Database Info

[App] Mobile bank (SMS-banking)

"Mobile bank"
current version: 1.2.12
SMS-banking, information on the status of their card accounts and performed transactions, payments using your phone.
Anndroid: 1.5 and above
Available on Android Market
SMS Banking - Is designed for performing balance checks, account transactions, payments, credit applications etc. via a mobile device such as a mobile phone using the SMS service.
How does it work?
If you are a user of SMS banking, every time you make a payment using your credit or debit card (or withdraw cash from an ATM), you will receive an SMS notificaton message, which shows: the transaction amount, transaction location, remaining balance and other additional information.
The application converts this information into readable format, which lets you view the history of activity on a card.
Additional features:
• Mini-statements and checking of account history;
• Mutual funds / equity statements;
• Status on cheque, stop payment on cheque;
• Account Balance status;
• Recent transactions;
• Blocking of (lost, stolen) cards;
• Additional features depend on the list of services provided by your bank.
• Configuration templates of operations performed on the card (Payments, Deposits, Withdrawals, and Transfers)
In addition you can view maps showing the location of transactions, as well as the location of your nearest ATM.
Unfortunately, the application ONLY supports Russian banks and Russian representative offices of foreign banks. This is more than 30 banks. The program has been successfully operating for over a year.
Want to see the program support your bank? You can help, we require:
1. Provision for the analysis of several SMS notifications received from the Bank, the more messages, the higher the accuracy of the parser. Messages can be downloaded directly from the program, see the menu 'Unload SMS to a file', messages are stored in the file /sdcard/MobileBank/exportSms.txt
----------------------------------
Before sending confidential information may change, but does not replace the scrip for XXX - better to replace it with the other figures, because separators are important to know the amounts, if any. All special characters, spaces, etc. are also important.
----------------------------------
2. Provide a link to the website of the Bank, to the page listing its banking services.
Is it safe? Yes! The text of the SMS notification does NOT receive full credit card number or PIN.
Attention! Nowhere in the program is the user required to enter a full credit card number, PIN, or CVV codes. Be careful not to communicate this information to anyone.

Provide a link to the website of the Bank, to the page listing its banking services.
Click to expand...
Click to collapse
belarusbank.by/ru/person/cards/uslugi/sms-banking

[Source code] WhatsAPI: WhatsApp for other platforms.

https://github.com/venomous0x/WhatsAPI
What is WhatsApp?
According to the company:
“WhatsApp Messenger is a cross-platform mobile messenger that replaces SMS and works through the existing internet data plan of your device. WhatsApp is available for iPhone, BlackBerry, Android, Windows Phone, Nokia Symbian60 & S40 phones. Because WhatsApp Messenger uses the same internet data plan that you use for email and web browsing, there is no cost to message and stay in touch with your friends.”
Click to expand...
Click to collapse
Late 2011 numbers: 1 billion messages per day, ~20 million users.
Modified XMPP
WhatsApp uses some sort of customized XMPP server, named internally as FunXMPP, which is basically some extended proprietary version.
Login procedure
Much like XMPP, WhatsApp uses JID (jabber id) and password to successfully login to the service. The password is hashed and happened to be an MD5’d, reversed-version of the mobile’s IMEI (International Mobile Equipment Identity) or equivalent unique ID, stored in servers upon account creation and used transparently everytime the client connects the server.
The JID is a concatenation between your country’s code and mobile number.
Initial login uses Digest Access Authentication.
Message sending
Messages are basically sent as TCP packets, following WhatsApp’s own format (unlike what’s defined in XMPP RFCs).
Despite the usage of SSL-like communication, messages are being sent in plain-text format.
Multimedia Message sending
Photos, Videos and Audio files shared with WhatsApp contacts are HTTP-uploaded to a server before being sent to the recipient(s) along with Base64 thumbnail of media file (if applicable) along with the generated HTTP link as the message body.
FAQ
What’s with the hex chars floating all over the code?
Mostly WhatsApp’s proprietary control chars/commands, or formatted data according to their server’s specifications, stored in predefined dictionaries within the clients.
What’s your future development plans?
We don’t have any.
Would it run over the web?
We’ve tested a slightly-modified version on top of Tornado Web Server and worked like a charm, however, building a chat client is a bit tricky, do your research.
Can I receive chats?
Indeed, using the same socket-receiving mechanism. But you have to parse the incoming data. Parsing functions aren’t included in this release, maybe in the next one?
I think the code is messy.
It’s working.
How can I obtain my password?
It depends on your platform, with Android for example, you can use TelephonyManager
Code:
TelephonyManager tm = (TelephonyManager) getSystemService(Context.TELEPHONY_SERVICE);
tm.getDeviceId();
With the sufficent permissions of course
Code:
<uses-permission android:name="android.permission.READ_PHONE_STATE"/>
NOTES
This proof of concept is extensible to contain every feature that make a fully-fledged client, similar to the official ones, actually could be even better.
During the two weeks of analysis of service mechanisms, we stumbled upon serious design and security flaws (they fixed some of them since 2011). For a company with such massive user base, we expected better practises and engineering.
Perfectly working as PHP and JAVA ports.
License
MIT - refer to the source code for the extra line.
Venomous
Team of Bahraini Developers.
Ahmed Moh'd and Ali Hubail (@hubail) contributed to this release.

I really would like to know whats your debugging strategy in this case? I'm still not able to capture the traffic from my Android 4 VirtualMachine in order to decypher the ssl traffic.
I documented my setup on my blog, just search for "WhatsApp für Android 4.0.X-X86 ICS auf VirtualBox" on Google.
Could you please provide some infos on your setup?

Except for some requests ( Syncing and Status update) , all requests go on plain text ( although they use SSL port , they still send in plain text )
onnsoft said:
I really would like to know whats your debugging strategy in this case? I'm still not able to capture the traffic from my Android 4 VirtualMachine in order to decypher the ssl traffic.
I documented my setup on my blog, just search for "WhatsApp für Android 4.0.X-X86 ICS auf VirtualBox" on Google.
Could you please provide some infos on your setup?
Click to expand...
Click to collapse

WebOS port!!!
Sent from my R800x using XDA

Looks like Whatsapp is quite secure...
Swypesation

Isn't there anyway to hack it???
Sent from my MT11i using xda premium

google it

[APP][2.3+] Android SMS gateway 0.2.8

Hi,
I have developed a small app, which will turn your mobile in to a SMS gateway (Incoming and Outgoing). Actually I have built this software for one of our web app, which send SMS on user registration or when there is any bill due.
Bulk SMS from web interface
Advance group handling i.e. create multiple groups with 1 million members each
API support (for outgoing and incoming SMS). You can integrate this gateway with your website or desktop application to send SMS on trigger basis. Our API is platform and language independent, therefore you can use it with any programming language like JavaScript (node.js, jquery), Ruby on Rails, PHP, ASP.NET, ASP etc.
Two-way SMS i.e. incoming SMS processing. Check the response rate of your campaign.
Missed Call Service
Delivery Reports
You will be charged only for delivered SMS.
Post-paid billing by your carrier.
Your brand, your number.
Add multiple numbers (SIM/Phone) to build a large cluster.
Send SMS even on DND listed numbers if, they are registered with you.
SMS queuing (i.e. if your mobile can not connect to internet to fetch the data than we will queue the messages till it gets a connection.)
Runs as a gateway i.e. it will work in background on your mobile without interrupting your day to day tasks.
Full control on message sending.
Application can be downloaded from market://play.google.com/store/apps/details?id=com.znisms.bulksms
Once you downloaded the app and registered an account just reply to the welcome mail and I will add a lifetime license on your account (it's free for one month only for a normal user) as my thanks to XDA community from, which I have learnt a lot.
API Details
<Sorry, Not allowed to post links>
Parameters:
userid: ID created on ZNISMS.com
apikey: 32bit API Key (provided by ZNI)
sendto: Mobile number on which message has to be sent.
message: URL encoded message. Max 160 characters.
device: device ID from, which you want to send SMS, in case multiple devices are registered with us.
Please note this application (while running) consumes battery at very fast rate therefore it is recommended that you keep your phone plugged in while using this app.
Login from mobile.znisms.com to manage groups and send SMS.
Feel free to ask for features whatever you feel useful for your app or service.

[APP][4.1+] Duly Noted - The Productivity App You Didn't Know You Needed!

Do you find yourself constantly getting out your phone to write a quick email reminder? If so, Duly Noted is a simple application that can save you a lot of time and hassle by automating the process to 1-touch!
I wrote this app for myself a few years ago, and to this day it continues to be on of the most-used apps on my phone. At the end of some days I'll have sent 5-10 messages to myself via Duly Noted. I'm now releasing it for free for others to benefit from the productivity it provides!
Duly Noted allows you to configure 1-2 shortcut buttons that instantly send notes to pre-configured email addresses using a Google account on your phone to deliver the message.
Using a traditional email client, you must navigate the interface and type out a "To:", "Subject:", "Body:", etc. With Duly Noted you can quickly focus on your note and then just tap the shortcut and you're done! (greatly reducing the time it takes you to send the note) Watch the video above!
Features:
+ Fire-and-forget 1 touch email sending!
+ One or two configurable email shortcut buttons
+ Supports "Share" Android native functionality for sending links and webpages
+ Very informative notifications on the status of your outgoing email
+ Successful notifications auto-timeout, while errors stay in the notification bar as an FYI
+ Set it as a lockscreen shortcut for super fast notes!
+ Free! No ads!
Privacy:
While the app must use and access a Google Account on your phone to send the outgoing message, rest assured that the application does not attempt to access your data or track anything you do.
Disclaimer:
My first public / published Android app - go easy on me, but please leave a rating
Download: https://play.google.com/store/apps/details?id=net.farleyfamily.dulynoted

[APP][4.0+]QuickOTP - Hassle-free OTP authentication

Introduction:
For users handling with money transactions online (online shopping, bank transfers, mobile recharge/top-up), it can become cumbersome to deal with One Time Password (OTP) based authentications. The user has to switch to the messaging app, open the appropriate SMS and memorize/copy the OTP every time. With QuickOTP, you can bypass this process. QuickOTP displays the OTP in a lucid and non-intrusive manner along with an option to quickly copy the OTP as soon as you receive your OTP message. The user does not have to switch apps during the transaction.
This app is useful in the following cases:
Two-factor authentication based login.
Internet banking transactions.
Credit/Debit card transactions.
Link:
https://play.google.com/store/apps/details?id=com.mb14.quickotp