Skip to content

README.md

Latest commit

 

History

History
129 lines (92 loc) · 3.95 KB

README.md

File metadata and controls

129 lines (92 loc) · 3.95 KB
Raw

*** Androduct Framework (Play on abduct) ***

Project Structure

📂 Click to expand 
Androduct-framework/
├── core/
│   ├── adb/                    # Android debug bridge (adb)
│   │   ├── shell.py
│   │   ├── file_ops.py
│   │   └── device_manager.py
│   ├── exploit/
│   │   ├── cve_launcher.py
│   │   ├── payloads.py
│   │   └── exploit_utils.py
|   |── patcher/                 # Decompile, inject, rebuild, sign
│   |   ├── __init__.py
│   |   ├── apk_patcher.py
│   |   └── patches/
│   |        ├── bypass_root.smali
│   |        └── ssl_unpin.smali
│   ├── utils/
│   │   ├── logger.py
│   │   └── netwoek_tools.py
|   |   └── session_manager.py
├── docs/                            # Documentations
├── logs/
├── modules/
│   ├── info_gathering.py
│   ├── persistence.py
│   ├── post_exploitation.py
├── main.py                        
├── config.py
└── README.md

Usage

Ensure an android device is connected via USB or WiFi

python main.py

Basic ADB Functionalities

  • shell
  • pull_file
  • push_file
  • screen_record
  • screenshot
  • Install an apk on a device
  • Extract apk from app
  • Remove device password
  • Get current activity
  • Dump System Info
  • Shutdown a device

Advanced ADB Attack Features

  • Dump SMS/Call logs/Contacts ADB + content command or SQLite DB pulls
  • Keylogger (if rooted) Use an accessibility service or custom payload
  • Camera snap w/o preview ADB call or push & run malicious app
  • Live mic/audio recording Same deal—shell into app or use intent
  • Exfil file from internal storage adb pull /data/data//files/* (needs root)
  • App cloning or data theft Pull APK and /data dirs, extract databases
  • Start hidden persistent backdoor Push service APK and set up auto-start
  • ADB over Wi-Fi auto-enable setprop service.adb.tcp.port 5555 && stop && start
  • Frida Injection Support Auto-push Frida-server and attach to apps

Network Recon & MITM

  • ARP scan for LAN devices Add nmap wrapper or use scapy
  • Auto MiTM setup (evil twin / rogue AP) Integrate airgeddon or wifiphisher
  • DNS spoofing / redirection ettercap, dnsspoof, or mitmproxy
  • Hijack session cookies (via mitmproxy) Log/intercept sensitive traffic
  • Scan for open ports on the Android target Local nmap or netstat via ADB
  • Auto-create reverse SSH tunnel Enable port forwarding & reverse shell payload

Red Team Persistence

  • Set up persistent reverse shell Inject startup script or abuse BOOT_COMPLETED
  • Bypass lockscreen (via TWRP or exploits) If rooted, edit settings.db
  • Replace legit APK with trojanized one Uninstall, repackage, and install
  • Hide app from launcher Modify manifest or use pm hide
  • Use covert channels (e.g., SMS triggers) Setup scripts that respond to SMS
  • Encrypt & exfil stolen data GPG + remote upload via ADB+curl or scp

🧰 Toolbox Integration

  • Payload Deployment Auto-generate APK payloads via msfvenom or evil-droid
  • C2 Communication Tie in with Cobalt Strike, Sliver, or Mythic
  • Exploit POCs Include CVE scanner or LPE payload launcher
  • Mobile RAT interface Hook into a Python Flask dashboard with session controls

Detection evasion

  • Anti-forensics (log wiping) Auto-clear logcat, remove command traces
  • Auto-self-destruct payloads Delete traces if internet goes out or timer hits
  • Root-check & fingerprint Check if device is vulnerable or rooted before going loud
  • ADB command obfuscation Randomize command structure, avoid detection by EDR-like tools

✅Dependencies

  • apktool (in your PATH)

  • jarsigner (comes with JDK)

  • debug.keystore (generate with keytool if missing)

  • Your patches/ folder with valid .smali templates