International Journal of Scientific Research in Engineering and Management (IJSREM)

Volume: 07 Issue: 03 | March - 2023 Impact Factor: 7.185 ISSN: 2582-3930

ANDROID MOBILE HACKING USING METASPLOIT

1 Cherukuri Rahul 2 Vallepu Harsha Vardhan 3 Kittu Praveen Kumar

4
Dr.V. Shanmukha Rao
1,2,3
Department of Information Technology, Andhra Loyola Institute of Engineering and Technology.
4 M. TECH, PHD. Associate Professor Department of Information Technology, Andhra Loyola Institute
of Engineering and Technology

concerned about the information on the Internet.

1.ABSTRACT One of the main challenges in the IT industry is
Today, there are more than 6.1 billion security infrastructure and software. Even minute
smartphone users globally, which equates to details on the Internet are now recorded in the
approximately a smartphone per user. Out of the database of computer systems connected to the
2.6 billion smartphones, almost 4.2 billion of Internet. Security professionals have created a
those are Android devices. Android is a mobile variety of high-performance security tools to
operating system built on the Linux kernel. As a guarantee that the information is safe, secure, and
result, the smartphone will increasingly be the does not have any vulnerabilities, as well as that it
focus of security measures because it can reveal a conforms with the assigned security requirements.
great deal of information about the user and serve Penetration testing, Assurance or Proof of
as a gateway to a company's network. Since Correctness, Software Engineering Environment,
Android is the most popular operating system, and Layered Design are some methods. The Entire
many mobile apps have malware including operational, integrated, and dependable computer
spyware, backdoors, trojan horses, etc. We'll base, which consists of software, must be tested
create a payload with MSF Venom then save it as using the important technique of penetration testing.
an apk file. More than 1,600 exploits and 495 payloads have
been used in penetration testing using open-source
frameworks (such Metasploit for exploit creation).
2.INTRODUCTION By simulating illegal access to the system with the
People are becoming more and more reliant on help of a manual process, automated tools, or a
computers, information technology, and security in mixture of the two approaches. "Mitigating Cyber
the modern era. Society and the IT sector are overly Security Attacks by Being Conscious of

© 2023, IJSREM | www.ijsrem.com DOI: 10.55041/IJSREM18156 | Page 1

 International Journal of Scientific Research in Engineering and Management (IJSREM)
Volume: 07 Issue: 03 | March - 2023 Impact Factor: 7.185 ISSN: 2582-3930

Vulnerabilities and Bugs" describes how to deal choose, devise, and implement the best testing
with cyber security attacks by raising knowledge of processes for diverse circumstances. Each
risks and vulnerabilities. attack methods and technique typically arises from the unique
vulnerability prevention techniques. The article requirements of a particular type of actors, and as
"Protection against penetration assaults using a result, it is slanted towards a particular topic of
Metasploit" analyses script-based attacks, employs distinctive interest to them. The most widely used
Metasploit attacks, and conducts an analysis of approaches are compared in this article to highlight
scripts and payloads in order to create a defense their advantages. With an emphasis on the design
script. The instructions and lists of tools given by stage of the development lifecycle, this article
Kali Linux 2017.3 are described in "Using Kali introduces a set of useful strategies and tools for
Linux Security Tools to Build Laboratory Projects developing secure software. The average
for Cybersecurity Education," which employs "developer-on-the-street," who is not exclusively a
preconfigured and preloaded tools for laboratory developer, is the target group.
projects utilizing VMware (virtual machine 4.SYSTEM ARCHITECTURE
framework). The purpose of "Offensive Security:
Ethical Hacking Methods on the Web" is to plan
methodology, generate security assurance policies,
and ISO 2007 attacks, risk analysis using MSAT 4.0
tool based on ISO standard. To hack Android
phones, tablets, and other devices, we will use
Metasploit. You will see that once the Android
device has been compromised, we are able to gather
the target's text messages, contact list, location, and
even activate their webcam!

3. LITERATURE SURVEY
Symantec research states that more than a million
cyberattacks take place daily. Both newly
developed and existing systems must go through 5.EXISISTING SYSTEM

security testing at some point in their lives. There This project focuses on the use of backdoors to

are different approaches available to help testers hack Android devices and how to prevent this
from happening. When installed and activated on

© 2023, IJSREM | www.ijsrem.com DOI: 10.55041/IJSREM18156 | Page 2

 International Journal of Scientific Research in Engineering and Management (IJSREM)
Volume: 07 Issue: 03 | March - 2023 Impact Factor: 7.185 ISSN: 2582-3930

the mobile device, the backdoor application penetration testing procedure can be applied to a
enables an attacker to read, write, and modify the particular department, network, or system. The
data. Backdoor attacks compromise the cost (and efficacy) of the available remedies, the
information security's confidentiality, integrity, damage to the firm if the circumstances that caused
and accountability. The meterpreter session is the vulnerability occur, and the vulnerabilities
started when the payload is put on the victim's detected will all influence the solutions that are
mobile device and the victim launches the deployed. One option could be to require a new
program, allowing the attacker to access features web server-running system to pass a vulnerability
including the webcam, contacts, read and send test before the firewall opens the web port.
SMS, read and write call logs, access storage, and
install applications.

6.PROPOSED SYSTEM
We will incorporate these elements in order to
overcome the current model. The attacker can
access features like the webcam, contacts, contacts
(a) Installation of apk in android device
list, contacts list, read SMS, send SMS, read SMS,
write SMS, read call log, write call log, access
storage, and install applications when the
application is installed on the victim's mobile
device and the victim opens the application.
Binding APK (Embed).
(b) Above image shows the Accessed
SMS data
7.GENERATING RESULTS OF TEST
The test findings must include
recommendations for how to lessen or get rid of
the weaknesses. Here is how a penetration test
differs from a security audit. Priority must be given
to addressing identified critical vulnerabilities, and
a clear timeline must be created to ensure that the
vulnerabilities have been fixed. The same

© 2023, IJSREM | www.ijsrem.com DOI: 10.55041/IJSREM18156 | Page 3

 International Journal of Scientific Research in Engineering and Management (IJSREM)
Volume: 07 Issue: 03 | March - 2023 Impact Factor: 7.185 ISSN: 2582-3930

8.CONCLUSION protocols with Kali Linux. Birmingham: Packet

An extensive technique for locating weaknesses in a Publishing.

system is penetration testing. Benefits include [5]. Singh, A. (2012). Metasploit penetration testing
cookbook over 70 recipes to master the most widely
preventing financial loss, complying with industry used penetration testing framework. Birmingham:
regulations, clients, and shareholders, maintaining Packet Pub.
the corporate image, and proactive risk removal. [6]. A. Ghafarian, “Using Kali Linux Security Tools
Depending on how much information the user has to Create Laboratory Projects for Cybersecurity
Education,” in Proceedings of the Future
access to, testers can choose between black box, Technologies Conference (FTC) 2018, vol. 881,
white box, and grey box tests. Depending on the Cham: Springer International Publishing, pp. 358–
367, 2019.
Particular Objectives, testers can choose between
internal and external tests. Penetration testing comes [7]. M. C. Tran and Y. Nakamura, “Classification of
HTTP automated software communication behavior
in three flavors: network, application, and social using NoSQL database,” in 2016 International
engineering. This document provides a basic Conference on Electronics, Information, and
Communications (ICEIC), Danang, Vietnam, pp. 1–
overview of Android hacking and outlines the
4, 2016.
method in detail for gaining access to an Android
[8]. A. Chowdhury, “Recent Cyber Security Attacks
device. and Their Mitigation Approaches – An Overview,”
in Applications and Techniques in Information
Security, vol. 651, L. Batten and G. Li, Eds.
9.REFERENCES Singapore: Springer Singapore, pp. 54–65, 2016.
[1]. O. Aslan and R. Samet, "Mitigating Cyber [9]. F. Cuzme-Rodríguez, M. León-Gudiño, L.
Security Attacks by Being Aware of Vulnerabilities SuárezZambrano, and M. Domínguez-Limaico,
and Bugs," 2017 International Conference on “Offensive Security: Ethical Hacking Methodology
Cyberworlds (CW), Chester, pp.222-225, 2017. on the Web,” in Information and Communication
[2]. Internet Crime Complaint Centre link: Technologies of Ecuador (TIC.EC), vol. 884,
www.ic3.gov. [10]. M. Botto-Tobar, L. Barba Maggi, J. González-
[3]. H. Gupta and R. Kumar, “Protection against Huerta, P. Villacrés Cevallos, O. S. Gómez, and M.
penetration attacks using Metasploit,” in 2015 4th I. Uvidia Fassler, Eds. Cham: Springer International
International Conference on Reliability, Infocom Publishing, pp. 127–140, 2019.
Technologies and Optimization (ICRITO) (Trends [11]. F. Holik, J. Horalek, O. Marik, S. Neradova
and Future Directions), Noida, India, pp. 1–4, 2015. and S. Zitta, "Effective penetration testing with
[4]. Muniz, J. & Lakhani, A. (2013). Web Metasploit framework and methodologies," 2014
Penetration Testing with Kali Linux a practical IEEE 15th International Symposium on
guide to implementing penetration testing strategies Computational Intelligence and Informatics
on websites, web applications, and standard web (CINTI), Budapest, pp. 237-242, 2014.

© 2023, IJSREM | www.ijsrem.com DOI: 10.55041/IJSREM18156 | Page 4

 International Journal of Scientific Research in Engineering and Management (IJSREM)
Volume: 07 Issue: 03 | March - 2023 Impact Factor: 7.185 ISSN: 2582-3930

[12]. M. Denis, C. Zena and T. Hayajneh,

"Penetration testing: Concepts, attack methods, and
defense strategies," 2016 IEEE Long Island
Systems, Applications and Technology Conference
(LISAT), Farmingdale, NY, pp. 1-6, 2016.
[13]. S. Nagpure and S. Kurkure, “Vulnerability
Assessment and Penetration Testing of Web
Application,” in 2017 International Conference on
Computing, Communication, Control and
Automation (ICCUBEA), PUNE, India, pp. 1–6,
2017
[14]. L. Qiang, Y. Zeming, L. Baoxu, J. Zhengwei,
and Y. Jian, “Framework of Cyber Attack
Attribution Based on Threat Intelligence,” in
Interoperability, Safety and Security in IoT, vol.
190, N. Mitton, H. Chaouchi, T. Noel, T. Watteyne,
A. Gabillon, and P. Capolsini, Eds. Cham: Springer
International Publishing, pp. 92–103, 2017.
[15]. Y. Wang and J. Yang, “Ethical Hacking and
Network Defense: Choose Your Best Network
Vulnerability Scanning Tool,” in 2017 31st
International Conference on Advanced Information
Networking and Applications Workshops
(WAINA), Taipei, Taiwan, pp. 110–113, 2017.

© 2023, IJSREM | www.ijsrem.com DOI: 10.55041/IJSREM18156 | Page 5