Next, let's switch back to our Android device.
We're going to, first of all, go to input and turn off the mouse integration if yours is on mouse
integration, because that forces you to click and drag that pointer around.
We want to turn off mouse integration so that when we click, we get this capture window.
And remember, to get out of the capture, we can hit our left control or left command key.
So I'm going to capture.
Now, when I click in here, I've let it sit too long, but this is a good thing, you need to know
that if you do leave your Android device sitting for too many minutes, it can freeze up on you.
So we may have to restart this device, will restart it, and we'll start back up here on the lesson.
And before we Budha Android device and new, we can see that we've got the old ISO file still attached
there.
Let's go to the storage and let's remove that file from the disk.
So we're going to remove that ISO file that let us set up Android in the first place.
Move.
There we go, and we should start up with just the Android virtual device and now when we start our
Android six should boot up just like a regular Android device.
Good.
We may get a choice there, but it'll automatically boot in just a few seconds.
And like any Android device, it'll take just a little bit of time to boot up.
But it's pretty fast.
And once it boots, we're ready to change a couple of settings.
So click on.
The screen, so that you capture your mouse again, we need to go to input, turn off mouse integration,
then click in the screen so that we capture the mouse.
Now, this moves the big mouse pointer.
So I'm going to click on my menu button down here toward the bottom.
And let's go to settings, and we need to change the setting for the browser under apps.
So that our browser can download to our devices storage.
So we come to permissions.
It might have location, it might have a few other things enabled, but we need to click permissions
and give it just a second, come to storage and let's turn that on.
So we need to turn on the browser storage so that we can download files.
That will be our first step.
We'll come back to settings a little later.
We can hit the home button now, open up your browser, and if you're Apache services started.
And we should be able to go to a 10 dot o dot three, top five slash Sha're.
And we should see our APK file there.
Let's go one step further.
Let's go ahead and go up one directory, or we can hit the parent directory here and let's grab an image
file just to make sure that we're able to download something.
So click on the Debian image file here and come to save image.
And if that downloads OK, you know, you've changed your settings so that the browser can access storage.
So let's hit the back button and come back to the funny game that APIC and try the same thing once that
file downloads.
Let's go to our downloads folder and we can access that.
You can see at the very top of our screen here we have a couple of downloads, funny game RPK and that.
There we go.
We need to pull that down and let it stay.
So I'm going to try to run funny game that RPK, that OPK file and Android will let us know that by
default, the tablet is set to block installation of apps obtained from unknown sources, but it will
let us go straight to settings.
Well, my friend told me this was a really fun app, so I'm going to scroll down to security and I'll
find unknown sources and I'm going to enable unknown sources.
Now, there are other ways that we can infect an Android device, but for this interpretor example will
allow this unknown sources.
If anyone wants to download something from a third party, this is something they have to turn on.
So now we've enabled unknown sources.
Let's go back and let's come back to those downloads or we can click on the fun game.
That app again downloads a fresh.
That and we got funny game at APK.
Let's see what that is says, do you want to install this application?
It'll get X access to all of these things.
Well, it's supposed to be a funny game, so let's give it a try, click install, then click open and
it looks like nothing is happening.
So let's hit our host key to get control of our mouse again.
Let's come back to our Kelly Linux box.
And look at this, my interpreter says there's a session open from Tendo three point seven, I wonder
where that could be from, let's say sessions that I won and let's say get video.
Info.
Look at that, we are running as username you 086 to Android, and look at that localhost is Android
six point zero point one and we are running them interpretor Shell on Android from Calli Linux.
So this just happens to be an emulated Android device, but it works just as well on your real physical
Android device.
If you want to give this a try inside your own local area network, your home wireless network, some
place where you can do this safely and where you have permission to do this across a network.
But let's see what our directory is, PWP, and we can see where running from someplace inside that
exploit.
When we come back, we're going to see how to find that file, the Debian logo that we download a little
bit earlier by saving the image.
We'll see how to grab that and how to do a few other things.
And Android before we wrap it up.