In this video we'll see how to attack an Android mobile phone from Carly for this purpose.
I have installed an android virtual machine on my computer here.
I can easily go to w boxes of the org then VM images virtual box images and install the latest Android
virtual machine.
You need to have virtual locks installed.
You just have to import the virtual machine you've downloaded and you'll end up with something similar
to this environment here on the screen from the quality perspective we will actually create a malicious
HBK file malicious Android application file and we will send it to the end user which is the victim
in this case.
And once the victim installs and opens this application it will create a connection between this mobile
phone and our.
So for this purpose we will use command called MSF VM which is actually a combination between the MSF
payload command and MSF called comment and we will create a payload under Android interpreter pavers
to BP.
Now we will specify the IP of our server here.
That's 2 1 1 2 1 4 2
and a local port as well.
Now we will export this to IT Desktop and we will call it for this purpose for this tutorial.
Trojan note AP came of course and we will scenario you can call it any fancy name that invites the user
to open up and install the application.
You can see here that it's in the process of creating this API file.
And here you go.
Now you just need to move this file from your column machine to the end user.
You can do that using various techniques such as social engineering for this purpose.
I've just copied the file from this machine so my phone here and you can see it under under the download
section that said Trojans.
They became on the other hand.
Now we need to create a listener on our server that will listen to this incoming connection.
After you launch Armitage does go here and writes Android.
Now go to the payload section and double click on reverse DCP.
You will see that the IP is automatically populated.
Now we only need to match this local port here with the port that we've created.
We've used when we created the AP Arcade Fire just press on launch and Armitage will start the handler
locally.
And now it's working for connections on this point I will go now to my android device here and go to
the download application.
Actually I've moved my application from Cali to the Android file here and you only need to install it
just the usual stuff.
So just noticed here when I press an open now on my county machine the Metro practice session is opened
and it shows me here and Android or in the next base device has been compromised.
Now I have full access to the remote Android for its well known thing and it's worth noting that we're
doing this in a lab here but actually you can use it over the Internet using you real IP and port forwarding
see just right click on this compromised machine and you can actually interact here using the Metro
bridge to show you just type help and you'll see all the commands that you can invoke.
You can as well explore and browse the files that exist on this phone.
Just read this forward slash and you'll have access to the root and you can check out all the files
here.
Let's see if we can do something here.
Let's go to the.
As the card and I can spot you the passport files double click on that or no let's do that again.
Storage fine here as required I can right click on that and press on view and I'm able to see personal
Hotmail passwords g mail work account and some credit card PINs
if I go again to the Metro British session as I did earlier with a type of the help you can invoke couple
of commands should such an interesting command will be dumped.
Contacts it will search for the contacts on the phone and it will dump them locally on your file.
So it has its found like seven eight seven contacts and it listed in here.
So let's go check out this file.
UPDATE My database and I'll try to locate this file here you go now I'll open that using least Ben and
here you go.
Lots of accounts with phone numbers emails et cetera going back to Armitage again.
Another interesting command would be dump S.M. S..
But since this is a virtual machine there are no estimates found.
But if you're doing the real attack you will be able to get all this EMRs as well as web cams snaps
using this command.
Of course this virtual machine doesn't have web cam and you can as well search for files like I want
to search.
Let's do a start.
Let's start here.
This is some of the results.
If I do like start to see or maybe start to look nothing here.
So actually Danny the point I'm trying to make here is that now you have full access to this mobile
phone and you can do whatever you want.