Stagefright Exploit Demo - CVE 2015-3864 Metasploit Module

For more details, please visit

Test if your Android device is vulnerable to stagefright attack:

[AutomateTon]

exploit works, but session is closed after a minute:

[-] Metasploit session X is not valid and will be closed.

How to keep it persistent?

[alexminer]

Exploit completed, but no session was created

[flightmexicana]

How did you add the exploit to msfconsole?

[ahmedalmutairi]

Thanks indeed, ,
I have tried to do the same thing but using android emulator instead of Vysor, and I got this error in kali :

"Unknown user-agent: "Mozilla/5.0 (Linux; Android 5.1.1; Android SDK built for x86_64 Build/LMY48X) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/39.0.0.0 Mobile Safari/537.36"

any idea please..

[haijiangeng]

why not working for me. I use the emulator Genymotion, adroid version is android 5.1.0 device is nexuss 6

[ggrgr]

[-] 192.168.1.101 stagefright_mp4_tx3g_64bit - 192.168.1.101:5036 - Requested /favicon.ico - Unknown user-agent: "Mozilla/5.0 (Linux; Android 4.4.2; SCH-I679 Build/JLS36C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.36"---only have this, no session

[redditman]

2 questions:
1) How to use ngrok with this?
2)R u supposed to have apache running in the background?

[alonlevi]

I add manually the exploit to metasploit library and the Msf doesn't see it!! he won't work with another script in liberty!. HOW TO FiX It...??

[johnmcmanus]

how did you get the mettle payload into metasploit?

[hackingethical]

i have tried the steps and as soon as the server starts its coming back to console and target is not selecting

[frameofsoul]

Exploit completed, but no session was created. i get this error can anyone please help me to fix this

[facebookdeveloperhelper]

msf6 > set PAYLOAD
[-] The value specified for PAYLOAD is not valid.

[skiddie]

If victim device check stagefight "Not vulnerable" then I can't hack ?
Sorry my english very bad.

[vinaybhuria]

*the value specified for payload is not valid* error anyone have this problem solution

[mm]

I cant use mettle, I have not this payload

[CorpOfHack]

I know that my device is vurlneable.But metasploit is alert me for wron useragent.I also test on emulator genymotion, I create device for one of the target list vuln android version, but also got an error of wron user-agent((

[andreamarrocco]

Is LHOST my ip address or android address? thanks

[Sexinthecity]

Dont use msfupdate as it fucks up metasploit

[Gandziaro]

how to remove stagefright ? cache or something ? Please answer because I think the problem is simple when no one specifically says it. Everyone shows how to infect and no one shows where to remove it after infection ?

[MsColors]

Thank you for this video it's realy helpful
I have two questions here
How did you configure the network between kali and android?
Meterpeter session does not open with me I don't know what's wrong