Mobile malware analysis - any software ? - Security Discussion

Hello.
I'm looking for application (could be payable) which can be used in malware analysis (mostly APK/Java apps).
I did some researches but I can't find anything accurate.
I will be graceful of any information about this case.
Thanks in advance.

mic1986 said:
Hello.
I'm looking for application (could be payable) which can be used in malware analysis (mostly APK/Java apps).
I did some researches but I can't find anything accurate.
I will be graceful of any information about this case.
Thanks in advance.
Click to expand...
Click to collapse
Not sure what you mean by that. Do you mean malware protection? Try AVAST Mobile Security & Antivirus!

SecUpwN said:
Not sure what you mean by that. Do you mean malware protection? Try AVAST Mobile Security & Antivirus[/URL]!
Click to expand...
Click to collapse
I think he's looking for an app such as ollydbg or LordPE but for android applications.
@op : take a look to droidbox, apkinspector and androguard which seems to be very powerful !

mic1986 said:
Hello.
I'm looking for application (could be payable) which can be used in malware analysis (mostly APK/Java apps).
I did some researches but I can't find anything accurate.
I will be graceful of any information about this case.
Thanks in advance.
Click to expand...
Click to collapse
I've got nothing straight up designed just for malware analysis, but this is what i use, and some alternatives that ware healthier for your wallet.
For dalvik/java:
Jeb - http://www.android-decompiler.com/
My primary tool, really good
smali - https://code.google.com/p/smali/
Free and good
For native:
IDAPro/HexRays - https://www.hex-rays.com/index.shtml
Its IDA Pro, what else can I say?
Hopper - http://www.hopperapp.com/
Reasonably priced and getting better

Avast is the best antivirus.

Related

NAIPS for ANDROID

hey guys just wondering if anyone would be able to creatte this app.
The Iphone has such an app only cause the iphone is mainstream in aust but yeah. Was just yeah wondering if someone could port it over to android either 2.2 or 2.1 idc. but would be happy to pay as yeah i want to be the "different bloke"
as the pilot as i have the nexus one and everyone else (11) others own a iphone so yeah thanks
care to explain wtf it is/does?
and are you from australia?
well its a air services site that provides weather for pilots.
it is created by the buero of meteorology and then compiled and put out over different forms, i.e an app or a computer program or radio and such
yes i am australian and most that i know havent a clue how to make such a thing
i would give you links but it says i cant. i must be new lol.
I have considered developing simply to create this app.
Pweese I know at least 50people that would be willing to pay. Would bee so awesome
I'm the developer of the iPhone version of NAIPS - I had a quick look at android however it looks like way too much work for personally minimal gain for me (I don't even have an android phone). If I did do it one day - it would probably have minimal features as it would require a 100% rewrite. Plus I'm currently focusing on getting ERSA etc onto iPad/iPhone (after work & family).
Maybe a bunch of people could pay some firm in China/India to write a version? Or just a simple version (with Airservices' permission) that does location briefings etc?
I'm the developer of the iPhone version of NAIPS - I had a quick look at android however it looks like way too much work for personally minimal gain for me (I don't even have an android phone). If I did do it one day - it would probably have minimal features as it would require a 100% rewrite. Plus I'm currently focusing on getting ERSA etc onto iPad/iPhone (after work & family).
Maybe a bunch of people could pay some firm in China/India to write a version? Or just a simple version (with Airservices' permission) that does location briefings etc?
Click to expand...
Click to collapse
That's cool. Can you provide some details as to the source of the data? There are plenty of open source weather apps, one could possibly bee modified to get data from that source
Shagpile said:
I'm the developer of the iPhone version of NAIPS - I had a quick look at android however it looks like way too much work for personally minimal gain for me (I don't even have an android phone). If I did do it one day - it would probably have minimal features as it would require a 100% rewrite. Plus I'm currently focusing on getting ERSA etc onto iPad/iPhone (after work & family).
Maybe a bunch of people could pay some firm in China/India to write a version? Or just a simple version (with Airservices' permission) that does location briefings etc?
Click to expand...
Click to collapse
Ah, i have been reading your posts on PPruNe forums, if i do get my act together and start writing a similar app for android, do you mind if i contact you then for bits of information (ie what ASA said regarding scraping their material etc.)?
Also, just out of personal interest, what and where do you fly?
liam.lah said:
Sent from my computer using a keyboard.
Click to expand...
Click to collapse
you had me laughing my ASSS off tonight, hahaha!
too funny, I'm sorry for going off topic.
That's cool. Can you provide some details as to the source of the data?
Click to expand...
Click to collapse
You basically have to emulate the website by sending off HTML get/post requests as per their html code. There are no documented protocols or anything.
do you mind if i contact you then for bits of information
Click to expand...
Click to collapse
Not at all - visit ozrunways.com and send me a message on the 'contact me' page so I don't have to write my email address on a public forum.
We need more small cheap pilot apps available. I've made a bit of coin out of NAIPS but it's still far less than what I would get if I spent my time flipping burgers at McDonalds. Don't get too excited !!
Also, just out of personal interest, what and where do you fly?
Click to expand...
Click to collapse
P3 Orion - the cold war relic
liam.lah said:
Ah, i have been reading your posts on PPruNe forums, if i do get my act together and start writing a similar app for android, do you mind if i contact you then for bits of information (ie what ASA said regarding scraping their material etc.)?
Click to expand...
Click to collapse
Hey mate, just wondering if there has been any progress on developing a NAIPS based app for android yet. Because if there has been I would be keenly interested in it.
Not yet. There is no paid app store for Australia yet.
i'm interested to work on this app and it would be free app. however i'm very new to android and still learning.
my first app is KL Web Traffic which you can find on android market. if i know how to get the data and what this app do i don't mind working on it so i can improve my java/android programming skills.
Replying to a 3 year old thread because this app was the only thing keeping a mate of mine on IOS, and this is one of the top hits on Google search.
Check out thttps://sites.google.com/a/juddy.net/android/naips
There are a few now. "NOTAM Filter" is available on the play store and does Met and NOTAMs including areas.

Search: Geocaching solver application

Hi all,
I'm looking for an application that can help me solve all kinds of ciphers used in geocaching, does waypoint projections, all the things that might come in handy while caching. There's GCTools, but its still pretty limited...
Yeah,
GCTools is limited, certainly after I found out (the hard and painful way ) that the text Calc doesn't count Capital letters
minus30 said:
GCTools is limited, certainly after I found out (the hard and painful way ) that the text Calc doesn't count Capital letters
Click to expand...
Click to collapse
Did you tell the dev and if so, what was his / her reaction?
And is there an alternative tool?
Hmm... Have you looked in to C:GEO ?
LexusBrian400 said:
Hmm... Have you looked in to C:GEO ?
Click to expand...
Click to collapse
Not yet, because I fear I might get banned from GC.com because c:geo violates their TOU. But judging from its website, c:geo will be my first pick when it can load pocket queries or GPX files for offline use. Right now I'm using gehunter, a fork of geobeagle and I quite like it, the integration wich bcaching.com is great...
marty1976 said:
Hi all,
I'm looking for an application that can help me solve all kinds of ciphers used in geocaching, does waypoint projections, all the things that might come in handy while caching. There's GCTools, but its still pretty limited...
Click to expand...
Click to collapse
GeOrg has multiple solvers, I think it likely covers what you're looking for, and it's a great geocaching application. http://android.ranitos.de/
It works great in all ways, but a big thing for me, it's very fast parsing GPX. It can also use BCaching for on-the-fly caching (assuming you have PQ's feeding into BCaching, of course..)
It'll be perfect when he gets Bluetooth GPS support in
khaytsus said:
GeOrg has multiple solvers, I think it likely covers what you're looking for, and it's a great geocaching application.
Click to expand...
Click to collapse
Possible. But alas, credit cards are really uncommon in Europe and more an exception than the rule. I do not have one myself and until the market accepts paypal as a service I'll be unable to buy applications

[Q] How to monetize free desktop applications

Hi.
Does anyone knows which are the advertising companies that provide ads for Windows / Linux applications ?
I'm sure that there must be many because there are freeware programs that show ads. Others offer 3rd party software to be installed, so they must be making some money to do it.
I googled for it but I failed to find an answer.
Thank you all.
umm... im not really sure what your asking or how it relates to the HTC ONE?
you know these are the HTC ONE forums?
Oh, I'm so sorry.
I wanted to post to General Discussion -> Q&A.
How can I move this thread to there?
Thank you.
BigNate said:
umm... im not really sure what your asking or how it relates to the HTC ONE?
you know these are the HTC ONE forums?
Click to expand...
Click to collapse
Ask one of the mods to move it, they should be able too move it for you.
I'll answer you question anyway. Try going here
http://www.airpush.com/
http://www.google.com/ads/mobile/
http://www.google.com/ads/admob/
temple plinebs
Hi.
Thank you for replying but I don't want to monetize free mobile applications. I want to monetize free desktop applications (for Windows and Linux).
Regards.
Riyal said:
I'll answer you question anyway.
Click to expand...
Click to collapse
marcioandreyoliveira said:
Hi.
Thank you for replying but I don't want to monetize free mobile applications. I want to monetize free desktop applications (for Windows and Linux).
Regards.
Click to expand...
Click to collapse
This is what I could find in a Google Search
Code:
http://nativex.com/monetize/desktop/
Try it and reply
desktop app developer
marcioandreyoliveira said:
Hi.
Does anyone knows which are the advertising companies that provide ads for Windows / Linux applications ?
I'm sure that there must be many because there are freeware programs that show ads. Others offer 3rd party software to be installed, so they must be making some money to do it.
I googled for it but I failed to find an answer.
Thank you all.
Click to expand...
Click to collapse
hi.
as desktop(windows 8 , osx) app developers, I've the same prob with yours.
Do you have figured it out?
if yes, can you send me a message in facebook, searching my name.
thank you.
desktopad said:
hi.
as desktop(windows 8 , osx) app developers, I've the same prob with yours.
Do you have figured it out?
if yes, can you send me a message in facebook, searching my name.
thank you.
Click to expand...
Click to collapse
To be honest It is almost not worth the trouble. Most people only see the ads while installing and you have to give them the option to not install any add ons. Mix in that most virus detectors will prevent any program that installs anything else as this is considered a virus.
There is one named DesktopAd
Since your Windows app is free, I guess you have many users on it. Then you can add in-app advertising to get revenue. There are many advertising platforms which provide this kind of service. You can find the most suitable one. For Windows desktop apps, I recommend DesktopAd's ads. You just need to add their ad SDK and don't need to do many thing, you will get paid through ad clicks every month.
Desktopad.com is a good choice.
Free desktop apps are more popular. So you get relatively advantages which help you get more income by in-app ads. As you know, almost all the apps have ads in it, you can select one ad payment method. As I know, CPC is good one. Many app users will click the ads unintentionally or he has interest in the ads. But it will have a result, you can get income by every ad click. So I would like to suggest you try to search desktopad.com.
Hey everyone, Old post.
But If anyone need help in monetizing their windows or mac software. I can help with that.
Skype - imhimmi

Firewalls AFWall+ and LightningWall

Hi,
I don't know if I can ask you about that in this forum :
What are for you the pro and cons about the firewalls AFWall+ and LightningWall ?
Personnaly, I use AFWall+ which seems from my point of view very simple to configure and without impacts on Android configuration. But it could be because I don't have installed AFWall+ ...
I would like to know your opinion.
Thanks.
Envoyé de mon CINK FIVE en utilisant Tapatalk
So you say you use AFwall in one sentence and then you say its not installed. So which is it?
I use it and I have nothing bad to say about it. Its lightweight and no problems at all. I use whitelist though. Not blacklist.
@KernelCorn
Sorry for confusion.
I use LightningWall.
Envoyé de mon CINK FIVE en utilisant Tapatalk
Scroll down to question #37
https://github.com/ukanth/afwall/wiki/FAQ
AFWall+ is a FLOSS software (good) while LW is closed-source.
We discuss about LW in the AFWall+'s thread. Check it out: http://forum.xda-developers.com/showthread.php?p=67252997&postcount=3079
AFAIK CHEF-KOCH is the main contributor to AFWall's Github Wiki.
Thanks all.
I have the feeling of being small after reading some recommanded points.
It's impressive.
I have understood that LightningWall is not open source, and this point could be problematic for a security app.
Sorry for this question :
Could AFWall+ brick my smartphone if I am not an Android expert ?
I'm no Android expert. I rooted my old Sprint S3 a few months ago out of curiosity and AFwall was one if the first things I downloaded. Worst thing I see happening is you block access to something that needs permission. Worst case disable AFwall n settings temporarily until you figure out what box to check/allow. Read and reread the FAQ and setup procedures and you'll be fine. I love it and have had zero issues.
Read the forums here whenever you can and you'll slowly become more and more comfortable messing around with your phone. XDA has become my latest addiction!
iwanttoknow said:
Sorry for this question :
Could AFWall+ brick my smartphone if I am not an Android expert ?
Click to expand...
Click to collapse
Nope but do not forget to backup before testing stuff.
However it takes time to learn how to properly use such a software. I still have a lot of things to learn on Github but I know how to use for basic options (which user/system apps to block, easy custom script...).
If you have root, I do recommend you AFWall+ but you may also want to have a look at NetGuard.
@Primokorn
Thanks for your support
And promise to see light at end of tunnel ?
You wrote that you know how to use for basic options.
Can I find those options in AFWall+ Github ?
BTW I have root.
@KernelCorn
I don't know if I will be XDA addict
but it's certain that I enjoyed your welcome, you and the others.
iwanttoknow said:
@Primokorn
Thanks for your support
And promise to see light at end of tunnel ?
You wrote that you know how to use for basic options.
Can I find those options in AFWall+ Github ?
BTW I have root.
Click to expand...
Click to collapse
You can find recommandations, nothing more. Each user has a different setup so you'll obviously have to dig.
I also suggest you to subscribe to the AFWall+ XDA thread.
@Primokorn
Sorry, but I'm not sure if what you named "AFWall+ XDA thread" matches that :
\Android Development and Hacking\Android Software Development"[4.0+][ROOT][2.2.4-BETA2] AFWall+ IPTables Firewall [19 JULY 2016] by ukanth"
I think so, but could you confirm please ?
Thanks.
iwanttoknow said:
@Primokorn
Sorry, but I'm not sure if what you named "AFWall+ XDA thread" matches that :
\Android Development and Hacking\Android Software Development"[4.0+][ROOT][2.2.4-BETA2] AFWall+ IPTables Firewall [19 JULY 2016] by ukanth"
I think so, but could you confirm please ?
Thanks.
Click to expand...
Click to collapse
Correct. Ukanth is the dev (and a nice man )
Sent from my hammerhead using XDA Labs
Hi,
I discovered this article today :
"Similar Android Firewall solutions"
https://github.com/ukanth/afwall/wiki/Similar-Firewall-solutions
Thanks to the author.
It provided particulary for me an explanation about Xposed associated with LightningWall.
"XPosed hacks to intercept directly on the OS layer (e.g. LightningWall). This doesn't need any iptables or additional scripts since the xposed framework provides the hacking ability's."
Hi,
I'm curious to have your point of view about this German article :
https://www.kuketz-blog.de/android-firewall-ohne-root-•-noroot-firewall/
For me with Tapatalk, I realised that there is a problem to display this url; there is a special character in it :
"https://www.kuketz-blog.de/android-firewall-ohne-root-%E2%80%A2-noroot-firewall/"
A lot of people around me don't want to root their smartphone, or they don't even know what is "to root" a smartphone; it's too technical for them.
But they want to be able to decide if they authorize or not some apps to go on the Net.
A lot of them heard about "NoRoot Firewall" and wanted to use it. Do I have to discourage them ?
iwanttoknow said:
Hi,
I'm curious to have your point of view about this German article :
https://www.kuketz-blog.de/android-firewall-ohne-root-•-noroot-firewall/
For me with Tapatalk, I realised that there is a problem to display this url; there is a special character in it :
"https://www.kuketz-blog.de/android-firewall-ohne-root-%E2%80%A2-noroot-firewall/"
A lot of people around me don't want to root their smartphone, or they don't even know what is "to root" a smartphone; it's too technical for them.
But they want to be able to decide if they authorize or not some apps to go on the Net.
A lot of them heard about "NoRoot Firewall" and wanted to use it. Do I have to discourage them ?
Click to expand...
Click to collapse
Google Translate doesn't work due to this special character so I have no idea what this article is explaining.
I would suggest NetGuard, no root firewall and adblocker.
From AFWall's Github
The biggest problem is that such VPN services not work with WiFi tethering or hotspot's.
Click to expand...
Click to collapse
Wrong. Example.
From AFWall's Github
And another con is that you can't run other VPN services and VPN/Proxy's apps at the same time together.
Click to expand...
Click to collapse
Correct.
@Primokorn
Thanks.
You can click on the url of this article by going at the end of another article (see below), and clicking on the link "an German article" in this article :
https://github.com/ukanth/afwall/wiki/Similar-Firewall-solutions
I know it's a little complicated.
BTW in your opinion, is "NoRoot Firewall" a good advice for people who have unrooted smartphones ?
How can we be assured that the used VPN, is not problematic from the privacy point of view ?
Hi,
Others informations I found entitled :
"Any security difference between root based firewall (AFWall+) and non-root based ones (NetGuard)?"
http://android.stackexchange.com/qu...root-based-firewall-afwall-and-non-root-based
And also this one about NetGuard :
https://github.com/M66B/NetGuard/blob/master/README.md#permissions
"NetGuard - no-root firewall" by Marcel Bokhorst gives access to its source code, while "NoRoot Firewall" by Grey Shirts does not, if I am right.
iwanttoknow said:
BTW in your opinion, is "NoRoot Firewall" a good advice for people who have unrooted smartphones ?
How can we be assured that the used VPN, is not problematic from the privacy point of view ?
Click to expand...
Click to collapse
Of course a root firewall has a better control over the apps but a NoRoot Firewall is better than nothing
A firewall isn't really related to your privacy. I'd suggest you to have a look at XPrivacy (same dev as NetGuard - Xposed/root required). Link in my sign.
I already use XPrivacy.
It's great from the privacy point of view, though difficult at first.
But for people with no-rooted smartphones, Xprivacy can't be used.
They only have to be confident about VPN used by firewalls for no-rooted smartphones. Logically in this case, "NetGuard - no-root firewall" might be the best choice, because the code is reviewed by anyone in the community, in comparison to other with closed code.
Hi,
Can anyone tell me if it exists a tool to monitor non-root based firewalls ?
Is it possible to determine what data are exchanged through Android's VPN facilities used by non-root based firewalls ?
Is it possible with tools like "Network Log", LightningWall or AFW+ ?
I don't know if my question makes sense.

A beginner programmer - with a few questions

Hi developers,
I started to -try- and develop an app for my fun, and a few questions came up to my mind - obviously they're not too relevant to me at this point, but I'd like it to be more clear:
1) Do I need to backup my code to websites like GitHub? Or I should save it on personal storage so it will be private? (Or both?)
2) I am learning from an Android development tutorial, so what happens if the app is actually successful, and there would be a demand for it on iOS or other operating systems? Does that mean the app idea might be stolen and be made for iOS and I will have nothing to do with it? Or it can actually happen even within Android (idea theft)
2.1) Regarding the above concern: I was thinking about learning to develop Hybrid apps, but heard they're not too good right now, are there any examples of decent Hybrid apps now?
Thanks,
Pan
you can develop both android app and ios app simultaneously.
TC Soft said:
you can develop both android app and ios app simultaneously.
Click to expand...
Click to collapse
Thank you!
But how exactly? Hybrid apps? Or there are migration tools from Java to Objective-C / Swift ? I mean, developing alone for both languages should be quite hard isn't it? (Not talking about me, but even for skilled developers)
Pantosser said:
Thank you!
But how exactly? Hybrid apps? Or there are migration tools from Java to Objective-C / Swift ? I mean, developing alone for both languages should be quite hard isn't it? (Not talking about me, but even for skilled developers)
Click to expand...
Click to collapse
As far as i know, there are many programmers including me write native codes for both ios android app.
Of course, it takes double time.
I never thought it's an easy task to develop an app.
TC Soft said:
As far as i know, there are many programmers including me write native codes for both ios android app.
Of course, it takes double time.
I never thought it's an easy task to develop an app.
Click to expand...
Click to collapse
Wow Thank you! I didn't really think that's the case, so I guess I should focus on 1 language now (Java) before studying Swift as well!

Categories

Resources