BlackBerry Smoked at ShmooCon : Spyware

Just few days ago the big ShmooCon 2010 took place at the Washington DC from 5th to 7th of this month. It was obvious that some new would come from the con, and yes, one security researcher have done it.

BlackBerry phones have been hit this time with a new spyware which can do alot of stuff like the ability to access and dump the BlackBerry's contacts, email messages, phone logs, the device's current location and the recording made by the BlackBerry's microphone….

 

And the program which hacks the blackberry is called txsBBSPY written by Tyler Shields, a senior security researcher at Veracode, Well it seems that the engineers would be working on it.

 

The great thing about this software is that we don't need to make it hidden on some firmware or something its an application for the BlackBerry phones. Just install it and you can monitor the stuff you want to do.

 

“ The application was built using the controlled APIs that Research In Motion, the BlackBerry's maker, makes available to developers. In order to sign a BlackBerry application developed using these APIs, the developer has to apply for the signing keys and pay a small fee.

 

Once he has the keys, he can sign the application and a hash of the code is sent to RIM. However, RIM doesn't get the full source code of the application. ”

 

"Finally, it should be noted that while we chose BlackBerry for our proof-of-concept, this is not just a BlackBerry problem. All mobile platforms provide similar mechanisms for writing applications that have access to the user’s personal, potentially sensitive information," Eng writes.

 

 

TXSBBSpy Demo from Veracode on Vimeo.

 

 

Here is the video which they have used to demonstrate the idea behind this spyware. Hope you guys enjoy it and there are some good news too which adds fire to this thing is that these guys have also released the spyware source code.

 

Here are the source codes and the slides of this demonstration which you will need more then me.

Slides: Blackberry Mobile Spyware — The Monkey Steals the Berries
Source: txsBBSpy.java

Conclusion

This brings me to a conclusion that its not necessary that the official App stores are always safe as the if i could make this application and distribute in the open then anybody can do that.

 

Well that's what they also want to prove with this spyware to the industry and it makes sense to me as they have also said this can be done to many of the other mobile phones like iPhones etc.

 

Happy Hacking @hackerthedude

Read More

How To Root Your Nexus One Android Phone [Tutorial]

There have been a long time i haven't wrote any tutorial so that's why i have written this tutorial for you guys but as a matter of fact i don't have a Android phone i would only give you guys a prospective on how to hack or even root your Android phones.



Well its kinda very easy tutorial and can be found on many places on the internet but i am like very lazy or you might be so i have written from my heart inside just for you guys believe me.

Ok jokes over lets move onn with the procedure of hacking aka rooting your android box for like forever. Before getting started, remember to back up your phone, including your contacts, SMS messages, files and photos…

Steps

Ok here we go,

1. The first step is to download and install Superboot, a boot image that, when flashed, will root the device the first time you boot up.

You can grab a copy of the Superboot zip file from the Modaco forums here.

2. Dude, extract it !

Use Winrar or Winzip etc

3. Now the tuff work, we need to boot our android phone on bootloader mode.

To do so, turn off the phone, remove the battery, and plug in the USB cable. When the battery icon appears onscreen, pop the battery back in. Now tap the Power button while holding down the Camera key.

O.o

4. Depending on your computer's OS, do one of the following:

• Windows: Double click "install-superboot-windows.bat"
• Mac: Open a terminal window to the directory containing the files, and type "chmod +x install-superboot-mac.sh" followed by "./install-superboot-mac.sh"
• Linux: Open a terminal window to the directory containing the files, and type "chmod +x install-superboot-linux.sh" followed by "./install-superboot-linux.sh"

5. Ok we are done !

So you are little bit confused in this process right then lets see what i can do,
Ya, i got something for you, Instant Root offloads all the effort and rooting is just single-click away.

Download “Instant Root” APK
Here’s how to Root Android, quickly:

1. Install & Run the APK file.
2. On receiving confirmation message, Restart your phone and that’s it.

That was easy right.

Screens

Not this one

System Recovery Console

Rooted !

Conclusion

We have previously also have written on how to hack aka root aka jailbreak your iPhone which was pretty big article and i have learnt from it, that i should write small articles, because of you guys.

 Android Wallpaper !

This was a good article and would help you in future and some other days like them, whatever. Well we are not letting you get out of my blog so soon we have got something for you. A wallpaper…

Happy Hacking @hackerthedude

Read More

MITM iPhone's PhotoSwap : How To Steal Hot Pics Of Chicks

PhotoSwap is an application for the iPhone that allows you to send an anonymous photo and receive an anonymous photo back. The service is great for upbeat, healthy, family-fun photo sharing, but managed to become a cesspool for photo debauchery.

 

MITM as we have discussed earlier is a pretty good technically but using it in a iPhone is innovative. The idea is pretty good and the victim is changing from 1 person to another as soon as their images comes on the iphone.

 

You can also visit http://samy.pl/swap/ for the full details of the hack. The hack is pretty awesome and is its usability by a hacker. What happens here, explained by samy kamkar as

 

"It takes a random picture of mine and sends it out. Once I get a picture back, I then send that picture out into the ether. I get another picture back, I now send that...essentially, I'm quickly sending/receiving everyone's photos.

 

I get most, if not all, of the pictures floating through the service, and without disruption, send them back out so another anonymous person can receive them."

 

 

The vulnerability here is that when the users send the pics to another person then a hacker like us can use them to know the GPS positions of them. As my friend samy kamkar have explained here and have also experimented with it.

 

Here are some of the pics that he was able to steal from this iPhone App -

 

  

 

Note : GPS coordinates removed to protect the guilty.

 

The Most vulnerable thing to note here is that the positions of the people can be known which is a major threat for them but good for us.

 

Samy have also explained how he managed to view the GPS positions of the people through Iphone routing http://samy.pl/mapxss/ . He have shown a little bit of the whole procedure involved in it.

 

You can visit Samy's website or follow my twitter.

Read More

Your Mobile Is In Danger : Karsten Nohl Cracks GSM Mobiles Security Algorithm

Karsten Nohl, A Germen Hacker have claimed that he have successfully cracked the GSM mobiles security algorithm. Which can effect the whole world even your moblie.

 

I know what you might be thinking till now and its all true. Nohl was not alone in this whole arena of finding the vulnerability in the GSM phones. He was with another 24 friends teamed up to crack the worlds most used mobile security algorithm.

 

GSM security algorithm is based on the such a frequesny that it changes it signals from one tower to another in seconds and then transfers the signals to the other frequency station. Yeah, I know its pretty complicated stuff there.

 

Nohl claims that armed with the code, which has been published online, and a laptop with two network cards, an eavesdropper could be recording phone calls within 15 minutes...

We also have live numbers of Victims !

 

Nohl : "This shows that existing GSM security is inadequate"

 

Nohl insisted that he had deciphered the code to force the global telecommunications industry to upgrade its security. Well this is a big security issue which is affecting many.. actually the whole world.

 

The thing to think about in this whole chapter of security is that, the vulnerability is open and if any mad hacker like me, could try to hack this GSM network would i be get caught .With a total average of 4.3 Billion victims. what do you think, you would do with it.

Read More

Motorola Droid Jailbroken By Hackers

Hackers are just not stopping by the Iphone Jailbreak, they have already gone ahead and Jailbreak the newly famed Motorola Droid. The newly released Motorola Droid is a great mobile which gaved the Apple Iphone a tuff compition by selling around figure as the Apple Iphone did when it was launched.

 

A hardware Modder, rejoicing in the name Zinx Verituse, has developed and published a Droid rooting exploit. Instructions on how to jailbreak Droid smart phones, along with links to the exploit were posed on an Android forum, Wired Gadget Lab via CRN reports.

 

Once rooted, Smartphone users gain administrative privileges and thus the ability to download widgets, add applications, or otherwise customize their phone. The procedure carries a risk of rendering a device inoperable or disabling features. Attempts to tamper with the phone void Motorola's warranty and run against terms of service agreements.

 

"Once installed, you will be able to run 'su' from your adb shell,'" he said in the post.

 

It also comes with risks -- if rooting is done incorrectly, users could inadvertently render their Droid useless, known as bricking, or disabling features. Rooting also voids the device's manufacturer warranty and violates terms of agreement.

 

But maybe the emerging crop of Droid hackers will have so much fun recreating their device they won't even notice.

 

In the exploit post, Verituse invited users to download the zip file, rename it to "update.zip" and copy to the sdcard. He then advised users to power the Droid off and on while holding the X key, and then press vol+ and camera when they view "!" symbol.

 

 

Rooting a Droid is similar to jail breaking or unlocking a device in that it allows a user to completely change everything about the phone's look and function.

Read More

New iPhone Worm That Attacks Jail Broken iPhones Also

Well its again the iPhone which have come to the headlines again , But this time the apple is really pissed of with the kind of work the Hackers are doing against there most Lovely Toy i.e. iPhone.

 
The iPhone is now under attack of Worm which also attacks Jail broken iPhone.

The first iPhone worm is said to be created by hacker called "ike_x".
Along with changing the lock background of iPhone with Rick Astely's photo, the worm also causes text stating 'ikee is never going to give you up' on the top of the wallpaper.

Apparently, the worm strikes the jail broken handsets with SSH (Secure Shell) installed through Cydia. Those iPhones with SSH installed having default password as "alpine" were mainly affected.

Let’s see…

Hacking News @hackerthedude

Read More