All Projects → TeamWalrus → Walrus

TeamWalrus / Walrus

Licence: gpl-3.0
An Android app that lets you use your access control card cloning devices in the field.

Programming Languages

java
68154 projects - #9 most used programming language

Projects that are alternatives of or similar to Walrus

paradoxiaRAT
ParadoxiaRat : Native Windows Remote access Tool.
Stars: ✭ 583 (+66.57%)
Mutual labels:  red-team
ycsm
This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).
Stars: ✭ 73 (-79.14%)
Mutual labels:  red-team
Red-Team-Essentials
This repo will contain some basic pentest/RT commands.
Stars: ✭ 22 (-93.71%)
Mutual labels:  red-team
anti-honeypot
一款可以检测WEB蜜罐并阻断请求的Chrome插件,能够识别并阻断长亭D-sensor、墨安幻阵的部分溯源api
Stars: ✭ 38 (-89.14%)
Mutual labels:  red-team
RT-CyberShield
Protecting Red Team infrastructure with cyber shield blocking AWS/AZURE/IBM/Digital Ocean/TOR/AV IP/ETC. ranges
Stars: ✭ 34 (-90.29%)
Mutual labels:  red-team
ReversePowerShell
Functions that can be used to gain Reverse Shells with PowerShell
Stars: ✭ 48 (-86.29%)
Mutual labels:  red-team
Galaxy-Bugbounty-Checklist
Tips and Tutorials for Bug Bounty and also Penetration Tests.
Stars: ✭ 34 (-90.29%)
Mutual labels:  red-team
Adversary emulation library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
Stars: ✭ 295 (-15.71%)
Mutual labels:  red-team
awesome-list-of-secrets-in-environment-variables
🦄🔒 Awesome list of secrets in environment variables 🖥️
Stars: ✭ 538 (+53.71%)
Mutual labels:  red-team
MalleableC2Profiles
Malleable C2 profiles for Cobalt Strike
Stars: ✭ 57 (-83.71%)
Mutual labels:  red-team
dorothy
Dorothy is a tool to test security monitoring and detection for Okta environments
Stars: ✭ 85 (-75.71%)
Mutual labels:  red-team
Sherlock
This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)
Stars: ✭ 36 (-89.71%)
Mutual labels:  red-team
linux-rootkits-red-blue-teams
Linux Rootkits (4.x Kernel)
Stars: ✭ 56 (-84%)
Mutual labels:  red-team
CVE-2021-44228-PoC-log4j-bypass-words
🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
Stars: ✭ 760 (+117.14%)
Mutual labels:  red-team
Pentmenu
A bash script for recon and DOS attacks
Stars: ✭ 288 (-17.71%)
Mutual labels:  red-team
LiquidSnake
LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript
Stars: ✭ 266 (-24%)
Mutual labels:  red-team
inceptor
Template-Driven AV/EDR Evasion Framework
Stars: ✭ 730 (+108.57%)
Mutual labels:  red-team
Black Hat Rust
Applied offensive security with Rust - Early access - https://academy.kerkour.com/black-hat-rust?coupon=GITHUB
Stars: ✭ 331 (-5.43%)
Mutual labels:  red-team
Cobaltstrike Toolset
Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
Stars: ✭ 290 (-17.14%)
Mutual labels:  red-team
ShonyDanza
A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.
Stars: ✭ 86 (-75.43%)
Mutual labels:  red-team

Walrus

Build Status GitHub release GPLv3 license Slack invite

Intro

Walrus is an Android app for contactless card cloning devices such as the Proxmark3 and Chameleon Mini. Using a simple interface in the style of Google Pay, access control cards can be read into a wallet to be written or emulated later.

Designed for physical security assessors during red team engagements, Walrus supports basic tasks such as card reading, writing and emulation, as well as device-specific functionality such as antenna tuning and device configuration. More advanced functionality such as location tagging makes handling multiple targets easy, while bulk reading allows the stealthy capture of multiple cards while “war-walking” a target.

Installing

Get it on Google Play

Documentation

Documentation and Getting Started. For end-user information such as what Walrus is, and how it can be used in the field, check out the Walrus website!

Development

Walrus is developed by Daniel Underhay and Matthew Daley (a.k.a. Team Walrus!) and is Open Source

Building

Walrus is a standard Android Studio project. At this stage there are no unusual dependencies or build steps beyond the usual cloning of the repository and opening the project in Android Studio.

TODO: When we refresh and remove the current Google Maps API key from the repo, we'll need to point out that this needs to be generated and set manually if maps are needed.

Codebase

The current layout of Walrus's source code is as follows:

  • /app/src/main

    • /assets: Any non-resource assets, like the open source license listing.

    • /res: Resource files.

    • /java/com/bugfuzz/android/projectwalrus: Actual code lives here!

      • /card: Code to do with persistent data (i.e. the wallet). The Card class, the base CardData class and various card data type classes, database models and database helpers are here.

      • /device: Device-agnostic and device-specific driver code. The important CardDeviceManager lives here alongside the base CardDevice class and its child classes for various basic kinds of device (serial, line-based, etc.). Code to handle bulk reading is also located here.

        • /proxmark3: Proxmark3 driver code.

        • /chameleonmini: Surprise! Chameleon Mini driver code.

      • /ui: Code to do with other UI.

      • /util: Miscellaneous.

Hardware

Team Walrus is powered by Lab401, our official hardware sponsor 🥳 Check out their website for some great deals on hardware!

Device Support

Here’s a table of the current devices / card type pairs we support and in what manner.

Key: R = reading, W = writing, U = upload

Proxmark3 Original Pm3 Evo Pm3 RDV4 Pm3 Iceman Fork Chameleon Mini Rev.G C.M Rev.E Rebooted
HID Prox R / W R / W R / W R / W - -
ISO14443A - UID - - - - R / U U
Mifare Ultralight - - - - - -
Mifare Classic 1K R / W R / W R / W R / W U U
Mifare Classic 4K ? ? ? ? ? ?
Mifare Classic 4B ? ? ? ? ? ?
Mifare Classic 7B ? ? ? ? ? ?
Mifare DESFire ? ? ? ? ? ?

Contributing

We welcome all kinds of contributions and bug reports, big or small! Development takes place at our GitHub repository. There you can file issues (both bugs and enhancement requests) and submit pull requests. Feel free to join our Slack channel.

During the initial development of Walrus, changes to the codebase are likely to be frequent and wide-ranging, so if you want to work on a feature, it's wise to reach out first to ensure that your hard work won't be soon obsoleted. After our first full release we hope to gain stability and bring in some of the additional resources expected of a project today, such as a proper test suite and continuous integration.

One area we'd love your help with is contributing translations! If you think you can help us out translating our Android string resources to another language, please get in touch!

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].