How to Uses the ADB to Remotely Access an Android Device - Ghost Framework

Ghost Framework is an Android post-exploitation framework that uses an Android Debug Bridge to remotely access and control Android devices. Ghost Framework gives us the power and convenience of remote Android device administration. We can use this framework to control old Android devices which have turned on the debug bridge in the "Developer options". Now, this becomes very harmful because an attacker gets the full admin control on the vulnerable Android device.

In our detailed tutorial we will demonstrate - How we can use the Ghost Framework to take control of Android devices from our Kali Linux system.

So we start from cloning the Ghost Framework from GitHub by the following command:

$ git clone https://github.com/entynetproject/ghost

After successfully cloned, change the directory to it. Then we need to install it using the installer.sh. Before that assign executes permission to the installer script by applying this command:

$ sudo chmod +x install.sh

Finally, we can run the installer script by this command:

$ sudo ./install.sh

Then it will start installing the dependencies.This process will take some time depending on your internet speed. After installing Ghost Framework we can run it from anywhere in our terminal by only using the ghost command:

$ ghost

It will pull-out the ghost's main menu. Here we got lots of options; First we need to connect a device, so we select option 03.

Then, we can see that it's prompt to type the IP address of the vulnerable Android device. To find an IP address of an Old vulnerable Android device. We use Shodan. Shodan is a great search engine for searching the devices connected to the internet.

In Shodan, we have to search for Android Debug Bridge.

Here we can see its returns over 19000+ search results. In these results, Every device is vulnerable to ghost and those devices are connected to the internet. From here we can pick any IP address and paste it on ghost and then press enter.

Now, we are connected with the IP address in 5555 port. Then we can apply anything from Ghost Framework. Ghost Framework has a simple and clear UI, UX. It is easy to understand and it will be easier for us to master the Ghost Framework.Ghost Framework can be used to remove the remote Android device password if it was forgotten. It also can be used to access the remote Android device shell without using OpenSSH or other protocols.

Video Tutorial

I hope you enjoyed this tutorial about Control any Android Devices Remotely using ghost framework, If you face any problem regarding this framework, let us known in the comment box below. If you liked our tutorials then visit our website regularly and for the quick updates follow us on Telegram.