Category Archives: Mobile

Pivoting a Shell through Android with SMS

I’ve been messing with SMS for hidden out of bounds communication since 2011. My earlier work involved a backdoored device driver: Demo Video: Background SMS Demo Whitepaper: Transparent Botnet Command and Control for Smartphones over SMS PoC Code: botPoCrelease-android.c Slides: Shmoocon 2011 Slides Working at the application layer in Android is for one easier and…

Using Infected Mobile Devices to Attack Nearby Devices

This post assumes basic knowledge of using the Smartphone Pentest Framework (SPF). Specific required knowledge is referenced in the User Manual as it is referenced. SPF can be downloaded here: Github The SPF User Guide is here: User Guide Videos about SPF are here: SPF Videos In 2013 I started taking a look at the…