Meet ORCA! An automated Android C2, device recon, and telemetry framework
Hi r/pentesting
I put together a CLI framework made to specifi target android devices
ORCA basically ties together msfvenom, dynamic tunneling, and post-exploitation into a pipeline
Right now it’s segmented into 4 core utilities:
C2 Setup: basically connects ngrok msfvenom and sets up a listener through metasploit that grants access to camera microphone and SMS/photos/call logs
Device Recon: dumps hardware specs, carrier info, SIM details, IPs, and app lists into a JSON report (yes JSON)
Live geolocator: uses cell tower ids, can also be used for geofencing
2FA Interceptor: hooks into NotificationListenerService to capture incoming notifications and 2FA codes
Right now it’s still a bit buggy so i’m polishing it u, when i’m done should i upload to Git? Let me know if you like this tool