Exploit Android Devices using Metasploit - Kali Linux

Requirements:

1. Kali Linux / Backtrack 5 (Having MSF)

2. Android Phone ( Jelly Beans - I am Using Samsung S3)

3. Common Wireless Network ( Using Hotspot)

I am not gona take much time hence will do it fast in simple steps. So lets go.

Step 1: Open Your Kali terminal and type the following command.

Step 2: After pressing the enter key, just type ls for listing the files on same directory. And you will see app.apk file.

Step 3: Now use the exploit i.e exploit/multi/handler , set the respective payload and after setting lhost and lport just type exploit to trigger the exploit.

Step 4: Now send the .apk file we just created to victim, it will be having an M icon showing Metasploit icon on it. As user tries to install it you on attacker machine i.e Kali Linux in our case will get the reverse connection.

Step 5: Now as you can see in below image we got the shell of the Android phone and can have access to its data. If the phone is rooted then you can even get Call Logs, SMS and other data stored in the internal storage space.

VIDEO TUTORIAL

Share this

Unknown