REQUIREMENTS

By default, if the program finds that you’re missing a dependency it will install it automatically. But if you’re curious these are the dependencies;

• Metasploit-Framework: If you are using Kali Linux 2.0 and for any mysterious reason you are missing this framework the program will install it automatically. Otherwise you will have to install it manually. You can follow this, or this, or this, or any other guide for the installation and configuration.
• SSH & SSHPass
• Ruby: For injection as bash was not made for parsing xml files.
• Apktool
• Java 7: This is just for apktool to work.

Once you have done that we can proceed.

CONFIGURATION

There are two files that you might want to edit first, the config file and the server file.

MAIN CONFIGURATION

The config file is where you put all the main variables corresponding to your system. This is how the file looks like:

##############################################################################
#                              PAYLOAD OPTIONS                               #
##############################################################################
PAYLOAD=""
PAYLOAD_NAME=""
PAYLOAD_PORT=""
PAYLOAD_IP=""
LEGITIMATE_APK=""
##############################################################################
#                                MAIN OPTIONS                                #
##############################################################################
PATHEXT="~/"
BACKUPZIPNAME="filesystem_linux"
USER="--user 0"
AUTOMODE=1

Here is the list of all the configuration variables:

• PAYLOAD: It specifies the payload to use. If you already have your own you can put it in here with the full path and ending with .apk.
• PAYLOAD_NAME: This is the name of the output payload name without.apk. When you want to generate multiples payloads you might want to set the default payload name so that the process became more efficient as the program would not ask you for the name every time you want to generate one.
• PAYLOAD_PORT: The port to use for payload reverse connections. You may want to specefiy the default for the same reason as the above.
• PAYLOAD_IP: This is the IP the payload will connect back to. This is your external or internal ip or even your dynamic DNS address.
• LEGITIMATE_IP: This is the path of the legitimate app the programm will inject meterpreter to with full path. This is just for injection.
• PATHEXT: This is the the path where all the extracted data is going to be. By default this is the root directory.
• BACKUPZIPNAME: This is the name of the .zip file containing all the extracted data. By default this is filesystem_linux.
• USER: This is how the payload’s service will launch. You don’t have to worry about this as this is just for compatibility for some android devices.
• AUTOMODE: This boolean tells the program to ask for every variable that is missing in the FULL ATTACK at the beginning so once it has started you don’t have to worry about typing names or paths.

SERVER CONFIGURATION

If you have set up a server where you want to be all your extracted files you can place your configuration in the server file. This is how the server file looks like:

SERV=""
USRSERV=""
OUTPUTDIRSERV="~/extracted/"

This is very easy you just need to change the variables to suit your server configuration.

• SERV: This is the ip to connect, this can be external or dynamic DNS name.
• USRSERV: This is the username of the server, i.e, root.
• OUTPUTDIRSERV: The path to put the extracted de data.

Just to clarify things, the program will try to connect to USRSERV@SERV/OUTPUTDIRSERV.

HOW TO USE IT

As this is a CLI Framework there are no arguments to parse, that means that you can just run it by;

./whatspwn

Or from any directory. For example, if you cloned the repository to ~/Downloads/, you can run it as;