Skip to content

README.md

Latest commit

 

History

History
341 lines (259 loc) · 12.4 KB

README.md

File metadata and controls

341 lines (259 loc) · 12.4 KB

Android Rooting Framework with Advanced Security Testing

Production-grade Android 13 ARM64 tablet rooting system with integrated bot framework, Kali Linux tools, and AI-powered security analysis for comprehensive mobile penetration testing.

🚀 Features

📱 Core Android Rooting Framework

  • Multi-method Root Detection: Binary, package, property, SELinux, and partition analysis
  • Magisk Integration: Complete management with installation, repair, and module handling
  • System Repair: Automated partial root completion and recovery
  • Live Bot Framework: Real-time error handling and adaptive recovery

🔐 Advanced Security Testing (New!)

  • HackTricks Integration: Complete Android pentesting methodology implementation
  • Kali Linux Tools: Native integration with 30+ security tools
  • NetHunter Support: Full Kali NetHunter framework integration
  • APK Analysis: Static and dynamic analysis with vulnerability detection

🧠 AI-Powered Analysis (New!)

  • LLM Integration: Intelligent security analysis using local LLM models
  • Automated Reporting: AI-generated security insights and recommendations
  • Alpine Linux Support: ARM64 containerized environments
  • Live Code Updates: GitHub-driven updates with integrity verification

🌐 Network Security Testing (New!)

  • Advanced Scanning: Nmap, Masscan, vulnerability assessment
  • Service Enumeration: HTTP, directory brute force, service fingerprinting
  • Comprehensive Reporting: Professional security assessment reports
  • Compliance Standards: OWASP MSTG and industry best practices

📋 Quick Start

Option 1: Automated Setup (Recommended)

# Install and run in Termux
curl -sSL https://raw.githubusercontent.com/spiralgang/VARIABOT/main/android_rooting/scripts/termux_setup.sh | bash

# Check root status
root-status

# Complete rooting process with AI analysis
    android_root --enable-ai
# Run comprehensive security assessment
python3 android_rooting/core/android_pentest.py full-pentest --package com.example.app

Option 2: Kali Linux Integration

# Setup on Kali Linux with NetHunter
git clone https://github.com/spiralgang/VARIABOT.git
cd VARIABOT/android_rooting

# Initialize Kali environment
python3 core/kali_integration.py setup-nethunter
python3 core/kali_integration.py setup-llm

# Run advanced network assessment
python3 core/kali_integration.py network-scan --target 192.168.1.100

# Full security assessment with AI
python3 core/kali_integration.py full-assessment --target 192.168.1.100

🏗️ Enhanced Architecture

android_rooting/
├── core/                          # Core functionality
│   ├── root_detector.py          # Multi-method root detection
│   ├── magisk_manager.py         # Magisk integration
│   ├── android_pentest.py        # 🆕 HackTricks pentesting framework
│   └── kali_integration.py       # 🆕 Kali Linux & NetHunter integration
├── bots/                          # Bot framework
│   ├── error_handler_bot.py      # Live error handling
│   ├── live_monitor_bot.py       # Real-time monitoring
│   └── github_builder_bot.py     # Live code updates
├── utils/                         # Utilities
│   ├── termux_compat.py          # Termux compatibility
│   ├── logging_system.py         # Comprehensive logging
│   └── network_utils.py          # Network utilities
├── scripts/                       # Executable scripts
│   ├── android_root_complete.sh  # Main rooting script
│   └── termux_setup.sh           # Environment setup
└── docs/                          # Documentation
    ├── ANDROID_ROOTING_GUIDE.md  # Complete guide
    └── LINUX_NETWORKING_COMMANDS_CHEATSHEET.md

🔧 Enhanced Capabilities

Android Penetration Testing (New!)

# Device connection and APK extraction
python3 android_rooting/core/android_pentest.py device-info
python3 android_rooting/core/android_pentest.py extract-apk --package com.example.app

# Static analysis with HackTricks methodology
python3 android_rooting/core/android_pentest.py static-analysis --apk app.apk

# Dynamic analysis and runtime monitoring
python3 android_rooting/core/android_pentest.py dynamic-analysis --package com.example.app

# Comprehensive penetration testing
python3 android_rooting/core/android_pentest.py full-pentest --package com.example.app

Security Issues Detected:

  • Debuggable applications and backup settings
  • Exported components and URL schemes
  • Hardcoded secrets and API keys
  • Network security configuration
  • Certificate and signing issues
  • Firebase misconfigurations
  • Tapjacking and task hijacking vulnerabilities

Kali Linux Integration (New!)

# Environment detection and setup
python3 android_rooting/core/kali_integration.py env-info

# NetHunter setup with Alpine Linux support
python3 android_rooting/core/kali_integration.py setup-nethunter

# LLM integration for AI analysis
python3 android_rooting/core/kali_integration.py setup-llm --model llama3

# Advanced network scanning
python3 android_rooting/core/kali_integration.py network-scan --target 192.168.1.0/24

Integrated Kali Tools:

  • Network: nmap, masscan, zmap, nikto, dirb, gobuster
  • Mobile: adb, fastboot, aapt, dex2jar, jadx, apktool
  • Reverse Engineering: radare2, ghidra, binwalk, strings
  • Exploitation: metasploit, sqlmap, burpsuite, zaproxy
  • Android Specific: drozer, objection, frida, mobsf
  • AI/LLM: ollama, llama, chatgpt-shell

AI-Powered Security Analysis (New!)

from android_rooting.core.kali_integration import KaliIntegration

# Initialize with LLM support
kali = KaliIntegration()
kali.setup_llm_integration('llama3')

# Analyze security findings with AI
analysis_data = {'vulnerabilities': findings}
ai_insights = kali.analyze_with_llm(analysis_data, "What are the critical security risks?")

print(ai_insights['summary'])
print(ai_insights['recommendations'])

🛠️ Installation & Setup

Prerequisites

  • For Android Rooting: Termux on Android 10+, ARM64 device
  • For Security Testing: Kali Linux (optional), ADB tools
  • For AI Analysis: LLM support (Ollama recommended)

Enhanced Setup Process

# 1. Basic Android rooting setup
curl -sSL https://github.com/spiralgang/VARIABOT/raw/main/android_rooting/scripts/termux_setup.sh | bash

# 2. Enable advanced security testing
pkg install nmap masscan nikto dirb -y
pip install requests pyyaml

# 3. Setup LLM for AI analysis (optional)
curl -fsSL https://ollama.ai/install.sh | sh
ollama pull llama3

# 4. Configure environment
export ANDROID_ROOTING_AI=true
export KALI_INTEGRATION=true

🚨 Enhanced Usage Examples

Comprehensive Security Assessment

# 1. Check environment capabilities
python3 android_rooting/core/kali_integration.py env-info --verbose

# 2. Setup target for testing
adb connect 192.168.1.100:5555

# 3. Extract and analyze APK
python3 android_rooting/core/android_pentest.py extract-apk --package com.example.app
python3 android_rooting/core/android_pentest.py static-analysis --apk extracted_app.apk

# 4. Network security assessment
python3 android_rooting/core/kali_integration.py network-scan --target 192.168.1.100

# 5. AI-powered analysis and reporting
python3 android_rooting/core/kali_integration.py full-assessment --target 192.168.1.100 --package com.example.app

Advanced Root Management

# Enhanced root detection with security analysis
root-detect --json --security-analysis

# Magisk management with vulnerability checking
magisk-manage repair --security-check

# Complete rooting with AI monitoring
android_root --enable-ai --kali-tools --comprehensive-scan

Live Monitoring with AI

# Start enhanced error handler with AI
error-bot --daemon --ai-analysis --kali-integration

# Live security monitoring
python3 android_rooting/bots/live_monitor_bot.py --ai-insights --network-monitoring

# GitHub-driven updates with security validation
python3 android_rooting/bots/github_builder_bot.py --security-check --ai-review

📊 Security Testing Capabilities

Static Analysis Features

  • Manifest Analysis: Debuggable apps, backup settings, exported components
  • Code Analysis: Hardcoded secrets, API keys, encryption issues
  • Certificate Validation: Debug signing, certificate pinning
  • Network Configuration: HTTP traffic, certificate validation
  • Permission Analysis: Dangerous permissions, runtime permissions

Dynamic Analysis Features

  • Runtime Monitoring: Process analysis, logcat monitoring
  • Data Storage: Shared preferences, SQLite databases, file access
  • Network Traffic: HTTP/HTTPS analysis, certificate validation
  • Permission Usage: Runtime permission requests and usage
  • Behavioral Analysis: Component interaction, intent analysis

AI Analysis Capabilities

  • Vulnerability Assessment: Risk scoring and prioritization
  • Remediation Guidance: Specific fix recommendations
  • Threat Modeling: Attack vector identification
  • Compliance Checking: OWASP MSTG alignment
  • Best Practices: Secure development recommendations

🔒 Security & Compliance

Enhanced Security Standards

  • OWASP MSTG Compliance: Full Mobile Security Testing Guide alignment
  • HackTricks Methodology: Complete Android pentesting procedures
  • Kali Linux Standards: Industry-standard tool integration
  • AI Security: Secure LLM integration with local processing
  • Audit Trails: Comprehensive logging with integrity protection

Privacy Protection

  • Local Processing: AI analysis runs locally when possible
  • Data Minimization: Only necessary data collection and processing
  • Secure Storage: Encrypted storage for sensitive findings
  • Access Control: Role-based access to security findings

🤝 Contributing

Enhanced Development Environment

# Setup development environment
git clone https://github.com/spiralgang/VARIABOT.git
cd VARIABOT/android_rooting

# Install enhanced dependencies
pip install -r requirements-dev.txt
pip install pytest pytest-cov black flake8

# Setup Kali tools (if available)
sudo apt update && sudo apt install kali-linux-default

# Setup pre-commit hooks with security checks
pre-commit install

Security Testing Guidelines

  1. Responsible Disclosure: Report vulnerabilities responsibly
  2. Testing Authorization: Only test on authorized systems
  3. Data Protection: Protect sensitive information discovered
  4. Tool Usage: Use tools ethically and legally
  5. Documentation: Document security findings properly

📚 Enhanced Documentation

New Documentation

Reference Materials

🎯 Professional Use Cases

Penetration Testing Firms

  • Complete Android application security assessments
  • Automated vulnerability discovery and reporting
  • AI-powered risk analysis and prioritization
  • Professional reporting with executive summaries

Security Researchers

  • Advanced mobile malware analysis
  • Zero-day vulnerability research
  • Automated testing framework development
  • AI-assisted security pattern recognition

Enterprise Security Teams

  • Internal application security testing
  • Compliance validation (OWASP, industry standards)
  • Security awareness and training
  • Automated security pipeline integration

Bug Bounty Hunters

  • Efficient application reconnaissance
  • Automated vulnerability scanning
  • AI-assisted finding validation
  • Professional reporting generation

🔐 Advanced Security Framework | 🧠 AI-Powered Analysis | 🐉 Kali Linux Integration | 📱 Mobile Pentesting