android.md modified.

Author: lvergergsk

mobile/android.md

@@ -18,6 +18,9 @@
 | `record_mic`    | The record_mic command records audio. Good for listening to a phone conversation, as well as other uses.                                                                                                                        |
 | `send_sms`      | The send_sms command allows you to send an SMS message. Keep in mind the phone will keep a copy of it, too.                                                                                                                                                                                                                                |
 
+Other commands:
+
+
 #### Way to change password of services.
 You can recover password for some services (like gmail, twitter and facebook) by receiving SMS message.
 First, click "forgot password" and select SMS options. Then use the command `dump_sms` and you will have
@@ -26,8 +29,34 @@ verification code. Insert the code and change the password.
 
 
 ## Other post-exploitation tools
-- Pupy: https://github.com/n1nj4sec/pupy
-- TheFatRat: https://github.com/Screetsec/TheFatRat
+#### Pupy:
+Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android), multi function RAT (Remote Administration Tool) and post-exploitation tool mainly written in python. It features a all-in-memory execution guideline and leaves very low footprint. Pupy can communicate using various transports, migrate into processes (reflective injection), load remote python code, python packages and python C-extensions from memory.
+
+#### TheFatRat:
+An easy tool to generate backdoor and easy tool to post exploitation attack like browser attack,dll . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection.
+
+#### Xenotix-APK-Reverser
+Xenotix APK Reverser is an OpenSource Android Application Package (APK) decompiler and disassembler powered by dex2jar, baksmali and jd-core Released under Apache License.
+
+#### DynamoRIO
+DynamoRIO is a runtime code manipulation system that supports code transformations on any part of a program, while it executes. DynamoRIO exports an interface for building dynamic tools for a wide variety of uses: program analysis and understanding, profiling, instrumentation, optimization, translation, etc. Unlike many dynamic tool systems, DynamoRIO is not limited to insertion of callouts/trampolines and allows arbitrary modifications to application instructions via a powerful IA-32/AMD64/ARM/AArch64 instruction manipulation library. DynamoRIO provides efficient, transparent, and comprehensive manipulation of unmodified applications running on stock operating systems (Windows, Linux, or Android) and commodity IA-32, AMD64, ARM, and AArch64 hardware.
+
+We can run DynamoRIO based plugin to detect any post exploitation privilege escalation. E.g., java.lang.Runtime.exec("su") is generally used for getting su privileges using setuid(0) system call. These functions is detected using a global call.
+
+
+## Methodology
+#### Steps
+1. Application Mapping
+In this first phase, the focus relies on understanding the application logic and what exactly the application does. This involves some manual test where we do some basic operations such as install the APK on the phone, login and comprehend the functionality of the app.
+
+1. Client Attacks
+This is one of the most challenging and exciting parts of the pentest assessment. Android apps are packed as an APK, also known as Android Package Kit or Android Application Package. Our mission as Pen testers is to verify how well protected the application has been created and designed against known threat actors.Android Mobile applications are distributed through platforms like Google Play. Since the application is fully installed on the client, it becomes vulnerable to any attacks coming from the client.
+
+1. Network Attacks
+As we need to identify vulnerabilities in the Client, is also essential to verify how secure is the communication between the Client and the Server by evaluating the traffic. For this purpose, using tools like Attack proxies, evaluating potential SSL issues, and executing Wireshark Data package inspection is an essential part of the assessment.
+
+1. Server Attacks
+Last but not least, issues at the Server level will impact the security of the application. Insecure implementation such as misconfigurations , vulnerabilities and issues at API or Database level, affect also the security of an application
 
 
 # Refernce:
@@ -41,3 +70,7 @@ verification code. Insert the code and change the password.
 - http://www.hackingarticles.in/hack-call-logs-sms-camera-remote-android-phone-using-metasploit/
 - https://android.stackexchange.com/questions/60906/terminal-on-real-android-device-from-pc
 - https://github.com/n1nj4sec/pupy
+- https://github.com/Screetsec/TheFatRat
+- https://github.com/ajinabraham/Xenotix-APK-Reverser
+- https://www.owasp.org/index.php/Android_Testing_Cheat_Sheet
+- http://www.dynamorio.org