Access Android with Msfvenom (Cybersecurity)
ฝัง
- เผยแพร่เมื่อ 12 พ.ย. 2019
- // Membership //
Want to learn all about cyber-security and become an ethical hacker? Join this channel now to gain access into exclusive ethical hacking videos by clicking this link: / @loiliangyang
// Courses //
Full Ethical Hacking Course: www.udemy.com/course/full-web...
Full Web Ethical Hacking Course: www.udemy.com/course/full-web...
Full Mobile Hacking Course: www.udemy.com/course/full-mob...
// Books //
Kali Linux Hacking: amzn.to/3IUXaJv
Linux Basics for Hackers: amzn.to/3EzRPV6
The Ultimate Kali Linux Book: amzn.to/3m7cutD
// Social Links //
Website: www.loiliangyang.com
Facebook: / loiliangyang
Instagram: / loiliangyang
LinkedIn: / loiliangyang
// Disclaimer //
Hacking without permission is illegal. This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing so that we can protect ourselves against the real hackers. - วิทยาศาสตร์และเทคโนโลยี
![Track & Connect to Smartphones with a Beacon Swarm [Tutorial]](/img/n.gif)
Remember to subscribe to the channel so that you can learn all about cyber-security.
This will not work on today's phones
Sir did u chromecasted your phone or virtual machine like genymotion
Is that possible android hacking without any payload?
What version of android were you using for this demonstration?
Sir please make me a hacking pubg mobile cheat anti banned,i will pay
I start learn metasploit 1 day
.. and i loved
Best teacher you have simple way for teaching thank you for the information.
Sir your vodeo is awesome but sir can u make a video about telling command in briefly one by one than we can learn why we used whose command
Thank you so much man. Love your content never stop :) Already subbed
How to install kali linux? Ive been wondering
1: Avoid installing apps from third party site
2: use this knowledge to protect your from theft
If i do not download attacker by apk. How it work ? ^^
Please put a detailed video about hacking Android device through internet (port forwarding method ) no one is showing that method
you just use ngrok and use the ngrok forwarded host and port and use it like in the video
It's very easy and the IP and port are permanent
you are the best. my dude.
thanks a lot for you
what if i use MacOS terminal to do this whole activity? like installing Metasploit on MacOS instead of a vertualbox which has a linux distro?
If I will set payload today or victim open it tomorrow then it will work or not. Or I have to make one more payload if my Kali Linux is shurtdiwn
Though your video is good enough but i am getting an error i.e my web application server is not responding (when i input IP ADDRESS/attack.apk) , it does not response . Can you help me out please?
Sir how do you open your phone on the screen? Or it is a virtual device?
Sir If the device is not rooted how do we create a permission to enforce the device to become rooted as you said?
One question does it only work only on devices which r on same network
this app was build for an older version of Android and may not work properly try checking for update or contact the developer( problem shows from Android)
So get the IP address and set port and basically with the payload you back into my phone?
Like the videos man cant wait to try this ,watched a few of your videos now one thing though i heard that apps need to be signed in order to download is that correct? Also would this work on all android versions to date ?
He is great but he teaches too quick. No doubt he is very intellectual
Nice Bro 😘
warm greetings from Indonesia
After i clicked enter typing exploit there is a message [!] You are binding to a loopback address by setting LHOST to (my ip address).Did you want reverse listenerbindaddress?
Then nothing's happening . what's wrong?
Thank you so much, can I use the same steps but use the DNS server instead of IP address in local host
What if you closed the terminal do i got still acces to sombodys phone?
Hola amigo que libros recomiendas para dominarlo la perfeccion ..
CEH Certified Ethical Hacker
Sir i am getting error .....you need JavaScript enabled to watch the stream ?how can i fix that ? I see everything js is enabled in my browser..
In this case the hacked one must open the apk every time the kacker want to acess, so it is a difficult way to hack
Hello, the "Main Activity' application is not creating on my phone, how can I solve this problem ?
Hello Xd
Can we insert this exploit file in other genuine app and try to install it will this app be installed with it.
I don't have any idea of this that's why i am asking this
From computer any windows?
So that's done. We got access to the target. But what for future? What If we do want to return to the target system after a couple of weeks later (that we compromised today). What will we do then?
We will run the same exploit and interact with the session id again?
Exactly
How can I remain access to that Android device after I restarted kali
it gets downloaded in kali browser thats of no use is it?
Which mobile simulator you are using...!
so practically using two laptop and do it very good.than everybody good understand it.
Hi Loi,
How one can make this apk to not show in app menu?
Hi Loi
I've watched most of your videos on gaining android access with msfvenom as well as msfconsole. You've repeatedly talked about embedding the malicious apk file to other apps. Could you please do a tutorial on how to do that ? Thank You in advance, and you make very awesome tutorials.
He cant because YT will take the vid down but im pretty sure their is null byte article ok tht so jus look tht up and ull be aight
which video is about msfconsole? please send the link but not hack me lol
Bro for these wife adapter is needed or not
which android version is that please !?
i want to download it , thank you .
what do you mean to closed visor?
Does this work only when both Device are connected to the same network
what about iphone? share iphone tutorial as well..... is there any file place on mobile? did we need to connect mobile with computer or it will remotely monitor? please reply all these questions on your next video tutorial
hay, wen i download the apk file to the android pohne it give me masige "this app was built for an older version....." and the seshion dont start wat cen i do ?
cant access the webpage we made with apache2 (2:30). Somehow i wont work even when executing all commands with root...
Sir it says file not found in the browser what should I do
I tried several times this way, but I could not able to download the payload in my mobile for testing, could you please suggest me and I loved your videos and following regularly
When i open the apk on my android phone it works but in kali it says session closed reason died.
so nice you break hard concepts into soft cakes for easy learning so great
I can not see "meterpreter>" after meterpreter session opened. Could you help me please? And also after few minutes meterpreter session become closed
it is amazing
only video that gone real on youtube i loved it thank you so much
Try this useless stuff and you will see that is "useless" and whether you love it or not after you trying this useless stuff !!!
@Hand Grabbing Fruits I am not boot lol, i am just one small but righteous white hat ethical hacker + programmer who speaks the truth, this method works only if you modify your configurations and turn off all your security 'stuff' on your android and make your android vulnerable, otherwise if your android has normal settings the stuff from this Video is useless and will not work,
i hope you understand now!!!
Thanks for sharing your the best
Is it necessary to touch on the main activity application to get access over it during started reverse TCP???
yep
How do we get a root access if the target device isn't rooted yet?
Is it available to get session after I Unistalled apk from my phone?
Sir,After closing and opening terminal does this session will com back again and connected to that phone?
u will still have it since it installed the back door already.
u will need to retype the command though
Which android emulator you are using bro?
thank you very much ,, master ,, thank you!!!!!
any possible to without touching mobile?
Love U From Cyber 71 Bangladesh ❤
Cyber 71.. Really?
They have no involvement this kind of comment
Thank you sir it works ...I have a question sir if I exit to the terminal and I open it back what would I do?
Msfconsole
Use exploit multi handler
Sessions
Click on the session that you did, so if it is 1, then you’r gonna type sessions -i 1
And then it starts
@@cesarevertolo9359 showing no active sessions . Why ?
U said uve already installed the file there it says app not installed what should we do for that
I download the app and in my mobile and then what happens is it says the app was built for an older version of android and doesn't connect please help me!!!! i use android 10
Whats the app for connecting android phone to the loptop or pc?
Where does -q stand for after msfconsole at 3:56
The -q option removes the launch banner by starting msfconsole in quiet mode.
The app do not get installed in android devices. Can you please teach us to sign our apk. I tried with Sign apk too.
Even if target android is not rooted, this is possible? Amazing. Will android patch this hole?
Whenever I installed the app in my mobile it's saying that app built for older version. It may not work properly. Can you please give me the solution
Well for me stuff like the screenshare dosen't work as well as the webcam stream so some stuff work other don't
how to change apps's icon and name like torch or whatsapp
Thank you for this Video
Sir, how if the device is not same network? The device is in another city.
I liked your video, but I sent the file to android phone via whatsapp, downloaded it and allowed access, but it said mafconsole started reverse Tcp handler on and it stayed like that.
Could you do a tutorial in embedding the APK in other apps. Like this.
is this working in any device running by android like samsung devices??
why with the front camera the command does not work?
because it's on virtual box
Can you bind payload in image or video
steganography
is there any other way to install the payload app in the target phone? the fact is that victim will never install this kind of app which needs permission to b allowed. it sometimes is impossible to make the victim fool.
Nice thank yuo verty much for this
Thanks for the video...i have a question. i tried this on a fully patched android 10 however when i open a connection it gets closed after a few seconds. on older android versions it works okay. is there anyway to achieve persistence?
I also get the same problem
you are the best of best
I did all of this correctly on android 11 but t didn't work. is there any other ways to use it at androud 11?
This is awesome, but i am having a session timeout once am inside my android. How can i solve this?
How I make for infected app don't close in victim phone?
Please
You have os x on lenovo laptop? Can i ask why?
This demo is on a mac.
i am a big fan of your work
I am not able to download the apk file . Every time I enter the address firefox or any other browser says that the connection has timed out.Please help me out.
i finished everything but no one can download the app it says site take too long to respond any help?
Sir, please make a video on how to create apache server like you use in this video. ❤️
Apt get install apache2
service apache2 start and put the files in /var/www/html
Sir, I am doing same process in termux. Everything is working fine except the ifconfig. It doesn't generate the LHOST. I am facing an error
"Warning: cannot open /proc/net/dev (Permission denied). Limited output."
And showing some other up address but not the local Host. Can you please help me out.
try sudo su and then try ifconfig or try ip a
what if you turn on your rear camera using exploit of your virtual android device..! will you see wiring inside the computer?
yes
Followed step by step, was dissapointed when I didnt get access to my phone. installed my malicious .apk file displayed this message: "This application was built for an older version of Android, may not work."; Maybe this payload was patched in some Android versions?
Request not found on this server showing when going to open. Apk file
Really great video
U didn't showed how much permissions one have to allow for the first time installation which will aware the user of the app permissions
That's why u disguise it as an app
Does meterpreter require internet to connect to the host
so nice explanation
the problem is, if we install the application. of course there will be a warning. this video hides that.
Joko Prasongko iya mas joko.. Dah coba juga ya.. Gimana caranya ya?
he bloody explained that part....smh
@@putrigayatri48 he already explained that, come on..
@@putrigayatri48 are you Indonesian?
Big fan sir 😇😘😘
Thanks pro , but
I have a small request to translate these videos into Arabic because we need more information. Thank you, sir.
sorry but i dont get it,what is this cellphone in the screen?or app? or what?i get lost
This isn't working on WAN, only for local devices.
Mine is showing "exploit completed but no sessions was created" and "meterpreter session is not valid" errors.
How can i fix it???
Hey can you make video on encoders of metasploit