Original subtitles

1

Hi and welcome back to another episode on How to Hack.

2

So today we'll be discussing about the use of ghost framework.

3

So here I am at their page on GitHub dot com.

4

So we have the ghost framework.

5

So what he does is that it allows us to connect to Android, debark bridge and be able to do our command

6

and control from there.

7

So really great tool on that team.

8

So over here, of course, we got a ghost framework and you can actually download a file directly,

9

try to get clone or you can actually download a file from GitHub dot com.

10

So once we're in over here, I go colonics running so I can actually open a new terminal.

11

And of course, I can zoom in a little so it's easier for you to see and learn so I can enjoy less or

12

change directly into ghosts.

13

And I can enter the to see all the files and folders.

14

So over here I already got the installed.

15

Don't execute it.

16

So all you got to do is use the plus X, so that would actually allow you to change the permission into

17

executable for the install.

18

So you go ahead and do that and enter slash installed on S.H. and that will begin the installation process

19

of ghosts and it will start downloading all the dependencies required to run the ghost framework.

20

So once you have the framework being in place and you've installed it completely into your call on Xbox,

21

the next thing you can do is just go ahead, enter pseudo goes.

22

So goes does require us to have super user privileges in order to run it.

23

So go ahead and hit enter on that and enter a plea for your password.

24

So again, whatever password you have set for colonics, go hit enter for that.

25

So of course, the default one for Collie's call.

26

So here we are in the ghost framework version five point zero and all you're going to do is enter help.

27

So help would actually show us all the commands available as part of the framework.

28

So, of course, in this case, we got clear, disconnect, connect, exit help and update after ghost

29

framework.

30

So, of course, there will a lot of questions previously about using Android, Rockbridge and how we

31

were trying to get access into the system.

32

So, again, I want to highlight on a previous video that we were doing on a cyber attack is that this

33

is what we call the delivery mechanism, the delivery phase and in the delivery phase of many different

34

options that we can use, we can use USB, we can use wireless.

35

And of course, in this case, we're using Android debug breach or we could also begin using emulous

36

payload so that when users click onto the payload Démocratie Excel all the ling fishing link that we

37

use, we'll be able to gain access and do a machine.

38

So Android debarked, which is just one of those delivery mechanisms.

39

And of course, how can we highlight that?

40

I can highlight that by going into Shodan.

41

So Shodan is a Internet of Things crawler.

42

So Krall's Judy Ho Internet trying to find out all this Internet of Things devices so your webcam rules,

43

your Android devices.

44

And of course, in this case, we're going to look for Android debark breach and it can also look for

45

databases, Scotter Systems and so on.

46

So great to I have an account here, so wonderful platform to to look at.

47

So all you got to do is enter Android, debark breach and hit enter on debt.

48

So that would show all the IP addresses that have Android Broadbridge available.

49

Inside Shodan has quadrupled the whole Internet.

50

So you click on Search on that and it would actually show all the IP addresses of the Android devices

51

that we can connect into.

52

So of course I am going to grill all this information.

53

And of course this is where we go back into colonics and we can try to connect into the system.

54

So really, really interesting way of trying to look at how we can control the Android devices through

55

this delivery mechanism.

56

So great way to think about it.

57

So over here, we got a grilles framework.

58

So we got to do is connect and follow the IP address of the Android device.

59

So, of course, in my case, I actually have my own Android device running.

60

So here is my own Android device and we are going to connect to it directly.

61

So, again, if you manage to find all these Android devices onto the Internet, this is again, one

62

of those matters that you can do your delivery mechanism.

63

So go ahead and interconnect, followed by the IP address.

64

So, of course, I have my IP address of my Android device as one or two one six eight one seven six.

65

So again, I really encourage or discourage you to connect into any of these IP addresses available

66

on the Internet via Android debark, because that is a huge gray area where you could be considered

67

as trying to hack into IT devices.

68

So once we connect to our own Android device, hit enter on that.

69

And this would send a payload into the IP address.

70

And now we are into the system.

71

So we have complete control of the Android device in our account or help.

72

So here we got a number of commands that we can use.

73

So we got it passed.

74

We got shall we get us hech open device, Rechelle upload local files.

75

So a lot of different capabilities that we can actually use as part of the attack into Android devices

76

through Android debark breech.

77

So of course, one of the very easy ways to enter this infl so this would actually tell us more information

78

about the system in question.

79

So here is showing us a lot of information, a lot of details about the Android device, and this allows

80

us to think about a potential exploit that we can use as part of.

81

The supply framework that we have learned a lot, this whole YouTube channel and of course, the next

82

commander we can also look at could also be on the net stat to find out what are some of the network

83

sessions available as part of the Android device.

84

So here we can see a lot of information and some of this information could be really sensitive information

85

that we can see and find out a lot from from the system.

86

So I hope you'll learn something valuable in today's tutorial.

87

And if I have any questions, feel free to leave a comment below and I'll try my best to answer any

88

of your questions.

89

So we're going to like sharing subscribe to a channel so that you can be kept abreast of the latest

90

cybersecurity story.

91

Thank you so much once again for watching.