Dendroid - Trojan for Android (with source code)
Android has become the most used operating system on our mobile devices, an object that has been the target of many cyber criminals, who attacked personal computers to mobile devices because it is easier to attack, has in some measure Less protection and percentage of successful attacks are more important.
In this post, I will show you how to create our own Trojan for Android devices, each will use the knowledge gained in this tutorial with their own ethical purposes, but it can serve as a great help in case your If we have total control over the device we are infected with, remember that infecting a device outside our device without the owner's consent may be a crime.
There are 2 well-known projects for remote management of Android devices, one from AndroRAT and another DENDROID. The first is free, but is a project that has been stalled and has continued to develop since it began as a university project, while the second is free and can not be achieved for the equivalent of $ 300 in pieces like Unfathomable BitCoins, although its source code has been leaked for a while, you can easily get it by doing a search on Google.
The one I will use will be DENDROID, and these are some of its features:
The characteristics of the Trojan are as follows:
- Ringing up / down
- Media Up / Down
- Screen on
- Intercept On / Off
- Block SMS On / Off
- Audio recording
- Video recording
- Take a picture before / back
- Record On / Off calls
- Get:
- Inbox / OutBox SMS
- Browser History / Bookmarks
- Call History
- Contacts
- User Accounts
- Installed applications
- Send a text message
- Delete SMS
- Send an SMS to all contacts
- Call numbers
- Delete call log
- Open the page
- Open dialog box (Toast notification)
- Open App
- HTTP Flood
- Update the application
- Transfer Bot
Requirements: Web server with PHP and MySql phpmyadmin (Easy DB setup) OpenJDK JRE x64 Java JDK (If on x64 Windows you need to set the environment variable JAVA_HOME C:\Program Files\Java\JDK***
Web Panel Setup: Extract Dendroid Panel Move all files to your web server or httdocs if following setup video Set correct permissions (Linux) Change URL to your web server in reg.php
Change URL to your web server in Following Files, E.G http://127.0.0.1/: applysettings.php blockbot.php clearawaiting.php (Also add <?php to first line) clearmessages.php (Also add <?php to first line) deletebot.php deletefile.php deletepics.php functions.php table.php
Change Password in following files to your password of your DB: get.php get-functions.php new-upload.php upload-pictures.php
Finally: Go to your webserver Example: http://127.0.0.1 Follow Setup and Create Database
Database Setup: Start phpmyadmin Add new database (all settings must match your panel) Set correct user and password on both panel and DB
APK Setup: Open MyService.java Look for encodedURL (Base64 Encrypted URL) add your url (Base64 Encoded) backupURL same as above encodedPassword must match one on DB & in Files for correct configuration (Base64 Encoded) Make sure your URL does not have a final / E.G http://127.0.0.1
APK Fix: (Blank Space in URL Error) Go To Line 275 : 17 In Eclipse and change following: provider = telephonyManager.getNetworkOperatorName(); to provider = removeBlankSpace(new StringBuilder(telephonyManager.getNetworkOperatorName()));
Go To Line 2326 : 5 In Eclipse and add following code: static String removeBlankSpace(StringBuilder sb) { int j = 0; for(int i = 0; i < sb.length(); i++) { if (!Character.isWhitespace(sb.charAt(i))) { sb.setCharAt(j++, sb.charAt(i)); } } sb.delete(j, sb.length()); return sb.toString(); } The above fix has been added to the apk source. APK Binder(VBnet) Still working on this: Download Visual Studio Express and Compile :)