Is it possible to control unrooted android device through a web shell?

I've been trying to execute various php shells but the whole response is error statements like this

enter image description here

  • php is installed and all other php pages works fine
  • The tested php shells works fine on another controlled systems
  • What do you mean by"control"? Are you aware of the security separations in Android?
    – schroeder
    Feb 18 '18 at 18:29
  • I mean: to be able to execute and use the shell properly without any errors
    – user168532
    Feb 18 '18 at 18:50
  • So you don't want to control the unrooted Android device, you want to "control" the shell?
    – Tom K.
    Feb 19 '18 at 8:12
  • Yeah, But if I'm able to control the shell I must be able to control the device
    – user168532
    Feb 19 '18 at 17:40

If the web server such as Palapa Web Server is installed on the Android device and the Android device is capable to execute PHP scripts then you can definately get the shell access of the device.

Note: Android supports a beautiful and the robust concept of sandboxing such that each application runs as different user. Once you will get the shell access on the device you will get the privelleges of the application that is executing the webshell.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy