Do you have this setting inside your phone?
If you do, it is kind of too late because all this app has access to all the photos and videos and
all the documents inside your phone to see.
And big disclaimer, hacking is illegal.
So in today's tutorial, learning about how to defend ourselves by making sure that you review all this
mobile application permissions has been granted inside your phone.
So right in front of us over mobile device and it doesn't matter what mobile device it is.
So in this case, we have an Android device like once can be.
An iPhone doesn't matter.
So if I was to pull from the bottom to the top right and if I was to go here and click onto settings,
and if I was to click under apps and notifications, and if you will go ahead if you go ahead and click
under a permission manager.
So you want a final and figure out which of this particular applications have access to which part of
your phone, this is the place to go into.
So under permission manager.
Right.
So in the following we have say, for example, location, contacts, camera.
We have storage.
So if I click on the storage, it will bring me to this particular page.
So in this page, we can see all the apps that have access to photos, media and files on your device.
So in this case, a one apk file, one mobile app here called Process Manager, go in and click on it,
and you can see the following right storage access for this app is Allow, OK?
It means that this application already has access to everything in your phone.
And how do I know?
And it doesn't matter whether I am using this true lemon as a mobile application to view all this permissions.
We're now coming from Metascore, Amazon Venom, where we create an AP file that requests all right
for all this permissions inside a phone.
And once you click next, yes, to all his permission requests, that's it.
You can see everything inside your phone.
So right in front of us, I have lemon.
All right.
So lemon is the ability for us to do an epic fall and in after which we can provide it to a particular
mobile device and sort of mobile device installs this application.
And once the user has granted all of this permissions, we can see everything inside a phone.
So right in front of us are the following online device.
So let's go ahead and click Manage on it.
And once we're here or you can see right and the left side, all of this, all the permissions that's
been granted to this specific mobile application in which now we can begin seeing and viewing all the
files and folders inside of it.
So if I go ahead and click on the File Explorer or I you see right here, OK, I can go back into the
directory.
All right, we can see all the files here.
I guess the Android music, podcasts, notification pictures, movies, download.
So what we're going to do here is to find out what has this user been downloading all right into the
phone to the browser?
Let's go ahead and click on and download.
And this would open up the directory and you can see right here we go to files.
We go from that zero and we've got three to do six and so on, so forth.
Let's go ahead and click download on it.
Or you can see the following downloading file.
You'll be available in download soon.
Let's go ahead and click onto the second file here.
So what we're doing here is literally downloading files from the mobile device into hacker's computer
right here.
So if I go to the bottom left side, click on or downloads.
Here we can see all the dollars that we have done over the past few dollars request that we have sent
over into the mobile device.
So in this case, taking a look at the latest one right here, OK, we've got a following.
We've got twenty twenty one zero three one four three five.
Let's go ahead and click open.
We can see here, right?
This user is a fanboy of hacker Aloy.
OK, and if I was to go ahead and click onto the second file, click open again and we can see right
here again.
All right.
This user has been downloading photos of hack alloy because he's a big fan boy.
He's a subscriber.
He turns on notification all the time to get updates on the latest article.
Hacking tutorials.
I've been receiving a lot of such comment about how do we fix this particular issue?
So what do you need to do is, as you can see here, we are only following directory.
So here I have lemann server.
I can enter else.
And this is the place where you can find main db JSON.
All right.
So what I can do now is go ahead and you say mouse pad and open a main debug JSON.
So this is the place where you configure the username as well as a password for you.
So if I were to go back into lemon, all right, as you can see here, I can go to the top right corner,
I can click logout.
And now this would lock me out of the right and in to access it.
You need to enter the IP address, followed by the port number of two two five three three four by slash
log in in order to reach the login page so you can use any browser you one wherever you hosting it in
your local network or your hosting it on a look at hosts.
So what I can do now is go ahead and enter or in this case, we have the username.
OK, we have the username right here, which is Heckerling.
OK, so I can go ahead and enter Heckerling.
And then of course, the second part is the password for you.
So you were saying this doesn't look like the password.
All right.
I mean, is this the full password is not so this password is using and the file format.
So what you can do now is go, Hey Nancy, go in to see any of your favorite search engine.
What you can do now is to search for MD5 right hash and then you can hit on this and it can go to say
and the five has generated dot com.
And what you can do now is to enter a particular value.
All right.
So in this case, we can enter value like one two, three four or five six seven eight click Generate.
And then what you can see here is we have the following, right?
This is the MD5 hash value, which is two five, two five, five and so on, so you can go ahead and
click copy on it.
Go back into main DB JSON, a paste right here, or you'll be able to understand that my password to
log in to live on is literally one two three four five six seven eight.
So if I go back into the login page, I enter one two three four five six seven eight.
I click login and then this would bring me into the console of lemon.
So as quickly as that were able to gain full access into the mobile device.
And we can see all the photos on the videos.
All the files has been downloaded into the phone because of a permission has been granted to the mobile
application to access into the device.
So once again, it was something valuable in today's tutorial like share, subscribe and turn on notifications
so that you can be kept abreast of the latest article hacking tutorial.
Thank you so much once again for watching.