prikaz prve stranice dokumenta Alat za Man-In-the-Middle napade pomoću Android uređaja bez root privilegija
No public access
undergraduate thesis
Alat za Man-In-the-Middle napade pomoću Android uređaja bez root privilegija
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2018. urn:nbn:hr:168:766217
Grubelić, Roko
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Grubelić, R. (2018). Alat za Man-In-the-Middle napade pomoću Android uređaja bez root privilegija (Undergraduate thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:766217

Grubelić, Roko. "Alat za Man-In-the-Middle napade pomoću Android uređaja bez root privilegija." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2018. https://urn.nsk.hr/urn:nbn:hr:168:766217

Grubelić, Roko. "Alat za Man-In-the-Middle napade pomoću Android uređaja bez root privilegija." Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2018. https://urn.nsk.hr/urn:nbn:hr:168:766217

Grubelić, R. (2018). 'Alat za Man-In-the-Middle napade pomoću Android uređaja bez root privilegija', Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 20 December 2024, https://urn.nsk.hr/urn:nbn:hr:168:766217

Grubelić R. Alat za Man-In-the-Middle napade pomoću Android uređaja bez root privilegija [Undergraduate thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2018 [cited 2024 December 20] Available at: https://urn.nsk.hr/urn:nbn:hr:168:766217

R. Grubelić, "Alat za Man-In-the-Middle napade pomoću Android uređaja bez root privilegija", Undergraduate thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2018. Available at: https://urn.nsk.hr/urn:nbn:hr:168:766217

Metadata
TitleAlat za Man-In-the-Middle napade pomoću Android uređaja bez root privilegija
Title (english)A Tool for Man-In-the-Middle Attacks With an Android Device Without Root Privileges
AuthorRoko Grubelić
MentorPredrag Pale (mentor)
Committee memberPredrag Pale (predsjednik povjerenstva)
Committee memberJuraj Petrović (član povjerenstva)
Committee memberŽad Deljkić (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2018-09-11, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Pametni telefoni su sve rašireniji i jeftiniji. Svojim specifikacija mogu parirati računalima od prije samo nekoliko godina. Postoje brojne aplikacije za operacijski sustav Android koje omogućavaju izvođenje MITM napada ukoliko posjeduju privilegije. No kakve napade je moguće izvesti bez privilegija? U ovom radu proučeni su načini dijeljenja pristupa Internetu te dvije metode obrade prometa na Android sustavu na kojem napadač ne posjeduje privilegije. Dijeljenje pristupa Internetu moguće je pomoću Wi-Fi pristupne točke, te povezivanja žicom. Pomoću tih metoda napadač dobiva pristup žrtvinom prometu. Dvije proučene i implementirane metode obrade prometa su pomoću VPN i DNS poslužitelja. Slanje žrtvinog prometa s napadačevog Android uređaja na VPN poslužitelj pokazalo se neuspješnim zbog sigurnosne zabrane na Android uređaju. Preusmjeravanje žrtve pomoću DNS poslužitelja uspješno je implementirano. Koristeći DNS poslužitelj i Android uređaj, napadač žrtvu, koja pokušava pristupiti određenom stroju pomoću domene, može preusmjeriti na IP adresu po izboru. Iako nedostatak privilegije onemogućava potpunu iskoristivost sustava Android, MITM napadi su mogući.
Abstract (english)
Smartphones are becoming more and more widespread and their price is dropping. With their specifications they can be as powerful as today's desktop computers. There are many applications for Android that offer MITM attack capabilities if they have privileges. But what kind of MITM attacks can be performed on an Android device on which the attacker does not have privileges? In this bachelor thesis, methods of sharing Internet access to gain access to victim's traffic were examined. Methods of sharing Internet access are Wi-Fi, bluetooth and USB tethering. Methods of modifying the victim's traffic over a VPN server and a DNS server were examined. Sending the victim's traffic to a VPN server was not possible without privileges. The android system has a built-in protection for sharing VPN access over any kind of tethering. Android does not allow the victim to access the attacker's VPN tunnel. Redirecting the victim with the help of a DNS server was possible. The attacker, with the help of the DNS server and an Android device can redirect the victim, who is trying to access a certain device by domain name, to whichever IP address he wants. Although a lack of privileges does not allow us to access all functions of Android systems, MITM attacks are possible.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:766217
Study programmeTitle: Computing
Study programme type: university
Study level: undergraduate
Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2019-03-13 20:39:51