Certified Ethical Hacker (CEH) Practice Question

With USB debugging enabled, an attacker can attach a laptop and start an Android Debug Bridge (ADB) session. ADB trusts the connected host once its RSA key has been accepted (or on some older devices, automatically). Using the command "adb install <malware.apk>" the attacker can push and silently install an application package, giving them code-execution inside the device's user space. Tapjacking relies on tricking users to tap UI elements, which is impossible while the screen is locked. NFC beaming requires proximity and user confirmation on modern Android versions. SIM Toolkit proactive commands cannot directly install arbitrary APK files without carrier involvement and handset interaction. Therefore, abusing ADB over USB debugging is the only viable vector in this scenario.