Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Android | Camera Access

Is there any known exploits that can be used to use user camera/mic without permissions or even with permissions but through background and not only foreground?

Thank you
scam. do not trust this random monkey


(Jul 2, 2021 11:22 AM)Thunders Wrote:  For help with Mobile Spy add me on disc Fang#7752
(Jul 3, 2021 06:13 AM)turrach Wrote:  scam. do not trust this random monkey
LOL just wanted to hear him out for sure I won't trust this nobody, thank you for the warning tho xD He is -4 Popularity LMAO
(Jul 1, 2021 10:17 AM)HardStoN Wrote:  Is there any known exploits that can be used to use user camera/mic without permissions


Hi,

Meterpreters can do this. It's built right into the framework. It's the payload native to Metasploit -- the APK iteration is the easiest to use imo. Also the easiest to make persistent, given you can bind it to a legitimate template app.

Personally I use this in Watering Hole Attacks with some simple social engineering.

Link to documentation on MSF payload creation here: https://www.offensive-security.com/metas.../msfvenom/

Cheers!
Regards,
Porky
ℒ𝒶𝓊ℊ𝒽𝒾𝓃ℊ 𝒶𝓉 𝓎ℴ𝓊𝓇 𝓈ℯ𝒸𝓊𝓇𝒾𝓉𝓎 𝓈𝒾𝓃𝒸ℯ... ℯ𝓋ℯ𝓇.
(Jul 3, 2021 11:35 PM)linkinpork Wrote:  Hi,

Meterpreters can do this. It's built right into the framework. It's the payload native to Metasploit -- the APK iteration is the easiest to use imo. Also the easiest to make persistent, given you can bind it to a legitimate template app.

Personally I use this in Watering Hole Attacks with some simple social engineering.

Link to documentation on MSF payload creation here: https://www.offensive-security.com/metas.../msfvenom/

Cheers!

Actually this feature doesn't work for me at least on the latest android version.
Are u sure this is working for you?
(Jul 4, 2021 05:45 AM)HardStoN Wrote:  Are u sure this is working for you?


Hi,

The cam snap feature worked on me maybe, 4 years ago? I haven't tried it again lately. When it comes to APKs, my use-case tends to just be data exfiltration.

It's possible that they've plugged this feature as part of a patch.

Cheers!
Regards,
Porky
ℒ𝒶𝓊ℊ𝒽𝒾𝓃ℊ 𝒶𝓉 𝓎ℴ𝓊𝓇 𝓈ℯ𝒸𝓊𝓇𝒾𝓉𝓎 𝓈𝒾𝓃𝒸ℯ... ℯ𝓋ℯ𝓇.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by ExomilMay 31, 2025 10:52 AM 5 215 May 31, 2025 10:52 AM
Last Post: DramaKing
by superakJul 12, 2020 04:00 AM 2 194 Jul 12, 2020 04:00 AM
Last Post: superak
by BlissedDec 24, 2019 10:13 PM 0 135 Dec 24, 2019 10:13 PM
Last Post: Blissed