10_android

ADB

• intall adb

sudo apt install adb

• scan target

nmap -p5555 10.10.10.10-16

• connect

adb connect  10.10.10.14:5555

• check device

adb devices

• enter android shell

adb shell

• root

su -

• find flag

find / -iname *secret* 2>/dev/null

• find shell

find / -iname sh 2>/dev/null

• pull file

adb pull /system/bin/sh

• sha384

shasum -a 384 sh

DIE

• 點選 advance

• entry point ⇒ 004690

• entropy (>7.5可能被加殼) ⇒ 6.33096