Kali NetHunter is a free and open-source Mobile Penetration Testing Platform for Android Devices (based on Kali Linux) developed by Offensive Security, the creator of the popular Kali Linux distribution. 

It is designed for various devices and includes support for hacking wireless networks, web applications, and mobile devices.

NetHunter supports wireless 802.11 frame injection, one-click MANA Evil Access Point setups, HID keyboard (Teensy-like attacks), as well as BadUSB MITM attacks. It also includes a custom kernel, which has been specially configured for penetration testing and includes support for various wireless hacking tools. NetHunter also includes several command line utilities, including Nmap, Metasploit, and sqlmap, making it a powerful platform for network and application security testing.

Magisk Manager is a widely used rooting tool for Android devices. It provides you the root access of the Android device through which you can access additional features, you can also customize Superuser permissions and other system grants.

Steps to root any Android Device using Magisk Manager

2. Now, Switch off your device and boot it into the recovery mode by pressing the volume up, home, and power buttons simultaneously.

3. Click on Install select the Magisk zip file and flash it, and then reboot the system.

4. Now you can check the root access using a Root checker application.

What if we could install Kali Linux on our mobile phones as well as our computer? If I say yes we can install Kali Linux on our device without having to root our mobile device. Kali Linux is widely used for advanced Penetration Testing and Security Auditing.

Prerequisite:

1. Android Device (Stock unmodified device, no root or custom recovery required)
2. Termux 
3. Download NetHunter-KeX client, and Hacker's keyboard from NetHunter Store.

Install and Configure

Open Termux and type:

Download rootfs File Manually and install Kali NetHunter

1. Open your browser and visit this link: https://images.kali.org/nethunter/kalifs-arm64-full.tar.xz to download rootfs file. 

2. Copy rootfs file:

3. Run again following command to install:

NetHunter GUI

1. To interact with Nethunter GUI you have to reset kex password:

2. To run it by the following command:

3. Open the NetHunter Kex VNC tool and change the port number and password. Now click connect to connect.

Make your device a server

If you want to access NetHunter GUI from your laptop or any other phone, It need to configure vnc.conf file.

So go to NetHunter. Now open vnc.conf file using a nano text editor.

Scroll end and write the following code:

Download RealVNC and connect with IP and Port number. Run Kali with root privileges then type the following:

Kali NetHunter Lite is a lightweight version of the Kali NetHunter penetration testing platform for Android devices. It is designed for devices with low hardware specifications and limited resources, such as smartphones with low memory and storage capacity. 

Here, in this video, we will be going to install Kali Nethunter lite on a non-listed device. Remember, your Android device must be rooted with the help of the Magisk manager . 

Kali NetHunter Lite can be installed on any compatible Android device, as long as the device is rooted. It is not available on the Google Play Store, so you will need to download the NetHunter Lite image file from the Kali Linux website and install it on your device manually.

Note: To install Kali NetHunter Lite on an Android Device, your Device must be rooted with Magisk Manager. 

Here, In this article, I am going to install Kali NetHunter lite on a  Samsung Galaxy J7 (2015)  non-listed Android Device.

According to the Specifications, Samsung Galaxy J7 (2015) is a 32-bit of Architecture. Since the  Samsung Galaxy J7 (2015) has low space, so I have to download the nano version.

Follow the below Article to root your Android Device:

I recommend you all install Kali NetHunter Lite on LineageOS. Because LineageOS is customizable and the most important part is, "After a successful flash, you can showcase Kali Boot Animation ".

Install Kali NetHunter Lite on LineageOS

Follow the below steps to install Kali NetHunter Lite on Samsung Galaxy J7 (2015) on LineageOS:

1. Launch the Magisk Manager app.

2. Tap on Module Tap.

3. Choose the "NetHunter Generic ARMhf kalifs-full" zip file from Storage, which we have downloaded from the Kali Linux official site.

4. So that it will automatically flash NetHunter Lite custom ROM.

5. This process may take 25 minutes or more. Once the custom ROM flashes, reboot your device.

6. Once boot up, you will find 4 newly installed applications.

7. Launch NetHunter Application. 

• Allow all permission for NetHunter application and also grant root privilege.

8. NetHunter Lite successfully booted up, but " Kali Chroot manager " is not up and running, so we have to install Kali Chroot.

9. Tap on Kali Chroot Manager, and then click "Install Kali Chroot".

11. Click on " Start Kali Choot ", to start to chroot environment.

12. Once installation is successful, you will find out NetHunter Lite is up and running.

When the Kali Chroot Manager is running, you can use it to manage the Kali Linux Chroot environment on your Android device. This includes installing and removing tools, configuring settings, and accessing the command-line interface (CLI) version of Kali Linux.

These are the complete process to install and set up Kali NetHunter Lite on a non-listed device.

Install Kali NetHunter Lite without LineageOS support

If your device does not have lineageOS support, you can follow a similar process to install it.

Sometimes, After a successful flash, if you do not find the NetHunter applications, then you will have to flash the Kali Nethunter Lite from TWRP recovery software.  

Follow the below steps to install Kali NetHunter lite on any Android device:

1. Firstly, switch off your Mobile, and switch to the TWRP recovery mode by pressing the Power button, volume up, and Home button simultaneously.

2. Here, click on Install and tap on the downloaded Kali NetHunter zip file. 

It will automatically flash the software and install the required packages.

3. On successful flash, reboot the system. Now, launch the  Kali NetHunter lite Application from the Application Menu. 

4. Allow all Permission and, Grant superuser privileges. 

5. Once Superuser privilege is granted, the Kali NetHunter lite app automatically detects installation files. Kali NetHunter lite successfully boots up, but Kali Chroot's manager is not up and running. 

6. To set up Kali Chroot, Tap on the " Kali Chroot Manager ".

7. If you face this error, we will have to install Kali Chroot manually. Firstly, extract the zip file and copy the " tar.xz " file to the home (Device Storage)  directory.

8. Go back to the Kali NetHunter Application and Tap on " Install Kali Chroot  → Restore from Local Storage (.tar.gz, .tar.xz), and set the path of the file.

9. This installation process takes time, based on System performance. 

10. Chroot Manager was successfully installed, but various file systems are not yet mounted. So we have to start Kali Chroot, to start Kali Chroot environment.

11. Tap on Start Kali Chroot to the chroot environment.

12. Kali Chroot manager is up and running.

When the Kali Chroot Manager is running, you can use it to manage the  Kali Linux Chroot environment on your Android device. This includes installing and  removing tools,  configuring settings, and accessing the  command-line interface (CLI) version of Kali Linux.

Installing Kali NetHunter may take a long process and be too complicated. I have already created these videos, you can find them on my blog or on my YouTube channel. Here, in this video, I am going to install Kali NetHunter on a Listed Device on the Kali Nethunter Download page.

Before getting started, our first priority is to ready the required tools and resources.

• Kali NetHunter ROM for Nokia 6.1 Plus
• LineageOS 18.1 
• Custom ROM ZIP file, and 
• Recovery Image
• Gapps (MindTheGApps)
• MagiskManager

Make sure, your system has been configured with  Platform Tools on your Windows PC, if you have not yet configured then follow the below links:

Unlock The Bootloader

To root an Android Device, our first priority is to unlock the bootloader. It is not easy to unlock the bootloader in the Nokia 6.1 Plus because Nokia Smartphones do not officially offer bootloader unlock codes (except for the Nokia 8).

While searching on Google, I found this article briefly explaining the steps to unlock the bootloader.

Install Nokia USB Drivers

To install Nokia USB Drivers, Firstly, Plug in a USB cable. Once Plug-in, It will automatically show us the Nokia Drivers. 

Firstly, copy all these to a new directory and then install it.

Download the Nokia Bootloader Unlock Tool

Once the Driver is installed, Download the Nokia Bootloader Unlock Tool. Click on the Download to Download it.

Reboot the Phone into Bootloader Mode

Once Downloaded, next, we have to reboot the phone into bootloader mode.

Firstly, we have to enable developer options. To do this, go to Settings → About phone.

Scroll down and tap on the "Build number" field 7 times. 

Go back to the previous menu and click on System → tap on Advanced  → Developer Options. 

• Toggle the "USB debugging" option to "On" to enable USB debugging. 

Now, again connect your device to your computer using a USB cable and open a command prompt by pressing Windows + R, and typing cmd.

Type the following command to list the connected Android devices that are detected by the Android Debug Bridge (ADB) tool. 

As you can notice, an Android Device is listed but it does not have any authorization. We have to allow USB debugging to authorize the device to run ADB commands.

As you can see the device now has authorization.

Now, type the following command to reboot your device into bootloader mode.

As you can see, my Android device is now switched to download mode, which means we are on Bootloader mode or fastboot mode.

Generate OTP for the Unlock Tool

Click on Generate OTP, and click on Get the OTP. 

The OTP is valid for 15 minutes from generation.

Run the Unlock Tool and unlock your phone

Extract the previously downloaded "Nokia Bootloader Unlock tool".

Run the “Bootloader Unlock by tm.exe” file.

On execution, you will find out below the window.

Here, paste the OTP, and then click on Begin Unlock. 

Once you click on the Begin Unlock button, you will notice various processes. Wait for the process to complete. 

Confirm “Unlock the bootloader” press the volume down button, and then press the Power button to continue the procedure.

After reboot, it will automatically erase all data and we have to confirm "unlock the bootloader" a second time.

Now again confirm the unlock of the bootloader as shown on my screen.

Now, as you can notice, The Bootloader unlock is completed, and we are ready to flash the recovery software that we have downloaded previously.

Flash Recovery Image

To flash the recovery image, we have to Enable developer options again, as the Android device is completely reset.

Now, open a command prompt by pressing Windows + R, typing cmd, and then type the following command to list the connected Android devices.

Now, type the following command to reboot your device into bootloader mode.

Once my device is booted to download mode, type the following command to list the connected Android devices that are detected by the fastboot tool.

As you can see, a fastboot device is listed.

If somehow no devices are listed, it means that fastboot is not detecting any connected devices. This could be because the device is not correctly connected to the computer, or because the device is not in fastboot mode, or sometimes there will be a chance of missing driver issues. If there is a problem with the missing driver issue, then you can follow the below article:

To flash the recovery image, run the following command:

Type the fastboot flash boot, and “here drag and drop the path of the recovery image” to flash the recovery image file to my Android device.

After the flashing process is complete, type the following command to reboot an Android device into recovery mode.

Your device will boot into LineageOS recovery mode.

Now, we have to flash the LineageOS custom ROM zip file.

Flash Custom ROM (LineageOS 18.1)

To flash Lineage OS 18.1, firstly, we have to format the data. Tap on Factory Reset.

Now here click on Format the data/Factory Reset.

Now tap on Format Data to wipe out all data.

On click, it automatically wipes out all data. Once wipe-out data is completed, go back to the previous menu to flash custom ROM.

To flash custom ROM, click on “Apply Update”.

Click on Apply from ADB. 

Apply from ADB is a feature that allows a user to install OTA (over-the-air) updates or custom ROMs on an Android device using a command-line interface on a computer.

The command, that is used to apply an update is, “adb sideload <mention the location of the file>”. 

On completion, I have to reboot my device.

After reboot, we have to set up LineageOS.

Flash Google Apps

Optionally, if you want to install an application package add-on such as Google Apps follow the below steps:

Turn off your device and then press the Power button along with the Volume up button to switch back to Recovery Mode.

Similar to the previous, tap on Apply Update, and then tap on "Apply from ADB".

Now, we have to flash the "MindTheGApps" zip file.  

Tap on "Yes" to continue the installation. 

On completion, go back to the previous menu and then click on "Reboot System Now".

After reboot, you will find fresh newly installed LineageOS.

As you can notice, Google apps are successfully installed. But, for better performance, I suggest you Erase the data. 

Setting → System → Advanced → Reset Options

After erasing, follow the instructions to set up the device. 

Now, we have successfully installed LineageOS 18.1 along with GApps. But, we don't have any root privileges.

Root Android Device

Now, again, we have to enable the USB debugging and then run the following command to list devices.

Now, type the following command to reboot the device into recovery mode. 

Similar to the previous, we have to flash Magisk Manager. Firstly, tap on “Apply Update”, and then click on "Apply from ADB".

Now, we can flash Magisk Manager to root the device.

Once the device is booted up, you will see the Magisk Manager app icon. But the Magisk Manager Application needs to be installed once again.

Tap on the Magisk app icon to Download the Magisk Manager application. 

Once downloaded, click on Install.

Once installed launch Magisk Manger Application.

Tap on Install to flash the newly downloaded Magisk manager. 

Here choose, Direct Install and then click on "Let's go":

On completion, tap on reboot to ensure that the changes take effect, and are properly configured and integrated with the operating system.

Install Kali NetHunter

Now, we are ready to Install Kali NetHunter custom ROM. Let me transfer the NetHunter custom ROM zip file to my Android device.

Launch the Magisk Manager app.

From here, go to the Modules tab

Tap on Import the file and import the Kali NetHunter ROM zip file.

So that it will automatically flash Kali NetHunter custom ROM.

This process may take 25 minutes or more. Once the custom ROM flashes, reboot your device.

Once boot up, you will find out 4 newly installed applications.

Now, launch the Kali NetHunter Application from the Application Menu and allow Permissions. 

Now, Grant superuser privilege. 

Once Superuser privilege is granted, the Kali NetHunter app automatically detects installation files.

Kali NetHunter successfully boots up, but "Kali Chroot manager" is not up and running. 

To set up Kali Chroot, Tap on the "Kali Chroot Manager" icon.

As you can notice, the Kali Chroot has already been installed, but various file systems are not yet mounted. So we have to start Kali Chroot in the "Start Kali Chroot" environment.

Now Kali Chroot is up. 

When the Kali Chroot Manager is running, you can use it to manage the Kali Linux Chroot environment on your Android device. This includes installing and removing tools, configuring settings, and accessing the command-line interface (CLI) version of Kali Linux.

These are the complete process to install and set up Kali NetHunter on a listed device.

Kali NetHunter is a free and open-source Mobile Penetration Testing Platform for Android Devices (based on Kali Linux) developed by Offensive Security, the creator of the popular Kali Linux distribution. 

The ADB-Toolkit is a comprehensive BASH Script featuring 28 options, including a METASPLOIT Section with 6 additional options specifically tailored for penetration testing on Android devices. Developed in collaboration with ADB (Android Debug Bridge), this tool facilitates various tasks related to debugging and modifying Android applications.

Install & Configure on Linux

To get started with the ADB-Toolkit on Linux, follow these steps:

1. Open the Terminal and execute the command below to download or clone the ADB toolkit from its GitHub page:

2. Once downloaded, navigate to the toolkit directory and install it using the following commands:

3. After installation, you can launch the tool using the command:

For visual reference, a screenshot of the ADB Toolkit is provided below the commands.

Any further guidance on the usage of the ADB Toolkit can be found in a video tutorial, where users can watch and discover the answers to their queries.

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

Extra Credit