Hack Forums
Android | Camera Access - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Android | Camera Access (/showthread.php?tid=6161480)



Android | Camera Access - HardStoN - Jul 1, 2021

Is there any known exploits that can be used to use user camera/mic without permissions or even with permissions but through background and not only foreground?

Thank you


RE: Android | Camera Access - turrach - Jul 3, 2021

scam. do not trust this random monkey


(Jul 2, 2021 11:22 AM)Thunders Wrote:  For help with Mobile Spy add me on disc Fang#7752



RE: Android | Camera Access - HardStoN - Jul 3, 2021

(Jul 3, 2021 06:13 AM)turrach Wrote:  scam. do not trust this random monkey
LOL just wanted to hear him out for sure I won't trust this nobody, thank you for the warning tho xD He is -4 Popularity LMAO


RE: Android | Camera Access - linkinpork - Jul 3, 2021

(Jul 1, 2021 10:17 AM)HardStoN Wrote:  Is there any known exploits that can be used to use user camera/mic without permissions


Hi,

Meterpreters can do this. It's built right into the framework. It's the payload native to Metasploit -- the APK iteration is the easiest to use imo. Also the easiest to make persistent, given you can bind it to a legitimate template app.

Personally I use this in Watering Hole Attacks with some simple social engineering.

Link to documentation on MSF payload creation here: https://www.offensive-security.com/metasploit-unleashed/msfvenom/

Cheers!


RE: Android | Camera Access - HardStoN - Jul 4, 2021

(Jul 3, 2021 11:35 PM)linkinpork Wrote:  Hi,

Meterpreters can do this. It's built right into the framework. It's the payload native to Metasploit -- the APK iteration is the easiest to use imo. Also the easiest to make persistent, given you can bind it to a legitimate template app.

Personally I use this in Watering Hole Attacks with some simple social engineering.

Link to documentation on MSF payload creation here: https://www.offensive-security.com/metasploit-unleashed/msfvenom/

Cheers!

Actually this feature doesn't work for me at least on the latest android version.
Are u sure this is working for you?


RE: Android | Camera Access - linkinpork - Jul 4, 2021

(Jul 4, 2021 05:45 AM)HardStoN Wrote:  Are u sure this is working for you?


Hi,

The cam snap feature worked on me maybe, 4 years ago? I haven't tried it again lately. When it comes to APKs, my use-case tends to just be data exfiltration.

It's possible that they've plugged this feature as part of a patch.

Cheers!