Monday, June 17, 2019

Embed apks with Evildroid

welcome to hacking a rise today we are going to show you how to embed a payload to a apk with evildroid this will help with av bypassing on android so lets get started

What is Evildroid

Android Mobile Exploitation with Evil-Droid. … Evil-Droid is a framework that creates & generates & embed apk payload to penetrate Android platforms

using Evildroid

install evil-droid

  • git clone https://github.com/M4sc3r4n0/Evil-Droid.git
    cd Evil-Droid/
    chmod +x evil-droid
    ./evil-droid
  • Hacking A Rise evildroid-300x144

    now we let it check to see what is installed and to see if anything need to be so let it run for few sec and it will as you to start the framework you click yes and start the services like apache2 and postgersql
    Hacking A Rise post-300x132
    Hacking A Rise startservices-285x300
    Hacking A Rise mainscreen-288x300

    now we pick number 3 and it will ask for a ip and then port
    Hacking A Rise 3-283x300

    Hacking A Rise potsss-300x136

    now it will ask for a name and then the payload you want to embed I had selected “android/meterpreter/reverse_tcp”
    Hacking A Rise payloadtype-274x300

    Hacking A Rise nameevil

    then it will ask u for the file as i picked hackingarise test app
    Hacking A Rise apktoembed-300x172
    it will now decompile the apk and the paylaod and recompile with the payload embed
    Hacking A Rise decompliing-300x216

    Hacking A Rise rebuilding--300x220

    Hacking A Rise done-300x241

    now it as you to pick handler i picked multi a its the first one there

    Hacking A Rise handler-300x297

    then it will open a window and start metasploit
    Hacking A Rise metasploitopen-300x208
    Hacking A Rise metasploit-300x218

    now we go to /root/Evil-Droid/evilapk to get the payload to send to target
    Hacking A Rise sendtotarget-300x170

    DISCLAMER

    dont use this for the wrong reasons as this purely for education

    No comments:

    Post a Comment

    Note: Only a member of this blog may post a comment.