Re: Download Windows Mobile 6 Professional Sdk
Matty Fiedler
This is the first article in a series of articles aimed at discussing Windows Mobile Application Penetration Testing. Let us begin with knowing some details about Windows Phone 8.1 and Windows 10 Mobile.
Windows Phone 8.1 is the third generation of Microsoft's Windows Phone mobile operating system, succeeding Windows Phone 8. All Windows Phones running Windows Phone 8 can be upgraded to Windows Phone 8.1, with release dependent on carrier rollout dates.
Windows 10 Mobile is a mobile operating system developed by Microsoft. It is an iteration of the Windows Phone product line and a successor to Windows Phone 8.1 and is an edition of Windows 10, Microsoft's operating system for personal computers, as part of Microsoft's plans to unify Windows' application platform across multiple device classes.
Windows 10 Mobile aims to provide greater consistency with its counterpart for personal computers, including more extensive synchronization of content, a new universal application platform that allows one app to run on multiple Windows 10 devices such as PCs, mobile devices, and Xbox, as well as the capability, on supported hardware, to connect devices to an external display and use a "PC-like" interface with mouse and keyboard input support. Microsoft has built tools for developers to easily port some iOS apps with minimal modifications. Windows Phone 8.1 smartphones are eligible for an upgrade to Windows 10 Mobile, under manufacturer and carrier support.
Though Android and iOS are leading the smartphone market, Microsoft's investment in developing free training materials for developers and the efforts made to bring Universal Windows Apps to life is remarkable. It is known that Windows Phone OS is relatively closed and secure compared to Android & iOS and, thus, their apps.
This series of articles will discuss some common Windows Mobile Application Penetration Testing tools & techniques. We will begin with the basics of Windows Phone apps and their security and slowly move into assessment techniques. We will begin the series by testing everything on emulators. Later, we will also discuss the concepts of a real device.
We learned from the Android Application penetration testing series we published that many readers are looking for vulnerable apps where they can practice all the vulnerabilities discussed here. As far as I know, there are no test beds available on the Internet to practice Windows Phone application penetration testing. So, we have developed vulnerable Windows Phone apps, which can be used for practicing these concepts while you learn them here.
Though it may look unnecessary for some readers to have lab setup instructions, I have decided to provide them as these are not as straight as Android. The following sections show that setting up Windows Emulators needs some additional steps.
Setting up a development environment is recommended while learning any application penetration testing concepts. Visual Studio is the IDE used in most app development associated with Microsoft Technologies. Download Microsoft Visual Studio Community 2015 and install it.
Lastly, we need vulnerable apps for practicing the concepts. All the Apps we use in this series will be provided to the readers. We will also see the App installation instructions later in this series.
This article covers the introduction and background required to start learning Windows Mobile Application Penetration Testing. We have also seen the requirements for setting up Windows Phone 8.1 emulators and Windows 10 mobile emulators.
Srinivas is an Information Security professional with 4 years of industry experience in Web, Mobile and Infrastructure Penetration Testing. He is currently a security researcher at Infosec Institute Inc. He holds Offensive Security Certified Professional(OSCP) Certification. He blogs atwww.androidpentesting.com. Email: srin...@gmail.com
Windows Vista isn't the only operating system making its debut this year, as Microsoft also revamped its OS for mobile devices and formally introduced Windows Mobile 6 at 3GSM World Congress. Taking the reins from Windows Mobile 5, Windows Mobile 6 isn't a complete overhaul of the OS; instead, it offers a number of useful enhancements that makes performing tasks easier and puts more powerful tools into the hands of mobile professionals. We were particularly impressed with the new e-mail search function, Mobile Office additions, and Windows Live integration, but we think Microsoft could have done a lot more. For example, multimedia improvements are practically nonexistent and the user interface is still kludgey, requiring numerous steps to complete a simple task. Also, some of the enhanced functionality to Outlook and calendaring require that you use Exchange Server 2007. Despite these flaws, the new improvements make Windows Mobile 6 worth the upgrade.
The best news, of course, is that new OS means there will be a number of new devices coming out. There will be three editions again, but they've been renamed as Classic (formerly known as Pocket PC Edition), Standard (Smartphone Edition), and Professional (Pocket PC Phone Edition), so you can look forward to a variety of form factors. In fact, we've already seen a number of product announcements from 3GSM, including the Motorola Q q9 and the HTC Vox. For Windows Mobile 5 users, Microsoft said it will be up to carriers and device manufacturers whether they will offer upgrades, but T-Mobile has already announced that it will offer updates to current T-Mobile Dash owners and future Dash devices will ship with Windows Mobile 6.
For our review, we checked out Windows Mobile 6 Standard Edition using the HP iPaq 510 Voice Messenger, though we will continue to evaluate the OS and its variations as more devices start to arrive on the scene.
Interface
Windows Mobile 5 users won't be in for any major surprises when they see Windows Mobile 6, as the interface largely remains the same as before. Windows Mobile 6 does have more of a Vista look with its similar color scheme and bubbly, eye-pleasing icons. Along the top of the Today screen, you still get shortcuts to your most recently used apps, but the icons are slightly larger. Below that, you'll find such important information as time, date, upcoming appointments, messages, and so forth. Of course, you can customize the background image, color scheme, and backlight time.
One of the biggest complaints about Windows Mobile devices, especially when compared to Palm, is the number of steps it takes to perform a simple task, such as closing out of a program. This is still pretty much true of Windows Mobile 6, but Microsoft has taken some steps to ease the pain. For example, the company has added nine new e-mail shortcuts so you can easily reply, delete, move messages, and more. While this is a step in the right direction, there is still plenty of room for improvement.
Features
Window Mobile 6 really doesn't offer any mind-blowing new features, but rather, it includes some nice refinements that make the devices easier to use as well as act more like your PC. However, we should warn you that a number of the enhanced PIM capabilities require Exchange Server 2007, so unfortunately, if you or your company have no plans to upgrade, you're left in the cold. We'll note such exceptions as we go through the features.
Contacts and Calendar
Starting with some of the basics, call history is now sorted to the appropriate contact page. Though you may think this isn't a big deal, it's actually quite convenient as you can easily see when you received and made calls to that specific person, the time of the call, the duration, and so forth. Also, the new OS provides a quick Send Text Message shortcut, so you can be on your way to text message heaven with just one click, rather than having to go through several steps.
The Calendar app is also more user friendly, as the upgrade provides a better view of your schedule at a glance. First, there's a new Calendar Ribbon that lines the top of the screen and shows you which times you are free and which are booked. In addition, you get a week view, and while it gives you a good overview of your schedule--complete with colored blocks for appointments--you can also get details of the event, such as meeting location, right along the bottom of your screen so you don't have to open each one. The calendaring capabilities are also more robust if you are using Exchange Server 2007. With that integration, you have the ability to not only see who is attending a meeting, but you can forward and reply to meeting requests as well. While we couldn't test this feature, we got a working demo, and we can see how it would really come in handy for the mobile professional, bringing more of that PC experience to your smart phone.
E-mail
E-mail is a lot smarter on Windows Mobile 6. First, all devices will ship with Microsoft's Direct Push technology so you get real-time e-mail delivery and automatic synchronization with your Outlook calendar, tasks, and contacts via Exchange Server. Microsoft has also added nine new one-click shortcuts, as we noted above; plus, you get more of the true Outlook experience as your In-box view shows messages that are flagged, marked as high importance, and so forth. Once again, with Exchange Server 2007, you can do even more with Outlook Mobile, such as set up an Out of Office reply.
Searching for e-mails is no longer an unpleasant task, thanks to a new search function. Similar to the Smart Dial feature on Windows Mobile 5 devices, where you input a couple of letters to pull up associated contact, you can simply start typing in a word while in your Inbox, and it will automatically pull up messages with that term in the subject or contact field. It worked great for us, and it's truly a timesaver.
There is, of course, continued support for POP3 and IMAP accounts, but now you can also view e-mails in their original HTML format, regardless of account type. If there happens to be a hyperlink within a message, you can select to go to that page or if a phone number is listed, you can dial out directly from that message as well.
7fc3f7cf58