+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Premium (https://hackforums.net/forumdisplay.php?fid=451)
+---- Forum: Premium Sellers Section (https://hackforums.net/forumdisplay.php?fid=107)
+---- Thread: Android ADB Scanner & Automated APK Uploader (/showthread.php?tid=6210608)
Android ADB Scanner & Automated APK Uploader - Proxies.tv - Jun 23, 2022
**DISCLAIMER: THIS PRODUCT IS RELEASED FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY. IT IS NOT TO BE USED FOR NEFARIOUS PURPOSES. YOU ARE RESPONSIBLE FOR YOUR OWN CONDUCT AND SELLER ASSUMES NO RESPONSIBILITY OR LIABILITY FOR YOUR ACTIONS.**
Today I bring you something you've probably never seen before as I custom developed it. What this scanner does is search through ip ranges (provided in CIDR format by you) and it finds and identifies all android devices it can find. Normal port scanners cannot detect android devices. It takes special coding to have a scanner find and identify android devices. This includes both smart phones as well as android tv boxes and smart tv's. Basically anything running the android operating system.
This scanner primarily looks for open android debug bridge (ADB) devices open to the world without any security at all. As you should already be aware of, an open adb is your gateway to that device. Upload, download, do anything you want over the adb command line as you now own this device.
The scanner in action:
https://i.gyazo.com/7f86141e95271fbd7ed14c4aa0471eee.jpg
In my lab environment I have 6 microsoft windows rdp machines open and running. Minimized to conserve screen space and so I can watch the incoming results in real time. Each virtual machine is running 16,000 threads each (and it takes almost no resources to scan this fast so long as you have a medium to high class processor in your machine) and we have a total of 16,000 x 6 = 96,000 threads running simultaneously. You can run your scans straight without a proxy, or you can run it with proxies active as this scanner supports both options.
Scanners are available for both Microsoft Windows (all versions) and Linux (Debian, Ubuntu, & CentOS).
In this scan, I have taken all the ip ranges I wanted for a particular country and spread them out evenly amongst all 6 machines. Let's take a look at some of the results:
69.165.*.*:5555,ja3gxx,ja3g,GT-I9500,
107.171.*.*:5555,rk322x_box,rk322x_box,R PLUS,cmd shell_v2
96.126.*.*:5555,dreamltexx,dreamlte,SM-G950F,
In these results we have 2 smart phones and 1 tv box. Your scanning results can find hundreds to thousands of devices with almost no work on your end. Depending upon the country you are looking for, the bigger the country, the better the results. Time of day matters as well. Try to scan during the day for maximum results.
Usage:
The command to start the scanner is formulated like this:
.\scanner.exe -if textfile.txt -f results.txt -t 16000
Now let me explain what this command does:
Since we're invoking an exe through a dos command prompt (for microsoft windows machines only) we have to invoke the exe directly through the command prompt. The second part -if ....txt this is the text file that holds your CIDR formatted ip ranges. This text file needs to be in the same directory as the scanner itself. A properly formatted CIDR text file looks like this:
https://i.gyazo.com/4168d54d2983f11bf5ffa478a4034345.png
The third part is the -f results.txt which prints out our list of ip's and identified devices. And the fourth part is the -t 16000 which specifies how many threads we want to use on this scan. (I hate waiting, so I run the maximum amount of threads that Windows permits, which is 16,000 without modifying the registry and all that. The Linux version was tested successfully at 60,000 vthreads on an AMD EPYC 24-Core processor.
So the one command covers everything. Your results are printed in the results.txt file in real-time, so you can always see how well your scan is going and what type of units you are finding.
The second part of this is the Automated APK Uploader that contains your payload apk. When combined with your results.txt list from the scanners, will automatically upload your apk to all the listed results in that text file one by one until the list is exhausted. So this entire operation is just scan and upload.
(If you take a look at Shodan.io and look for android adb open under port 5555 you will begin to see what this scanner can do. Shodan normally lists around 5,000 devices, but they only do limited scanning. My scanner will scan anywhere you want. So what countries and real-time scanning Shodan doesn't keep records on, you can get and own with my Scanner & Automated APK Upload combo.
Price: $750 USD (Scanner & Automated APK Uploader)
[contract=tid]Start Contract[/contract]
RE: Android ADB Scanner & Automated APK Uploader - Benjam1 - Jun 26, 2022
Can you explain what's the purpose of that exactly? You can upload any application you want in victims phones?
RE: Android ADB Scanner & Automated APK Uploader - Proxies.tv - Jun 26, 2022
(Jun 26, 2022 04:20 AM)Benjam1 Wrote: Can you explain what's the purpose of that exactly? You can upload any application you want in victims phones?
Thats pretty much the picture.
BUMP - Stanley - Jun 28, 2022
I'm Stanley HF's helper bot. The OP (original poster) of this thread wants everyone to see this page and has elected to bump it to the top of the showthread listing. Since HF doesn't want a ton of LQP (Low Quality Posts) this is the best method of bumping your content. There is a small βyte fee for each bump. Any OP can bump any of their threads on HF from the linked icon on the top of their first post.
If you haven't already read the first post of this thread we encourage you to do so.
Thanks,
Stanley