Hey, guys, welcome back to another episode on How to Hack.
So my name is Young and I'll be your trainer and facilitator today.
So over here on the screen, as you can see on the left side, we have an mobile device running.
And on the right side, we have colonics running.
So colonics will be our hacker's box and the mobile device will be the targeted computer at a target,
a device that will be going after to pull out all of those text messages.
So what we are going to do now is on the right side, we have to create the payload.
We have to create the app CAFO.
So what you can see over here is that I have already created a command for you.
So we just got to zoom in a little and I'll explain to you what all this means.
So we're using MSF.
Varnum So this is part of the battle supply framework and of course Desh stands for a platform.
So we're using Android Media Preeta Reverse on a scale TCP.
So a reverse made a British shell for us to get a reverse connection into the mobile device.
And of course we have low.
So Elmos is actually the IP address of the listener.
So in this case, if I enter IP space ADR and I hit enter on that, I will be presented with the IP
address of the colonics machine.
So in this case we have one two one six eight zero one zero six.
And of course for our case, we are going to create the APK file based on Delaporte all four four four
four.
So of course we will output the fall into dot hacker apk.
So once you have this instruction ready, paste it onto your code, Linux box and the command problem
or in the terminal and go ahead and hit enter on that.
So I'll go ahead and enter on that.
And of course I'll be prompted with the password because I'm using Sudo for super user so he'd enter
on that and this would create epic payload.
So what we are going to do is that we need to have this install into the device one installation onto
the device, either as a corporate issue or a company issued device or two.
It is true social engineering attacks or you could embed it as part of a different APK file, like your
different kind of applications that you can then present it to the user in a user could download it,
and from there on you will be able to get it running and you can have the reverse connection back to
the device.
So over here, as we can see, we have the payload size of ten thousand one hundred and eighty five
bytes.
So all you got to do is transfer to file so you can actually do a pseudo move, for example, and we
can move the DOT hacker ABQ file Devar doped up HTML.
So what we are doing this and why we're doing this is because we need a location to service to file
so that people can access it so that a target computers can access it, they can download it and they
can install it from there on.
So in this case, we can go ahead and run the Apache Web server.
So all you got to do is enter System CTL.
So this is part of Linux system administration.
So this is a good command, a good item to learn so that you can understand how you can control different
kind of services, insight your different Linux boxes.
So this is a highly sought after scale Linux administration.
So we enter a system CTL followed by space and we can actually enter the status of Apache so we can
go ahead and hit enter on debt.
So it says that it is already running.
So we have our Web application server running and on the left side we have the mobile device.
So of course the app can be downloaded for many places.
And I just created a YouTube post about the importance of social engineering.
So social engineering is a domain that is usually overlooked.
So there are a lot of importance for it because I've seen a lot of demonstration as well as real life
cases where the hackers provide a macro Excel file like an Excel sheet or a wood document, and a user
enable the macro scripts and continue running and debt took over the entire device very, very quickly.
So those were the kind of attacks that we're seeing regularly do penetrate into very large companies.
So this are the kind of tricks coupled with technological advancement in cyber attacks to actually launch
those attacks against certain entities.
All right.
So now all we got to do is enter the IP address.
So in this case, we have one two one six eight zero one zero six, followed by Hacker.
And of course, we name our device over here from the output, as Hacker told APK so we can enter Heckel
not a hit enter on debt.
So it would say that we can download a false will be.
Go ahead and download a file click.
OK, so once the phone has been downloaded you can open it up and you can install it.
So what I'm going to do now on the right side is I'm going to start up Matus white console.
So again, if you think about some of the use cases for us to install.
A software into the device, what a hackers are doing is that they're installing a lot of such software
onto the mobile device before they actually ship it to the consumers, before they actually sell it
to a different kind of platforms in order for users to use that phone.
And when the users use the phone, they're clueless.
You have no idea to this phone already has a virus or a backdoor install into the device.
So this is the kind of tricks that hackers are really using.
So like I mentioned earlier, coupling social engineering, as well as all this technical know house
for these hackers to gain access to your credentials.
All right.
So moving forward, all I got to do is enter, use, exploit, multi handler and we can actually set
the payload as Android meter reader reverse on a score.
All right.
And we can enter show options so we can SBL Hoess one two one six eight zero one zero six.
So this is the IP address of the listener.
This is the IP address of colonics in this case.
So hit enter on that.
And we have the airport as four four four four.
So everything is set properly.
So all we got to do right now is enter exploit to run the listener.
So we're listening right now and we actually already have the software installed.
So if I click onto the hacker apk and you can see that this is an installation update to the desisting
application.
So we have already installed the application.
So all I got to do is go back into the mobile device and if I go into the application page, all I got
to do is search for a main activity.
So again, to naming the logos, the way the look and feel of the application can be modified.
And we will discuss about how we can innovate such payloads into different kind of ABQ or different
kind of applications.
All right.
So here I'm just going to go ahead and click on main activity and immediately we would have access into
recession.
And what you're seeing right now is that you would not be able to visually see any kind of differences
on the phone.
So the phone is still able to run normal and you can do stuff.
The Internet you can do go to Google Maps.
You can use many different of the features and functions as though your phone is as it is.
But it has really been hacked by the hackers and hackers on the right side.
Clinics have full control and access to the device.
And why is that a case?
So let us explain a little more about why this is the case.
So if I actually go on to settings and I click onto the applications, so let us go into the application
that has been installed in the device so we can review the mobile application permissions.
So if I click on apps and over here we can see all the applications.
So let us go into the application that we just installed.
So it is called main activity and lets it enter and debt and we can look under permissions.
So permissions is on a roll.
So go ahead and click on that and we can see that this application has all these different accesses
into the phone.
So it has the camera access, it has the context access, location, microphone, phone, SMS and storage.
So immense that even for mobile applications to install into your phone right now, the user, all the
owner of the application, if they have all this app permissions, they will be able to see all of your
data.
They'll be able to pull out your contacts or SMS and all this important information.
So going back into the hackers box, we can enter help and this will list out all the commands available
for us to control or to execute into the mobile device.
So in my case, for example, I can enter at on a score list.
So this will show us all the applications that are already installed inside the device.
And we can see, for example, if you manage to break into one of the Kopra devices owned by a an enterprise,
then you realize that such application could be mirrored across all those different devices.
And many large enterprises run thousands, tens of thousands of devices.
So not just in terms of security controls and policies for your mobile devices, but what about your
laptops?
What your servers, what about your network devices and so on.
So all these different kind of security policies have to have a strong effect across and across all
these different devices that you run in order to secure them against many of these potential hack.
So, of course, the main topic for today is dump on the score SMS.
So with a very simple command, all you got to do is hit enter on that.
And immediately you see that we have a file created onto our desktop over here on the left site and
immediately we can just open it up and we can see all of the text messages.
So go ahead and open it up.
And over here we can see.
Can transfer five hundred thousand US dollars for a cybersecurity project and let's go back into the
mobile device and we can click under these messages and immediately you can see that there was a text
message and outgoing text message can transfer five hundred thousand US dollars here for our cybersecurity
project.
So there are a lot more instructions.
There's a lot more commands that we can do as part of this Android hacking series.
So I'll do what I'll do.
Stay tuned for more tutorials for you.
So if you have learned something valuable in today's tutorial, we're going to like sharing.
Subscribe to a channel so that you can be kept abreast of the latest cybersecurity.
Thank you so much once again for watching.