In this video we're going to discuss how to setup and install drove Syria there is an application that
is used for infrared pen testing to be able to help to automate and detect vulnerabilities that are
common for Android applications.
It works by detecting attack surfaces of the applications typically through things like content providers
export ad activities services and broadcast receivers and then it allows you to find those and potentially
run some automated tests to be able to detect if they're vulnerable to some common vulnerabilities for
instance.
Content providers could be vulnerable to sequel injections so we can read some sequel injection code
through drones or to test them a whole bunch of content providers at once to see if any of them are
vulnerable.
So this is a very powerful and useful application.
There's a lot of different ways to use it which will go over in future videos.
However for now I'm just going to demonstrate how to actually install drones are just to allow you to
get set up with it.
Before we dive into anything more so the very first thing that you'll need is Python to installed on
your computer.
I'm going to use version two point seven point eighteen just because it's the newest version at this
point of making this video.
You can use whatever version too you really want for this.
That being a newer version of Version 2 that comes with Pip packaged in it.
I think that sort of does of two point seven point nine but really just pick the newest version and
you should have pip installed with it.
So we're gonna go out and run this and I'll install it for all users.
I'll put in the typical Python 2 7 directory if you want check if Pip is installed you should see it
here with the little Hard Drive icon next to it.
So you want to make sure that your Pip is actually present there and I will go ahead and hit next and
let it install Python 2 for us.
The reason I want pip installed is because there are a few dependencies that droves are actually relies
on.
So we want to make sure that those dependencies are present just to ensure that nothing is broken when
we try to actually run grocer.
So the general concept of drones is that it's gonna be able to create a link between our device and
our computer.
Sort of similar to the ADP link that will allow us to run some like automated testing and commands through
that link and all the scripts are written in Python.
They're all open source and get hub so you can see all the scripts you can contribute to them and you
can utilize them as you please.
So you can see here we finished the install for Python so what do they do now.
It's going to go into a command line and I got typed in.
You should see something like this if Pip has installed properly and we're gonna go to install some
of these so the prerequisites for dressers so we'll say pip install we're going install prototype up
so we'll let this run through.
We're also gonna go ahead and install pi Open SSL is another important one that allows us to make the
connection between the devices and we'll see pip install twisted and I think there's one other dependency
we'll be able to see that when we actually install it one run dozer for the first time but these are
the three that are mostly required for a fresh install of Python.
There may be one or two more depending on your python installation so we'll check those out once these
finish off.
So in general dozer can be installed from the labs f secure pitch.
This is the general web page for Derosa.
If you're looking for this web page I can put more links into a resources section for this course so
that you're able to access these links and be able to get to the content that you need.
But yeah that's the general location of where this is located.
If you google search for drones or it will be probably the first or second result sometimes the hub
page comes up first.
You can also go there to get the installer the insight that I use is the MSA is the easiest one for
Windows.
There's of course Linux and Mac installers as well.
Just in case you're using one of those you allow us to install it for all users and yet to be a bit
careful with this.
If you have multiple versions of python it might default to Python 3 which you don't want to install
to as far as I understand Groser isn't really compatible with Python 3.
So you want to select Python 2 from another location so we can click here and say we'll be installed
on the local hard drive and then we just want to navigate to where python is.
So it's typically under C Python 2 7 so we'll put in this exact path here and then once we've done this
we can go out and click next and then it will install the the components into the Python 2 directory.
The reason I want the components in the Python 2 directory is because our path variable is set to run
anything from the directory but this one stall to.
So I means that we can run it through our command line and it has easy access to the proper Python installation.
So once that's done it will be able to click finish and if you want to test if it's working or not you
can just type in droves or dot that console connectors we all season we'll try to connect that device
you a pop up any error messages that may exist.
So for instance you can see that we get this error no module named service identity.
This tells us that we need to install a service identity which you can do by saying him install service
underscore identity you'll see it will work for a little bit and then it will install that for us and
then well we should have everything that we need installed for Groser so now that everything's installed
for Groser we can try running this again and we should just see an issue saying there's no device to
connect to and that will allow us to move on to our next step which is just to setup our device with
drones.
So this looks perfect this is exactly what we want to see when this happens.
We just want to be able to install Rozier on our device.
So I'm gonna go into Google Chrome here and I'll just accept through these and get us through to the
default page and we'll just go ahead and type in grocer so once you've typed that in you should see
there's that page here and then there's the F secure labs page we'll go to the F secure labs and it's
gonna scroll all the way to the bottom here and we should see the different installer so as you can
see there's like the RPF the Ubuntu archive there's the MSA that I was using to install it and then
there's the AP Okay so go to click on the AP okay it will ask us if we want to give permission to download
and sell files which will allow we will download it to the downloads folder so this is okay and then
I can click okay here to try to open it right.
And then it's going to ask me if I want to allow for unknown apps to be installed we'll go into the
settings and we'll go out and talk of this to allow apps from this source once this is done I can press
on the back arrow and I'll be able to install the dozer agent click on install a run through the installer
and then I'll be able to open up the application send out dozer is installed on this device.
So with this we can turn on the embedded server and this is what allows us to be able to connect between
the computer and Roser it's running on Pt. 3 1 4 1 5.
You can see that on the bottom here.
So we need to do is we need to forward a TGP connection between our computer and the device on Pt. 3
1 4 1 5.
So to do this we just go at ADP forward DCP Cohen 3 1 4 and 5 and we do the same thing again running
this command will create that tunnel between the two devices.
Once this is done you'll get a 3 1 4 1 5 in response to verify that everything worked.
And now once we do this we can take in droves there.
But console connects and what you'll see is it will actually connect to a device and be working as we
want it to may take a few minutes depending on how fast your internet connection is and you should see
something that looks like this.
And if you want to test that it's working you can run a few different commands so we can say run up
top package dot list what this will do is it will list all of the applications that are on the device.
So if this command works for you then you now have dresser setup and installed correctly.
And now in the next few videos we'll take a look at some of the things that we can do with drones or
to be able to you know analyze applications and determine if they're vulnerable or not using the tools
that are available to us in here.