Notes / Threat IntelligenceAndroid Debug Bridge(ADB) serviceAndroid Debug Bridge(ADB) service17 February 20221 min readCategories:threat-intelligenceTags:tcp5555rsyncContentsPacket detailsProtocolPortContent MD5Sample date timeASCIIHEXExternal referenceOriginal packetArchive note: This observation was migrated from the former threatdump project. It is retained as historical packet research and is not a live threat feed. Android Debug Bridge(ADB) service remote shell accessPacket detailsProtocolTCPPort5555Content MD59d3d9b19-f3f7-9670-93f6-862e9ee97a56Sample date time2022-02-16 08:30:43.749ASCIICNXN host::features=remount_shell,abb_exec,fixed_push_symlink_timestamp,abb,stat_v2,apex,shell_v2,fixed_push_mkdir,cmd7x HEX434e584e0100000100001000710000002e2c0000bcb1a7b1686f73743a3a66656174757265733d72656d6f756e745f7368656c6c2c6162625f657865632c66697865645f707573685f73796d6c696e6b5f74696d657374616d702c6162622c737461745f76322c617065782c7368656c6c5f76322c66697865645f707573685f6d6b6469722c636d6437781c630000 External referenceUnofficial ADB Protocol DocumentationOriginal packetBytes← Rsyncd service enumerationTPKT ISO 8073/X.224 COTP Connect Request →