

Note: some of the hardcoded patterns are from apkleaks (https://github.com/dwisiswant0/apkleaks)
Models
The application has an created models for each of the entities of the scans' information to be able to create relations an abtain the best conclusions for each of the apks.

___________________________
@hacking_Attack
@Hacking_Video

To see the whole model schema, go to models (https://github.com/mpast/mobileAudit/blob/main/app/static/models.png)### Integrations
Virus Total (API v3)
It checks if there has been an scan of the APK and extract all its information. Also, there is the possibility of uploading the APK is selected a property in the environment (Disabled by default).
Defect Dojo (API v2)
It is possible to upload the findings to the defect manager.
MalwareDB & Maltrail
It checks in the database if there are URLs in the APK that are related with Malware.
Installation
Using Docker-compose:The provided docker-compose.yml file allows you to run the app locally in development.To build the local image and if there are changes to the local Application Dockerfile, you can build the image with:docker-compose buildThen, to start the container, run:docker-compose upOptional: run in detached mode (not see the logs)docker-compose up -dOnce the application has launched, you can test the application by navigating to: http://localhost:8888/ to access the dashboard.

___________________________
@hacking_Attack
@Hacking_Video

Also, there is a TLS version using docker-compose.prod.yaml running in port 443To use it, execute docker-compose -f docker-compose.prod.yaml upThen, you can test the application by navigating to: https://localhost/ to access the dashboard.For more information, see TLS (https://github.com/mpast/mobileAudit#tls)To stop and remove the containers, rundocker-compose down
API v1
REST API integration with Swagger and ReDoc.
Usage
Endpoint to authenticate and get token: /api/v1/auth-token/

___________________________
@hacking_Attack
@Hacking_Video

Once authenticated, use header in all requests: Authorization: Token
Swagger

___________________________
@hacking_Attack
@Hacking_Video