Download : Google+ Android Application

Anroid has lanched  "Google +"  Android Application for  "Google +" Lover .So they can also access Google + from there Android Mobile.This application will work in 2.1 and greater version.Check it’s features.

Features :-

• Circles let you share the right things with just the right people.
• Stream is where you can get updates from your circles or see what people are saying about things nearby.
• Instant Upload automatically uploads videos and photos to your own private album in the cloud, to make sharing a snap.
• Huddle is super-fast group messaging for everyone in your circles.

Download 

Read More

Hacking into the BSNL Router using Android

Recently I was at home, playing with my BSNL router. For those who don't know what BSNL is, its the AT & T of India, known for very bad customer support :)

In this article, I will walk you through step by step illustrations on how to hack into your local router and explore it inside out. Though I am using my BSNL router here but steps and method will be similar for your modem/router as well.

Router Configuration

BSNL router is manufactured by SemIndia and distributed by ITI. It follows the tracks of using firmware of different routers (Broadcom to be specific, BCM6338 stands for Broadcom router firmware version 96338, deployed in US robotics ones and some other popular routers). Mine is DNA-A211-1, one of most popular ones in India.

Hacking Router with Android

I didn't had a PC (trashed due to burnt ram), so I have to do everything on my Android. Though the screenshots are small, it is great to see that you can hack anywhere at any time using Android mobile. To start with, I telnet into my router with my credentials and I am greeted with welcome screen as shown in screen below,

Once you are in, first step will be to figure out what are the services it has to offer, so I typed the usual 'help' and found following commands.

I started with basic command, "swversion" to get the version. Then with some hunting, I came to know that "sh" command runs over my router, ran it and voila, familiar interface of busybox snaps in.

Great, now thats worth something. For those who don't know hat busybox is, its a multicall binary. My android has it too. Seeing the version made me tick, it was running an older version of busybox. Then I tried ls command, but it didn't work, hence tried "echo *" and it showed up everything as seen below

Next comes the magic command "cat /etc/passwd" and there we go again.

After that, I went on exploring other directories. Got into CVS and found information regarding CVS and pserver, note worthy one is the credentials of pserver.

pserver:xyzabc@192.168.128.19:/home/cvsroot 

Not much of an interest though as they are of a private LAN. On googling, I found out that account belonged to XYZ (name changed for privacy), employee at SIEMIndia. Next, I moved on to /etc directory,

lots of directories here, as a rule of thumb I opened default.cfg

Generic stuff, but what caught my eye was this line,

ppp_conId1 userName="multiplay" password="kIMa1bXVsdGlwbGF51AG" 

This might come in handy (use your creativity :)). But then I thought that why not to access the router from web interface. Logged in to it and then went to "management" and downloaded the backupsettings.conf file,

On opening, it was like as shown below,

I was not able to find the above credentials in it, hence I came to a conclusion that they must be somewhat for internal purposes. Moving on, I thought why not to try to create an arbitrary file . Tried following command

echo 'rishrockz' >> rdx 

But it failed. It was not easy to figure out the writable directory as I was not able to determine the file permissions since this version of busybox doesn't has ls or stat command. Finally little bit of exploring found that /var is writable. Tried creating a file again, it succeeded !

Well, there is lot more to explore, this is just tip of iceberg! Next time I am be thinking of going to compile programs (http://people.debian.org/~debacle/cross/) and copying over them using echo (once I get a PC), I have got some nice ideas and will be hacking with them. In the mean time, for those who are wondering what this machine has, here is the bootup log.

Read More

Cross Application Scripting vulnerability in Android browser

Recently IBM researchers detected a security vulnerability in Android’s Browser which can be exploited by a non-privileged application in order to inject JavaScript code into the context of any domain.This vulnerability has the same implications as global XSS, albeit from an installed application rather than another website.

Android 2.3.5 and 3.2 have been released, which incorporate a fix for this bug. Patches are available for Android 2.2.* and will be released at a later date. The complete advisory can be found here. The browser holds sensitive information such as cookies, cache and history, and injected JavaScript could make it possible to extract that information, indirectly breaking the Android sandbox architecture. The attack exploits flaws in how the browser reacts to calls to view web pages from other applications.

IBM demonstrates the proof of concept for Android Cross Application scripting

Read More

How to Use Your Android Phone as a Modem; No Rooting Required

If your cellular provider’s mobile hotspot/tethering plans are too pricey, skip them and tether your phone to your computer without inflating your monthly bill. Read on to see how you can score free mobile internet.

What You’ll Need

In order to tether your phone to your laptop as a data modem, without having to root your device, you’ll need the following things on hand:

• Your Android phone
• Your laptop, netbook, or desktop computer you wish to tether
• A USB sync cable for your Android phone
• A copy of PdaNet for your Android Phone
• A copy of PdaNet for your computer

PdaNet costs $15.95 and comes with a free trial. You can keep using it indefinitely but after the trial ends you will no longer be able to visit secure web sites. If you’re just using the tether for goofing off on your break at work then you may never need to upgrade. For checking your email, banking web sites, shopping, and other secure applications however it is more than worth it to upgrade your license.
Note: Although we’re using an Android device and a Windows machine for this tutorial PdaNet is available for a diverse array of devices. You can get the mobile component of PdaNet for Android phones, iPhones, BlackBerries, Windows Mobile phones, and even the Palm OS. The desktop component is available for both Windows and Mac OS X. The following setup steps should easily translate across the various combinations of mobile and desktop components.

Installing PdaNet on Your Android Device

First, search the Android Market for PdaNet (if you’re curious why there are duplicate copies of the search results in our Market search, that’s a mystery best left to the Google engineers). On the off chance that there are future applications with a similar name, make sure to install the one from June Fabrics Technology Inc.
Go ahead and run the application once it has finished installing.

Tap “Enable USB Tether” to turn it on. You can also do a wireless tether using Bluetooth but we’re skipping that for now. Bluetooth can be so finicky we don’t want you to get mired down in trying to figure out why your Bluetooth connection is acting up. When you enable it for the first time it will prompt you, as seen in the last panel, to download the desktop software. This is handy for those times you’re stuck without any internet but the internet on your phone and need to download and transfer the application to your computer. In our case we clicked No, since the computer we’re configuring already has internet access and we can download the desktop app that way.

Installing PdaNet on Your Desktop

Installing the desktop software is pretty uneventful and requires no configuration. There are, however, a few things to watch out for.
If you have the Android Deveopment toolkit on your computer. You’ll run into two potential errors. If the abd.exe is running you’ll have to kill the process with Task Manager. You’ll also get a notification that there are Android drivers already installed on the computer. When in doubt overwrite the drivers with the new ones from PdaNet to ensure you can connect to the internet properly. After the installation you’ll see the PdaNet icon in the corner.

It should automatically connect when you plug your phone (with the USB tethering enabled) into your computer. If it doesn’t, right click on the icon and select Connect Internet. Success!

---

Have an Android hack to share? Let’s hear about it in the comments. Want to know how to do something on your Android phone? We want to hear about that too.

Read More

How to Install Non-Market Apps on Your Android Device

Although the Android Market offers thousands upon thousands of applications to choose from, sometimes you’ll want to break free and install applications that aren’t available on the Market. Read on to learn how.

Android’s Default Defenses

Your Android phone is, by default, set to disallow any applications that aren’t from the Android Market. It’s a wise move as the majority of users are more likely to be exposed to a rogue application than they are to go searching for apps outside of the Market. None the less there are times where you might want to install third-party apps that aren’t sourced through the Market.
For example, earlier today we highlighted Kongregate’s new Android application Kongregate Arcade. Google pulled their app from the Marketplace because it violated one of the Market policies (an application should not install other applications). In the case of Kongregate’s app it isn’t at all malicious (you get the application because you want more games after all) but it does fall afoul of the rules.

Disabling Application Blocking

If you attempt to load an APK file (the Android version of the Windows Mobile CAB or the iOS IPA file) you’ll get an error message like this:

 Tap on the Settings button to navigate to the Application settings sub-menu. If you’re trying to get there without an application warning screen prompt, navigate there via Settings –> Applications. There you’ll see a screen that looks like so:

 What we’re interested in is the Unknown source, check the box beside it. You’ll get a stern warning, click OK and double check that the box is checked properly.

At this point you can now click on that link or navigate to the APK file saved on your SD card and install the application. We recommend that you go back into the Application settings once you’re done installing your non-Market applications and uncheck the box—it’s only a few clicks to enable it again in the future when you need it.

Read More

Viewsonic to launch WiMax tablet this Diwali

Viewsonic is going to launch a 7 inch Android Honeycomb tablet with WiMax support this Diwali. It is likely to be the first such Android tablet in India.

 

Viewsonic is planning to launch its first WiMax tablet in the country. The tablet will be a 7 inch Android Honeycomb device.
WiMax is a 4G technology that is faster than current 3G networks. Currently, BSNL offers this service on a large scale, but 4G services are likely to be launched by operators like Airtel, Aircel, Tikona and Reliance Infotel later this year or early next year. Whether these operators will go for WiMax or LTE, among the two 4G technology options, is not yet known though.
While talking to 'The Mobile Indian', Ajay Sharma, country manager of Viewsonic India, said, "We will launch a 7 inch Android Honeycomb tablet this Diwali, and this will be our first tablet with WiMax network support. It will be a very important launch for us as the country prepares to usher the 4G era."
The tablet by Viewsonic is likely to be the same as shown earlier at Computex in Taipei (a trade fair), which was a light weight tablet weighing a meagre 380 grams. The device is likely to have at least a 1 GHz Tegra 2 processor, a pair of cameras, and USB, HDMI output etc. It is expected to be priced between Rs 30,000-35,000.
The 4G spectrum auction was held soon after the 3G auction and operators have had spectrum since September 2010. They have, however, been silent about their plans on the choice of technology (WiMax or LTE) and the potential launch date of services.
We earlier said that Reliance Infotel, the only service provider to have a pan-India spectrum license, is likely to launch services using WiMax technology. If that happens, this tablet will make a lot of sense to users as well as to the operator.

Read More