Everybody install and use apps these days. So, the easiest way to hack an android by embedding a Backdoor to a normal apk File. Now, install this apk file on your Victim's phone by using some Social Engineering trick. When it is executed the user will see a normal app but at the same time, our Backdoor will be running in the Background.
REQUIREMENTS
- A Legitimate android apk file.
- Kali Linux
- The FATRAT (Linux Tool)
- PROCEDURE
- To embed Backdoor in any legitimate apk, we use fatrat. We have to install Fatrat in out terminal. Fatrat is used to generate local or remote listeners. It can generate payloads in various formats.
- To Install Fatrat we'll have to use the following commands: (git clone https://github.com/Screetsec/TheFatRat.git)
- ls (enter)
- cd TheFatRat (enter)
- ls (enter)
- chmod +x setup.sh (enter)
- ls (enter)
- ./setup.sh (enter)
Also read :Find Details Of User With Whom You Chating
Also read :Get free lifetime Microsoft office 365
(ping me in the comment section if you get any error in installing the fatrat with a screenshot)After installing fatrat now u should change your kali machine to use JAVA 8 by default because in JAVA 10 we cant decompile the APK so to change it to JAVA 8 use the following command:
update-alternatives --config java
Also read :CROSS SITE SCRIPTING(XSS)
Also read :Simplifying | apt-get | in Linux
Now, just check the given options and change it to the java8 as default.
Also read :50 Google Hacks you should know
Also read :cheat sheet for nmap
Note - Not all apk files will work with these you need to try many variants to successfully embed your backdoor.Now, run a fat rat tool by typing fat in your terminal and after entering into the fatrat tool, use the option backdooring original apk.
Now, set your LHOST to your IP address and LPORT I prefer 8080. Choose your path where apk file is stored press enter and select the payload you need to choose and the method you need to embed your backdoor to apk file. Choose whether you need to modify the apk file or keep the original file I prefer not to change the file and press enter. Now thefatrat starts to embed your backdoor with the apk. After finishing, use msfconsole and send the apk file to the victim and wait for the reverse connection.
Voila!! Y'll are done!!
Happy Hacking..
For any Query - https://telegram.me/techpedal
https://instagram.com/techpedal
https://instagram.com/techpedal
Share This :
0 Comments