Choose one.
Before we get started.
Hi, Mr. Heckles.
Is there any way for us to be able to embed a malicious metaphor to shell over into an epic or mobile
application?
Is that possible, Mr. Hacker Aloy?
Yes, absolutely.
And I'll show you how we can do just that.
And if you like ethical hacking videos like this one, do we're sharing with you today, then you better
smash a like button turn on notifications so that you can be subscribed to the channel so that anytime
anyone gets hacked, sorry.
I mean, whenever there's a new hacking tutorial, you get notified.
And because of how scarily easy it is to run through this tutorial, remember hacking is illegal.
If you get caught hacking, do not tell them, Did you know who is Hack Aloy?
So right in front of us, our colleagues in the first place, you want to go over into his door, put
up a browser and go to a pick me recap.
So in this case, I've downloaded an epic fall, right, which is Facebook like, so it can be any app
that you want to download from.
Just go ahead and click on or see available downloads.
And you can see right here we've got a following.
OK, so that's a download button.
So or I can't go and click on that.
So once you clicked on that, it will then give you all right to download.
That's available so you can just click over here, download APK.
And once you clicked on that, you'll be able to save it over into computers so you can click Save File.
All right.
So in this case, I've seen to fall over into dollars so I can go in and click open on there.
OK, so I have the following fall right here.
And of course, you can see all this wonderful tutorials that we have done for you by looking at all
these different examples of payloads.
So what we can do now is go ahead and open up terminal and I can go and zoom a little more, so it's
easier for you to see.
And what we can do now is to go in a CD over into downloads, OK?
And it can enter list Sheltie.
This is the latest file that we've downloaded, so I can do a morph so I can rename this over into say,
All right, Facebook Dot KPK so I can hit enter our debt.
So when I hit enter on debt, I'll be able to see now that we have the file, which is the Facebook
Dot APK file.
All right.
So this help us set up the process of it really, really quickly.
And the next thing that we want to do is to go ahead and run the following instructions, which will
then help us very quickly and be all right malicious, but turn into shell over into the actual APK
file or the application.
So what you can do is enter sudo super user do massive venom, and what you want to do now is target
Dash X, which is the Facebook Dot APK and an after which you enter the platform Android Moteur Proto.
We verse on Discord TCP and an after which you enter L Hose Eq. one or two one six eight zero one eight
two.
So this is the IP address of the local Linux machine, after which you enter L Port equals four four
four four.
So again, you can specify any of the listener port that you want to have in the enter deshalb, followed
by the new phoneme.
So in this case, I'll enter it as LOI book dot a hit enter in this entered a password for your user.
And now what we are doing here is to very quickly embed Moteur over into the actual APK file so that
when it is launched by the user, it will give us control complete remote control over into the device.
Can you believe it?
That's it.
We are done.
We have just created a malicious APK file to consent to any user and wants to click on.
Did it install it?
It's game over, so you can see right here we compiled the original epic as well as the payload apk,
and we have the hook point in it, after which we have to poisoning the manifest with maternity permissions,
as you can see as to follow.
All right, user's permission, Android arranged so and so forth.
You building a picture of him interpreta injection.
This is really, really easy to do, and we just done it in less than a minute.
The next thing we can do now is to go ahead and post this particular fall over into our web application,
several website.
So all you got to do now is go hit, enter sudo systemctl or restart apache2 dot service.
So this will be a web server.
So we have started add up and we can, of course, take a look at the status of it to see that he has
been already started.
Now that we've set a website, are we going to do now?
Is do a pseudo copy of my book.
Don't speak to VAR Dub Dub Dub HTML slash hit.
Enter on this.
Right now, we have copied our malicious APK file over into a website, so whoever goes in, download
it and stole it gets it will full control over their mobile device.
And what we can do now is go ahead and enter pseudo MSF console.
Start up our listener.
OK, so what we can do now is exploit multi handler hit.
Enter in this and remember to payload that we have, the all payload is definitely not the generic shall
reverse TCP.
So what we need to do is enter the full on which is set payload right, followed by Android Matuba to
reverse underscore TCP.
And now with this, we can enter show options and then after which we can enter a set L host as one
or two one six eight zero one two.
So how do I know what IP address to set it for?
So you can go and open up any terminal that you want to, and all you got to do is enter ifconfig to
figure out the IP address that you have here, which is, in this case, one or two one six eight zero
one two.
And of course, you can easily hose up this kind of listening service overall, across the internet,
using energy rock will be covered extensively in one of our tutorials right here.
So once you have all of this really all you going to do Nas and to run desktop, right?
So you can see the following exploit running as background job or zero, so you can enter jobs and you
can see the following All right, so we have exploit multi handler and my turbo to reverse TCP.
So now we have a mobile device right in front of us, and you can easily use Android Studio for you
to run all this Android virtual devices and you've got a scantling over to the target user.
So in this case, we can enter the following.
All right, so we can enter one or two one six eight zero.
Wanting to slash bull got a hit.
Enter on that and can see right at the bottom downloading file.
Click open on it.
Do you want to install this application?
Enter Install it, states the following app install.
Click Open.
You have all of the following permission access request.
Click Continue.
Click OK.
All right.
Whatever the case is, you can see something pop up right at the back maternity session.
One open, you can enter sessions and you can see one session right here.
Enter Session Dash I followed by one.
Enter this info.
That's it.
It's game over.
We have full complete control over the entire device with what you don't believe that I a full control
of the mobile device.
Well, let me show you something really interestingly scary.
So going back to colonics, what I can do now is enter help and all this are the different types of
instructions that we can send into the mobile device.
And if you enter sent underscoring SMS, you can see the following OK, we can enter a destination address
and a SMS text body so I can send SMS on behalf of the device and a user.
This is crazy if you go ahead and or send underscore SMS dashti, followed by, say, plus night seven
six five four three two one.
And if all my dashti greetings OK from Hacker Ally, I hit enter entry to one.
My goodness, are you looking at this?
Are you seeing this eSIM ascend transmission successful?
And if I hit Orval into the mobile device right here, I go on 30 messages and you can see the following
greetings from Hacker LOI.
Remember that with great power comes great responsibility and you want to be that friendly neighborhood
hacker.