# Hack Android Device By Sending FAKE SMS | Kali Linux **URL:** \ **Category:** Tutorials & Methods\ **Tags:** tools, hacking, tips-tricks\ **Created:** [September 11, 2019, 11:34pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656 "2019-09-11T23:34:43Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\ **Post date:** [September 11, 2019, 11:34pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/1 "2019-09-11T23:34:43Z")
![hacker-theif-in-phone-concept-700px](https://onehack.st/uploads/default/original/3X/d/b/db97953d09bde2adbe16a01d826353aadad35f5a.jpeg) Social Engineering sometimes doesn’t work for all. Do you agree with it? When I was a noob, I tried a lot of things to trape people but none of them worked! The heading I have given is not a click bait, it is the solution for the problems newbie attackers face. But you can’t exactly hack an android phone with an SMS but you can make a webpage that has auto-download enabled. Because maximum people do not download payloads manually. That is the biggest problem. Here I am going to use a tool called Venom which is basically a Metasploit Shellcode generator/compiler script. It was mainly created to test for different purposes. It depends on you how you use it. The tool uses Apache2 web server to deliver payloads using a fake web page. You just need to send a tricky SMS so that the victim clicks the link. The payload will be downloaded automatically to the victim’s system. I don’t recommend you to hack someone’s system with his/her permission which is completely illegal. Make use of this information for educational purpose only so that you can protect yourself against these attacks. Let’s get into the installation manual. ### **Configure Venom in Kali Linux** Fire up your Kali Linux Machine, open up the terminal, change the directory to the Desktop and clone Venom from [Github](https://github.com/r00t-3xp10it/venom). **cd Desktop/** **git clone** [https://github.com/r00t-3xp10it/venom.git](https://github.com/r00t-3xp10it/venom.git) Now change the directory to the **venom** folder and again change the directory to the **aux** folder which is inside the venom folder. Here you will see a script named with **setup.sh**. If you are a root user, you must take permission to run this shell script. Don’t worry, just follow the commands. **cd venom/** **cd aux/** **chmod +x setup.sh** **./setup.sh** ![venom%20in%20Kali%20Linux-](https://onehack.st/uploads/default/original/3X/6/2/6283893c0d3eb0d5eb8cc19c7452820182dddb88.png) The script will set up the tool and install all the requirements to run the tool properly. Now go back to the main folder( **cd ..** ) and run the **venom.sh** script. **./venom.sh** ![venom%20in%20Kali%20Linux-%20(1)](https://onehack.st/uploads/default/original/3X/3/0/307f37afa62dd4e1209c88ccfd86553807b8c3a0.png) The tool stated successfully. Here you see we can create payloads for all popular platforms such as Windows, Android, Ios. But I will stick with Android because I want to test it for Android. So I will select **No 4**. ![venom%20in%20Kali%20Linux-%20(2)](https://onehack.st/uploads/default/original/3X/f/4/f404bbe86af71bdde1070d93f5e5313d9159cbc8.png) Here I have entered the option **Agent No 1** and now it showing a popup to enter the local host IP. If you want to hack over WAN, you can use port forwarding in your router or if you don’t have a router you can take Ngrok tool in use. Which is a great tool for port forwarding and it is completely free. ![venom%20in%20Kali%20Linux-%20(3)](https://onehack.st/uploads/default/original/3X/e/4/e44cdbb68c0fabb95c748d699cebf4ff1aae0ff6.png) Now it’s asking for the port number. I have entered my port number and in the third popup, it is asking the name I want to give to the payload. After completing the generating process of the payload, the tool asking me how I want to deliver the payload to the victim. Here I have selected the Apache2 Malicious web server. ![venom%20in%20Kali%20Linux-%20(4)](https://onehack.st/uploads/default/original/3X/8/1/818b7a3edc0bbee7d24a0047a345a1fa52734c46.png) Now it automatically starting the Metasploit MultiHandler. ### **Sending the Link to a victim with a Tricky SMS** The web server is running on the local host so I can open the web page using my local IP(ex: 192.168.43.139). But we can’t send a naked IP address to a victim. He will find it suspicious. We must mask it. You can take **bit.ly** service in use. The paid service also offers you to create a custom URL. Now you need to find an online fake SMS service. I have found a website called[SMSGang](http://www.smsgang.com/). I can send text anonymously with a fake name from the website. ![venom%20in%20Kali%20Linux-%20(5)](https://onehack.st/uploads/default/original/3X/d/9/d95537f951bc6f856d025508b3bad02936d1eb55.png) As I have prepared a tricky SMS, you can apply your own trick to make it look more genuine. It depends on you. Check out the popular commands you can use to control the compromised device after starting the Met\asploit listener. ### **Popular Metasploit commands** 1. shell- Interact with a Shell 2. sysinfo- To check system information 3. webcame\_ list- Shows the list of connected webcams 4. webcam\_snap- To take a Webcam snapshot 5. record\_mic -d 20- To record mic. Also phone conversation 6. check\_root- To check the device root status 7. dump\_calllog- To retrieve call log 8 dump\_contacts- To retrieve contacts 1. geolocate- To locate the device 10 send\_sms- To send an SMS 1. sms\_dump- To download all SMS as a text file 2. run- To run any service(set the location of the service after the command). ### **Conclusion** - Social Engineering completely depends on how you trick people. These tools only help a little to make your trick look more genuine. Venom is a great tool if you use it in the right way. > _ **I loved the tool. What’s your opinion about it? what trick are you gonna use? tell others in the comment box below. We get inspiration to produce more tutorials like this when you leave a comment.** _ ---
**Author:** ![rahuls0206](https://onehack.st/user_avatar/onehack.st/rahuls0206/32/23444_2.png) [@rahuls0206](https://onehack.st/u/rahuls0206)\ **Post date:** [September 12, 2019, 5:57am UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/2 "2019-09-12T05:57:45Z")
Thanks 🙂 I’ll try it 😉 ---
**Author:** ![InternetFriends](https://onehack.st/user_avatar/onehack.st/internetfriends/32/18138_2.png) [@InternetFriends](https://onehack.st/u/InternetFriends)\ **Post date:** [September 12, 2019, 6:07am UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/3 "2019-09-12T06:07:55Z")
saved for try out ---
**Author:** ![Eric\_Fong](https://onehack.st/user_avatar/onehack.st/eric_fong/32/116435_2.png) [@Eric\_Fong](https://onehack.st/u/Eric_Fong)\ **Post date:** [September 12, 2019, 12:29pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/4 "2019-09-12T12:29:57Z")
What a great lesson leader !!! So nice ---
**Author:** ![Asiri\_Bandara](https://onehack.st/user_avatar/onehack.st/asiri_bandara/32/23882_2.png) [@Asiri\_Bandara](https://onehack.st/u/Asiri_Bandara)\ **Post date:** [September 13, 2019, 1:09am UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/5 "2019-09-13T01:09:22Z")
Pin cods are not free ---
**Author:** ![Asiri\_Bandara](https://onehack.st/user_avatar/onehack.st/asiri_bandara/32/23882_2.png) [@Asiri\_Bandara](https://onehack.st/u/Asiri_Bandara)\ **Post date:** [September 13, 2019, 1:09am UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/6 "2019-09-13T01:09:42Z")
How ever its great ---
**Author:** ![MalwareResearcher](https://onehack.st/letter_avatar_proxy/v4/letter/m/4da419/32.png) [@MalwareResearcher](https://onehack.st/u/MalwareResearcher)\ **Post date:** [September 13, 2019, 6:23am UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/7 "2019-09-13T06:23:41Z")
What? U said hack but you just ended by downloading payload, it needs to be installed too ---
**Author:** ![Shirosuki](https://onehack.st/user_avatar/onehack.st/shirosuki/32/23897_2.png) [@Shirosuki](https://onehack.st/u/Shirosuki)\ **Post date:** [September 13, 2019, 10:00am UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/8 "2019-09-13T10:00:10Z")
Added to my bookmarks 🙂 ---
**Author:** ![aidatainside](https://onehack.st/user_avatar/onehack.st/aidatainside/32/23955_2.png) [@aidatainside](https://onehack.st/u/aidatainside)\ **Post date:** [September 13, 2019, 4:44pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/9 "2019-09-13T16:44:48Z")
Thank You! 0101 for you ---
**Author:** ![InternetFriends](https://onehack.st/user_avatar/onehack.st/internetfriends/32/18138_2.png) [@InternetFriends](https://onehack.st/u/InternetFriends)\ **Post date:** [September 13, 2019, 6:03pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/10 "2019-09-13T18:03:27Z")
![image](https://onehack.st/uploads/default/original/3X/2/9/29a6471a6b99f1a44a4594cbfa12ac753b78aaf7.png) this on aws ec2, ---
**Author:** ![InternetFriends](https://onehack.st/user_avatar/onehack.st/internetfriends/32/18138_2.png) [@InternetFriends](https://onehack.st/u/InternetFriends)\ **Post date:** [September 14, 2019, 10:56am UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/11 "2019-09-14T10:56:48Z")
any solution for this/? ---
**Author:** ![zack1412](https://onehack.st/user_avatar/onehack.st/zack1412/32/22019_2.png) [@zack1412](https://onehack.st/u/zack1412)\ **Post date:** [September 14, 2019, 12:39pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/12 "2019-09-14T12:39:37Z")
i think it was “sudo ./setup.sh” there is no sudo sh.. i think ---
**Author:** ![John\_doe2](https://onehack.st/user_avatar/onehack.st/john_doe2/32/18399_2.png) [@John\_doe2](https://onehack.st/u/John_doe2)\ **Post date:** [September 14, 2019, 2:15pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/13 "2019-09-14T14:15:16Z")
try, bash setup.sh 🙂 ---
**Author:** ![InternetFriends](https://onehack.st/user_avatar/onehack.st/internetfriends/32/18138_2.png) [@InternetFriends](https://onehack.st/u/InternetFriends)\ **Post date:** [September 14, 2019, 5:51pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/14 "2019-09-14T17:51:24Z")
I tried all the ways bro.. ![image](https://onehack.st/uploads/default/original/3X/f/5/f5fee94e989e226cf40b5fda14a6624897be7f89.png) ---
**Author:** ![InternetFriends](https://onehack.st/user_avatar/onehack.st/internetfriends/32/18138_2.png) [@InternetFriends](https://onehack.st/u/InternetFriends)\ **Post date:** [September 14, 2019, 5:51pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/15 "2019-09-14T17:51:57Z")
![image](https://onehack.st/uploads/default/original/3X/f/5/f5fee94e989e226cf40b5fda14a6624897be7f89.png) I tried all the ways bro… ---
**Author:** ![John\_doe2](https://onehack.st/user_avatar/onehack.st/john_doe2/32/18399_2.png) [@John\_doe2](https://onehack.st/u/John_doe2)\ **Post date:** [September 24, 2019, 3:16pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/16 "2019-09-24T15:16:31Z")
NO NEED OF SUDO JUST RUN : bash setup.sh ---
**Author:** ![Majid635](https://onehack.st/user_avatar/onehack.st/majid635/32/24364_2.png) [@Majid635](https://onehack.st/u/Majid635)\ **Post date:** [September 24, 2019, 10:34pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/17 "2019-09-24T22:34:31Z")
Excellent tutorial @TheJoker Checkout your appreciation message (Thk.u) ---
**Author:** ![Dextro1597](https://onehack.st/letter_avatar_proxy/v4/letter/d/67e7ee/32.png) [@Dextro1597](https://onehack.st/u/Dextro1597)\ **Post date:** [October 10, 2019, 11:33am UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/18 "2019-10-10T11:33:34Z")
I cannot open the apk on the url . As soon as a session is getting created it dies what can be done ---
**Author:** ![XoSHnaW\_2020](https://onehack.st/user_avatar/onehack.st/xoshnaw_2020/32/27523_2.png) [@XoSHnaW\_2020](https://onehack.st/u/XoSHnaW_2020)\ **Post date:** [November 24, 2019, 7:40am UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/19 "2019-11-24T07:40:25Z")
thank you so much ---
**Author:** ![mafialive](https://onehack.st/user_avatar/onehack.st/mafialive/32/33196_2.png) [@mafialive](https://onehack.st/u/mafialive)\ **Post date:** [February 21, 2020, 4:48pm UTC](https://onehack.st/t/hack-android-device-by-sending-fake-sms-kali-linux/56656/20 "2020-02-21T16:48:49Z")
need to add few more points how to use ngrok server in this. i tried but failed every time.