gitmyhub

PhoneSploit-Pro

Python ★ 6.0k updated 29d ago

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

A Python tool that connects to Android phones over Wi-Fi using ADB and lets you control, extract data from, or run security tests on devices you own.

PythonADBMetasploitscrcpyNmapsetup: hardcomplexity 3/5

PhoneSploit Pro is a Python tool that connects to Android phones over a network using ADB (Android Debug Bridge) and provides a menu-driven interface for controlling and extracting data from the connected device. ADB is a legitimate debugging tool built into Android, but it can also be exposed unintentionally over Wi-Fi on port 5555, which this tool exploits.

The tool includes two broad categories of features. The first is a general ADB control toolkit: taking screenshots, recording the screen, mirroring and controlling the display, transferring files in both directions, installing or removing apps, reading device information, dumping SMS messages and contacts, sending keystrokes, and toggling Wi-Fi. These functions work over both USB and a Wi-Fi network connection. The second category is automated exploitation using Metasploit-Framework, a separate penetration testing platform. When used in that mode, the tool automatically generates a payload file, installs it on the target device, and sets up a Metasploit listener to open a full remote-control session over the target phone.

Using the exploitation features requires the target Android device to have ADB debugging enabled and accessible over the network. The README includes a disclaimer that the tool is intended for security testing on devices the user owns or has permission to test.

Running the tool requires Python 3.10 or newer, along with several external programs that must be installed separately: ADB from Android's SDK tools, Metasploit-Framework, scrcpy (for screen mirroring), and Nmap (for network scanning). The tool itself does not need to be installed and runs directly with Python after cloning the repository.

Where it fits