Android Device Exploitation: Remote Access via ADB and Malicious APKs

This repository contains a research/demonstration report on Android device exploitation techniques.
The PDF explores how attackers can gain remote access to Android devices using ADB (Android Debug Bridge) and malicious APK backdoors.

📄 Contents

The PDF includes:

Part 1: Exploiting Android over ADB using PhoneSploit-Pro

• Connecting to a device via ADB over network (port 5555).
• Capturing screenshots and listing installed applications.
• Launching targeted apps remotely.
• Accessing the Android shell and file system.
• Triggering browser-based payloads.
• Extracting device information.

Part 2: Persistent Access using AndroRAT

• Building a malicious APK that connects back to the attacker.
• Hosting and distributing the APK (e.g., via phishing/fake updates).
• Establishing a reverse shell on victim devices.
• Extracting sensitive data (SMS, device info, MAC address).

Real-World Implications

• Exposed ADB ports are often scanned and exploited by attackers.
• Malicious APKs spread via phishing, fake updates, or third-party app stores.
• Backdoors can run stealthily in the background.

Defensive Takeaways

• Disable ADB over network unless strictly needed.
• Restrict app installations from unknown sources.
• Monitor devices for suspicious outbound connections.
• Educate users on risks of downloading untrusted apps.

⚠️ Disclaimer

This project is strictly for educational and research purposes.
It demonstrates how attackers exploit Android vulnerabilities so that defensive strategies can be improved.
Do NOT misuse these techniques against systems or devices without explicit authorization.
The author(s) and contributors take no responsibility for illegal use.

📂 File

• Android Device Exploitation Remote Access via ADB and Malicious APKs.pdf

🔗 References

• PhoneSploit-Pro
• AndroRAT

---

💡 Use this material to strengthen Android security awareness and develop better defensive practices.