einyx

## Background

Google compiles the Pixel 2 kernel with Clang. They shipped the device on Android 8.0 with a kernel compiled with Clang 4.0 ([build.config commit](https://android.googlesource.com/kernel/msm/+/1282b122796d12f42e650216b40172eae4dc4162) and [prebuilt kernel commit](https://android.googlesource.com/device/google/wahoo-kernel/+/8c65a7e83f8bc602a05f077d221d4648db189ef8)) and upgraded to Android 8.1 with a kernel compiled with Clang 5.0 ([build.config commit](https://android.googlesource.com/kernel/msm/+/1eaefe4575b5c39dacb724344d427e34d12c15df) and [prebuilt kernel commit](https://android.googlesource.com/device/google/wahoo-kernel/+/e03cfae0fa716983ae7af64bf8f1c50003637ffb)).

Google uses Clang's link-time optimization and control flow integrity in the Pixel 3 kernel, hardening it against return oriented programming attacks ([LTO commit](https://android.googlesource.com/kernel/msm/+/f641ef709bd4894d9143c9d47af2dc46d3e5ecf4), [CFI commit](https://android.googlesource.com/kernel/msm/+/4ca69fba29179

einyx

 

# Wildcard blocking
# The domains below need to beed added to your program as wildcard domains
# ( without the # )
# 
# 6.googlevideo.com
# 7.googlevideo.com
# d.googlevideo.com
# e.googlevideo.com

einyx

Step 1: Install requirements

sudo apt-get install sdcc binutils python python-pip git
sudo pip install -U pip
sudo pip install -U -I pyusb
sudo pip install -U platformio

Step 2: Download source code

git clone https://github.com/BastilleResearch/mousejack.git

einyx

pm uninstall -k --user 0 cn.oneplus.photos
pm uninstall -k --user 0 com.android.chrome
pm uninstall -k --user 0 com.android.engineeringmode
pm uninstall -k --user 0 com.android.engineeringmode.specialtest
pm uninstall -k --user 0 com.example.wifirftest
pm uninstall -k --user 0 com.fingerprints.fingerprintsensortest
pm uninstall -k --user 0 com.oem.logkitsdservice
pm uninstall -k --user 0 com.oem.nfc
pm uninstall -k --user 0 com.oem.oemlogkit
pm uninstall -k --user 0 com.oneplus.account

einyx

pm uninstall -k --user 0 cn.oneplus.photos
pm uninstall -k --user 0 com.android.chrome
pm uninstall -k --user 0 com.android.engineeringmode
pm uninstall -k --user 0 com.android.engineeringmode.specialtest
pm uninstall -k --user 0 com.example.wifirftest
pm uninstall -k --user 0 com.fingerprints.fingerprintsensortest
pm uninstall -k --user 0 com.oem.logkitsdservice
pm uninstall -k --user 0 com.oem.nfc
pm uninstall -k --user 0 com.oem.oemlogkit
pm uninstall -k --user 0 com.oneplus.account

einyx

Assumes were using Linux/Kali

Bash Bunny is an awesome little device by Hak5 and I wrote down a few notes to quickly get started.

First Steps

Plug in arming mode (closest to computer) Download firmware from: https://wiki.bashbunny.com/#!downloads.md Check checksum Follow instructions of placing into root of bashbunny drive/folder and eject/plug back in

einyx

#!/bin/bash

vmware-hgfsclient | while read folder; do
  echo "[i] Mounting ${folder}   (/mnt/hgfs/${folder})"
  mkdir -p "/mnt/hgfs/${folder}"
  umount -f "/mnt/hgfs/${folder}" 2>/dev/null
  vmhgfs-fuse -o allow_other -o auto_unmount ".host:/${folder}" "/mnt/hgfs/${folder}"
done

sleep 2s

einyx

The Iceman fork is the most enhanced fork to this day for the Proxmark 3 device. Iceman has done a great job developing and maintaining the repository, please consider donating if you find his fork useful.

13.56MHz

iClass
Mifare
125 kHz

Indala

einyx

# How to get ClamAV working on CentOS 7

yum -y install epel-release && yum -y update
yum -y install clamav clamav-data clamav-scanner clamav-scanner-systemd clamav-server clamav-server-systemd clamav-unofficial-sigs clamav-update

# Add /etc/clamd.d/freshclam.conf

# Add /usr/lib/systemd/system/clamav-freshclam.service

systemctl enable clamav-freshclam.service && systemctl start clamav-freshclam.service

einyx

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "NonResourceBasedReadOnlyPermissions",
            "Action": [
                "ec2:DescribeSubnets",
                "ec2:DescribeSecurityGroups",
                "ec2:DescribeSnapshots",
                "ec2:DescribeImages",