An introduction to gikdbg.art (aka Android Ollydbg) attaching Towelroot

gikdbg.art (Android Ollydbg)

This post will provide the following:

• Introduction to gikdbg.art
• Setup of the environment
• Quick introduction on attaching the TowelRoot exploit (libexploit.so)

Inside SimpLocker

Malware Name: Simplocker
Operating System (OS): Android

Credits to: ESET and Robert Lipovsky.

Dex to Java decompiler (jadx)

Description from the site:

Command line and GUI tools for produce Java source code from Android Dex and Apk files
Note: jadx-gui now in experimental stage

A new decompiler that helps to translate dex files into a human readable Java code. In the current stage of development the exported results are impressive. In addition is fast and reliable. So check it out.

In addition it comes with an experimental gui. Testing it out with some dex files its stable for some fast malware analysis.

More info:

github - https://github.com/skylot/jadx

sourceforge - http://sourceforge.net/projects/jadx

Android Malware Analysis Distros

If you are a security researcher and you want to to do malware analysis on the Android platform, you must check the following Linux Distros.

• Android Malware Analysis Toolkit (AMAT) [website] [Google] [Sourceforge]

  A Linux distro focused on Mobile Malware Analysis for Android.

• REMnux [website]

  REMnux is a lightweight Linux distribution for assisting malware analysts with reverse-engineering malicious software.

• Santoku  [website]

  Santoku is dedicated to mobile forensics, analysis, and security, and packaged in an easy to use, Open Source platform. 

   
• Android Tamer [website] (added 21/06/14)
  

  Android Tamer is a Virtual / Live Platform for Android Security professionals.