Embed Backdoor in any Android app | Android Hacking | Tricky Hash |

 HOW TO CREATE A ANDROID TROJAN

INTRO

Everybody install and use apps these days. So, the easiest way to hack a android by embed a Backdoor to a normal apk File. Now, install this apk file in your Victim's phone by using some Social Engineering trick. When it is executed the user will see a normal app but in the same time our Backdoor will be running in the Background.

REQUIREMENTS

• A Legitimate android apk file.
• Kali Linux 
• The FATRAT (Linux Tool)

PROCEDURE 

To embed Backdoor in any legitimate apk, we use fatrat. We have to install Fatrat in out terminal. Fatrat is used to generate local or remote listeners. It can generate payloads in various formats. 

To Install Fatrat we'll have to use the following commands: 

git clone https://github.com/Screetsec/TheFatRat.git

After cloning into TheFatRat now type:

ls (enter)

cd TheFatRat (enter)

ls (enter)

chmod +x setup.sh (enter)

ls (enter)

./setup.sh (enter)

It will automatically install all the required dependencies please be patient while its installing. 

(ping me in comment section if  you get any error in installing the fatrat with a screenshot)

After installing fatrat now u should change your kali machine to use JAVA 8 by default because in JAVA 10 we cant decompile the APK so to change it to JAVA 8 use the following command: 

update-alternatives --config java

Now, just check the given options and change it to the java8 as default. 

 

Note - Not all apk files will work with these you need to try many variants to successfully embed your backdoor.

Now, run fatrat tool by typing fatrat in your terminal and after entering into the fatrat tool, use option backdooring original apk.

Now, set your LHOST to your ip address and LPORT i prefer 8080. Choose your path where apk file is stored press enter and select the payload you need to choose and method you need to embed your backdoor to apk file. Choose whether you need to modify the apk file or keep the original file i prefer not to change the file and press enter. Now thefatrat starts to embed your backdoor with the apk. After finishing, use msfconsole and send the apk file to the victim and wait for the reverse connection.

Voila!! Y'll are done!!

Happy Hacking..

For any Query - https://telegram.me/trickyhash

                https://instagram.com/trickyhash2.0

Author - Sai Srinivas