HACKING ANDROID
100% access
REQUIREMENTS
* KALI LINUX
* have the metasploit apk
* java 8 or +
* jarsigner installed
* install apktool
COMMANDS
apt-get update
apt-get install apktool
/ * The technique is to embed a security hole in an example WhatsApp apk,
The steps to embed a Meterpreter in an APK file without errors are as follows * /
1 / Download an APK
example.apk
2 / Disassemble with “apktool” the Metasploit APK file and the APK file you are trying to modify.
3 / Copy all the smalter code from Meterpreter to the new smali directory of the APK.
4 / Find the code entry point inside the AndroidManifest.xml file of the APK application by searching for the line: <action android: name = "android.intent.action.MAIN" />
5 / Modify the “.smali” file of the activity to include a line that starts the Meterpreter stage.
6 / Copy all the Meterpreter permissions of the AndroidManifest.xml in the AndroidManifest.xml of the modified APK.
7 / Re-assemble in compressed DEX format.
Sign the newly created APK file with "jarsigner", and then upload to the victim's Android device.
Comments
Post a Comment