User Controls
Ever wanted to have a pocket pentesting platform but don't have a Nexus phone?
-
2016-04-15 at 3:56 PM UTCFear not, Kali Nethunter may be a pretty awesome thing to have on a Nexus device but if you're on a Galaxy S whatever you're basically fucked. Custom firmware FTW though. Firstly unlock USB debugging features from the settings. Pick out your phone's model from a site like this.
http://theunlockr.com/roms/android-roms/
When you get the one that corresponds to your version of the phone you can pickout a nice one. I suggest getting a debloated ROM because who the fuck needs bloatware and Google spyware on their phone.
ROMs come in various formats but the most common ones are tarballs, md5 and zip and not all flashing tools support the same formats. You will also need a custom recovery bootloader, i suggest looking into getting a TWRP recovery bootloader. If you have an SD card. Use this method.
http://www.addictivetips.com/android...devices-guide/
If not i suggest looking into Odin based auto-rooters by TWRP. They're very easy to use and come wuth everything you need out of the box. TWRP's PC tool for flashing only supports .zip files so keep that in mind.
If all else fails you can download the ADB android debugger standalone if you like working from the command line qtADB if you'd like a GUI. The ADB method goes as follows:
Place your rom file into your ADB directory and start an instance of ADB from the command line/ Proceed to enter the following commands:
adb usb
adb shell
mount data
At this point you can exit your shell because we're going to push the file to the phone now.
adb push C:/rom.zip /data/
Wait until the push finishes. And enter these commands next
adb reboot-bootloader
Let it reboot into the bootloader and enter these commands.
mount data
mount /data /sdcard
This is basically a hack because by mounting the /sdcard folder in your data folder you're tricking the recovery into thinking there's an SD card to flash from.
Locate the ROM .zip file you wish to flash. Confirm the flash by following the on-screen instructions. If no errors are thrown during the flashing process then you are victorious. Now reboot the thing and enter the following commands
adb shell
rm data/rom.zip
Being the good haxxorz that we are we clean up after ourselves with the above operation.
Now with your fancy custom bootloader and ROM we can really get to work. Go to the app store and download the following apps.
If you're a really hardcore android haxxor you'll get this terminal for your phone because it's also an IDE https://play.google.com/store/apps/d...tacuside&hl=en otherwise a normal terminal to interact with android. If busybox came with your ROM it has a terminal too. Make sure to grant it root privilege if it asks for it. the "su" commands elevates the terminal if you started it as a normal user. The reason we need a terminal is because we may need to change some privileges for system files in our custom android OS
You'll also need an SSH client.
https://play.google.com/store/apps/d....anstudios.ssh
And the piece la résistance. https://play.google.com/store/apps/d...uxdeploy&hl=en
What this app does is create an image on the device's HD or an SD and after some configuration (Like distro and components) it installs the distro of your choice in it and mounts it. Apps run in a chroot environment together with android. After you install a distro and mount the image you open your SSH client and SSH into the image the details of doing so are displayed in the main apps interface. Now you can turn this:
Into this:
Happy haxxing. -
2016-04-16 at 4:11 AM UTCI read about this a while back and although it seemed cool, putting a full LInux distro onto a smart phone seems like to much. Unless you SSH into it or attach a keyboard via USB OTG, typing in all of those commands is going to be a bitch.
-
2016-04-16 at 4:29 AM UTC
I read about this a while back and although it seemed cool, putting a full LInux distro onto a smart phone seems like to much. Unless you SSH into it or attach a keyboard via USB OTG, typing in all of those commands is going to be a bitch.
Lol, would certainly recommend one of those little USB keyboards if you're going to do this. -
2016-04-23 at 11:21 PM UTCDoesn't the kernel need to be modified, at least for full functionality?
https://github.com/offensive-security/kali-nethunter/wiki/Porting-Nethunter
https://github.com/offensive-security/kali-nethunter/wiki/Modifying-the-Kernel
And can the hardware of the Galaxy X phones support all the features?
I was actually about to make a thread about Nethunter, I have a Nexus. This would be my ideal setup:
MultiROM Manager: https://play.google.com/store/apps/details?id=com.tassadar.multirommgr&hl=en
http://forum.xda-developers.com/google-nexus-5/orig-development/mod-multirom-v24-t2571011
FluxionWifi Auto Cracker: http://hackforums.net/showthread.php?tid=5245730
This takes care of typing commands being a pain. Fixes some bugs, adds some improvements.
https://github.com/deltaxflux/fluxion
Maybe this 3 in 1 cable as well, which is the exact design I was looking for, along with an added power source to power devices, making it easier to supply an external wifi: http://www.amazon.com/Hittime-Adapter-Extension-Smartphone-Tablet/dp/B00FGKXY9S
This way you could possibly install it on a USB drive if you wanted to, to save space, use the other USB for the wifi dongle, and the power supply to feed both. -
2016-06-02 at 6:18 AM UTC
Doesn't the kernel need to be modified, at least for full functionality?
https://github.com/offensive-security/kali-nethunter/wiki/Porting-Nethunter
https://github.com/offensive-security/kali-nethunter/wiki/Modifying-the-Kernel
And can the hardware of the Galaxy X phones support all the features?
I was actually about to make a thread about Nethunter, I have a Nexus. This would be my ideal setup:
MultiROM Manager: https://play.google.com/store/apps/details?id=com.tassadar.multirommgr&hl=en
http://forum.xda-developers.com/google-nexus-5/orig-development/mod-multirom-v24-t2571011
FluxionWifi Auto Cracker: http://hackforums.net/showthread.php?tid=5245730
This takes care of typing commands being a pain. Fixes some bugs, adds some improvements.
https://github.com/deltaxflux/fluxion
Maybe this 3 in 1 cable as well, which is the exact design I was looking for, along with an added power source to power devices, making it easier to supply an external wifi: http://www.amazon.com/Hittime-Adapter-Extension-Smartphone-Tablet/dp/B00FGKXY9S
This way you could possibly install it on a USB drive if you wanted to, to save space, use the other USB for the wifi dongle, and the power supply to feed both.
If you want a nethunter-esque environment on USB i suggest looking into Kali on ARM devices instead.