In this video, we will learn how to create a malicious Android application that once the user or the
victim invokes it.
It connects back to our Kelly machine using reverse DCP once it connects.
We will have full remote access and control to that device.
So open your terminal and drive, can you, to start the Posterous Ezekial service and then write a
mass of console to start the metal supplied framework.
Now open your browser and go to any website that will show you your current public IP.
Or just copy that.
Now the framework is starting.
And here is the new command line.
So without going into the details of how the you just need to type Emmas of venom or venom dash B for
payload and the payload will be Android.
Then forward slash.
Metro operator, the forward slash reverse underscore TCAP, you do press space button local host.
I'll just paste the IP address then local port that will listen to the incoming connection from the
compromised mobile phone.
Let's say four four four four.
Now I will export that to the desktop.
I'll provide the path home.
My user desktop.
Then I'll call it like Trojans or HBK.
And that's it.
Now I have created a malicious application that I need to send to the end user using various social
engineering techniques.
And once the end user invokes that, I need to prepare the other half of the attack.
I need to set up a listener on this machine to accept incoming connection.
But for the sake of discourse, we'll just use this Trojan that HBK to reverse engineer it and see how
the malware is created or how the malicious code is being populated by the Metters Floyd framework.
I will upload Trojan DOT APC a file to my get up repository so you can download it and apply what you
will learn in this course on this file.
It is important to sign the APC a file before being able to install it on Android devices for this purpose.
Open the terminal and issue that comen D to J dash ap k dash.
Sign and then put the name of the file and just press enter.
You'll notice here that another APJ file has been created with dush sign dot ap key.
You can rename the file before using it.