Access Android with Msfvenom (Cybersecurity)

[@LoiLiangYang]

Remember to subscribe to the channel so that you can learn all about cyber-security.

[@shubhamgurav634]

This will not work on today's phones

[@jissjose1382]

Sir did u chromecasted your phone or virtual machine like genymotion

[@subramanivs1]

Is that possible android hacking without any payload?

[@ajaykumark107]

What version of android were you using for this demonstration?

[@bronkrpkad]

Sir please make me a hacking pubg mobile cheat anti banned,i will pay

[@Lokendrakumar1997]

00:01 Discussing hacking a fully patched mobile device using MSFvenom 01:05 Using MSFVenom to create malicious APK files for Android 02:08 Downloading and installing malicious apps via service cheat in Android environment. 03:17 Using Msfvenom for Android exploitation through apk installation 04:24 Access Android with Msfvenom for reverse TCP 05:31 Exploring system information and rooting Android device 06:40 Access Android device remotely and perform exploits 07:45 Android security features have evolved significantly.

[@jamiaprepare3996]

Sir your vodeo is awesome but sir can u make a video about telling command in briefly one by one than we can learn why we used whose command

[@agito3691]

I start learn metasploit 1 day .. and i loved

[@bounader]

so how is it going after 4 years?

[@Haquisezia]

No answer, he is over💀​@@bounader

[@AbuBakr1]

1: Avoid installing apps from third party site 2: use this knowledge to protect your from theft

[@thuc6305]

If i do not download attacker by apk. How it work ? ^^

[@vishnurathan]

Please put a detailed video about hacking Android device through internet (port forwarding method ) no one is showing that method

[@L.Lawliet.3301]

you just use ngrok and use the ngrok forwarded host and port and use it like in the video

[@محمدياسين-ز8س8د]

It's very easy and the IP and port are permanent

[@haithemzaatchi6967]

Can you show me how ?​@@L.Lawliet.3301

[@AmarpreetKaur-s3o]

How i can hack android?

[@adnanmerheb8744]

Best teacher you have simple way for teaching thank you for the information.

[@oduorotisjnr.e5723]

Hi Loi I've watched most of your videos on gaining android access with msfvenom as well as msfconsole. You've repeatedly talked about embedding the malicious apk file to other apps. Could you please do a tutorial on how to do that ? Thank You in advance, and you make very awesome tutorials.

[@BYEPOLA]

He cant because YT will take the vid down but im pretty sure their is null byte article ok tht so jus look tht up and ull be aight

[@elmashotevevo7354]

which video is about msfconsole? please send the link but not hack me lol

[@chry4035]

when i put ip and /attack.apk the dowbload doesn't start

[@idkkk7777]

Samee

[@gauravchauhan3832]

Does it shows "Page not found" if so then make sure you PC and your mobile phone both are connected to the same network. That is your PC and mobile should be using the same WiFi networks. If both are connected on the same network, then you might be using Kali Linux on VMWARE/Virtualbox. If that's true then make sure the Kali Linux is set to Bridge Network (for Virtualbox) or Host Network (for VMWare) in the settings of the kali Linux under network tab. Then you'll find when you enter ifconfig you'll get another IP address. Then try the process of doing the same you were doing... => IP_address/apk_name.apk in the URL bar

[@perseguindoamaravilhayt]

@@gauravchauhan3832 I'm using Linux in Persistent mode via the USB boot drive And I have the same problem, I can't download the file "attack.apk"

[@gauravchauhan3832]

@@perseguindoamaravilhayt if you're using Kali Linux using usb live boot then also the kali Linux and the mobile phone should be connected to the same WiFi network. It is becoz your Kali Linux is now a server (when you do service apache2 start) to which you'll receive files, so you need to connect to that server and receive files

[@perseguindoamaravilhayt]

@@gauravchauhan3832 Okay, I understand bro. I got it, thank you. Ask me another question? I made a connection with "LHOST =" My IP "I used my internal IP and since I am connected to the same wi-fi network, it worked. I want to know now how to connect to external networks? I tried to use Ngrok but it didn't work ...

[@ShubhamSharma-xo9fq]

Though your video is good enough but i am getting an error i.e my web application server is not responding (when i input IP ADDRESS/attack.apk) , it does not response . Can you help me out please?

[@rabiariaz5320]

So that's done. We got access to the target. But what for future? What If we do want to return to the target system after a couple of weeks later (that we compromised today). What will we do then? We will run the same exploit and interact with the session id again?

[@OnomEpon]

Exactly

[@technologyhacks0.010]

it is amazing only video that gone real on youtube i loved it thank you so much

[@upupaepops6700]

Try this useless stuff and you will see that is "useless" and whether you love it or not after you trying this useless stuff !!!

[@upupaepops6700]

@Hand Grabbing Fruits I am not boot lol, i am just one small but righteous white hat ethical hacker + programmer who speaks the truth, this method works only if you modify your configurations and turn off all your security 'stuff' on your android and make your android vulnerable, otherwise if your android has normal settings the stuff from this Video is useless and will not work, i hope you understand now!!!

[@twentynine1965]

Thank you sir it works ...I have a question sir if I exit to the terminal and I open it back what would I do?

[@cesarevertolo9359]

Msfconsole Use exploit multi handler Sessions Click on the session that you did, so if it is 1, then you’r gonna type sessions -i 1 And then it starts

[@SKashifAli]

@@cesarevertolo9359 showing no active sessions . Why ?

[@TheJpmaster69]

Thank you so much man. Love your content never stop :) Already subbed

[@zefroy3297]

How to install kali linux? Ive been wondering

[@jtoram1655]

the problem is, if we install the application. of course there will be a warning. this video hides that.

[@putrigayatri48]

Joko Prasongko iya mas joko.. Dah coba juga ya.. Gimana caranya ya?

[@unprophete6909]

he bloody explained that part....smh

[@muhammadfarhanf5286]

@@putrigayatri48 he already explained that, come on..

[@alanissac401]

@@putrigayatri48 are you Indonesian?

[@prajwalinfo]

what if i use MacOS terminal to do this whole activity? like installing Metasploit on MacOS instead of a vertualbox which has a linux distro?

[@lcaainvalid1034]

cant access the webpage we made with apache2 (2:30). Somehow i wont work even when executing all commands with root...

[@samisspot8518]

for me when i enter the ip address folloxed by the apk name it is not downloading the apk in android but when i enter it in laptop it begins to download what can i do

[@danieldevilla4153]

same problem did you fix it?

[@samisspot8518]

@@danieldevilla4153 I uploaded the apk in a cloud platform and downloaded it in my phone, worked fine 😁

[@vishwagouda6111]

How can I remain access to that Android device after I restarted kali

[@cjmiraj]

Love U From Cyber 71 Bangladesh ❤

[@nibirpaul5594]

Cyber 71.. Really? They have no involvement this kind of comment

[@johnaugust934]

why with the front camera the command does not work?

[@nevogotliv459]

because it's on virtual box

[@surprise7917]

Where does -q stand for after msfconsole at 3:56

[@LoiLiangYang]

The -q option removes the launch banner by starting msfconsole in quiet mode.

[@HXR-nx7iq]

you are the best. my dude. thanks a lot for you

[@jamesdickson3631]

He is great but he teaches too quick. No doubt he is very intellectual

[@basvanderlinden423]

What if you closed the terminal do i got still acces to sombodys phone?

[@Mohammdragab]

In this case the hacked one must open the apk every time the kacker want to acess, so it is a difficult way to hack

[@engineeringprojecthub]

this app was build for an older version of Android and may not work properly try checking for update or contact the developer( problem shows from Android)

[@MosesaAkawua-mj3bs]

But sir please I need answers what if the user uninstall or delete the app can I still have access to the Android device or if the app is already installed can not be uninstall or delete?

[@sanjaykumarparida3663]

In the web browser when i am trying to download it is saying connection timed out

[@maxanimation5927]

ur ip must be blocking it

[@sanjaykumarparida3663]

@@maxanimation5927 no man, everything else is working good still it is saying connection timeout

[@maxanimation5927]

@@sanjaykumarparida3663 hmm no idea

[@rekojj]

how to tackle this error Error: invalid payload: andriod/meterpreter/reverse_tcp .... where is the mistake

[@muntajibkhan404]

i install and try to open the app but app dosent open and msfconsole also dont show any response

[@phil_s_tech]

same here

[@RenaldiPutraIsmail]

Sir, how if the device is not same network? The device is in another city.

[@phil_s_tech]

i exploit and try to open the app but i see nothing.. no meterpreter >.. still saying started reverse tcp handler

[@adrianarifin]

Nice Bro 😘 warm greetings from Indonesia

[@classicpooh532]

One question does it only work only on devices which r on same network

[@DanielSantos-pu9qh]

Followed step by step, was dissapointed when I didnt get access to my phone. installed my malicious .apk file displayed this message: "This application was built for an older version of Android, may not work."; Maybe this payload was patched in some Android versions?

[@amirnusantara3938]

So is it mean the target need to open the "main activity" apps everytime we want to access their android?

[@leander-brawlstars2099]

No, you can access eveytime

[@chiraagnaal2430]

Yes

[@chiraagnaal2430]

​@@leander-brawlstars2099how ?tell me the process

[@bhxlive]

​@@chiraagnaal2430make it sleep for 2 hours

[@bhxlive]

Within 2 hours you can run and connect everytime

[@vikasgupta3118]

If I will set payload today or victim open it tomorrow then it will work or not. Or I have to make one more payload if my Kali Linux is shurtdiwn

[@mahmoudelwan255]

Can you bind payload in image or video

[@ShubhamSharma-xo9fq]

steganography

[@duraidthamer7388]

Thank you so much, can I use the same steps but use the DNS server instead of IP address in local host

[@manishJ2910]

what if you turn on your rear camera using exploit of your virtual android device..! will you see wiring inside the computer?

[@Quantiflyer]

yes

[@No-Salvation]

So get the IP address and set port and basically with the payload you back into my phone?

[@prajjwaltamrakar8181]

Which mobile simulator you are using...!

[@peoplesarena039]

Server is not getting loaded now ? It's not working

[@nanayawasmah4941]

i am a big fan of your work

[@HussainHadiJee]

what about iphone? share iphone tutorial as well..... is there any file place on mobile? did we need to connect mobile with computer or it will remotely monitor? please reply all these questions on your next video tutorial

[@salmantahir9655]

it gets downloaded in kali browser thats of no use is it?

[@babrujawaan]

U didn't showed how much permissions one have to allow for the first time installation which will aware the user of the app permissions

[@lurchinglime7435]

That's why u disguise it as an app

[@hasanetebariyan5497]

Whats the app for connecting android phone to the loptop or pc?

[@abhishekjaiswal6492]

Is it necessary to touch on the main activity application to get access over it during started reverse TCP???

[@alitarek8718]

yep

[@C10udburst]

5:09 So i can enter whoami *Unknown command* So i can enter getuid *Unknown command* So i can enter help Lmao

[@C10udburst]

​@J eilish its not about being root or not. Those aren't valid metasploit commands and he was struggling with that for 10s straight.

[@anonymusblak3757]

Embed msf apk in to app apk with msfvenom. Its working for me

[@hacksudo]

Big fan sir 😇😘😘

[@exploitlab4664]

what do you mean to closed visor?

[@efeonobrakpeya9883]

Is it possible to merge that apk file with an image to make it look less suspicious

[@apurvsharma1261]

Efe Onobrakpeya ya u can change icons or even hide it

[@gamspot277]

yes and u can hide the app after installation. please subscribe my channel also

[@jojo-nu9rl]

@@gamspot277 how to make it persistent?

[@gamspot277]

@@jojo-nu9rl in new mobiles u need to desable security frst otherwise it will automatically dlted

[@gamspot277]

@@jojo-nu9rl and boss the app is not stable. some times works so dont waste time on this..

[@mobinnaybin2613]

I did all of this correctly on android 11 but t didn't work. is there any other ways to use it at androud 11?

[@yosiamano]

hay, wen i download the apk file to the android pohne it give me masige "this app was built for an older version....." and the seshion dont start wat cen i do ?

[@zain-qe3ol]

I download the app and in my mobile and then what happens is it says the app was built for an older version of android and doesn't connect please help me!!!! i use android 10

[@ansh6848]

Hi Loi, How one can make this apk to not show in app menu?

[@itzcybermusicwala]

Sir i am getting error .....you need JavaScript enabled to watch the stream ?how can i fix that ? I see everything js is enabled in my browser..

[@justineaso9245]

Sir it says file not found in the browser what should I do

[@zefroy3297]

How to solve "Cannot move file to /var/www/html/ : no such file or directory"

[@briyanpaul]

Didn't u install apache2

[@zefroy3297]

@@briyanpaul how to install?

[@asheryasser6193]

Bro, just Skip that step

[@invictussol2116]

This video explains what you can do once they installed the apk. BUT. how can you make them install it and run it? I know you can attach a malware on an authentic app but if the user doesn't want to install the app? plus it also requires the target to allow the permissions? what do you do? what's the best alternative? this video shows the ideal way. maybe a bit too idealistic. it's good but not good enough.

[@kabbzify]

Thanks for the video...i have a question. i tried this on a fully patched android 10 however when i open a connection it gets closed after a few seconds. on older android versions it works okay. is there anyway to achieve persistence?

[@Emmanuelw11]

I also get the same problem

[@salmantahir9655]

my apk wont get downloaded on an andriod i tried downloading it through google and firefox both but cant any suggestions

[@gw_ayat]

BRO im facing a problem that i cant do with android version 12

[@yorandb9494]

When i open the apk on my android phone it works but in kali it says session closed reason died.

[@tonaa2742]

Sir If the device is not rooted how do we create a permission to enforce the device to become rooted as you said?

[@sizovkirov6449]

I can not see "meterpreter>" after meterpreter session opened. Could you help me please? And also after few minutes meterpreter session become closed

[@lmaooaooo336]

2:04 theres no file what do i do...

[@soufianenaciri6400]

Hey can any one help me, 1- it shows for me false not yes 2-when i put the link in my phonebrowser it doesn't get opened, like it s empty

[@soufianenaciri6400]

Please help

[@wirlanyt3937]

you are the best of best

[@saketharsha3855]

U said uve already installed the file there it says app not installed what should we do for that

[@nianal255]

I need some help... My Application Controller Commands are not working for some reason :( Is there any reason for that? I ONLY see 'app_list' command working please help!!

[@skravi371]

Sir,After closing and opening terminal does this session will com back again and connected to that phone?

[@kurosenpai]

u will still have it since it installed the back door already. u will need to retype the command though

[@abhishekdasari3284]

Whenever I installed the app in my mobile it's saying that app built for older version. It may not work properly. Can you please give me the solution

[@jeffersoneener9071]

Sir how do you open your phone on the screen? Or it is a virtual device?

[@tirthankarghosh1227]

After i clicked enter typing exploit there is a message [!] You are binding to a loopback address by setting LHOST to (my ip address).Did you want reverse listenerbindaddress? Then nothing's happening . what's wrong?

[@robertkamau3447]

This is awesome, but i am having a session timeout once am inside my android. How can i solve this?

[@v2kguy]

I got it working over the whole Internet on two different Internet connections

[@Pistachioooooooooooo]

Hey, I have tried to do this, it sys here: Error: One or more options failed to validate: LPORT. So what's that mean????? I hope you can help me with that

[@GameScenesHQ9748]

Does meterpreter require internet to connect to the host

[@HamzaAli-vc8ri]

im having lite security error while installing the apk in mobile how can i remove the error from developer side???

[@Hastar_ring]

I couldn't understand anything after the exploit, how the things work after exploit and how to download Main activity app in mobile

[@romainbarneoud1127]

Hello, the "Main Activity' application is not creating on my phone, how can I solve this problem ?

[@OxiWan]

Hello Xd

[@sandhyashiva1]

I tried several times this way, but I could not able to download the payload in my mobile for testing, could you please suggest me and I loved your videos and following regularly

[@jamesrushforth1026]

Like the videos man cant wait to try this ,watched a few of your videos now one thing though i heard that apps need to be signed in order to download is that correct? Also would this work on all android versions to date ?

[@Malw3R]

How to make the session persistent? and how to make the payload permanent? How to controlling the device without the user clicking on the payload?

[@pouryasshh4628]

Can we access the gmail app or telegram or any messenger app with this exploit? What should we do for that what command?

[@cocuklar_icin_masallar]

I liked your video, but I sent the file to android phone via whatsapp, downloaded it and allowed access, but it said mafconsole started reverse Tcp handler on and it stayed like that.

[@santiagomoore374]

Sir, I am doing same process in termux. Everything is working fine except the ifconfig. It doesn't generate the LHOST. I am facing an error "Warning: cannot open /proc/net/dev (Permission denied). Limited output." And showing some other up address but not the local Host. Can you please help me out.

[@5wholepizzas284]

try sudo su and then try ifconfig or try ip a

[@abdullahbander4]

Lport 4444 is it same for all PC and routers or not .. if it is not How to know the Lport?

[@arjux4724]

8080 best

[@TheXerr0r]

please , how i can hidde my app on my victm device , when my victm installed on him device ? Thanks

[@TheXerr0r]

@m4s m i just want to hidde my app on my victem device because it's help me to keep myself as anonymouse on my victem device😊😉

[@See_through866]

@@TheXerr0r karma is calling...

[@TheXerr0r]

@@See_through866 what?

[@jojo-nu9rl]

@@TheXerr0r there's an option to hide bro

[@LifeHacker8]

There is a command to hide the app from the main screen.

[@CODEWITHHK]

Bro for these wife adapter is needed or not

[@mallikarjunspatil108]

Does this work only when both Device are connected to the same network

[@cesarevertolo9359]

You showed the webcam command and it took a snapshot, but how can I see live in the webcam, what’s the command?

[@49vishalsonawane72]

webcam_stream

[@paradiserelaxation8331]

Sir please tell me why I got this error? [-] No platform was selected, choosing Msf::Module::Platform::Android from the payload No encoder specified, outputting raw payload Payload size: 10236 bytes

[@Tarunsinghnoble]

Can we insert this exploit file in other genuine app and try to install it will this app be installed with it. I don't have any idea of this that's why i am asking this

[@lofimusic5872]

Mine is showing "exploit completed but no sessions was created" and "meterpreter session is not valid" errors. How can i fix it???

[@nirusun2000]

This method will work for old os, for the new os session will get died often, no use at all.

[@sanjaicyber7841]

wont it work on android 10 ??? i can't access the webcam_snap command can you help me this ??

[@prakhyathkumar4298]

I am not able to download the apk file . Every time I enter the address firefox or any other browser says that the connection has timed out.Please help me out.