azeemidrisi/phonesploit-pro

★ 5,845PythonAudience · developerComplexity · 3/5Setup · hard

Mindmap

mindmap
  root((phonesploit-pro))
    What it does
      Control Android over Wi-Fi
      Extract device data
      Screen mirroring
      Security testing
    Tech Stack
      Python
      ADB
      Metasploit
      scrcpy
    Use Cases
      Own device auditing
      File transfer
      Remote control
      Payload testing
    Requirements
      ADB SDK tools
      Nmap
      Authorized devices only

mindmap root((phonesploit-pro)) What it does Control Android over Wi-Fi Extract device data Screen mirroring Security testing Tech Stack Python ADB Metasploit scrcpy Use Cases Own device auditing File transfer Remote control Payload testing Requirements ADB SDK tools Nmap Authorized devices only

Click or tap to explore — scroll the page freely

Things people build with this

USE CASE 1

Test whether your own Android phone accidentally exposes ADB over Wi-Fi and audit its security

USE CASE 2

Mirror and control your Android screen from a laptop for demos or remote debugging

USE CASE 3

Transfer files or dump contacts and SMS messages from your own Android device

USE CASE 4

Run automated Metasploit-based penetration tests on an Android device you have permission to test

Tech stack

PythonADBMetasploitscrcpyNmap

Getting it running

Difficulty · hard Time to first run · 1h+

Requires ADB SDK tools, Metasploit-Framework, scrcpy, and Nmap all installed separately before the tool runs.

No license information was mentioned in the explanation.

In plain English

PhoneSploit Pro is a Python tool that connects to Android phones over a network using ADB (Android Debug Bridge) and provides a menu-driven interface for controlling and extracting data from the connected device. ADB is a legitimate debugging tool built into Android, but it can also be exposed unintentionally over Wi-Fi on port 5555, which this tool exploits. The tool includes two broad categories of features. The first is a general ADB control toolkit: taking screenshots, recording the screen, mirroring and controlling the display, transferring files in both directions, installing or removing apps, reading device information, dumping SMS messages and contacts, sending keystrokes, and toggling Wi-Fi. These functions work over both USB and a Wi-Fi network connection. The second category is automated exploitation using Metasploit-Framework, a separate penetration testing platform. When used in that mode, the tool automatically generates a payload file, installs it on the target device, and sets up a Metasploit listener to open a full remote-control session over the target phone. Using the exploitation features requires the target Android device to have ADB debugging enabled and accessible over the network. The README includes a disclaimer that the tool is intended for security testing on devices the user owns or has permission to test. Running the tool requires Python 3.10 or newer, along with several external programs that must be installed separately: ADB from Android's SDK tools, Metasploit-Framework, scrcpy (for screen mirroring), and Nmap (for network scanning). The tool itself does not need to be installed and runs directly with Python after cloning the repository.

Copy-paste prompts

Prompt 1

I cloned phonesploit-pro and want to connect to my Android phone over Wi-Fi. Walk me through enabling ADB debugging on the phone, finding its IP address, and running the tool to take a screenshot.

Prompt 2

Using phonesploit-pro, how do I use the Metasploit integration to generate a payload and set up a listener on my own Android test device? Give me each step in order.

Prompt 3

I want to use phonesploit-pro to mirror my Android screen to my laptop using scrcpy. Which dependencies do I install first and which menu option do I pick?

Prompt 4

How do I use phonesploit-pro to dump SMS messages and contacts from my phone and save them as a file on my computer?

Open on GitHub → Explain another repo

← azeemidrisi on gitmyhub — every repo by this author, as a profile.

Verify against the repo before relying on details.