Hi and welcome back to another episode on How to Hack.
So today we'll be discussing about how we can quickly create a mobile application that could help us
track the location of a device.
So, of course, on the left side, I have a mobile phone running and on the right side I have a Linux
server.
And of course, it is Linux server is called Linux, so we can go ahead and open up terminal.
So all we got to do is go ahead and enter MSA venom.
So this will be the tool that we're using to create the mobile application so we can turn up for a platform
followed by Android Meta Preeta Slash Reverse Underscore TCP and we can enter Delvaux equal.
So this is listening IP address of your server so we can open a terminal here and we can enter IP ADR
to file the IP address of the server.
So here we go.
The IP address of wanting to one six eight zero one zero six so we can copy deselection, go back to
the previous terminal and you can paste a selection here and we can enter airport equiv four four four
four.
So of course we can all put the information into a mobile application so we can enter mobile tracking
at a hit enter and debt.
And that would be gained a generation of to Paillot.
So you could take some time for the generation of people to complete.
So we'll wait for the completion of the Paillot to be created.
So this is the file that we actually serve into the mobile application.
So in this case, we got a payload complete IT services pallet size ten thousand one hundred eighty
seven bytes.
So all we got to do is under pseudo followed by move to actually change, to fall from the current directory
to another directory so we can actually enter pseudo and the Willowby mobile tracking app and we can
change you to see var html.
And this would actually transfer to fall from the current working directory all the way into Devar HTML,
which is of course use for your Web application server.
So again, you could use different ways of sharing the mobile app to the mobile device.
So of course over here all we got to do is actually do a pseudo system CTL and we can enter status,
Apache to.
So Apache to is the web application server they were using to serve the mobile app that we have just
created.
So in this case we can see that we got the Apache to running.
So it's active and running.
So all we could do is to actually go into MSF console.
So once you hit MSV console, that would actually start up Matus supply framework that would allow us
a connection back into the machine once we have a listener started.
So all we got to do is to make sure that we enter the following.
So use exploit multi handler.
So once you got this running, all you got to do remember to payload that we use earlier, which was
a Android meter to reverse TCP, so we got to set the payload as Android.
Mr Preeta reverse on a scale TCP hit enter in debt and from this we can enter show options to see what
are the options available.
So once again we can set the low so I can copy the alehouse from the iPad address that we actually specified
earlier.
So copy to selection and of course we can set Alehouse and we can do a piece of the bot.
So Pace and hit enter on that.
And of course we've got a L pod, right?
So of course we got all our information, insight, insight, framework frameworks I'm going to do is
to just simply enter, exploit and that would begin listening for any connections.
So with that in mind, going into the left side of the screen, we have our mobile application and of
course, we can open up, say, Chrome, and we can go into the Web application server to actually download
default.
So we can actually go into the IP address of the colonics machine that is hosting the Web application
server.
And from here, all you could do is to actually do a slash and we can download a fall.
So if you remember earlier from the earlier part of how we are actually changing to fall in a filename,
we can actually enter mobile tracking app.
All right.
So from here, we can enter mobile tracking app ABQ to download a fall.
So this will beginning to fall.
So as you can see over here, we can open up the application.
So once you open the application, it will say, do you want to install this application?
So you click install on that.
And this would be Gane installation process.
And all you got to do is, of course, now scrolling back down, we can get a supply list in a server
running.
All you got to do is open up the application.
And this would give us, of course, immediate access into the mobile device.
So, of course, in this case, if we want to track location, make sure that the application is allow
to actually access the location of this device.
So you click continue on that and immediately, would it have ability to actually have a session with
the mobile application?
So from here we can enter help.
Now we can see all of the commands available.
So of course the one day will be using is the geolocation.
So of course over here there are a number of ways that we can do it.
So one is geolocation and other is wireless LAN geolocation.
So of course we can actually look.
At getting the lat long using geolocation so we can go and enter Geo, locate and hit enter on that.
And this would give us the latitude and longitude of the longitude of the device so we can go ahead
and open up a Web browser.
And in the Web browser, we can say go to Google Maps.
And once we were in Google Maps, all you got to do is to keep the latitude as who has the longitude.
So, of course, going back here into the terminal, we can actually copy the information over here.
So this is the first latitude that we want to select and we paste the information over here and we go
back into terminal and we actually select over here, which is the longitude and copy to selection so
we can do a comma followed by page and we can do a search on that.
And that would immediately tell us the location of the place.
So of course, in this case, you'll be seeing over here that we have the current location and this
is a place somewhere in somewhere in the United States.
So here we can see, of course, the information based on the latitude and longitude.
And the reason is because when you go into the virtualization of the device, we can actually click
on more.
And this is the place where we can actually set a single point.
So this is the location that we can set inside of virtualization.
So, of course, if you want to learn more about how we could set and change the location of device,
we could discuss on that in subsequent videos.
So once again, I hope you have learned something valuable in today's tutorial.
And if I have any questions, feel free to leave a comment below Armalite share.
Subscribe the channel so that you can be kept abreast of the latest cyber security target.
Thank you so much once again for watching.