Wednesday, October 25, 2017

SIDE CHANNEL ATTACKS ON SMARTPHONES

UMCI BYPASS USING PSWORKFLOWUTILITY (very high pro talk)

looking at this module, you will notice that it has an embedded Authenticode signature block




https://enigma0x3.net/2017/

DIY Hardware implant over I2C Part of the NSA Playset

NSA Playset Bridging the Airgap without Radios Michael Leibowitz

I particulary find this SYS exporter very nice tool

See Also

  • SiteShoter - Take a screenshot of a Web site and save it to png/jpg/bmp/tiff/gif file.
  • NK2Edit - Edit, merge and fix the AutoComplete files (.NK2) of Microsoft Outlook.

Description

SysExporter utility allows you to grab the data stored in standard list-views, tree-views, list boxes, combo boxes, text-boxes, and WebBrowser/HTML controls from almost any application running on your system, and export it to text, HTML or XML file. 
Here's some examples for data that you can export with SysExporter:

  • The files list inside archive file (.zip, .rar, and so on) as displayed by WinZip or 7-Zip File Manager.
  • The files list inside a folder.
  • The event log of Windows.
  • The list of emails and contacts in Outlook Express.
  • The Registry values displayed in the right pane of the Registry Editor.
  • The data displayed by SysInternals utilities (Registry Monitor, File Monitor, Process Explorer, and others.)
  • The text inside a standard message-box of Windows.
  • The HTML inside any instance of Internet Explorer.

http://www.nirsoft.net/utils/sysexp.html

Talking about air gapped hacking... Airspy R0, R2, Mini and Airspy HF+ can be used as a high performance SDR receiver capable of streaming separate chunks of the spectrum to multiple clients over the LAN or the Internet.

Windows SDR Software Package (Change log)

Contains:
  • SDR# x86 rev 1596
  • Airspy Calibration Tool
  • ADSB Spy rev 37 – High Performance ADSB Decoder (Requires firmware 1.0.0-rc7 or better)
  • Spectrum Spy – Spectrum Analyzer
  • Astro Spy – Radio Astronomy Utility for Hydrogen Line Spectroscopy
  • SPY Server – Multi-client SDR Server with DDC
http://airspy.com/download/

Ok, you're in the Midlea East, you are now Jason Bourne, running ...you need your phone to be totally safe! This means hours of backoffice work.