[youtube]http://www.youtube.com/watch?v=tKW-XV59-gk[/youtube]
A few weeks ago a team of security experts presented an application for Android called Android Network Toolkit. This application is essentially the dream of any hacker because it has implemented methods of exploiting computers in a network plus many other interesting things. Practically using the Android Network Toolkit you can scan a Wi-Fi network and check the devices connected to it to see if they have exploitable vulnerabilities and if there are any the application can exploit them giving you control over the device. Here are some of the features of Android Network Toolkit:
- Scan – This will scan the selected target for open ports and vulnerabilities, also allowing the user to select a specific scanning script for a more advanced/targeted scan.
- Spy – This will 'sniff' images transferred to/from the selected device and display them on your phone in a nice gallery layout. If you choose a network subnet/range as target, then all images transferred on that network - for all connected devices - will be shown. Another feature of the Spy plugin is to sniff URLs (web sites) and non-secured (ie, not HTTPS) username/password logins, shown on the bottom drawer.
- DOS – This will cause a Denial Of Service (DOS) for the selected target, ie. it will deny them any further access to the internet until you exit the attack.
- Replace images – This will replace all images transferred to/from the target with an Anti logo, thus preventing from attacked used seeing any images on their browsers while the browse the internet, except for a nice looking Anti logo…
- MITM - The Man In The Middle attack (MITM) is an advanced attack used mainly in combination with other attacks. It allows invoking specific filters to manipulate the network data. Users can also add their own mitm filters to create more mitm attacks.
- Attack – This will initiate a vulnerability attack using our Cloud service against a specific target. Once executed successfully, it will allow the attack to control the device remotely from your phone.
- Report – This will generate a vulnerability report with findings, recommendations and tips on how to fix found vulnerabilities or bad practices used.
Android Network Toolkit is a dangerous weapon in anyone's hand, but the Chronic Dev Team "fell in love" with the application and announced that they will port it to the iOS platform. Although they are already working on an untethered jailbreak solution for the operating system of our iDevices, they will still dedicate part of their time to porting this application. Of course, they don't know when they will be able to finish the port and of course the application will not be available for free considering that Android terminal users also have to buy it. When it will be available on iOS, the application will give many people the opportunity to even execute a DOS attack against predefined targets.
I will let you know when the application will be available for us as well.
