{"id":7412,"date":"2015-01-09T20:21:00","date_gmt":"2015-01-09T11:21:00","guid":{"rendered":"http:\/\/apollo89.com\/wordpress\/?p=7412"},"modified":"2015-01-09T20:36:15","modified_gmt":"2015-01-09T11:36:15","slug":"drozer","status":"publish","type":"post","link":"https:\/\/apollo89.com\/wordpress\/?p=7412","title":{"rendered":"drozer"},"content":{"rendered":"

drozer\ub294 \uc548\ub4dc\ub85c\uc774\ub4dc \uc571 \uc9c4\ub2e8\ub3c4\uad6c\ub85c \ub9ce\uc774 \uc0ac\uc6a9\ub418\uace0 \uc788\ub2e4.<\/p>\n

1. PC\uc5d0 \uc124\uce58.
\nhttps:\/\/www.mwrinfosecurity.com\/products\/drozer\/community-edition\/<\/a> \uc5d0\uc11c \ub2e4\uc6b4\ub85c\ub4dc.
\ndrozer-installer-2.3.3.zip \uc0ac\uc6a9\uc790 PC\uc5d0 \uc124\uce58(windows \uc6a9)<\/p>\n

path \uc7a1\uc544\uc8fc\uace0 \uc2e4\ud589\ud558\uba74 \ub05d!<\/p>\n

C:\\>drozer.bat\r\nusage: drozer [COMMAND]\r\n\r\nRun `drozer [COMMAND] --help` for more usage information.\r\n\r\nCommands:\r\n          console  start the drozer Console\r\n           module  manage drozer modules\r\n           server  start a drozer Server\r\n              ssl  manage drozer SSL key material\r\n          exploit  generate an exploit to deploy drozer\r\n            agent  create custom drozer Agents\r\n          payload  generate payloads to deploy drozer\r\n<\/pre>\n
2. drozer \uc571 \uc744 \uc548\ub4dc\ub85c\uc774\ub4dc \ud3f0\uc5d0 \uc124\uce58
\n\uc880\uc804\uc5d0 \ub2e4\uc6b4\ubc1b\uc740 drozer-installer-2.3.3.zip \uc548\uc5d0 agent.apk \uac00 \uc788\uc73c\ub2c8 \uc124\uce58.<\/p>\n
C:\\> adb install agent.apk<\/pre>\n
\uc2e4\ud589\ud654\uba74.
\n\"drozer_agent\"<\/p>\n
3. \uc5f0\uacb0<\/p>\n
\r\nC:\\>adb forward tcp:31415 tcp:31415\r\n\r\nC:\\>drozer.bat console connect\r\nCould not find java. Please ensure that it is installed and on your PATH.\r\n\r\nIf this error persists, specify the path in the ~\/.drozer_config file:\r\n\r\n    [executables]\r\n    java = C:\\path\\to\\java\r\nSelecting XXXXXXXXXXXXXXXX (samsung XX-XXXXX X.0)\r\n\r\n            ..                    ..:.\r\n           ..o..                  .r..\r\n            ..a..  . ....... .  ..nd\r\n              ro..idsnemesisand..pr\r\n              .otectorandroidsneme.\r\n           .,sisandprotectorandroids+.\r\n         ..nemesisandprotectorandroidsn:.\r\n        .emesisandprotectorandroidsnemes..\r\n      ..isandp,..,rotectorandro,..,idsnem.\r\n      .isisandp..rotectorandroid..snemisis.\r\n      ,andprotectorandroidsnemisisandprotec.\r\n     .torandroidsnemesisandprotectorandroid.\r\n     .snemisisandprotectorandroidsnemesisan:\r\n     .dprotectorandroidsnemesisandprotector.\r\n\r\ndrozer Console (v2.3.3)\r\ndz><\/pre>\n
C:\\Users\\\uc0ac\uc6a9\uc790\\.drozer_config \ud30c\uc77c \ucd94\uac00<\/p>\n
[executables]\r\njava = C:\\Program Files\\Java\\jdk1.8.0_20<\/pre>\n
\ub2e4\uc2dc \uc2e4\ud589<\/p>\n
C:\\>drozer.bat console connect\r\nSelecting XXXXXXXXXXXXXXXX (samsung XX-XXXXX X.0)\r\n\r\n            ..                    ..:.\r\n           ..o..                  .r..\r\n            ..a..  . ....... .  ..nd\r\n              ro..idsnemesisand..pr\r\n              .otectorandroidsneme.\r\n           .,sisandprotectorandroids+.\r\n         ..nemesisandprotectorandroidsn:.\r\n        .emesisandprotectorandroidsnemes..\r\n      ..isandp,..,rotectorandro,..,idsnem.\r\n      .isisandp..rotectorandroid..snemisis.\r\n      ,andprotectorandroidsnemisisandprotec.\r\n     .torandroidsnemesisandprotectorandroid.\r\n     .snemisisandprotectorandroidsnemesisan:\r\n     .dprotectorandroidsnemesisandprotector.\r\n\r\ndrozer Console (v2.3.3)\r\ndz>\r\ndz> ls\r\napp.activity.forintent                   Find activities that can handle the given intent\r\napp.activity.info                        Gets information about exported activities.\r\napp.activity.start                       Start an Activity\r\napp.broadcast.info                       Get information about broadcast receivers\r\napp.broadcast.send                       Send broadcast using an intent\r\napp.package.attacksurface                Get attack surface of package\r\napp.package.backup                       Lists packages that use the backup API (returns true on FLAG_ALLOW_BACKUP)\r\napp.package.debuggable                   Find debuggable packages\r\napp.package.info                         Get information about installed packages\r\napp.package.launchintent                 Get launch intent of package\r\napp.package.list                         List Packages\r\napp.package.manifest                     Get AndroidManifest.xml of package\r\napp.package.native                       Find Native libraries embedded in the application.\r\napp.package.shareduid                    Look for packages with shared UIDs\r\napp.provider.columns                     List columns in content provider\r\napp.provider.delete                      Delete from a content provider\r\napp.provider.download                    Download a file from a content provider that supports files\r\napp.provider.finduri                     Find referenced content URIs in a package\r\napp.provider.info                        Get information about exported content providers\r\napp.provider.insert                      Insert into a Content Provider\r\napp.provider.query                       Query a content provider\r\napp.provider.read                        Read from a content provider that supports files\r\napp.provider.update                      Update a record in a content provider\r\napp.service.info                         Get information about exported services\r\napp.service.send                         send a Message to a service, and display the reply\r\napp.service.start                        Start Service\r\napp.service.stop                         Stop Service\r\nauxiliary.webcontentresolver             Start a web service interface to content providers.\r\nexploit.pilfer.general.apnprovider       Reads APN content provider\r\nexploit.pilfer.general.settingsprovider  Reads Settings content provider\r\ninformation.datetime                     Print Date\/Time\r\ninformation.deviceinfo                   Get verbose device information\r\ninformation.permissions                  Get a list of all permissions used by packages on the device\r\nscanner.misc.native                      Find native components included in packages\r\nscanner.misc.readablefiles               Find world-readable files in the given folder\r\nscanner.misc.secretcodes                 Search for secret codes that can be used from the dialer\r\nscanner.misc.sflagbinaries               Find suid\/sgid binaries in the given folder (default is \/system).\r\nscanner.misc.writablefiles               Find world-writable files in the given folder\r\nscanner.provider.finduris                Search for content providers that can be queried from our context.\r\nscanner.provider.injection               Test content providers for SQL injection vulnerabilities.\r\nscanner.provider.sqltables               Find tables accessible through SQL injection vulnerabilities.\r\nscanner.provider.traversal               Test content providers for basic directory traversal vulnerabilities.\r\nshell.exec                               Execute a single Linux command.\r\nshell.send                               Send an ASH shell to a remote listener.\r\nshell.start                              Enter into an interactive Linux shell.\r\ntools.file.download                      Download a File\r\ntools.file.md5sum                        Get md5 Checksum of file\r\ntools.file.size                          Get size of file\r\ntools.file.upload                        Upload a File\r\ntools.setup.busybox                      Install Busybox.\r\ntools.setup.minimalsu                    Prepare 'minimal-su' binary installation on the device.\r\ndz>\r\n<\/pre>\n
\uc0ac\uc6a9\ubc95\uc740 help module\uba85 \ud558\uba74 \ubcfc \uc218 \uc788\uace0, \uc2e4\ud589\ud558\ub824\uba74 run module\uba85 \uc635\uc158 \ud558\uba74\ub41c\ub2e4.<\/p>\n
drozer \uba54\ub274\uc5bc
\nhttps:\/\/labs.mwrinfosecurity.com\/system\/assets\/502\/original\/mwri_drozer-users-guide_2013-07-25.pdf<\/a><\/p>\n
drozer demo
\n