In the previous lesson, we successfully compromised Android from our Calli Linux device running Métis
flight, and we inserted a much greater shell that was able to call back to our call box and let us
control things from the command line.
So I downloaded that picture file just a little bit ago.
Let's see how we can get to it and then we'll do a few other fun things here in our Android device.
Back in Cali, I'm still in Interpretor.
I'll run a few more commands like IP config, and I can see that my Android devices, that 10 d'attoma
three to seven stoo, unless there's nothing in this meta split dotcom folder.
But let's go to SD card.
And list the contents.
Well, look at that, we got the entire storage, let's go to download City Download.
Unless.
And look, I downloaded the funny game, that epic a couple of times, I've also got that open logo
75.
So let's take a look at that download open logo, dash seventy five, PMG, and let's go to our home
folder and see if we can see that if we go to home.
I now have an open logo's.
Seventy five PNG.
I can see what I downloaded on that Android device.
So let's go back up one directory, KDDI dot URLs and you notice I have a DC.
I am Fogler.
If you have ever seen the DCM folder, you know what that is that your camera.
So any pictures you may have taken are going to be exposed if they're on your SD card.
Any pictures you may have saved from here, your music, your movies, notifications, ringtones, podcasts,
alarms, you name it.
So if I connect this Android emulator out to the World Wide Web, if I put it on our public nattered
network and then do some surfing, download some images, download some music files, make a few changes,
then bring it back, close out that public net and come back to the internal host only network, I'll
be able to surf everything, see everything that I've done on that Android device from my Calli Linux
box running interpretor.
Well, let's see what else we can do while we're here.
What if we wanted to upload another back door or another executable that we could run on this Android
device?
Well, let's see where we are, P.
W.D..
We're in this simulated storage because this is running on an emulator, but if this were a real Android
device, this would be an actual SD card.
Let's see if we can create a directory or make here make a directory called test.
And enlist.
And notice, I have a new directory called Test, let's see inside their.
CDN to test.
And there's nothing inside test yet.
Let's come over here in our second terminal window or open a second terminal window if you don't have
one.
And let's take this funny game that APJ and upload it, let's move it up one directory.
So I'm going to say Sepi my route dot desktop.
So I'll just say desktop from here because I'm in my home folder.
Fun and then hit tab.
And then say.
To hear Dott.
Because I'm in my home directory by default over here, if I copy that funny game, Rapkay up one directory
or into this home folder and then do unless I want to see my funny game RPK in my root directory.
So I'm in as root TWD on my local machine and you do need to be in root to be able to do this.
Next step.
I'm going to upload funny game epic and then I'll press enter.
Now, do unless and we have uploaded a back door file or a reverse TCP connection that runs interpretor
into a folder on our SD card so remotely from my Caly Linux machine, I've not only compromised that
Android device, now I've uploaded another file in this case, the same interpretor reverse TCP attack,
and it's going to permanently be on that SD card until I find out about it on my Android device and
remove it just for fun.
Let's rename that funny game that apk to something like Security Patch Study.
Okay, so say M.V. Funny Game that APIC security patch, not a B.K..
And then less and now under that test folder and just looks like security patched up.
So we've seen how to download files, how to surf through our entire user directory, our entire SD
card, and see everything from the digital camera pictures that we've taken to our downloads, our movies,
our music, our podcasts, the rest of our stories.
We've even created a folder on our Android device and uploaded another exploit file while we've been
in using interpretor with the reverse TCP.
The combinations of things that you can do with this are almost endless.
And like I said earlier, we've only just begun to use meta splinting interpretor.
There's so much more to learn out of those sixteen hundred exploits and all of the auxillary and other
scripts that you can run from inside Métis.
You've got plenty of things that you can try, plenty of things to learn.
But we've seen that we can compromise an Android device almost exactly as easily and using most of the
same types of tools.
Métis Boyte, an interpreter that we use to break into a Windows seven or Windows 10 computer android
is not much different.
We've got full access to the file system of this Android device, and we could even upload other exploits
and run those as well.
So I hope you've enjoyed a little bit of Android hacking.
Dig around in your Android emulator device a little bit more until you find some other fun things,
do some searches on the Internet for other exploits, or look back through that MSF venom list and see
what other kinds of things you'd like to try on your Android device.
The main thing is to keep learning.
You will never get every exploit down perfectly, but you can learn how to use a few of them really
well.
And we have exercised that misinterpret or reverse TCP across three different platforms now.
And we've seen that we can actually compromise several different types of devices, not just laptops
and desktops, running windows, their exploits for OS 10.
There are exploits for Linux.
And of course we just saw an exploit that worked for Android devices, even a brand new Android VM.
We just booted up and downloaded from the Internet just a few seconds ago.
So I hope this has been an eye opening experience for you.
Be careful when you're online.
There are a lot of dangers out there, but you can avoid most of them just by being aware that this
is possible and not clicking through suspicious links, downloading suspicious files or running suspicious
executables.
And you should be suspicious of almost everything.
I hope you've enjoyed everything you've learned in the course so far.
And please keep posting comments and questions.
I'll be glad to answer those.
And I'm always looking for new ideas for new videos to post.
Thanks and have fun with ethical hacking.