DEFCON 22 Using Metasploit to Exploit Android Demo

Tod Beardsley, Pirate Captain of the Metasploit Framework, gives Alicia Webb a real-world demo of how to hack a current generation Android phone by exploiting the WebView addJavascriptInterface bug -- even though the exploit has been well documented for over 3 years.
Depending on your source, between 70% and 95% of all Android devices currently in use are vulnerable to this kind of attack.
Subscribe to our channel so you don't miss any of the DEFCON 22 content we're producing this year!
Follow us on Twitter and Instagram @secureninja!
/ secureninja
/ secureninja
Check out our Facebook page at / secureninja

[@henkroth]

She could NOT give two Sh*tS. haha

[@SecureNinjaTV]

I assure you she gives sh*ts about maintaining an audio range and making sure the camera is getting a good shot so YOU can enjoy the hacking demo- that's what she does :)

[@mrmiyagi69]

Leonard is alive and so is Penny

[@shreeharshas2959]

It is actually working!

[@SecureNinjaTV]

Wow, thanks for the feedback!

[@uktribune3852]

really a great job..i appreciate that

[@SecureNinjaTV]

Glad you enjoyed it!

[@saimkhan7213]

can we use that on WAN too? please answer if you know.

[@xodeproductio8339]

saim khan yes you could..by using port forwarding... but in my pass experience i would say that it is kind of unstable..but as i said it is possible

[@Snip3rSkillz]

Defcon 22. Showing you a Defcon 21 Exploit XD. get with it

[@TheOfficialOxygenfad]

"this is where I keep my dogecoins ..." lolllllll

[@multimateco]

What is the alternative broeser's name?

[@rahulsenna5153]

+multimateco UC Browser maybe

[@qoaa]

maxthon it has the same Google text file in browser directory. both maxthon for mobile and desktop have insane backdoor. China uses it and is speculation it is used by Chinese hackers to use as botnet for attacking SCADA systems from within US hiding origins for plausible deniability.

[@Clydodial]

"This is the command liney thing"

[@claytonsnyder8319]

You must protect the Doge lol

[@sandipchaudhari4645]

yes it actually works.

[@SecureNinjaTV]

Thanks for the feedback!

[@stijniman]

8:21 "Ebola outbreak 2014" 😅

[@zeorjvistr6245]

LoL

[@himanshuupreti4728]

Which laptop is best for cybersecurity expert professionals.

[@MRCARROT6M-J]

he have steam ~

[@sourajeet4585]

The host is hell Beautiful

[@muzammilbutt20]

At 8:21 when i saw the word "LiL Wayne" it made me nuts....WTF.!

[@SecureNinjaTV]

In the Google hot words directory? Haha and Richie Sambora right next to him... weird!

[@finjonh7378]

New Update LINE Get RICH Online Hack TOOL>> facebook.com/1517160868604660/photos/a.1517166945270719.1073741828.1517160868604660/1517395411914539/?type=3&pidid=b73e1d48-4d69-46cc-b2ae-43cf7be1788c facebook.com/1517160868604660/photos/a.1517166945270719.1073741828.1517160868604660/1517395411914539/?type=3&pidid=b73e1d48-4d69-46cc-b2ae-43cf7be1788c

[@jasiu9402]

Here is hack-free-whatsapp.tumblr.com?pidid=2da6a966-98cd-4ee8-a221-3abd211cb7e2 a great way to spy frends, with this WhatsApp hack. DEFCON 22 Using Metasploit to Exploit Android Demo

[@shakoorafridi2954]

I Have Accessed My Desired Whatsapp Number, This twitter.com/Funny_And_Happy/status/693889374459695104?pidid=00b03cfa-9bca-4139-b166-fe0996f6b868 is Really Awesome, Bookmarked!!Enjoying :) DEFCON 22 Using Metasploit to Exploit Android Demo

[@TAWPhotography]

same lol

[@infinitegb2693]

The guy looks like Kevin mitnick (in his early days)

[@bhagyeshtelang6170]

Doggycoin😂😂,I like doge, she might be like doggy, this is what he meant?😂😂

[@reyvegas5418]

LOL WOE 2 TO 3 PEOPLE HOLY SHIT MAN CHILL OUT 2 TO THE 3 OMFGGGGG HOLY SHIT!!!!!!!!

[@TrolleoMcTroll]

wow she is drop dead gorgeous. Also, cool thing about the phone and the thing and stuff and things

[@AMAETV]

Why thank you Trolleo! Yes the other things and stuff are neat too :)

[@BigstickNick]

I love it.

[@christophererwin5273]

thats you???

[@harshilsaxenaa]

Does it still works?

[@SecureNinjaTV]

Good question! Perhaps somebody can test it..

[@paramsettimanoj4863]

harshil saxena yes

[@GamerYt-ce7jp]

@@SecureNinjaTV yes it works

[@beatsyntesizer4053]

wow the HOST .. can i hack heart presenter 55555

[@EvertvanIngen]

2:53 She's not even listening #bodylanguage

[@torbellinochacon9997]

Evert van Ingen Cute girl.

[@EvertvanIngen]

Torbellino Chacon Indeed ( ͡° ͜ʖ ͡°)

[@SecureNinjaTV]

Usually the production team is more focused on what's in the shot and maintaining acceptable audio range of the speaker during demos- Alicia included. The hacking tutorial is for YOU, not her.

[@gregshrewsbury5293]

I wasn't' listening either...

[@kwisatzhaderach1458]

She's bored as hell...

[@jimydrinkworld]

can someone clean the comment section

[@SecureNinjaTV]

Good call, we removed all the spam links.

[@rajenderreddyreddy6441]

Show clear to camer

[@paramsettimanoj4863]

Hey why are u showing easy hack come to me i will show u all of the hack

[@sc0820]

?_? Hello from 2020

[@homes24]

She really likes you if you couldn't tell.....

[@UberWagen]

+homes24 The hairtouch and eye contact.

[@fartface7053]

homes24 these type of female hosts are trained in faux flirting

[@SecureNinjaTV]

Alicia and Tod are good friends, so they have fun on camera- although Faux Flirting would make a great certification.

[@baskervillesapienza798]

Приобрёл смартфон ASUS ZenFone Max, покупал здесь: bit.ly/ASUS-ZenFone-Max . Батарея держит на УРА, отличное сочетание железо+батарея и цена в 2 раза ниже, чем в местных магазинах. Отличный девайс, всем советую к покупке.

[@TheMrTape]

Just get married already. At least become a couple.

[@joeyp978]

Lol his dogecoin

[@Akshatgiri]

Hey...You want a job where you smile and laugh as nerds try to explain tech stuff to you...