
Explore Termux, a Linux terminal emulator for Android, and learn its secure, feature-packed capabilities, from Perl and Python to Node.js, with GDB debugging and keyboard and display support.
Why Termux?
Now we know that termux is a Linux Terminal Emulator. But why it is so famous and sometimes called a hacking machine. Well, that’s somehow true and sometimes a piece of false information also. Termux is not a standalone hacking application. As we discussed, it’s a program that takes instructions and runs scripts. In some Linux distributions like Kali, Parrot OS, we find a lot of tools for penetration testing. Most of them are CLI based and run through the terminal. We can also install various other tools and run different scripts made for Pentesting.
So on Android, obviously you get a complete GUI environment. Where these tools won’t work without any command line utility. That is where termux is used to install such tools on your Android Platform. Our Android is also based on a modified Linux kernel. That’s why we can use Bash scripting in it. That’s why termux can easily connect to the file system to perform the majority of the set of features. Which allows you to use the Linux command line to install and run various scripts.
So that was a wrap on introduction to Termux. Let’s move to installation and basic usage.
Explore f-droid, a community maintained android repository similar to Google Play Store that hosts only free apps and flags non-free dependencies.
Stop cmatrix with ctrl+c, exit the Termux terminal, and uninstall a package using apt remove, then verify removal from the list.
Use the mv command to move files and folders from one directory to another, removing them from the source and placing them in the destination, with verbose examples.
Learn to use the uname command to identify your device's architecture (uname -m) and kernel details (uname -a) from any directory, yielding consistent Linux architecture 64 Android results.
Penetration testing identifies vulnerabilities by evaluating systems or networks with malicious techniques to secure data from outsiders, protect government data during transfer, and preserve brand trust by fixing application vulnerabilities.
Explore the basic architecture of metasploit, Rex as the core library, MSF core for the API, MSF base for a friendly API, and modules like exploits, payloads, encoders, and Nops.
Understand that a shell is a program enabling code execution on devices, with bind shell where the victim's listener awaits the attacker, and reverse shell where the victim connects back.
Metasploit setup guide highlights the database server command, instructing you to copy and save it for use while generating the payload.
Learn to perform a wide area network attack by using port forwarding with ngrok to expose a local server, generate android meterpreter payloads with Metasploit, and deploy a signed apk.
This lecture demonstrates reestablishing a ngrok session after hotspot failures, then building and delivering an android meterpreter payload via msfvenom and metasploit, including lhost and lport configuration.
Explore how a backdoor on Android becomes persistent, using a Metasploit-based lab demo, bash scripts, and payload deployment to maintain a session across device reboots and locks.
This lecture explains how salt protects passwords in storage and demonstrates decrypting data with openssl using aes-256-cbc, including providing a password to view the output.
Learn what phishing is, explore its types, and see how attackers use hosted links and spoofed apps to harvest credentials. Emphasize ethical, legal use and caution against unsafe links.
Phishing is a fraudulent attempt to obtain usernames, passwords, and credit card details by deceiving users through emails, fake websites, and social engineering tactics like spearfishing and whaling.
This lecture demonstrates how attackers use a say cheese tool to establish remote access, capture images, and reveal a victim's IP location, while stressing legal and ethical consent.
Learn to uninstall the tool by removing packages with rm -r, relocating folders to the SD card, and deleting them from internal storage for clean uninstalls.
Apply chmod +x to make all files and folders executable, verify the current directory and file list, then run the script, noting case sensitivity and its successful execution.
Demonstrates clearing previously captured files, selecting the Engelke option, generating a direct link, and verifying newly captured images in an android ethical hacking workflow.
Learn to install and use aircrack-ng on rooted android devices to test wifi security. Explore monitoring mode, packet capture, injection, and dictionary attacks for WPA/WPA2 networks.
learn to install kali linux on a non rooted android device using the userland app, running an arm 64 debian environment alongside android, with galley tool repositories and monitor-mode limitations.
Learn the concept of Augmented Reality in Depth
Course Update: Metasploit Issue Resolved!
Hello Everyone,
Welcome to the CAEHP, which stands for the Complete Android Ethical Hacking Practical Course.
I'm Debayan Dey, your instructor for this exciting course. CAEHP is all about hands-on practical learning in the world of Android Ethical Hacking!
This course is designed for anyone interested in understanding how attackers operate and extract information from their victims. What makes CAEHP unique is that you don't need a laptop or computer for this journey. All you need is an Android device because this course is 100% practical!
Isn't that amazing?
Plus, you don't even need to root your Android device. Yes, you read that right! All you need is your Android phone, and you can transform it into a powerful ethical hacking machine.
A little about me: I hold certifications like Certified Secure Computer User (CSCU) v2, Certified Ethical Hacker (CEH V10) from EC COUNCIL, and Google IT support certification from Google. Currently, I'm pursuing a micromaster in Cyber Security from the Rochester Institute of Technology (RIT) in New York through edx. I've also completed courses from prestigious institutions like New York University and The State University of New York.
Now, let's dive into what you can expect from the CAEHP COURSE.
Firstly, this course doesn't have a time limit. As you progress, you'll find that new sections and videos are added regularly. This ensures you stay up-to-date with the latest features, attacks, and how to protect yourself.
Currently, CAEHP has 6 Sections, 1 Optional Section, and 1 Bonus Section:
SECTION 1: Meet and Greet
Introduction to the Section
What is Termux?
What is Shell?
Why Termux?
Installation
What is F-Droid?
Package Management
Q/A Session with the instructor and Social Media contacts
SECTION 2: Termux Basics
Installing TERMUX from Google Play Store
Storage Setup, Update, and Upgrade
Why we use apt
Hidden files, versions
Various Text Editors
Learning how to check IP
Various other Network-Related Commands
Learning how to use GIT Repository
And much more!
SECTION 3: Metasploit Framework
Payload creation
LAN and WAN attacks
Port forwarding
Creating persistent Payload
BASH Scripting
Gaining control of a victim's mobile device
And much more!
SECTION 4: Encryption and Decryption
What is Encryption
What is Decryption
File encryption and decryption
Protecting files and folders with passwords
Installing important encryption tools in Linux
Understanding SALT in Cryptography
Performing Encryption and Decryption
And much more!
SECTION 5: Phishing Attack
Introduction
What is a Phishing Attack?
Mirroring websites
Cloning social media sites like Facebook, Instagram, and Twitter
Learning PHP
Running a cloned website on your LocalHost
Uploading the files online
Running the cloned website online
Social Engineering techniques
And much more!
SECTION 6: Camera Access and Uninstallation
Port forwarding
Generating HTTP or HTTPS URL links
Gaining camera access through a link
Receiving victim's photographs
Uninstalling dangerous packages
Staying safe and preventing hacking
Teaching family and friends how to stay protected
OPTIONAL SECTION: For Rooted Android Devices
Understanding Wi-Fi networks
Learning about AIRCRACK-NG
Installation of the package
Using AIRMON-NG
And much more for rooted devices!
BONUS SECTION: Running Kali Linux on Android
No need to root your Android device
Installing Kali Linux
Using SSH Client
Transforming your Android Device into a Penetration Testing and Ethical Hacking Device
Each section includes quizzes, assignments, and reading materials. We will regularly update the course with new content, ensuring you stay ahead of the latest attack techniques and defenses.
Please remember, this course is for educational and awareness purposes only. We demonstrate attacks so you can understand the technology and art behind them and protect yourself from social engineering. We do not condone or support any illegal activities.
Feel free to reach out anytime; I'm here to help. If you encounter any problems, post your doubts, and you'll receive a response within 24 to 48 hours.
Are you excited to embark on this 100% practical course, learn valuable skills, and help your family stay secure from data theft and hackers?
Best of luck, and I'll see you on the course landing page!