Hacking Mobile Platforms

Question 1

Which of the following is not an OWASP Top 10 Mobile Risk?

Buffer overflow
Reverse engineering
Insecure communication
Insecure cryptography

Answer 1

Buffer overflow

Question 2

On android, which of the following Java API framework blocks manages the data sharing between applications?

Notification manager
Content providers
Window manager
Activity manager

Answer 2

Content providers

Question 3

Which of the following is an Android banking Trojan that uses a malicious SMS to compromise the security of a target mobile device by dynamically loading web views and targeting specific domains based on received commands?

Fing
xHelper
Gustuff
cSploit

Answer 3

Gustuff

Question 4

What is xHelper?

Answer 4

Android/Trojan.Dropper.xHelper is a variant of Android/Trojan.Dropper. The first noticeable characteristic of xHelper is the use of stolen package names. For instance, xHelper uses package names starting with “com.muf.”

Question 5

What is cSploit?

Answer 5

cSploit is an Android network analysis and penetration suite that is used to map the local network, fingerprint hosts’ operating systems and open ports, perform integrated traceroute, forge TCP/UDP packets, and perform MITM attacks such as password sniffing, JavaScript injection, capturing real-time network traffic, DNS spoofing, and session hijacking

Question 6

What is TunesGo?

Answer 6

TunesGo is an android tool that has an advanced android root module that recognizes and analyzes your Android device and chooses an appropriate Android-root-plan for it automatically.

Question 7

What is zANTI?

Answer 7

zANTI is an android application that acts as a pentesting toolkit

Question 8

What is DroidSheep?

Answer 8

DroidSheep is a simple Android tool for web session hijacking (sidejacking)

Question 9

What is ORBOT?

Answer 9

Orbot is a proxy app that empowers other apps to use the internet more privately. It uses Tor to encrypt your Internet traffic and then hides it by bouncing through a series of computers around the world. Attackers can use this application to hide their identity while performing attacks or surfing through the target web applications.

Question 10

What are Velonzy, TaiG and Yalu?

Answer 10

iOS Jailbreaking Tools

Question 11

What is X-Ray?

Answer 11

X-Ray is an android vulnerability scanner

Question 12

What is Spyzie?

Answer 12

Spyzie is an iOS spyware tool to gather SMS logs, call logs, app chats, GPS, etc.

Question 13

What is Apricot?

Answer 13

Apricot is a web-based mirror OS for iPhone. It supports iOS 13.2 devices. Users can run this mirror iOS version with the default iOS 13.2 simultaneously

Question 14

What is Hexxa Plus?

Answer 14

Hexxa Plus is a Jailbreak Repo Extractor for iOS 13.2, which allows you to install themes, tweaks, and apps. It is compatible with iOS 13 and higher versions up to iOS 13.2.3 including iOS 13.3 beta

Question 15

What is Trident?

Answer 15

Trident is a sophisticated spyware that exploits vulnerabilities in an iPhone to spy on users. These vulnerabilities allow attackers to jailbreak the target iPhone remotely and install malicious spyware such as Pegasus. Trident is capable of taking complete control of the target mobile device, and it allows attackers to monitor and track all the user activities

Question 16

What is Core OS?

Answer 16

This layer on iOS contains low-level features on which most other technologies are based. Frameworks in this layer are useful when dealing explicitly with security or communicating with an external hardware and networks. The services provided by this layer are dependent on the Kernel and Device Drivers layer

Question 17

What is Core Services?

Answer 17

This layer contains fundamental system services for apps. The key services are Core Foundation and Foundation frameworks (define the basic types that all apps use). Individual technologies that support features such as social media, iCloud, location, and networking belong to this layer

Question 18

What is a semi-tethered jailbreak?

Answer 18

A semi-tethered jailbreak is one which a jailbreak tool applies to an iOS device, which will be lost and need to be re-applied on reboot.

Question 19

What is an untethered jailbreak?

Answer 19

A persistent jailbreak which lasts through reboots

Question 20

What is XenMobile?

Answer 20

An MDM (Citrix XenMobile / Citrix Endpoint Management)