Original subtitles

1

Hi and welcome back to our members only exclusive video.

2

So today we're discussing about very simple trick on how you could actually hide the mobile application,

3

true matter supply framework.

4

So we will create a file and once we have created a picture file or install it to a delivery mechanism

5

from a Web application server into the mobile device, and from there we'll actually issue a command

6

to actually highlight the mobile app from the user.

7

And the only way to see that will be to look into the settings of the applications and see what are

8

some of the running services or running apps that are inside the mobile device.

9

So without further ado, let us get started on today's tutorial.

10

So on the left of the screen of colonics running and we can actually go into terminal and once again

11

terminal, we can zoom in a little and we can enter IP ADR.

12

So if this we can actually see the IP address of one or two one six eight dot one 11.

13

So this is the IP address of the attacker server.

14

So this is also the server where we'll be hosting the listening services coming from Matus blight.

15

And of course, on the right side of the screen, I actually have an Android mobile device running.

16

So this is running on the Oracle virtual box.

17

So this is an android.

18

It is running over here.

19

And of course, we were able to surf into the net and we can actually open up browsers and we can actually

20

go into the Internet and be able to search up on information, say, for example, enter LILIANNA and

21

we can see the website, a YouTube channel and so on.

22

So there is Internet connection.

23

So moving back into colonics, we actually have to use MSN Venom so you can actually enter MSA venom.

24

Then of course, we would tell you all the parameters and options.

25

And it's really important, especially when you're learning about cyber security, to try all the tools,

26

trail all the different parameters and options like the changes in ANOP Slap, for example, over here

27

that you can see on the length of the slap.

28

And again, all these are actually being used to help you bypass a lot of these security mechanisms

29

coming from the antivirus servers and so on.

30

So really important way for you to really think about cybersecurity in a more advanced level.

31

And a lot of the advanced level actually requires a lot of trying out tests and aerials, especially

32

on the fly, trying to find out new ways of bypassing many of these security fences.

33

So, of course, moving forward, what we'll do is we actually enter terms venom.

34

And we actually ended up followed by Android Meter Preeta, followed by reverse underscore TCP.

35

So this would be a reverse shell into the colonics listening server.

36

And of course we can go into almost equal one or two one six eight one dot 11.

37

So this is the listening server IP address to be using for mobile port so we can say nine nine nine

38

nine and of course we can also do a R and we have output to fall into, say, for example, that we

39

can actually put it in and call a mobile app dot apk and hit enter on that.

40

So this would generate a fall.

41

So as you can see on the left side, the file is being generated by mouther venom.

42

So once you have the file you have to service it and release it over into the mobile application.

43

And a lot of times a lot of this payloads are actually being really using Web application servers,

44

using social engineering attacks, using malicious emails and so on.

45

So a lot of times all this payloads and deliveries are actually used using social engineering to mass

46

email sending and so on.

47

So usually that's the case in a lot of the attacks that are happening in the industry and in fact in

48

the industry.

49

Most of the time, 99 percent of the time, the attacks are going after vulnerabilities that are really

50

being available for the past many years instead of the zero day attacks.

51

And of course, zero day attacks are highly novel, but a generation and a creation of zero day vulnerabilities

52

and exploits are very challenging.

53

So anyway, moving forward.

54

So what we'll do is we can actually go ahead and go into MSF console.

55

So this was start up to a supply framework.

56

And once we are in the supply framework, what we'll do is we have to start up the server.

57

So, of course, once we start up the server, this is the part where we will actually host the listening

58

server.

59

And once we hold, the listening server will be able to get ready for any connections coming in.

60

And what we can do is we can actually enter, use, exploit, multi handler.

61

So once you do that, all you got to do is move forward and look at show options so you can see what

62

are the options available.

63

So you can also specify the kind of payload that we'll be using in this case.

64

So we can actually go ahead and say that we'll be using the payload so we can enter set payload as Android

65

meter reader, reverse underscore TCP and we can show options and we have to set the elbow, says one

66

two one six eight one dot 11.

67

So this is the Colonics IP address and once you have all this information being set up, you can actually

68

go and enter exploit.

69

So this would actually start hosting the server so we can open a terminal again.

70

So now what we got to do is transfer the file that we've created over here near mobile app ABQ and we

71

get to transfer it into the mobile application.

72

So, of course, one of the easiest ways actually stop your own Web application server or you can post

73

it on like Google Cloud, Microsoft 01 Drive and so on.

74

So those are other ways of actually sharing those malicious payloads over the Internet.

75

So these are what hackers are doing right now, because there are a lot of ways that you can actually

76

do the delivery of it.

77

So what we do is go into if you see anybody followed by Apache and of course we get Apache to and we

78

can enter, start, make sure to service it started and of course, would be prompted for the password

79

of the demonstrators to go ahead and keep that in mind.

80

So now we have the Web application server running.

81

We can actually move the fall over so we can enter move mobile app to var html.

82

So this would actually move the fall, so we got to do so.

83

So super user or pseudo.

84

So of course we got to keep the password for the user that is currently login as an administrator.

85

So this would move the file so we can see the Davoren of the demo enter Shell so we can see that we

86

got the mobile app apk that's been created and is being hosted.

87

So with that in mind, can actually go into the we can actually go into the mobile application that

88

we have over here.

89

So we've got to go into the link and from the liying, we can actually enter one or two one six eight

90

one dot 11 followed by mobile app dot apk hit enter.

91

And that that was started.

92

And once the dollar completes, we can actually open up the epic file.

93

And of course over here we have the following.

94

Download it so we can go ahead and open it up.

95

So of course a lot of times you can actually disguise and do a lot of changes to the epic file that

96

we discuss later on on other tutorials, how you can actually and beta payload or you can change some

97

of the settings and configuration so that it mask its identities, Moscow's intention as part of the

98

installation into the mobile device.

99

So once we have all this information, go ahead and click install.

100

And of course, it was installed the main activity into your mobile application.

101

So, again, the mobile application can be any Android devices.

102

And if we have the opportunity, we also discuss about some of the Iaw that we have a vulnerability

103

on and how we can install all those applications.

104

I do.

105

I was so glad I hit open on that.

106

And of course, once you hit open on that, going back into colonics, we can actually see that we can

107

go back into the mobile app.

108

And over here we can see the main activity that's been created.

109

So we can go in and click on that.

110

So we said it incorrectly, so we have to set Elbel correctly, so set it this nine nine nine nine hit

111

enter and that go ahead and exploit.

112

So we have the immediate predecessor and open up now because it's open up on the mobile application.

113

So, of course, once we have the information, we can enter this info so we can actually see the computer,

114

the operating system type and so on.

115

So one really cool trick is actually to look at main activity.

116

So over here on the mobile device, we can see main activity and all you got to do is actually enter

117

height at underscore icon.

118

And once you do that, the activity would actually try to hide the mobile application from appearing

119

on your catalog.

120

So over here, what happens is that when we go back here, we can actually see the mobile app being

121

hidden.

122

And what happened is that you can actually go under settings and once you're in settings, you can go

123

on for applications or apps, and then you will be able to see the apps that are running in your environment.

124

And of course, if you look at erotic services, we can see main activity being running.

125

So of course, this is the only way the user could detect that the mobile application is running.

126

So in subsequent members only tutorial, we'll be looking at how you could actually configure the epic

127

file, change the app icon, change the title postscripts directly alongside installation of the mobile

128

application and do a lot of automation on top of that.

129

So, again, I hope you've learned something valuable in today's tutorial.

130

If you have any questions, feel free to leave a comment below and I'll try my best to answer any of

131

those questions.

132

And thank you so much once again for watching.