Slicer - Tool To Automate The Boring Process Of APK Recon
http://www.kitploit.com/2022/11/slicer-tool-to-automate-boring-process.html

___________________________
@hacking_Attack
@Hacking_Video

A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. Note: The APK has to be extracted via jadx or apktool.
Summary Why? I started bug bounty like 3 weeks ago(in June 2020) and I have been trying my best on android apps. But I noticed one thing that in all the apps there were certain things which I have to do before diving in deep. So I just thought it would be nice to automate that process with a simple tool. Why not drozer? Well, drozer is a different beast. Even though it does finds out all the accessible components but I was tired of running those commands again and again. Why not automate using drozer? I actually wrote a bash script for running certain drozer commands so I won't have to run them manually but there was still some boring stuff that had to be done. Like Checking the strings.xml for various API keys, testing if firebase DB was publically accessible or if those google API keys have setup any cap or anything on their usage and lot of other stuff. Why not search all the files? I think that a tool like grep or ripgrep would be much faster to search through all the files. So if there is something specific that you want to search it would be better to use those tools. But if you think that there is something which should be checked in all the android files then feel free to open an issue. Features Check if the APK has set the android:allowbackup to true Check if the APK has set the android:debuggable to true. Return all the activities, services and broadcast receivers which are exported and have null permission set. This is decided on the basis of two things: android:exporte=true is present in any of the component and have no permission set. If exported is not mention then slicer check if any Intent-filters are defined for that component, if yes that means that component is exported by default(This is the rule given in android documentation.) Check the Firebase (https://www.kitploit.com/search/label/Firebase) URL of the APK by testing it for .json trick. If the firebase URL is myapp.firebaseio.com then it will check if https://myapp.firebaseio.com/.json returns something or gives permission denied. If this thing is open then that can be reported as high severity. Check if the google API keys are publically accessible or not. This can be reported on some bounty programs but have a low severity. But most of the time reporting (https://www.kitploit.com/search/label/Reporting) this kind of thing will bring out the pain of Duplicate. Also sometimes the company can just close it as not applicable and will claim that the KEY has a usage cap - r/suspiciouslyspecific  Return other API keys that are present in strings.xml and in AndroidManifest.xml List all the file names present in /res/raw and res/xml directory. Extracts all the URLs and paths. These can be used with tool like dirsearch (https://www.kitploit.com/search/label/dirsearch) or ffuf. Installation Clone this repository git clone https://github.com/mzfr/slicer
cd slicer Now you can run it: python3 slicer.py -h Usage It's very simple to use. Following options are available: Extract information from Manifest and strings of an APK

Usage:
slicer [OPTION] [Extracted APK directory]

Options:

-d, --dir path to jadx output directory
-o, --output Name of the output file(not implemented)
I have not implemented the output flag yet because I think if you can redirect slicer output to a yaml file it will a proper format. Usage Example Extract information from the APK and display it on the screen. python3 slicer.py -d path/to/extact/apk -c config.json Acknowledgements and Credits The extractor (https://www.kitploit.com/search/label/Extractor) module

___________________________
@hacking_Attack
@Hacking_Video

used to extract URLs and paths is taken from apkurlgrep (https://github.com/ndelphit) by @ndelphit Contribution All the features implemented in this are things that I've learned in past few weeks, so if you think that there are various other things which should be checked in an APK then please open an issue for that feature and I'd be happy to implement that :) Support If you'd like you can buy me some coffee:

___________________________
@hacking_Attack
@Hacking_Video

Download Slicer (https://github.com/mzfr/slicer)

___________________________
@hacking_Attack
@Hacking_Video

$250 for Email account enumeration using “NameToMail” tool

Hi amazing hackers.Continue reading on Medium »
Read more...

hacking: security in practice
OMG cable on OpenSuse

Has anyone used a omg cable on opensuse with success or any of their products?

submitted by /u/CollarFullz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there a tool/lib/cmd to find accounts created by given email?

Something similar to nexfil where you can browse the Internet by nickname. Nexfil doesn't seem to like emails, it gets timed out randomly.

submitted by /u/emosGambler
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Warning: New RapperBot Campaign Aims to Launch DDoS Attacks at Game Servers

https://cdn-images-1.medium.com/max/602/0*pVZuwfS14_9syDfn.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
US govt: Iranian hackers breached federal agency using Log4Shell exploit

https://cdn-images-1.medium.com/max/602/0*wWcT7gUx3JJsD3F0.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crazy and Horrifying Facts about Marianas Web

https://cdn-images-1.medium.com/max/1280/1*tiI5ysjToTtQIeLE2nI2AQ.jpeg
The Internet is everywhere, and most people use it daily. We only use 4% of the Internet through Google, social media, and other search…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video