내 블로그다

Santoku

Santoku is a project launched by viaForensics to provide a powerful platform for mobile forensics, malware analysis, and mobile app security testing. The name comes from Japanese, meaning “three virtues” and referring to a useful type of cooking knife.

Three virtues:

• Mobile forensics
• Mobile malware analysis
• Mobile application security testing

tool: https://viaforensics.com/resources/tools/santoku/

virtual box를 필요로 한다: https://www.google.co.kr/webhp?sourceid=chrome-instant&ion=1&espv=2&es_th=1&ie=UTF-8#newwindow=1&q=VirtualBox

adb shell

su

cd proc

for x in [0-9]*;
do
lc=`grep libc.so /proc/$x/maps | grep r-x`
if [[ ! -z "$lc" ]]; then echo $lc in PID $x; fi
done

adb shell

su

cd proc

for p in [0-9]*;
do
CAP=`grep CapPrm $p/status | grep -v -v ffffff | grep -v 0000000000000`
if [[ ! -z $CAP ]]; then grep Name $p/status; echo PID $p - $CAP;  fi
done

전제: 루팅이 되어있어야 한다

adb shell su 0 'ls -l -R' | grep "[^l][r-][w-][xsStT-][r-][w-][xsStT-][r-][w][xsStT-]"

http://stove99.tistory.com/186

http://forum.xda-developers.com/showpost.php?p=48709232&postcount=869

참 기종별로 알맞는 루팅방법을 사용했다. 해커의 수고에 감사하다

1. backdoor 탈취

2. recovery mode 후 adb sideload

또 뭐가 있었지? ;;;