In this video, we are going to see how we can hack Android phones with Metasploit framework.
So we will be generating a malicious file.
And once it is installed on the victim device, we will get the reverse shell.
So in step one, create a malicious apk and open a multi listener.
Now you need to download and install the application on the victim machine.
You can use social engineering to trick the victim into installing the application.
Once the application is installed, you will get the reverse shell.
Now let us see the demonstration.
So we are on our Kali machine.
First of all, let's just list the payloads that are available for Android with the command as shown
on the screen.
We will be using meterpreter reverse TCP exploit.
So use the command MSF venom dash p Android payload set host to your local machine IP.
And output in a file dot file.
Now we have an APK file generated.
Now we can run a python http server in the same folder for ease of transferring files to android machine.
Let's use the command python 3-M http server and our HTTP server will be started in the same folder.
Now in a new tab.
Fire up MSF console.
Use the command use exploit multi handler to run multi handler.
Set the same payload as Android Meterpreter.
Reverse TCP.
Set your host, your local.
And run the handler.
Now let's move to our Android machine.
I'm running Android inside Virtual machine.
So on your browser, navigate to the address of the Kali machine.
You will see a list of files.
Just download the malicious app that we just generated.
You may get some warnings, but ignore them and open the file.
We get a warning that we need to allow installation of unknown apps.
Just allow unknown errors from the settings.
And continue installation of the application.
Once the application is installed, open it.
And if we move back to our Kali machine, we get a reverse shell.
Now we can run different meterpreter commands to fully exploit the machine or extract data from the
android.
So in this manner we can use Metasploit framework to hack into an Android phone with a malicious apk.