search

arriven / db1000n

MIT License
1.17k stars 201 forks source link

Build Android APK file to provide the huge possibility to attack via ru phone owners. #416

Closed oleksiikoshlatyi closed 2 years ago

oleksiikoshlatyi commented 2 years ago

I'm suggesting, this is a possible solution https://pkg.go.dev/golang.org/x/mobile/cmd/gomobile

Wendors commented 2 years ago

This link does not work

oleksiikoshlatyi commented 2 years ago

The link is working image

arriven commented 2 years ago

Seems like an interesting idea, but based on my limited experience with mobile it's likely that the main problem will be crafting a manifest with all the required permissions to use low level attacks, otherwise there might be existing solutions that are better suited for the use case (I've been looking into making a webassembly build and hosting a web version some time ago but it turns out that the browser only allows making http requests from within the sandbox so the benefit is pretty low)

oleksiikoshlatyi commented 2 years ago

The requirements (allow an application to use the network) will not be an issue. APK files can be distributed in many ways, even without a play market (or other applications catalogs). BTW, almost everyone has an old (2-3 years old) Android phone, that can be used as well as VM rented in public cloud providers.

But with the mobile APP, we have opportunities to use ru phones, in case delivery APK file to mind-full (I still hope, that there are ones who are against the government) people in ru for processing the attacks

mimihagi commented 2 years ago

Building and running db1000n in termux on android works without issues. Steps are:

  1. install termux
  2. install golang, git and make (apt update && apt install golang git make)
  3. clone and compile db1000n: git clone https://github.com/arriven/db1000n && cd db1000n && make
  4. Run db1000n: ./db1000n

main problem will be crafting a manifest with all the required permissions to use low level attacks

I've run db100n on a phone with termux (as nonroot user) as well as a rpi for the last couple of weeks and have not noticed any permission issues on the phone in the last couple of updates. Was seeing https://github.com/Arriven/db1000n/issues/265 or https://github.com/Arriven/db1000n/issues/200 before, but not anymore

Topo-Mario commented 2 years ago

People familiar with Termux can help even with Slowloris.

pkg install python pip install slowloris python3 slowloris.py HTTP://URLTOATTACK

zlaya-sobaka commented 2 years ago

Привет, мы с ребятами придумали как можно использовать вашу библиотеку для мобильных устройств Android https://github.com/zlaya-sobaka/db1000n_mobile с помощью библиотеки fyne https://github.com/fyne-io/fyne Сейчас выкатили первую (примитивную) версию которую уже протестировали на мобильных устройствах https://drive.google.com/drive/folders/1boXqWfDEFhtsk6yKJLAULRp8LHee2uLJ?usp=sharing

В приложение добавили logger https://github.com/zlaya-sobaka/db1000n_mobile/blob/main/src/mobilelogger/logger.go для мобильных устройств

собирать апк можно библиотекой go имея у себя SDK Android fyne release -os android -appID zlaya.sobaka.db1000n_mobile -appVersion 1.0 -appBuild 1 -keyStore ./my-release-key.keystore -icon ./Icon.png

Возможно это как то поможет выкатить мобильную версия db1000n в мир