내 블로그다

Santoku

Santoku is a project launched by viaForensics to provide a powerful platform for mobile forensics, malware analysis, and mobile app security testing. The name comes from Japanese, meaning “three virtues” and referring to a useful type of cooking knife.

Three virtues:

• Mobile forensics
• Mobile malware analysis
• Mobile application security testing

tool: https://viaforensics.com/resources/tools/santoku/

virtual box를 필요로 한다: https://www.google.co.kr/webhp?sourceid=chrome-instant&ion=1&espv=2&es_th=1&ie=UTF-8#newwindow=1&q=VirtualBox

adb shell

su

cd proc

for x in [0-9]*;
do
lc=`grep libc.so /proc/$x/maps | grep r-x`
if [[ ! -z "$lc" ]]; then echo $lc in PID $x; fi
done

adb shell

su

cd proc

for p in [0-9]*;
do
CAP=`grep CapPrm $p/status | grep -v -v ffffff | grep -v 0000000000000`
if [[ ! -z $CAP ]]; then grep Name $p/status; echo PID $p - $CAP;  fi
done

전제: 루팅이 되어있어야 한다

adb shell su 0 'ls -l -R' | grep "[^l][r-][w-][xsStT-][r-][w-][xsStT-][r-][w][xsStT-]"

http://stove99.tistory.com/186

http://forum.xda-developers.com/showpost.php?p=48709232&postcount=869

참 기종별로 알맞는 루팅방법을 사용했다. 해커의 수고에 감사하다

1. backdoor 탈취

2. recovery mode 후 adb sideload

또 뭐가 있었지? ;;;

[기사]

http://lifehacker.com/towelroot-roots-android-kitkat-devices-in-one-tap-no-p-1592226618

[원리]

kernel 취약점(CVE-2014-3153)을 이용한 공격

[대응책]

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9c243a5a6de0be8e584c604d353412584b592f8

[SELinux로 대응책]

그러하다..

https://www.acmicpc.net/

mmm 빌드할 모듈

make snod

:set nonu

맨날 까먹는것..

http://freedert.tistory.com/135

http://blog.naver.com/dudwo567890?Redirect=Log&logNo=130153164020

영문

http://www.tuxradar.com/content/newbies-guide-hacking-linux-kernel

번역

http://woodz.tistory.com/56

http://woodz.tistory.com/66

def get_allow_in_one_file(file_name):

    lines = []
    if file_name == "" :
        return ""
    try:
        fp = open(file_name,'r')
        for line in fp.readlines() :
            lines.append(line)
        fp.close()
    except Exception, e:
        print "error!!"
        return "error"
    return lines

자세한 설명은 생략한다

def search_files(search_ext):
     file_names = ""
     for (path, dir, files) in os.walk("./"):
         for filename in files:
             ext = os.path.splitext(filename)[-1]
             #print filename
             if ext == search_ext:
                 file_names = file_names + path + "/" + filename + "\n"
     return file_names

 자세한 설명은 생략한다

type

예) type test.log

더 이상 자세한 설명은 생략한다

[소스]

for line in sys.stdin:
    print line

[사용법]

cat test.txt | pipe_in.py

[설명]

더이상 자세한 설명은 생략한다

점프 투 파이썬

https://wikidocs.net/book/1

파이썬 마을

http://python.kr/index.php

왕 초보를 위한 파이썬

https://wikidocs.net/read/book/136

온라인 책

https://wikidocs.net/read/book/136

http://python.kr/viewtopic.php?p=66213

참고: https://wikidocs.net/39

import sys

main(sys.argv[1])

참고: http://blog.naver.com/shw20319?Redirect=Log&logNo=20140774563