16
Building RAT for Android (Remote Administration Tool) Richard Villca Apaza @SixP4ck3r

Android CAMP 2014 Bolivia

Embed Size (px)

DESCRIPTION

My speach was related to how to create a RAT(Remote Administration Tool) could be called also Trojan in smartphones, I demostrated how easy will be build a RAT using technologies like PHP, PG and ECLIPSE IDE.

Citation preview

Page 1: Android CAMP 2014 Bolivia

Building RAT for Android (Remote Administration Tool)

Richard Villca Apaza

@SixP4ck3r

Page 2: Android CAMP 2014 Bolivia

Disclaimer

You agree that this workshop is intended for educational

purposes only and the author can not be held liable for any

kind of damages done whatsoever to your machine, or

damages caused by some other, creative application of this

workshop. In any case you disagree with the above

statement, stop here

Page 3: Android CAMP 2014 Bolivia

Smartphone Market Percentage

Android Camp 2014 - Bolivia Building RAT for Android

Page 4: Android CAMP 2014 Bolivia

Malware evolution in Android Apps

Android Camp 2014 - Bolivia Building RAT for Android

Page 5: Android CAMP 2014 Bolivia

Ways to install Apps in Android

Android Camp 2014 - Bolivia Building RAT for Android

Sideloading

Apps Google Play Store

Third-Party App

Stores

Page 6: Android CAMP 2014 Bolivia

Sideloading Apps is a Dangerous Game

Android Camp 2014 - Bolivia Building RAT for Android

Page 7: Android CAMP 2014 Bolivia

Trojans in Google Play Store

Android Camp 2014 - Bolivia Building RAT for Android

Page 8: Android CAMP 2014 Bolivia

How to develop an RAT?

Android Camp 2014 - Bolivia Building RAT for Android

Page 9: Android CAMP 2014 Bolivia

What the RAT can do?

Call Number

Delete Call Logs

Open Webpage

Update the app

Delete Files ( audio, video, pictures, calls )

Get Browser History

Get Browser Bookmarks

Get Call History

Open Dialog Box

Get Inbox SMS

HTTP flood

Media volume up/down

Ringer volume up/down

Screen On

Record Calls

Block SMS

Record Audio

Take Video

Take Photo

Send Text

Send Contacts

Get user accounts

Page 10: Android CAMP 2014 Bolivia

The Architecture

Android Camp 2014 - Bolivia Building RAT for Android

Send-data

cmd

Page 11: Android CAMP 2014 Bolivia

Chanel

(PHP)

Start in

Boot LAMMP Distractive App Idea

Requiremetes

Android Camp 2014 - Bolivia Building RAT for Android

Page 12: Android CAMP 2014 Bolivia

What Technologies We Need?

Android Camp 2014 - Bolivia Building RAT for Android

Page 13: Android CAMP 2014 Bolivia

What is Snippets?

Android Camp 2014 - Bolivia Building RAT for Android

Snippet is a programming term for a small region of

re-usable source code, machine code, or text.

Ordinarily, these are formally defined operative units

to incorporate into larger programming modules.

Snippets are often used to clarify the meaning of an

otherwise "cluttered" function, or to minimize the use

of repeated code that is common to other functions.

Page 14: Android CAMP 2014 Bolivia

Let’s start Building our RAT

Android Camp 2014 - Bolivia Building RAT for Android

Page 15: Android CAMP 2014 Bolivia

References

• AndroRat

• Dendroid

• Flue Proyect

Android Camp 2014 - Bolivia Building RAT for Android

Page 16: Android CAMP 2014 Bolivia

Thank you so much

Twitter: @SixP4ck3r

Fb: http://fb.me/rithchard

E-Mail: [email protected]

Have a nice Hacking

Android Camp 2014 - Bolivia Building RAT for Android