LockUp

187 downloads

Uploaded by

Silent Miqo

Version

1.0 (build 1)  1 version(s)

LockUp versions

1.0 (build 1)

187 downloads

Close

Size

810.9 KiB

Publish Date

2024-01-29

Category

Tools

Package

io.nekohasekai.lockup

Minimum OS

Android 9.0

SHA1

f7a85967143cab1f9398a9c926ea7557528dc736

Description

LockUp is an Android application that will monitor the device for signs for attempts to image it using known forensic tools like the Cellebrite UFED. Here is a blog I wrote. Proof-of-Concept. Not meant as an in-depth defense Android API 28, Does not require root Relies on RECEIVE_BOOT_COMPLETED to start a Service and AccessibilityService Monitors USB events through ACTION_USB_DEVICE, package installations, and known exploit staging locations on the filesystem Detects Logical Extractions, File System Extractions, and Physical Extractions leveraging ADB Will automatically respond with a factory reset with DeviceAdminReceiver Beginning steps to researching more robust anti-forensic techniques Signature Detection: Exploit staging directories and known filenames Known file hashes Application names and certificate metadata