Original subtitles

1

Hi and welcome back to another episode on How to Hack.

2

So today we'll be discussing about how we can quickly create a mobile application that could help us

3

track the location of a device.

4

So, of course, on the left side, I have a mobile phone running and on the right side I have a Linux

5

server.

6

And of course, it is Linux server is called Linux, so we can go ahead and open up terminal.

7

So all we got to do is go ahead and enter MSA venom.

8

So this will be the tool that we're using to create the mobile application so we can turn up for a platform

9

followed by Android Meta Preeta Slash Reverse Underscore TCP and we can enter Delvaux equal.

10

So this is listening IP address of your server so we can open a terminal here and we can enter IP ADR

11

to file the IP address of the server.

12

So here we go.

13

The IP address of wanting to one six eight zero one zero six so we can copy deselection, go back to

14

the previous terminal and you can paste a selection here and we can enter airport equiv four four four

15

four.

16

So of course we can all put the information into a mobile application so we can enter mobile tracking

17

at a hit enter and debt.

18

And that would be gained a generation of to Paillot.

19

So you could take some time for the generation of people to complete.

20

So we'll wait for the completion of the Paillot to be created.

21

So this is the file that we actually serve into the mobile application.

22

So in this case, we got a payload complete IT services pallet size ten thousand one hundred eighty

23

seven bytes.

24

So all we got to do is under pseudo followed by move to actually change, to fall from the current directory

25

to another directory so we can actually enter pseudo and the Willowby mobile tracking app and we can

26

change you to see var html.

27

And this would actually transfer to fall from the current working directory all the way into Devar HTML,

28

which is of course use for your Web application server.

29

So again, you could use different ways of sharing the mobile app to the mobile device.

30

So of course over here all we got to do is actually do a pseudo system CTL and we can enter status,

31

Apache to.

32

So Apache to is the web application server they were using to serve the mobile app that we have just

33

created.

34

So in this case we can see that we got the Apache to running.

35

So it's active and running.

36

So all we could do is to actually go into MSF console.

37

So once you hit MSV console, that would actually start up Matus supply framework that would allow us

38

a connection back into the machine once we have a listener started.

39

So all we got to do is to make sure that we enter the following.

40

So use exploit multi handler.

41

So once you got this running, all you got to do remember to payload that we use earlier, which was

42

a Android meter to reverse TCP, so we got to set the payload as Android.

43

Mr Preeta reverse on a scale TCP hit enter in debt and from this we can enter show options to see what

44

are the options available.

45

So once again we can set the low so I can copy the alehouse from the iPad address that we actually specified

46

earlier.

47

So copy to selection and of course we can set Alehouse and we can do a piece of the bot.

48

So Pace and hit enter on that.

49

And of course we've got a L pod, right?

50

So of course we got all our information, insight, insight, framework frameworks I'm going to do is

51

to just simply enter, exploit and that would begin listening for any connections.

52

So with that in mind, going into the left side of the screen, we have our mobile application and of

53

course, we can open up, say, Chrome, and we can go into the Web application server to actually download

54

default.

55

So we can actually go into the IP address of the colonics machine that is hosting the Web application

56

server.

57

And from here, all you could do is to actually do a slash and we can download a fall.

58

So if you remember earlier from the earlier part of how we are actually changing to fall in a filename,

59

we can actually enter mobile tracking app.

60

All right.

61

So from here, we can enter mobile tracking app ABQ to download a fall.

62

So this will beginning to fall.

63

So as you can see over here, we can open up the application.

64

So once you open the application, it will say, do you want to install this application?

65

So you click install on that.

66

And this would be Gane installation process.

67

And all you got to do is, of course, now scrolling back down, we can get a supply list in a server

68

running.

69

All you got to do is open up the application.

70

And this would give us, of course, immediate access into the mobile device.

71

So, of course, in this case, if we want to track location, make sure that the application is allow

72

to actually access the location of this device.

73

So you click continue on that and immediately, would it have ability to actually have a session with

74

the mobile application?

75

So from here we can enter help.

76

Now we can see all of the commands available.

77

So of course the one day will be using is the geolocation.

78

So of course over here there are a number of ways that we can do it.

79

So one is geolocation and other is wireless LAN geolocation.

80

So of course we can actually look.

81

At getting the lat long using geolocation so we can go and enter Geo, locate and hit enter on that.

82

And this would give us the latitude and longitude of the longitude of the device so we can go ahead

83

and open up a Web browser.

84

And in the Web browser, we can say go to Google Maps.

85

And once we were in Google Maps, all you got to do is to keep the latitude as who has the longitude.

86

So, of course, going back here into the terminal, we can actually copy the information over here.

87

So this is the first latitude that we want to select and we paste the information over here and we go

88

back into terminal and we actually select over here, which is the longitude and copy to selection so

89

we can do a comma followed by page and we can do a search on that.

90

And that would immediately tell us the location of the place.

91

So of course, in this case, you'll be seeing over here that we have the current location and this

92

is a place somewhere in somewhere in the United States.

93

So here we can see, of course, the information based on the latitude and longitude.

94

And the reason is because when you go into the virtualization of the device, we can actually click

95

on more.

96

And this is the place where we can actually set a single point.

97

So this is the location that we can set inside of virtualization.

98

So, of course, if you want to learn more about how we could set and change the location of device,

99

we could discuss on that in subsequent videos.

100

So once again, I hope you have learned something valuable in today's tutorial.

101

And if I have any questions, feel free to leave a comment below Armalite share.

102

Subscribe the channel so that you can be kept abreast of the latest cyber security target.

103

Thank you so much once again for watching.