ToolWar | Information Security (InfoSec) Tools: Java

iPhone Analyzer :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="iphone analysis" border="0" height="265" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyVrxfsAbT1zhDHt5nIp-4u2AZSwoZbbGPfy91RQmjyHX4TU-0qcH4M5fHpd1PuEVma0RI6zVJLki1tJcwrYoHZ3x9BTvqnrE-LvuJsFDLDqOG_K8IX0B0eufoAkJj5cB1qEqlO8f79Kjw/s1600/iphone+analysis.jpg" title="iphone analysis" width="400" /></div>
</div>
<div style="text-align: justify;">
<b>iPhone Analzyer</b> allows you to <i>forensically examine or recover date from 
in iOS device</i>. It principally works by <i>importing backups</i> produced by 
iTunes or third party software, and providing you with a rich interface 
to explore, <i><a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyse</a> and recover data</i> in human readable formats. Because 
it works from the backup files everything is <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensically</a> safe, and no 
changes are made to the original data.</div>
<h3 style="text-align: justify;">
<span style="font-size: small;">Features ::</span></h3>
<ul style="text-align: justify;">
<li>Supports iOS 2, iOS 3, iOS 4 and iOS 5 devices</li>
<li>Multi-platform (<a href="http://www.toolwar.com/search/label/Java" target="_blank">Java</a> based) product, supported on <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>, <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> and <a href="http://www.toolwar.com/search/label/Mac" target="_blank">Mac</a></li>
<li>Fast, powerful search across device including regular expressions</li>
<li>Integrated mapping supports visualisation of geo-tagged information,
 including google maps searches, photos, and cell-sites and <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">wifi</a> 
locations observed by the device (the infamous "locationd" data)</li>
<li>Integrated support for text messages, voicemail, address book 
entries, photos (including metadata), call records and many many others</li>
<li>Recovery of "deleted" sqlite records (records that have been tagged 
as deleted, but have not yet been purged by the device can often be 
recovered),/li>
</li>
<li>Integrated visualisation of plist and sqlite files</li>
<li>Includes support for off-line mapping, supporting mapping on computers not connected to the Internet</li>
<li>Support for KML export and direct export to Google Earth</li>
<li>Browse the device file structure, navigate directly to key files or 
explore the device using concepts such as "who", "when", "what" and 
"where".</li>
<li>Analyse jail broken device directly over SSH without need for backup (experimental)</li>
<li class="feature">iPhone Backup Browsing</li>
<li class="feature">Native file viewing (plist, sqlite, etc)</li>
<li class="feature">Searching including regular expressions</li>
<li class="feature">ssh access for <a href="http://www.toolwar.com/search/label/Jailbreak" target="_blank">jailbroken</a> phones (beta)</li>
<li class="feature">Reports</li>
<li class="feature">Restore files</li>
<li class="feature">Recover backups</li>
<li class="feature">View all iPhone photos</li>
<li class="feature">examine address book, sms and loads of others</li>
<li class="feature">find and recover passwords</li>
<li class="feature">Export files to local filesytem </li>
<li class="feature"><a href="http://www.toolwar.com/search/label/Online" target="_blank">Online</a> and offline mapping</li>
<li class="feature">Geo track where a device has been</li>
<li class="feature">IOS5 and earlier versions supported</li>
<li class="feature">IOS6 is only partially supported (several known problems) </li>
</ul>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>User Manual (PDF) ::</b><a href="http://www.crypticbit.com/files/ipa_user_guide.pdf" target="_blank"> Click Here </a></div>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>JAR :: </b><a href="http://sourceforge.net/projects/iphoneanalyzer/files/latest/download" target="_blank">iPhone Analyzer (.jar)</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.crypticbit.com/zen/products/iphoneanalyzer">http://www.crypticbit.com/zen/products/iphoneanalyzer</a></div>

iPhone Analyzer :: Tools

iPhone Analzyer allows you to forensically examine or recover date from in iOS device . It principally works by importing backups pr...

smali (Assembler for dex format) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="smali logo" border="0" height="280" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvMgaYIXu9kEb3LQsy_paHL9-EAN0SvjQzMdS81TVU5uaddIxFjIuHqW3L6x3rb6FIMC6sospuMkKGIK7mZMULVynwkyYRiqEieuG-GOkROFXWN-vbQRNRKpSqjCupCOaX4CDM4kzJXtTF/s320/smali+logo.jpg" title="smali logo" width="320" /></div>
<br />
<b>smali/baksmali</b> is an <i>assembler/disassembler for the dex format</i> used  by dalvik, Android's Java VM implementation. The syntax is loosely based  on Jasmin's/dedexer's syntax, and supports the full functionality of  the dex format (annotations, debug info, line info, etc.) </div>
<div style="text-align: justify;">
The  names <b>"smali"</b> and "baksmali" are the Icelandic equivalents of  "assembler" and "disassembler" respectively. Why Icelandic you ask?  Because dalvik was named for an Icelandic fishing village. </div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/9h8kzHTp6fA?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Java ::</b> <a href="https://bitbucket.org/JesusFreke/smali/downloads" target="_blank">Download smali 2.0.2 and baksmali 2.0.2</a></div>
<div style="text-align: justify;">
<b>Source ::</b> <a href="http://code.google.com/p/smali/">http://code.google.com/p/smali/</a></div>

smali (Assembler for dex format) :: Tools

smali/baksmali is an assembler/disassembler for the dex format used by dalvik, Android's Java VM implementation. The syntax is lo...

Blooover (J2ME Phone Autditing) :: Tools

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsTpT9cfrEeVdY-n-9KwBEegNMoVSM-KW02xdTM_5zftMZe0MF7XjeQXlKWs_21jAnKaWACK6JxwmHue-4BheAZXFM3vfoX_PrI20ajZNTvLbHyjvuCkSONRBN9o26QhHqh1lhf5AcG7Mh/s1600/blooover+logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Blooover Logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsTpT9cfrEeVdY-n-9KwBEegNMoVSM-KW02xdTM_5zftMZe0MF7XjeQXlKWs_21jAnKaWACK6JxwmHue-4BheAZXFM3vfoX_PrI20ajZNTvLbHyjvuCkSONRBN9o26QhHqh1lhf5AcG7Mh/s1600/blooover+logo.png" title="Blooover Logo" /></a></div><div style="text-align: justify;"><b>Blooover</b> is a <i>J2ME Phone Auditing Tool</i>. Since <b>Adam Laurie's</b> BlueSnarf experiment and the subsequent BlueBug experiment it is proven that some <a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank">Bluetooth</a>-enabled phones have <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> issues. Until now, attackers need laptops for the snarfing of other people's information. Unless attackers do a long-distance-snarf, people would see that there is somebody with a laptop trying to do strange things. <b>Blooover</b> is a proof-of-concept tool that is intended to run on J2ME-enabled cell phones that appear to be comparably seamless. <b>Blooover </b>is a tool that is intended to serve as an audit tool that people can use to check whether their phones and phones of friends and employees are vulnerable.<br />
<br />
Since the application runs on handheld devices and sucks information, it has been called <b>Blooover</b> (derived from <b>Bluetooth Hoover</b>).<br />
<br />
We had some objections to release a tool that actually does a bluebug-attack before eventual victims were not in the position of doing something against it. Now, that Nokia announced a <a href="http://www.toolwar.com/search/label/Firmware" target="_blank">firmware </a>upgrade for their vulnerable models, these objections are no longer present.</div><div style="text-align: justify;"><h3>Tutorial ::</h3><h4>Installation ::</h4>When you intend to install the application, you should be using               a phone that has the Java Bluetooth API implemented. Phones with               this feature are listed on this, very useful page.<br />
Once you downloaded the file, make sure that it is called Bloover.jar               (not Blooover.zip). After this you can either transfer the application               to your phone via (1) the phone software on your pc, or (2) via               Obex Push over Bluetooth or (3) via OTA (over-the-air application               provisioning) which will use your phone's data services.</div><div style="text-align: justify;"><h3>Download ::</h3><b>Jar :: </b><a href="http://trifinite.org/Downloads/Blooover.jar" target="_blank">Blooover.jar </a></div>

Blooover (J2ME Phone Autditing) :: Tools

Blooover is a J2ME Phone Auditing Tool . Since Adam Laurie's BlueSnarf experiment and the subsequent BlueBug experiment it is proven t...