Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Friday, March 19, 2010

VIO


VIO uses the phone's camera to capture and detect any motion.

The comparaison is done by analysing pictures square by square.
The size of the squares can be defined from VIO, it will allow you to adapt the sensivity as you wish.

When motion is detected VIO will :
- send mails containing pictures to the email adress you defined.
- send sms to alert you anywhere



What does it need ?
-------------------------

- Windows Mobile 5.0 to 6.5
- NET Compact Framework 3.5

VIO

Wednesday, January 06, 2010

Antitheft SMS Alarm


This simple program send SMS from theft phone number with IMSI and GPS-coordinates when SIM-card is changed.

Installation:
1. Unpack archive
2. Import AntitheftSMSAlarm.reg to registry
3. Copy atsa.exe to \Windows\Startup
4. Run settings.exe

Setup:
1. Setup GPS
2. Set "Ok beep" for beep when SIM-card is recognized and set "Error beep" for beep when SIM-card is wrong
3. Set "Send 2 SMS" for send GPS-coordinates in second SMS (when GPS-receiver will be connected)
4. Register SIM-card - press this button:
5. Set under 5 phone numbers
6. Press "Save"

Antitheft SMS Alarm

Saturday, December 05, 2009

DSMP


Don't steal my phone

DSMP is a software you install on your Windows Mobile phone. Once setup, you'll forget it. It will consume only 100kb of Flash, and no memory.

Features

DSMP provides numerous features not seen yet in competitors' products.
Remotely accessible features:
Wipe your phone personal data remotely (call history + contact + SMS + mail + calendar + storage card), so the thief never know the
Reset the phone remotely (with loop mode, displaying a message between each reset)
Slut mode. In this mode, the phone send a bunch of SMS to the given number with the given message
Get the phone GPS position if available, or at least the complete Cell ID
Ring the phone (even if set to silent mode)
Get all the contact in SIM + last call history
Clear the thief's SIM contacts
Make the thief's call you back
Get the owner information + Cell ID
Password isn't saved in clear, so it's quite impossible to see it

Documentation

DSMP is coded in clean and simple C++ using WTL for the only config dialog.
There is only few class used, and it's very easy to improve or enhance.
Here's how you'll use the software:
Step 1

Copy both file from archive (name hidden to avoid Google search) on your storage card, or your phone.
With your phone's file explorer, click on the exe file you've just copied to start setup.
Step 2


Picture 1

Don't show this screen anymore.
When enabled, launching this application won't do anything.
To display this screen again, send a SMS to this device with confdlg command.
Recommended value: On when setup is done and working

Monitor SIM changes
The first time you run the software, the IMSI of your own SIM card is read, and used later on.
When enabled, the application is run once after each reset to check the SIM card number.
If it doesn't match the number set below (current card) then a SMS is send to the number given below, containing the new phone number, GPS coordinates if available, and CellID.
Recommended value: On

On new SIM detection send a SMS to
Enter the phone number you want the software to send SMS to. Don't use your phone number as it'll be probably out-of-service when it should be used.
A list of your contact is displayed, but press enter to make sure it's validated.

GPS tries before giving up
The number of times to try to get GPS position before giving up.
Set to 0 if you don't have a GPS.
Recommended value: 50

Zap
Provided you know the password, you will uninstall the application while pressing this button.

Configuration done
This install the software and register all COM objects deep inside your device.
WARNING: Once this button is pressed, (and "Don't show this screen anymore" is checked) the software is not accessible anymore (it's not visible anywhere). The only way to see this windows again is to send a CONFDLG SMS.
Only do this once you've checked everything is working allright
It's recommended to soft reset your phone to let the phone load the final configuration

Step 3

Once the software is set up (but before clicking "Done or Ok"), you can send a SMS to check it's working

The sms must use the following syntax:
dsmp # COMMAND # password # optional_reply_number
* with no space around "#", this is to avoid a direct Google search if the thief get the SMS message in clear to understand how it works.

COMMAND is any of:
pos : Get the current GPS position and CellID
whereRU : Ring the phone so you can find it. Please notice that the ring runs even if set to silent, and the ring is unstoppable for 60s.
confdlg : If you've set "Don't display this screen anymore", this is the only way to show the config screen. No password is asked on the config screen. For example, if you've sold your phone forgetting to uninstall the software before, sending this SMS will allow the buyer to change the password to whatever he wants.
kill : WARNING This *destroys* all personal data (including call history, contacts, calendar, email, SMS, storage card). Use this if your phone was stolen and you plan to social engineer (see below).
rst : Soft reset the phone
rstl:msg : Reset the phone in loop, display msg for 20s between each reset. msg must not have any # in it
contact : Get all the SIM card contact and the last call history (useful for social engineer)
slut:msg : Send SMS in loop to the given reply number. You must set a number in the optional_reply_number or you'll receive a crazy bench of SMS. This is useful if you failed to get back the phone, you'll send this command with a taxed reply number.
clearsim : Clear the SIM contacts (don't try this on your phone)
call : Place a call to reply number. The call is visible on the phone, so you should make sure the phone isn't used while doing this, and you should send a 'kill' command to remove call history.
owner : Get owner information (likely the thief will change this, you might get his name), and the complete Cell ID of the phone
Best method to get back your phone if it's stolen

So, first don't try the "American methodTM". Your life and health worth more than a stupid electronic toy.
If you loose your phone, first call your operator to close the line. The chance are high it'll be found by a trustworthy person, that will call you back if you've set your owner informations to another phone number than yours. It's a good idea to give back some money to this person. The justice sometimes require sponsors too.
Well, sadly the world isn't perfect, and you might get your phone stolen, in that case, if everything is set up you'll receive a SMS with the new number, GPS pos + Cell ID.
Then don't be overspeeded.
Once you get the phone number, write it on a paper than send a "kill" command (followed by a "rst" command) so the thief won't have any information about you. Remember the game that you will play next is based on the amount of information you'll dig.

In the following paragraph, I'm using "he" for the thief gender, but you could read whatever you prefer.
You must first get the maximum number of informations about your thief first. It's a good idea to get all the current informations ("contact", "owner", some "pos").
You can send some "pos" early in the morning, or late in the day once it's stabilized you'd now where the thief lives.
Then, if you believe the police will do something with this information, go to the police and give them all the informations.
Else, you'll have to social engineer:
Call the thief, from a phone that is not registered in the yellow page
Don't call him "a thief", but ask if he has found this phone recently, and if he can bring it back to a police station in the next minutes
Likely, he'll lie, telling you it's his phone. In that case, call him by his name (if you have received the owner name), tell him you know where he lives (if you get the GPS position), and some interesting contacts (if you received some) with the phone number of those
Then, try to be as convincing as possible, tell him that you could call the police and let them capture him, but you accept to let him free ONLY IF he goes in the next minutes to the police station to give back the phone
Tell him that he must tell the police that the original SIM card wasn't working so he puts his card inside the phone to get the last number and that the last number called is the one you're calling from. The police will likely call this number.
Tell him that you track him, so you know where he goes and if he doesn't goes to the police right now, you'll call them. Similarly, if he destruct the phone, you'll still call the police.
Likely, if you feel he won't go, you can add a time pressure by telling him you'll call back in few minute (2 mn not much) to know his answer. Just before calling, send a "contact" message to see if he called someone.
If that didn't work, then call him back, and also call someone in his contact list so he can hear the conversation, and tell this person something like:
"Hi this is police officer John Doe, we caught 'thief name' while he stole a phone. He asked us to call you. I highly advise you to come here to the police station + address + get him before he tells too much to convict himself.".
The idea is to make the thief furious, and force him to go the police station before this person arrives there. Tell him that if it brings back the phone NOW, you tell him how to justify this call to this person. (The excuse is simple, "this is a very bad joke from my girlfriend's ex boy")
If that didn't work, and the police doesn't do anything, well you can consider your phone is lost. But don't give up.
You will be able to send a "slut:msg" command to an overpriced number. This will send a bunch of SMS to the given number, charging the thief's bill.
You can also clear his SIM contacts with the "clearsim" contact.
You can also "kill" the phone's data at regular intervals.
You can also make the phone place calls to overpriced phone number with "call" command.
Send some "whereRU" command at 3 AM, it's very irritating.
You can call all the contact number and tell them that he is a thief and he doesn't want to give back your phone.
Most likely, he will destruct the phone. But the trust he'll loose from his friend will hopefully teach him the lesson.
Weakness

It's very important to know the weakness of a tool before trusting it.
Unless you cook your own ROM, the software won't survive a hard reset. However, it's unlikely the thief knows how to hard reset a phone
In some countries, the phone are locked to an operator, and you must unlock it to use on another operator. This is usually means flashing a rom, and thus you'll loose the software. A solution for this is to SIM unlock your phone before installing the software, so the phone appears to work on any operator
The thief could be very very smart and find the software on the phone and delete it. In order to do so, he must exactly know the software name, where it is and how to delete it. Please notice that the software doesn't appear in "Windows\Start up" folder, nor in any process list (because it's not RUNNING when it's possible to monitor the process). The software is run while the phone starts (and stops before the phone is fully started), and it's started by Windows Mobile upon SMS receiving (and stops after processing the command). The current version doesn't rename the software binary but any later version could, and hide itself by cloaking the executable name.
Only works on Windows Mobile 5 and 6.
Only available in English for now. As there is not much text, translation is welcome
If HTC or any Windows Mobile vendor can hear us, we would be proud if this software would be included in official ROM (we could re-license the software in whatever see fit). We only need 64 bytes to save the owner's genuine information, that could be in dedicated ROM or EEPROM.

DSMP

Friday, July 17, 2009

Flexilis Mobile Security


Protect Your Phone

The mobile device has become the most personal computer. Over one billion mobile devices will ship this year alone, five times as many as PCs. Mobile devices contain personal information, access sensitive networks, and are now utilized for financial transactions. Mobile applications and full featured web browsing are commonplace, driving more advanced mobile technology, and now more advanced threats. Flexilis keeps your device and data safe and secure from the threats facing mobile devices in a constantly evolving mobile world.

Flexilis combines enterprise grade security with end user simplicity, protecting your device and data from a variety of threats facing mobile devices including: loss, theft, viruses, malware, and hackers.

Anti-Virus + Firewall/IPS

Flexilis keeps you safe with advanced antivirus, firewall, and intrusion prevention technologies which are designed to be lightweight on your system and battery. Stop threats before they become problems.
Mobile devices have a variety of attack surfaces – SMS, Bluetooth, Wi-Fi, and downloads, to name a few. Flexilis protects you from the threats facing mobile devices today, all without needing advanced knowledge or the need for complex configuration. Set and forget.

Missing Device

It is a big deal when a mobile device is lost or stolen. Your private information may be compromised, there is a significant monetary loss in the cost of replacing the device, and you are disconnected from the world. Stay in control of your device, even when you aren’t in control of it.
Flexilis enables you to respond when your device is lost or stolen. Locate your device, sound an alarm, wipe your personal information–-all remotely from the web.

Locate
Your device can run, but it can't hide. Locate a lost device from anywhere.
Scream
Sound the alarm! Find your phone or let a potential thief know who's the boss.
Nuke
Make sure your data doesn’t fall into the wrong hands. Wipe all data from your device over the web.

Data Backup

Your mobile device is your most personal computer. It contains your personal data including contacts, photos, video, e-mail, and text messages. Backup your data and keep it safe and secure.
Whether you accidently delete data, your phone is lost, or even destroyed--your data is safe. You can restore any data with the click of a mouse. Changing devices is just as easy and your data can be transferred in seconds.
Your phone just got a lot more storage.

Never worry about running out of space on your device again. Mobile devices contain more information than ever before--contacts, calendar, pictures, videos, sounds, documents, notes, sms/call history, and more. As you create more content and download applications, limited storage space becomes a problem. With Flexilis, all of your data is securely backed up to the cloud where you can store as much data as your heart desires.

Management

With Flexilis, you’re always in control. Remotely manage multiple devices from the web with the click of a mouse.
One application controls all of your devices, across the range of major mobile operating systems.
Over the air
Install remotely, update settings, and administor policy--over the air.
Cross platform
Manage multiple device types on multiple operating systems from one place.
Monitor status
Keep an eye on the status of all your devices from a central dashboard.

Flexilis Mobile Security

Sunday, May 03, 2009

MobileJustice


Antitheft software for WM5 and WM6 phones with GPS module(tested on Eten X500+ and Mio A701).

Useful for searching of lost/stolen phones and children monitoring. Can monitor sim card changes. Coordinates of the phone can be acquired by SMS.

MobileJustice

Source

Friday, January 30, 2009

WM GoHome Beta


Have you lost your smart phone? Has it been stolen? Has it GPS module?
You are a happy man, if you have WM GoHome installed there.


You can find it thanks to WM GoHome. WM GoHome will helps you to locate your smartphone via SMS messages, even if the SIM card will be changed.

WM GoHome is application works like service. It is waiting for special SMS message that processing depends on the parameters sent in this message. After receiving this message, WMGH (WM GoHome) initialize GPS receiver and sends SMS message with current location, altitude and speed to the phone number, it received the initializaction message from.

WM GoHome is mainly intended for localisation of the device, but it can do much more.

Via special SMS messages you can easy control the remote device. WMGH can start predefined applications, can change the device configuration or send another informations to the predefined phone numbers.

WM GoHome

Tuesday, January 13, 2009

SmartProtect Mobile Protection Software


This software helps you track and recover your phone once stolen or lost.

Features includes :

1. A Thief or Lost Prevention Software with SMS Auto-Responder and GPS Capability created for Windows Mobile Devices.

2. When you forget your phone and can''t remember where you put it, you can SMS your phone to get the exact location via GPS information if your phone has GPS Capability or approximate location based on Cell Location.

3. You can SMS your phone for other information such as IMSI, IMEI or even remotely reboot your phone etc.

4. This software is also equipped with Thief Prevention system which will automatically SMS your partner phone number if the SIM has been changed against the registered SIM.

5. This software supports registration of Multiple SIM Cards and of Multiple Phone Conctacts as Partners.

6. When your phone has been stolen, it will automatically SMS relevant information such as IMEI, SIM Card Number or IMSI, GPS Location if supported or Cell Location.

7. It is able to also auto-delete Phone Memory Contacts if the phone has been stolen.

8. It is password protected and the password is encrypted with AES-Encryption.

9. Its un-install proof. It requires special procedure to uninstall the protection, so even if you uninstall it, it is still working.

You need atleast .NETCF 2.0 for this app to work (which most Windows Mobile has so not to worry).

Note that Cell Location depends on your device. It should be working but the problem is not all devices interfaces with RIL functionality so it may or may not work.

SmartProtect Mobile Protection Software

Thursday, January 08, 2009

SmsRemoteAdmin


Anti theft software

SmsRemoteAdmin allow to query some phone informations via sms and help to find your lost/steal phone with powerfull AntiSteal extension.

SmsRemoteAdmin

Tuesday, December 16, 2008

nueGPSSecurity


nueGPSSecurity is a lightweight service that sits between your text message client (using CEMAPI and CellCore). It waits for a text message with a special string, and replies back with your location if it is available.

Basically, it is a free (well, donationware) version of one of those anti-theft software packages. The service works in “stealth”, it hides the text messages being sent between you and your phone.

You’ll need a device with built-in GPS for it to work reliably, though it can technically work with a bluetooth GPS unit. To install, simply use the cab below, however – I highly recommend burning it into a ROM (OEM package should be available shortly – it should be rather simple to make your own- see OEM instructions below).

Right now, there is no configuration UI – I am debating whether one would be necessary or not. The only configuration option is located in the registry, which is the PIN number. It defaults to 0000, and if you want to change it, edit:
[HKEY_LOCAL_MACHINE\Software\Wei Enterprises\nueGPSSecurity]
”Pin”=dword:0000

The number will automatically be padded with zeros to the left, so "123” is the pin number “0123”. Enter ONLY a 4 digit number max or you will get unexpected results.

To talk to the service, send a text message:
!nuegps
where pin is your pin number, and action is one of these action verbs:
version: display version number
status: get system status
getpos: text back next position fix (auto-start gps)
help: display this help message
start: start gps monitor
stop: stop gps monitor

So if your pin number was 1234 and you wanted to get the position, send:
!nuegps1234 getpos

After you have sent the getpos message, the GPS will stay on, so you will probably want to send “stop” to conserve battery when you are done. Also note that text message systems are apparently kind of slow, so expect a 1-2 minute delay in getting your message back… Due to the way operators implement text messaging, responses may be VERY slow if you try to text yourself.

Note: There is currently a bug in the way status works, sometimes it returns garbage – I’m looking into that.

OEM Instructions (only if you are burning it into ROM):

Use any OEMizer tool, but add the following registry entries:

[HKEY_CLASSES_ROOT\CLSID\{3AFFFFFF-673C-494c-98A2-CC2E91A481FF}\InProcServer32]
@="nueGPSSecurity.dll"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Inbox\Svc\SMS\Rules]
"{3AFFFFFF-673C-494c-98A2-CC2E91A481FF}"=dword:1

Also be sure to add the provisioning XML in the cab (you might need a cab extractor like OCP to view it).

nueGPSSecurity

Saturday, September 20, 2008

eWallet


eWallet is a free digital wallet and password safe application for Windows Mobile powered devices to store passwords, accounts and other sensitive data in an easy but secure way.

eWallet uses 3DES encryption which is state of the art encryption technology. It stores your passwords, your web registrations and associated information in a database (a file) protected by a single password. eWallet allows you to store passwords and codes in a convenient location for when you are on the move.

Features:

* Quickly find your entries by using the filter box.
* Unlimited number of categories
* Unlimited number of records in each categories
* Sort entries by clicking on a column header
* Access via secure login authentication
* Full text search
* All passwords are encrypted using 3DES encryption algorithm
* Backup facility
* A very original and easy-to-use user interface
* Fast random password generator
o Custom length
o Modify password character set
o Special character support


eWallet

Tuesday, August 28, 2007

eSec


Digital Wallet and Password Safe for Windows Mobile PocketPC

eSec Pocket PC is a free digital wallet and password safe application for Windows Mobile powered devices to store passwords, accounts and other sensitive data in an easy but secure way. eSec uses 256bit AES encryption which is state of the art encryption technology.

The storage of eSec Pocket PC is currently not compatible with the desktop pc version of eSec. Maybe this feature will be added in future.

eSec Pocket PC is a free software without any warranty or guarantee for functionallity.

stickler.de

Thursday, July 26, 2007

SecurIt


Sim/IMSI checking opensource security for us all

once setup at every boot it compares your IMSI number with the one stored, if it's a match it plays a little sound and that's it. If it's not a match, it locks the device and displays your email and a request to please get it back to you. It also send you the "new sim's" imsi and phone number via a SMS.

Shadowmite

Thursday, May 24, 2007

Star EnForcer


This little utility will automatically detect if the SIM card of a smartphone or pocket pc was replaced.

Star EnForcer will automatically send a SMS message to a previously specified phone number containing the new SIM IMSI and current location in hexa LAC-CID combination. The message will repeat every 30 minutes.

platform: Windows Mobile 2003 / 5

Fightersoft Multimedia

Tuesday, March 13, 2007

Pocket Secure Data Organizer


Pocket Secure Data Organizer is the Pocket PC / Windows Mobile version of Secure Data Organizer. You can use it to view your sensitive information on-the-go.

* View your Secure Data Records on-the-go on your Windows Mobile Pocket PC or Smartphone
* Rest easy knowing that your Secure Data Records are encrypted with maximum strength encryption algorithms, so that if your device is ever lost or stolen, your sensitive information will be safe
* Supports Pocket PC 2002, Windows Mobile 2003, and Windows Mobile 2005. A version for smartphone is coming soon!
* To install, copy the .CAB file (See download links below) onto your mobile device, browse to it using File Explorer, and then tap it. Pocket Secure Data Organizer will be automatically installed.
* If you are using Pocket PC 2002, the Microsoft .NET Compact Framework v1.0 is required and can be downloaded here.

READ MORE and DOWNLOAD HERE