The Complete Android Ethical Hacking Practical Course C|AEHP

Discover Termux, an Android terminal emulator and Linux environment, installable from Google Play Store, requiring no root, with an APT package manager and a minimum Lollipop device for setup.

Stop cmatrix with ctrl+c, exit the Termux terminal, and uninstall a package using apt remove, then verify removal from the list.

Explore the apt show command to reveal package details such as version, maintainer, installable size, install size, dependencies, conflicts, and description with vim or zip examples.

Explore how to reveal hidden files, recognize dotfiles such as .bash_history, and use ls -a and cd to navigate directories while checking package versions with --version.

Install nano in Termux via apt install nano, use ls to list files, and use cat (concatenate) to view and create files, then edit net.txt with nano and save.

Use the mv command to move files and folders from one directory to another, removing them from the source and placing them in the destination, with verbose examples.

Learn to create a directory, make text files with touch, and copy a file into the folder using cp, while navigating with cd and verifying with ls.

Learn to use the uname command to identify your device's architecture (uname -m) and kernel details (uname -a) from any directory, yielding consistent Linux architecture 64 Android results.

Learn how to use the ifconfig command, a Linux utility for configuring, assigning and querying network interfaces, including enabling or disabling interfaces and viewing wlan0.

Learn how to use the Linux ping command to verify network availability and host reachability, test internet connectivity, and diagnose issues such as dropped packets or high latency.

Explore essential linux commands such as cal for the calendar, df for disk space, and the proc filesystem that powers data for ps and reveals cpu details with cat /proc/cpu.

Learn how to install git, clone a GitHub repository with git clone, verify the clone with ls, view readme files, and download from the web using wget.

Penetration testing identifies vulnerabilities by evaluating systems or networks with malicious techniques to secure data from outsiders, protect government data during transfer, and preserve brand trust by fixing application vulnerabilities.

Explore the metasploit framework, an open source security project and modular penetration testing platform that tests vulnerabilities, enumerates networks, and executes exploits, evading detection, including its acquisition by Rapid7.

Define vulnerability as a weakness in a computer system that a threat actor can exploit using tools and techniques, forming the attack surface.

Explore payloads, malicious code that exploits vulnerabilities to hack Android devices, delivered via embedded apps or social engineering, granting access to cameras, microphones, and other data.

Explore the basic architecture of metasploit, Rex as the core library, MSF core for the API, MSF base for a friendly API, and modules like exploits, payloads, encoders, and Nops.

Understand that a shell is a program enabling code execution on devices, with bind shell where the victim's listener awaits the attacker, and reverse shell where the victim connects back.

Install metasploit on an android device using termux by updating termux, enabling the unstable repo, and running the install, with a 357 MB download and step-by-step guidance.

Metasploit setup guide highlights the database server command, instructing you to copy and save it for use while generating the payload.

Navigate to the Metasploit Framework on Android, open the MSF console, and explore exploits, auxiliaries, payloads, encoders, and other options via a centralized interface.

Learn to navigate the MSF console by using the help command to view available commands and applying the banner command to customize the banner.

Explore payload generation for android with msf venom, set up a reverse tcp handler in the metasploit framework, and manage LAN-based exploitation sessions.

Learn to perform a wide area network attack by using port forwarding with ngrok to expose a local server, generate android meterpreter payloads with Metasploit, and deploy a signed apk.

This lecture demonstrates reestablishing a ngrok session after hotspot failures, then building and delivering an android meterpreter payload via msfvenom and metasploit, including lhost and lport configuration.

Navigate wifi-based ngrok setup and MSF venom payload creation, clarifying lhost and lport choices and avoiding confusion between 4444 and 4040 ports.

Learn from our mistakes to achieve a perfectly working wifi setup, with no audio during the session.

Explore how a backdoor on Android becomes persistent, using a Metasploit-based lab demo, bash scripts, and payload deployment to maintain a session across device reboots and locks.

Explore how encryption and decryption protect files in Linux, using three practical tools to encrypt, decrypt, and password-protect data with plaintext and ciphertext concepts.

Learn to use secret, a replacement for Unix crypt, to encrypt and decrypt files with the Rajinder cipher and the advanced encryption standard; install via a script and run encryption.

This lecture explains how salt protects passwords in storage and demonstrates decrypting data with openssl using aes-256-cbc, including providing a password to view the output.

Learn what phishing is, explore its types, and see how attackers use hosted links and spoofed apps to harvest credentials. Emphasize ethical, legal use and caution against unsafe links.

Phishing is a fraudulent attempt to obtain usernames, passwords, and credit card details by deceiving users through emails, fake websites, and social engineering tactics like spearfishing and whaling.

Explore mirroring a website with web copy tools, cloning a MediaFire login, and editing a php file to illustrate how credentials are captured and how to mitigate such sites.

Demonstrates building a local bhp script to capture a username and password from a form, saving them to a file on localhost for educational purposes.

Discover how to convert a website into an android app with appsgeyser, including login, URL input, naming, images, and publishing, plus security tips to avoid phishing.

Learn how a tool uses port forwarding and getUserMedia to access a victim's camera via a malicious link, and review the legal boundaries.

This lecture demonstrates how attackers use a say cheese tool to establish remote access, capture images, and reveal a victim's IP location, while stressing legal and ethical consent.

Learn to uninstall the tool by removing packages with rm -r, relocating folders to the SD card, and deleting them from internal storage for clean uninstalls.

Apply chmod +x to make all files and folders executable, verify the current directory and file list, then run the script, noting case sensitivity and its successful execution.

Explore two android security tool options, install required components, access localhost, manage browser permissions, capture back-camera images, and move files to sd card for sharing.

Demonstrates clearing previously captured files, selecting the Engelke option, generating a direct link, and verifying newly captured images in an android ethical hacking workflow.

Learn to install and use aircrack-ng on rooted android devices to test wifi security. Explore monitoring mode, packet capture, injection, and dictionary attacks for WPA/WPA2 networks.

learn to install kali linux on a non rooted android device using the userland app, running an arm 64 debian environment alongside android, with galley tool repositories and monitor-mode limitations.