Attackers use various Android hacking tools to identify vulnerabilities and exploit target mobile devices to obtain critical user information such as credentials, personal information, and contact lists.
zANTI
Source: https://www.zimperium.com
zANTI is an Android application that allows you to perform the following attacks:
Spoof MAC Address
Create malicious Wi-Fi hotspot to capture victims to control and hijack their device traffic
Scan for open ports
Exploit router vulnerabilities
Password complexity audits
MITM and DoS attack
View, modify, and redirect all HTTP requests and responses
Redirect HTTPS to HTTP; redirect HTTP request to a particular IP or web page
Insert HTML code into web pages
Hijack sessions
View and replace all images that are transmitted over the network
Capture and intercept downloads
Figure 9.13: Screenshot of zANTI
Some additional Android hacking tools are as follows:
Network Spoofer (https://www.digitalsquid.co.uk)
Low Orbit Ion Cannon (LOIC) (https://droidinformer.org)
DroidSheep (https://droidsheep.info)
Orbot Proxy (https://guardianproject.info)
PhoneSploit (https://github.com)
Various tools used by attackers to hack target iOS mobile devices are discussed below:
Elcomsoft Phone Breaker
Source: https://www.elcomsoft.com
Elcomsoft Phone Breaker allows attackers to perform logical and over-the-air acquisition of iOS devices, break into encrypted backups, and obtain and analyze backups, synchronized data, and passwords from Apple iCloud. It allows attackers to break passwords and decrypt iOS backups with GPU acceleration. Using this tool, attackers can decrypt iCloud Keychain and messages with media files and documents from iCloud.
Figure 9.14: Screenshot of Elcomsoft Phone Breaker
Some additional tools for hacking iOS devices are listed below:
Fing - Network Scanner (https://apps.apple.com)
Network Analyzer Master (https://apps.apple.com)
Spyic (https://spyic.com)
iWepPRO (https://apps.apple.com)
Frida (https://www.frida.re)