Original subtitles

1

Hi and welcome back to another episode of How to Hack, and they were discussing about how we could

2

actually get the geolocation device information of an Android device by using social engineering attack

3

as well as technical attack.

4

And of course, in today's case, we'll be using a wonderful tool that can actually help us fake the

5

Google Drive access and to file sharing.

6

And once the user gets social engineer, they would actually click and allow access.

7

And once they click on allow access immediately, we'll be able to gain a lot of critical information,

8

including the geolocation of the Android device.

9

So without further ado, let us get started on today's tutorial.

10

So unless I was going to actually have clinics running and on the right side of screen, I have a Android

11

mirroring into the desktop.

12

So this is a live Android device.

13

So the past couple of tutorials, I was using a virtual Android device and it was a lot of questions

14

about the IP address being one that is provided by the Internet service provider.

15

So in this case, we are using mobile data.

16

So over here you can actually see that we have the mobile data are being selected instead of Wi-Fi,

17

because if you're using Wi-Fi and of course the Internet service provider IP address will be the one

18

in use.

19

So the first thing you can do is open up terminal.

20

And of course, we can zoom in a little on colonics and we can enter IAFF config to see the internal

21

IP address.

22

And of course, in this case, the internal IP address is one or two one six eight one one four.

23

And of course, once you have the internal IP address, we can actually go into the home page where

24

I'll have downloaded Sikka so I can go to KDDI Seeker and we can enter that shell.

25

So over here we can actually see all the information regarding Seka.

26

So of course, there was a couple of things that we wanted to try.

27

So you could put slash, for example, DCPI running on Wighton, go ahead and hit enter on that.

28

And of course, is checking for updates, checking on these serve your status.

29

And of course, in this case, the service status is down.

30

So in order for us to get this working, we have to select the manual option.

31

So by entering dogge secret python and followed by Dashty and followed by a manual followed by Dash

32

K, followed by Tarsa Kemel, and you can hit, enter and add immediately.

33

And once you have hit that enter, you will check for updates.

34

But in this case you will manually run your Anji Rock service, which is why we've been using a lot

35

of engie rock and we have even started Engie Rock to target for you so that you can understand how Engy

36

Rock works.

37

So of course we will actually select number two on Google Drive and of course we can actually enter

38

the file.

39

Your.

40

Oh, I'm just going to do you want to treat four, five, six hit enter on debt and of course it will

41

start up the server so I can actually go ahead and open up another terminal for us to start Engy Rock.

42

So remember to look out for the energy rock tutorial that has been uploaded I think just a couple of

43

days back.

44

So those will be very, very helpful information for you to understand about how Anjou Rock works,

45

tunneling and so on.

46

So moving forward, are we going to do is enter go into the homepage where we have engy rock enter slash

47

energy rock followed by the port.

48

All the call of TDP followed by Port eight zero eight zero hit.

49

Enter on that and we'll get the information regarding the domain name.

50

So of course here we have the domain name and of course we can go into our routers gateway.

51

So make sure you go on a firewall configuration on the port forwarding and make sure you've got the

52

Port eight zero eight zero all the way back into your local IP address of one or two one six eight one

53

dot one four.

54

And once you're done with that, going back to colonics, we can actually open up Firefox, for example,

55

and we can key in the IP address of the forwarding so we can enter slash slash nine zero eight eight

56

eight f b zero dot energy rock n io hit.

57

Enter on that and we'll be furnished with the site.

58

And of course in this case we will actually see the site of Google Drive and you can click request access.

59

And of course, because it is a social engineering technique, you can click share and of course you

60

can click, allow or deny in whichever it is the case.

61

So of course, this would actually allow the site to capture your geolocation.

62

So, again, a lot of social engineering to be coupled together with the geolocation to identify information

63

about the target address.

64

And of course, in this case, we can actually go back and look at the seeker and we can see device

65

information.

66

We can look at the operating system, the Linux platform, the CPU course that is running on the GPU,

67

the Firefox version and so on.

68

And of course, here we can actually get the latitude and longitude of the information.

69

So this is really, really helpful.

70

And we can actually copy the link of the Google Maps and we can actually go under Firefox.

71

And once we go into Firefox, we can just right click and go and we can actually immediately get the

72

latitude and latitude information regarding the mobile device in question.

73

So I understand there's a lot of confusion about the precise location of the Android device, that a

74

mobile device as a whole and of course, what happened is that depending on what kind of network protocols

75

that are using, some Internet service provider may be using some kind of soft networking.

76

Are some of the mobile devices could be connected into the wireless Internet to a different access point.

77

And all these could pinpoint to a very separate location of these as exposition of the mobile devices,

78

which is why some of your results could be very different.

79

So this is some things to take note of, especially if you want to be able to get precise information

80

regarding the mobile device.

81

So I hope you learned something valuable in today's tutorial.

82

And if you have any questions, feel free to leave a comment below and I'll try my best to answer any

83

of those questions.

84

And remember to like subscribe to the channel so that you can be kept abreast of the latest cybersecurity

85

tutorial.

86

Thank you so much once again for watching.