Reading someone else's WhatsApp correspondence with Metasploit

BadB

Professional
Messages
2,550
Reaction score
2,709
Points
113
This method of hacking WhatsApp correspondence is not difficult to execute, but it is extremely dangerous for your smartphones, because deep settings are affected. But do not be afraid, be patient and go ahead.

Metasploit is the best way to jailbreak Android smartphones. Based on this method, we will read someone else's WhatsApp correspondence.
So, in a computer or laptop, I recommend installing the Kali Linux or parrot sec operating system. Metasploit is preinstalled on both operating systems.
Metasploit can be installed on an Android phone using termux.

Dear friends, understand smartphones are not computers for you, with which everything is much easier. Personally, I have not been able to install termux 5 times. I repeated it over and over again and it was all unsuccessful. But the funny thing is, I watched a video from YouTube where malicious software was already installed on my own smartphones, which already had termux. Lol

I don't want to fool you, you can try to figure out termux yourself.
I will use parrot sec to hack WhatsApp correspondence. You can use both Kali Linux and others. Metasploit can also be installed on a window operating system.

"Parrot Security OS (or ParrotSec) is a Linux distribution based on Debian with a focus on computer security. Designed for penetration testing, vulnerability assessment and mitigation ..."

Payload creation:
cSFsRS797F8.jpg


First, I will do all this on my local network, before showing it on the Internet.
Here LHOST is the local IP address, which you can find with the "ifconfig" command.
It will generate a payload in the / root directory (if you are logged in with administrator privileges) named appname.apk, install this application on your phone.
All you need to do is listen to the connection. Here are the commands for this process.
paWMSL_G8SY.jpg


Here lhost is my local Ip, no need to install lport because it is already 4444.
Make sure your Android device and computer are on the same network. I just turned on hotspot from my phone and then connected my computer.
Install the application on your mobile phone. It will not show you anything other than your computer where you will receive the counter session. I searched a lot, but you can only see messages, contacts, files.
- You can see the correspondence with dump_sms so that he can get the WhatsApp verification code. Use the dump_contacts command
- You can get all messages about contact list of all WhatsApp messenger
- Using files you can copy Whatsapp media files

The Meterpreter session looks like this.
AJn9iLRG-wA.jpg


Enter help to see what you can do on the target phone.
nm6c3SnyBHo.jpg

I have highlighted dump_sms which is used to receive all SMS messages. To view files, you must know the required Linux commands. Make sure you practice enough before jailbreaking a real device.

In your mobile phone, install the "Parallel Space - Multiple accounts & Two face" application (size: 1.72 MB) from Google Play. With this application, you can also double account any other application, for example, VK, OK, chat, Facebook, etc.

Here is how to use parallel space, open it and click clone button, then select WhatsApp to add to parallel space, now it will create a WhatsApp icon where you can use double WhatsApp.

RGwFF-3Ud68.jpg


Click on the WhatsApp icon. I think you understand what will happen to the victim the next moment, he will send the code, then you can get the code using the dump_sms command.
FjL0AEmYYFc.jpg


The above command will copy the txt file to / root (user if you are logged in as root). Open a new terminal and type ls
_L95Pq7Lalc.jpg


nano is a text editor like notepad. It will open the file.
jpFvHTekyuw.jpg


You see the Google verification code. Similarly, you can see the WhatsApp verification code. I told you above, you can get your contact list and WhatsApp media learn Linux commands and do it yourself.

How to hack WhatsApp messages over the Internet.
To use it over the internet, you need to redirect your router. If you are using mobile data, then you cannot reroute broadband Internet transfers. You need to watch a video on how to port your router.
I don't have a broadband connection right now. But trust me, it works.

Bonus tip: always get your WhatsApp verification code at midnight because people are sleeping at that time. Make sure you hide the app icon using the hide-app-icon command.
 
Thanks for this information, never knew Metasploit can be used in doing this.
 
Metasploit Tips ?‍♂️

View all productivity tips with the tips command:
1. Enable verbose logging with set VERBOSE true
2. When in a module, use back to go back to the top level prompt
3. Tired of setting RHOSTS for modules? Try globally setting it with setg RHOSTS x.x.x.x
4. Enable HTTP request and response logging with set HttpTrace true
5. You can upgrade a shell to a Meterpreter session on many platforms using sessions -u <session_id>
6. Open an interactive Ruby terminal with irb
7. Use the resource command to run commands from a file
8. To save all commands executed since start up to a file, use the makerc command
9. View advanced module options with advanced
10. You can use help to view all available commands
11. Use help <command> to learn more about any command
12. View a module's description using info, or the enhanced version in your browser with info -d
13. After running db_nmap, be sure to check out the result of hosts and services
14. Save the current environment with the save command, future console restarts will use this environment again
15. Search can apply complex filters such as search cve:2009 type:exploit, see all the filters with help search
16. Metasploit can be configured at startup, see msfconsole --help to learn more
17. Display the Framework log using the log command, learn more with help log
18. Adapter names can be used for IP params set LHOST eth0
19. Use sessions -1 to interact with the last opened session
20. View missing module options with show missing
21. Start commands with a space to avoid saving them to history
22. Writing a custom module? After editing your module, why not try the reload command
23. Use the edit command to open the currently active module in your editor

Source : MetaSploit's tips Command
 
Top