I’ve had the first commercially available Android mobile phone, the T-Mobile G1, since the platform launched last fall, and have been really happy with it so far. As the platform is getting more mature, we are now starting to see a lot of new and useful applications out there – especially some useful for security! Here’s a quick rundown of some of the tools that I’ve found and am using:
WifiScan – a great wireless discovery application for the platform. It’s a powerful wireless audit tool that will log all of the discovered networks in range, and plot them to a KML file for visualization in Google Earth. This application records information such as BSSID, Channel, Security Type, SSID, etc. Tremendously useful for a discrete wireless network audit!
PortScandroid – a very basic port scanning application for the platform. It’s not terribly useful for use over the cellular data network due to the filtering applied by T-Mobile, but when using 802.11, it gets the job done. Doesn’t do any correlation of services to ports, but it performs the basic functions.
ConnectBot – this is a full-functioned SSH client for the platform. Handy.
androidVNC – a VNC viewer for the Android platform that’s been forked from the tightVNC viewer development project. Also a handy tool. This is still in the beta phases and hasn’t been added to the Market yet, but it’s downloadable from the project page. Easiest way to install it is to navigate to the project page within the phone’s browser and just download the APK package.
I am going to conduct a WarDriving contest between my little Android and a full-fledged laptop running Kismet and an external Wifi antenna to see how the signal discovery compares, but initial tests show the G1 to have a pretty remarkable Wifi range. I’ll post a followup after I conduct the test.
The Android platform is showing a lot of promise, and for use on a pen-test, these tools could prove to be useful additions to your arsenal – and are certainly more discrete than using a laptop with a big ol’ antenna!
Thanks syn for inspiring me to investigate this – his post about the iPhone wireless toolkit made me wish we had these tools on the Android, and lo-and-behold – we do!