previously I have discussed these steps to hack an Android device I have
received many messages comments and requests asking to make another video
that should show these steps to hack an Android device outside the LAN that is
hacking over WAN or Internet so let's do it
Hi everyone this is Irfan from ehacking.net and before moving further a quick
reminder about connecting with me if you have not liked or subscribed the channel
yet then what are you waiting for do it now and do not forget to hit the bell
icon button so let's get started you need a public IP with Metasploit and other
tools to hack any remote machine whether it is Windows Android iOS and etc for
this tutorial we will use ngrok there are other providers as well but ngrok
is widely used apart from ngrok there are other
techniques as well just like port forwarding and others however ng Rob is
divided Lee used and accepted you know HTTP channeling service provider so we
will use this so the step number one is to create an account on ng Rock and
configure the ng Rock on your attacker machine that is Kali Linux in our case
so all you to do is just go and download it on your Linux and then once once you
get it open the on your shell located directory for
example CD downloads in my case alright then you get see I have already
downloaded and Chi Rock here so all I need to do I need to unzip it alright so
what I'm going to do now I'm gonna use this command unzip boat
alright so it's done it has Ark it is unzip this file and G Rock and now we
need to fire up the engine ok now we need to connect it with the server you
can go there and copy this so that you need to authenticate it
basically bought all right now the second step is to connect using the port
number of your choice for example choose I mean any port number on which you want
to bind a connection for example in this case I am selecting TCP port number 4 -
4 - since I don't have any other service that is using this particular port
number at this time so I am selecting this all right initiating the connection
and 1 once it is done it here you can see they are forwarding here specifies
that TCP channel which ng rogue has created the connection has bound to
localhost at 4 - 4 - and the internet and the van location with port number is
this we need to create our payload and we need to using this address so the
third step is to basically generate the malicious apk that we did in the
previously but this time we will not set up the local IP as our local host
however instead we will use the ng Rock address which will eventually route the
traffic to the local host on this port number I'll show you how so alright so
this is first I'm going to copy this this entire with port number make sure
to copy everything here and then we need to instead of this I'm using this
particular address and the port number should goes in the output sorry what is
this alright seems perfect I just need to
copy everything and on I need to generate the MAPK r.i.p selection
there's something wrong and I know what is wrong here
alright so now hey as you have seen that instead of using the local IP as I lost
I have used the anti rock forwarding address with the port number you should
also do this because it will redirect the traffic to your local host on this
specified port 4 - 4 - so are malicious apk is about to ready and Vinny we will
be needing some social engineering technique to have it installed in the
target device of course the target device could be anywhere in the world
but one condition is that should have an active Oh is something wrong
let me check oh yes I did a mistake here it should start with 0 instead this is
the TCP so yeah it was a mistake here let's do it again all right so it is
generating now and it should generate and as I was as I was discussing that
you should have to use some a structural engineering technique to have this
installed in a target machine you can send the malicious apk by email you can
basically find it or combine it with the real application like game or any other
application or you can just upload it on mediafire or a plate or e or any other
service and then oh yeah yeah the malicious apk is ready now so the fourth
step the fourth step is to set up the Metasploit as we did before so I have my
Metasploit here use X white multi handler or I said a load should be
Android to slash Mitchell traitor slash reverse and just goes tcp option i need
to set the l host here and output as well
so in this l host instead of providing your local IP you should provide 0.0.0.0
and output just as we have been assigned the airport should be four - four -
alright that's it and let me cross check everything all seems good i just exploit
it alright so we have exploited and this meta supplier is waiting for the
connection on this localhost and on this port number and eventually our and zero
will forward all the traffic to this port number and on this local machine so
we we have created everything we are now waiting for our victim or our target to
install the APK and run it and was it executed the listener will get the meta
petrol session as i said that you need to send it to the target machine and you
should you can basically bind it with other program and use the AV evasion
technique in order to bypass the antivirus and has a security mechanism
the AV evasion is altogether another topic to discuss and we will do it in
some other lecture but let's say what I'm going to do now I'm going to upload
I'm going to basically access the mesh apk on my tab here and this tab is on
the other network it's using the mobile data and let me bring it first all right
so I just got my tab here and what I'm going to do now I'm going to I basically
uploaded this on on a file sharing website and I'm going to access and
download it and install it so let's see how it goes fire sings it's
working and let me see the mattress right here
all right surge installed I'm opening it or I great it's working I'm getting the
session here let's see as you can see this it is it says the local host happy
all right I got the session here so this is the met repeaters session that I got
and we are used VR now hacking the Android devices or when since this
device is not on the land and neither we have used the local port number to
listen so this is it this is how you do it this is how you go in the wild and
hack the devices so this is this is it for this lecture and I know you like it
and do not forget to post questions if you have any give me thumbs up and share
this video man and yeah take care bye bye