Penetration/Vulnerability testing on a basic android tablet

industrialhorse

I was recently lumbered with my niece's generic argos star tablet because she wanted to exchange it for a second-hand phone and to cut a long story short, I paid for the phone and told her I would make the money back from selling the tablet but I dont know who in their right mind would want this piece of crap, even at a very cheap price!!

Anyway it just dawned on me that instead of wasting my time trying to sell it on, that I could use the tablet purely for penetration testing and network vulnerability scanning tools. It's only running 512MB RAM and is pretty damn slow so it might not actually be up to the task but if anyone has any tips on transforming the tablet then that would be great:)

I should also mention that I dont fancy trying to mod or overclock the tablet because I tried the same thing on another generic tablet last year and ended up bricking it!! I would like to avoid a similar fate this time around...........

syklops

Have you rooted it?

industrialhorse

Nope I havent attempted rooting because I would be afraid of bricking again:(

900913

Most of the pentesting apps only work on rooted devices.

http://resources.infosecinstitute.com/android-phone-pentesting/
http://resources.infosecinstitute.com/security-hacking-apps-android/

dSploit
Android network penetration suite

dSploit is an Android network analysis and penetration suite which aims to offer to IT security experts/geeks the most complete and advanced professional toolkit to perform network security assesments on a mobile device. Once dSploit is started, you will be able to easily map your network, fingerprint alive hosts operating systems and running services, search for known vulnerabilities, crack logon procedures of many tcp protocols, perform man in the middle attacks such as password sniffing (with common protocols dissection), real time traffic
manipulation, etc.

http://www.dsploit.net/

euser1984

Forgive my ignorance but is it possible to just boot a copy of kali or something?

bonzodog2

http://www.offensive-security.com/kali-llnux-vmware-arm-image-download/
There's 12 different special-build ARM versions of Kali
There was also an ARM version of BT5, but IIRC you couldn't do packet injection due to a driver issue, don't know if thats fixed with Kali

900913

Kali Linux on Android using Linux Deploy


Getting Kali Linux to run on ARM hardware has been a major goal for us since day one. So far, we’ve built native images for the Samsung Chromebook, Odroid U2, Raspberry Pi, RK3306, Galaxy Note 10.1, CuBox, Efika MX, and BeagleBone Black to name a few. This however does not mean you cannot install Kali Linux in a chroot on almost any modern device that runs Android. In fact, the developers of Linux Deploy have made it extremely easy to get any number of Linux distributions installed in a chroot environment using a simple GUI builder.