Android as a development CyberSec tool.

José J,G
4 min readFeb 26, 2024

--

There are dedicated tools for cybersecurity auditing, so this post is intended for learning and fun, not for actual security purposes. While acquiring a Pinephone or any tablet and installing real Linux would be much more convenient, we’re here for the sake of enjoyment!

Get root access

The first hurdle lies with the Android device. Unlike Apple devices where jailbreaking increases complexity, Android allows for root access. My advice is to get an old high-end Android phone. The key point here is community support. You can choose phones supported by LineageOS (https://lineageos.org/) or any device with a strong XDA community (https://www.xda-developers.com/). In any case, the first two steps are:

  • Open the bootloader.
  • Get root access.

This process varies depending on your device, so research the specific steps online. While I enjoy a challenge, I used a not-so-well-supported phone (Redmi 12C), and it was still doable.

Two apps to install

Next, you’ll need two apps: Termux and Hacker’s Keyboard. Of course, there are alternatives, but these are my recommendations. Termux acts as a Linux terminal emulator, and Hacker’s Keyboard facilitates scripting.

https://play.google.com/store/apps/details?id=com.termux&hl=en_GB&gl=US&pli=1
https://play.google.com/store/apps/details?id=org.pocketworkstation.pckeyboard&hl=en_GB&gl=US

Install and run SSH Server

run the following commands inside the Termux

Now, set a password for the current user by running passwd, remember this password you will need it later
Then, Start the SSH server inside by running sshd -p 8022, do not close/exit the app after running the command
Run the comand ifconfig in your phone in my case the ip was 192.168.0.75

As the screens of the phones were not desing for this, we will move to our computer and run in our terminal

Connect to SSH Server

On the pc terminal run the following, dont use root@ as prefix to the ip address, but remember to use your own IP address.

When asked for password, enter the password you used in the steps above

Now we are on control of our android device from our won computer terminal

Next steps

Now you can run your own scripts or use custom programs. For example, there’s something called Tool-X, which is a powerful and dangerous set of tools. Use it at your own risk!

Legal Notice: please don’t use this tool

According to that person this tool is harmful and it can break your computer, so i request everyone please do not install and use this tool.

Introduction

Tool-X is a Kali Linux hacking tools installer for Termux and linux system. Tool-X was developed for Termux and linux based systems. Using Tool-X, you can install almost 370+ hacking tools in Termux (android) and other Linux based distributions. Now Tool-X is available for Ubuntu, Debian etc.

If you still want to install it, you can find various repositories on GitHub. (https://github.com/ekadanuarta/Tool-X) or as I did with the vaginessa repo.

https://github.com/ekadanuarta/Tool-X

In my case, I prefer to write my own scripts and keep learning. The next post will cover this topic!

References:

https://gist.github.com/raveenb/ab3217798c827be889b83b584d70b08b

--

--

José J,G

Biologist specializing in Molecular Microbiology. Passionate about tech's role in enhancing biological research